Lucene search
+L

10120 matches found

Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•3 views

Linux Distros Unpatched Vulnerability : CVE-2022-50433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: efi: ssdt: Don't free memory if ACPI table was loaded successfully Amadeusz reports KASAN...

7.8CVSS6.8AI score0.00157EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/10/08 12:00 a.m.•27 views

RHEL 8 / 9 : Satellite 6.16.5.4 Async Update (Important) (RHSA-2025:17613)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17613 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessi...

9.8CVSS7.2AI score0.26106EPSS
SaveExploits5References12
Snyk
Snyk
•added 2025/10/07 10:14 p.m.•22 views

Server-side Request Forgery (SSRF)

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the loadfromurl and loadfromurlasync methods of the MediaConnector class, which fetch and process media from...

8.3CVSS6.6AI score0.00247EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/10/07 10:14 p.m.•35 views

vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class

Summary A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows...

7.1CVSS6.7AI score0.00247EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2025/10/07 10:14 p.m.•17 views

GHSA-3F6C-7FW2-PPM4 vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class

Summary A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows...

7.1CVSS6.7AI score0.00247EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/10/07 9:21 p.m.•18 views

CVE-2025-57781

The installers of DENSO TEN drive recorder viewer contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer...

8.4CVSS7.5AI score0.00162EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/07 8:15 p.m.•23 views

CVE-2025-6242

A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...

7.1CVSS0.00247EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/07 7:45 p.m.•9 views

CVE-2025-6242 Vllm: server side request forgery (ssrf) in mediaconnector

A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...

7.1CVSS6.7AI score0.00247EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 7:45 p.m.•18 views

EUVD-2025-32892

A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...

7.1CVSS6.7AI score0.00247EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/07 7:45 p.m.•31 views

CVE-2025-6242 Vllm: server side request forgery (ssrf) in mediaconnector

A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...

7.1CVSS0.00247EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/07 7:45 p.m.•50 views

CVE-2025-6242

The CVE-2025-6242 SSRF vulnerability targets vLLM's MediaConnector (load_from_url/load_from_url_async) allowing user-supplied URLs to trigger server-side requests to internal resources. Concrete details: the issue arises from insufficient host restriction on mediaURL fetches, enabling potential a...

7.1CVSS6.7AI score0.00247EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 3:19 p.m.•8 views

EUVD-2025-32800

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nfcthelperhash uses after free If nfconntrackinitstart fails for example due to a registernfconntrackbpf failure, the nfconntrackhelperfini clean-up path frees the nfcthelperhash map. When built with...

6AI score0.00215EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2014-4683

Malware in sbrugna...

7.1CVSS8.1AI score0.02394EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2002-1114

Malware in sbrugna...

2.6CVSS6.1AI score0.01523EPSS
SaveExploits1References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•39 views

EUVD-2021-13206

Malware in sbrugna...

4CVSS5.6AI score0.00237EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2004-0317

Malware in sbrugna...

10CVSS6.4AI score0.04741EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2018-11855

Malware in sbrugna...

8.1CVSS7.5AI score0.01208EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2004-0595

Malware in sbrugna...

2.1CVSS6.4AI score0.00385EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-4823

Malware in sbrugna...

6.5CVSS6.7AI score0.00459EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2016-0511

Malware in sbrugna...

5CVSS7.3AI score0.21922EPSS
SaveExploits0References5
Rows per page
Query Builder