9310 matches found
CVE-2025-5197
A Regular Expression Denial of Service ReDoS vulnerability exists in the Hugging Face Transformers library, specifically in the converttfweightnametoptweightname function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern /^/^// that can be...
CVE-2025-5197 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
A Regular Expression Denial of Service ReDoS vulnerability exists in the Hugging Face Transformers library, specifically in the converttfweightnametoptweightname function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern /^/^// that can be...
CVE-2025-5197
A Regular Expression Denial of Service ReDoS vulnerability exists in the Hugging Face Transformers library, specifically in the "converttfweightnametoptweightname" function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern "/^/^//" that can...
The vulnerability of the web page rendering module in WebKit operating systems for macOS, iPadOS, VisionOS, iOS, WatchOS, and tvOS allows attackers to trigger a service failure.
The vulnerability of the web page rendering module in WebKit operating systems such as macOS, iPadOS, VisionOS, iOS, WatchOS, and tvOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruption...
The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to gain unauthorized access to protected information or cause service failures.
The vulnerability of the NVIDIA Virtual GPU Manager driver relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information or cause service failures...
The vulnerability of the NVIDIA Virtual GPU Manager driver allows a hacker to gain unauthorized access to protected information, increase their privileges, execute arbitrary code, or cause a service failure.
The vulnerability of the NVIDIA Virtual GPU Manager driver relates to operations that occur outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause...
The vulnerability of the web page rendering module in WebKit-based operating systems such as iOS, iPadOS, macOS, tvOS, visionOS, watchOS, and the Safari browser allows a perpetrator to trigger a service failure.
The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, macOS, tvOS, visionOS, watchOS, and the Safari browser arises from operations that go beyond the buffer limits in memory. Exploiting this vulnerability can allow a malicious actor to cause service...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...
PT-2025-32227 · Tigo Energy · Tigo Energy Cca
Name of the Vulnerable Software and Affected Versions: Tigo Energy CCA affected versions not specified Description: The Tigo Energy CCA is susceptible to a command injection issue in the /cgi-bin/mobile api endpoint when the DEVICE PING command is invoked. This allows for remote code execution du...
GNU GRUB Resource Management Error Vulnerability
GNU GRUB is a Linux system boot program from the GNU community. A resource management error vulnerability exists in GNU GRUB, which originates from a module uninstallation without clearing hooks, and can be exploited by an attacker to initiate a large number of requests, consuming system resource...
The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the use of memory after it is freed. This allows attackers to gain unauthorized access to protected information, elevate their privileges, execute arbitrary code, or cause service interruptions.
The vulnerability of NVIDIA GeForce, Quadro, NVS, and Tesla graphics processors’ microprogramming software relates to the use of memory after it is freed. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, enhance their privileges, execute...
The vulnerability of the CFNetwork framework in iPadOS and macOS systems, which allows a hacker to trigger a service failure.
The vulnerability of the CFNetwork framework in iPadOS and macOS relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2025-8109
A security vulnerability exists in the Imagination Graphics DDK , a suite of GPU driver tools from Imagination UK. An unprivileged user can perform ptrace system calls to issue writes to GPU origin read-only memory , specifically corrupting GPU shader shared memory to disrupt GPU operations. The ...
The vulnerability of the formSetWAN_Wizard51() function (/goform/formSetWAN_Wizard51) in the D-Link DIR-619L router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the formAdvanceSetup function /goform/formAdvanceSetup of the D-Link DIR-619L router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
The vulnerability of the V8 component of the Node.js software platform, which allows a hacker to trigger a service failure
The vulnerability of the V8 component of the Node.js software platform is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the built-in web server boa (/boafrm/formIPv6Addr) of TOTOLINK X15 router software allows a hacker to induce a service failure.
The vulnerability of the built-in web server boa /boafrm/formIPv6Addr of TOTOLINK X15 router software relates to the issue of the operation exceeding the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a remote attacker to cause service interruption...
CVE-2025-40600
Use of Externally-Controlled Format String vulnerability in the SonicOS SSL VPN interface allows a remote unauthenticated attacker to cause service disruption...
Vulnerability fixed in SonicWall SonicOS
SonicWall has fixed a vulnerability in SonicOS. The vulnerability is in how SonicOS' SSL VPN interface handles externally controlled formatting strings. This can be exploited by external, unauthenticated attackers, leading to service disruptions. Attackers can exploit this vulnerability to affect...
The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to uncontrolled memory distribution, allows a attacker to cause service interruptions.
The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted requests...
The vulnerability of the software for providing secure remote access to data through the Palo Alto Networks GlobalProtect App for operating systems on macOS, due to deficiencies in access control, allows a malicious actor to trigger a service failure.
The vulnerability of the software for providing secure remote access to data through the Palo Alto Networks GlobalProtect App for operating systems on macOS is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to cause service interruptions...