munge

MUNGE Uid 'N' Gid Emporium MUNGE（ MUNGE Uid 'N' Gid Emporium ）是一种用于创建和验证用户凭据的身份验证服务。它被设计为具有高度可扩展性，适用于 HPC 集群环境。它提供了一个可移植的 API，用于将用户身份编码为防篡改的凭据，该凭据可以由不受信任的客户端获取，并由安全域内不受信任的中介转发。该域内的客户端无需使用 root 权限、保留端口或平台特定的方法即可创建和验证凭据。 概述 安装指南 许可证信息 手册页 验证发布...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 是我向 NVIDIA PSIRT 提交的一个漏洞。个人认为，在多租户 HPC 集群（尤其是云机器学习平台）中，它可能导致较高的安全风险。 本仓库简单地演示了该漏洞在由 nvidia-container-runtime 创建的 GPU 容器中的表现。 工作原理 通过创建特定的字符设备文件，GPU 容器（由 nvidia-container-runtime 创建的容器）中的攻击者能够访问宿主机上所有的 GPU 设备。 该漏洞同样适用于在 Kubernetes 集群上由 k8s-device-plugin 创建的 GPU Pod。 前提条...

CVE-2026-59133

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-59124

Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...

EUVD-2026-56310

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-59133

The CVE-2026-59133 entry concerns the Microsoft High Performance Computing (HPC) Pack, where an authorized attacker can escalate privileges over the network. According to the data, the issue enables Execution with unnecessary privileges, leading to High impact on confidentiality, integrity, and a...

CVE-2026-59133 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability

...

CVE-2026-59133

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-59124

CVE-2026-59124 describes a deserialization vulnerability in Microsoft High Performance Computing (HPC) Pack that allows an unauthenticated attacker to execute arbitrary code over the network. The root cause is untrusted data deserialization within HPC Pack components. The vulnerability enables re...

CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability

...

CVE-2026-59124

Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...

EUVD-2026-56307

Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...

CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability

...

Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...

PT-2026-70404

Name of the Vulnerable Software and Affected Versions Microsoft High Performance Computing HPC Pack affected versions not specified Description An issue exists where the software performs deserialization of untrusted data. This allows an unauthorized attacker to execute arbitrary code over a...

PT-2026-70412

Name of the Vulnerable Software and Affected Versions Microsoft High Performance Computing HPC Pack affected versions not specified Description Execution with unnecessary privileges allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

Security update for distribution

This update for distribution rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE Leap 15...

Security update for buildah

This update for buildah rebuilds it against the current go security release. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your product: openSUSE Leap 15.5...

PT-2026-40947

Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames can execute javascript in the file browser This vulnerability is fixed in 4.0.11, 4.1.5, and 4.2.2...