1295 matches found
CVE-2026-47616: Server-Side Request Forgery (SSRF)
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-47615: Server-Side Request Forgery (SSRF)
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery by supplying a crafted URL in a multimodal request. A successful exploit of this vulnerability might lead to information disclosure...
PT-2026-67794
Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the image loading component that allows an attacker to cause improper limitation of a pathname to a restricted directory. This could result in information...
PT-2026-67803
Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker could trigger a race condition during the initialization of the LoRA manager singleton. A race condition occurs when the timing or order of...
PT-2026-67791
Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal serving topology that allows an attacker to trigger an out-of-bounds write, which occurs when data is written outside the intended memory...
PT-2026-67798
Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal media fetcher that allows an attacker to perform server-side request forgery SSRF, a technique where the attacker induces the server to make...
CVE-2026-47619: Reliance on Insufficiently Trustworthy Component
NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...
PT-2026-67796
Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists that allows an attacker to perform server-side request forgery SSRF, a technique where the attacker induces the server-side application to make requests to an...
PT-2026-67797
Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description An issue exists where an attacker can trigger server-side request forgery SSRF—a technique that allows a server to make requests to an unintended location—by providing a craft...
PT-2026-67799
Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description A flaw exists in the multimodal media fetcher that allows an attacker to perform server-side request forgery SSRF through DNS rebinding. DNS rebinding is a technique used to...
PT-2026-67801
Name of the Vulnerable Software and Affected Versions NVIDIA Dynamo for Linux affected versions not specified Description Examples and recipes within the software contain a flaw that allows an attacker to cause a system failure. This could result in code execution, data tampering, denial of...
CVE-2026-47620: Concurrent Execution using Shared Resource with Improper Synchronization
NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to data tampering and denial of service...
CVE-2026-24252
NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure...
CVE-2026-24252: Improper Neutralization of Special Elements used in an OS Command
NVIDIA NeMo for Linux contains a vulnerability where an attacker may cause OS command injection. A successful exploit of this vulnerability may lead to code execution, data tampering, escalation of privileges and information disclosure...
EUVD-2026-48965
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix use-after-free on remove KASAN reports a slab-use-after-free in mediaentityremovelink during rmmod of imx8isi: BUG: KASAN: slab-use-after-free in mediaentityremovelink+0x608/0x650 Read of size 2 at addr...
CVE-2026-57968
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...
CVE-2026-57968 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
...
EUVD-2026-44279
Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...
CVE-2026-57973: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally...