93 matches found
CVE-2024-10073
flairNLP flair 0.14.0 is affected by a code-injection vulnerability in the ClusteringModel function located in flair/models/clustering.py (Mode File Loader). The issue allows remote code execution and is described as high severity; attack complexity is listed as high and exploitation has been dis...
PT-2024-16009
Name of the Vulnerable Software and Affected Versions flairNLP flair version 0.14.0 Description A critical vulnerability was found in the function ClusteringModel of the file flairmodelsclustering.py of the component Mode File Loader. The manipulation leads to code injection. It is possible to...
Malicious code in code-file-loader (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9559 Malicious code in code-file-loader (npm)
--- -= Per source details. Do not edit below this line.=-...
DEBIAN-CVE-2024-46826
In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomizevaspace double read ELF loader uses "randomizevaspace" twice. It is sysctl and can change at any moment, so 2 loads could see 2 different values in theory with unpredictable consequences. Issue exactly on...
Llama.cpp 安全漏洞
llama.cpp is a LLaMA model for inferring Meta in pure C/C++. A security vulnerability exists in Llama.cpp, which stems from an exploit of an uninitialized heap variable vulnerability in ggufinitfromfile...
PT-2024-15922
Name of the Vulnerable Software and Affected Versions van der Schaar LAB synthcity version 0.2.9 Description A critical issue has been found in the function load from file of the component PKL File Handler, leading to deserialization. The attack may be launched remotely. The vendor was contacted...
PT-2024-12979 · Undefined · Undefined
NCC Group выпустила третье исследование с оценкой безопасности популярных инструментов RMM, в котором представила обзор на 18 уязвимостей в PandoraFMS. Ранее в поле зрения исследователей попадали множественные уязвимости в Faronics Insight и Nagios XI. PandoraFMS - это приложение для мониторинга ...
The vulnerability of OMICARD’s system file loading function allows a hacker to execute arbitrary code or cause service failure.
The vulnerability of the system’s file loading function in OMICARD’s marketing emails relates to the unlimited loading of dangerous types of files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service failures...
UBUNTU-CVE-2022-48063
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function loadseparatedebugfiles at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack...
UBUNTU-CVE-2020-24292
Buffer Overflow vulnerability in load function in PluginICO.cpp in FreeImage 3.19.0 r1859 allows remote attackers to run arbitrary code via opening of crafted ico file...
The vulnerability of the software file loading function in OMICARD EDM ITPison allows a perpetrator to load any files they desire.
The vulnerability of the software file loading function in OMICARD EDM ITPison involves unlimited loading of dangerous types of files. Exploiting this vulnerability allows a remote attacker to load any files they desire...
The vulnerability of the file loading function of the distributed file system sjqzhang go-fastdfs allows a attacker to write any files and execute any commands.
The vulnerability of the file loading function in the distributed file system sjqzhang go-fastdfs is related to deficiencies in path checking for restricted-access directories. Exploiting this vulnerability allows an attacker to write arbitrary files and execute arbitrary commands remotely...
Malicious Package
Overview shared-ini-file-loader is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...
GHSA-RRC9-GQF8-8RWG Prototype Pollution via file load in aws-sdk and @aws-sdk/shared-ini-file-loader
This affects the package @aws-sdk/shared-ini-file-loader before 1.0.0-rc.9; the package aws-sdk before 2.814.0. If an attacker submits a malicious INI file to an application that parses it with loadSharedConfigFiles , they will pollute the prototype on the application. This can be exploited furth...
Security update for fluidsynth (important)
openSUSE Security Update: Security update for fluidsynth Announcement ID: openSUSE-SU-2021:0570-1 Rating: important References: 1184705 Cross-References: CVE-2021-28421 CVSS scores: CVE-2021-28421 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...
OPENSUSE-SU-2021:0553-1 Security update for fluidsynth
This update for fluidsynth fixes the following issues: - CVE-2021-28421: Fix use after free vulnerability in file loader boo1184705...
Code injection
This affects the package @aws-sdk/shared-ini-file-loader before 1.0.0-rc.9; the package aws-sdk before 2.814.0. If an attacker submits a malicious INI file to an application that parses it with loadSharedConfigFiles , they will pollute the prototype on the application. This can be exploited furth...
CVE-2020-28472 Prototype Pollution
This affects the package @aws-sdk/shared-ini-file-loader before 1.0.0-rc.9; the package aws-sdk before 2.814.0. If an attacker submits a malicious INI file to an application that parses it with loadSharedConfigFiles , they will pollute the prototype on the application. This can be exploited furth...