Lucene search
+L

12499 matches found

Microsoft CVE
Microsoft CVE
added 2025/07/18 2:0 p.m.11 views

Azure Machine Learning Elevation of Privilege Vulnerability

Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...

9.9CVSS6.4AI score0.0066EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/07/18 2:0 p.m.12 views

Azure Machine Learning Elevation of Privilege Vulnerability

Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...

9.9CVSS6.5AI score0.00708EPSS
SaveExploits0
Fedora
Fedora
added 2025/07/18 1:10 a.m.9 views

[SECURITY] Fedora 41 Update: luajit-2.1.1748459687-2.fc41

LuaJIT implements the full set of language features defined by Lua 5.1. The virtual machine VM is API- and ABI-compatible to the standard Lua interpreter and can be deployed as a drop-in replacement...

9.8CVSS7.2AI score0.00541EPSS
SaveExploits2
Positive Technologies
Positive Technologies
added 2025/07/18 12:0 a.m.12 views

PT-2025-30066 · Microsoft · Azure Machine Learning

Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information abou...

8.8CVSS6.2AI score0.00644EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/07/18 12:0 a.m.8 views

PT-2025-30068 · Microsoft · Azure Machine Learning

Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: Missing authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information...

9.9CVSS6AI score0.0066EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/07/18 12:0 a.m.10 views

PT-2025-30067 · Microsoft · Azure Machine Learning

Name of the Vulnerable Software and Affected Versions: Azure Machine Learning affected versions not specified Description: Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information...

9.9CVSS6AI score0.00708EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/07/18 12:0 a.m.12 views

Microsoft Azure Machine Learning 授权问题漏洞

Microsoft Azure Machine Learning is a machine learning services platform from Microsoft USA. Microsoft Azure Machine Learning has a security vulnerability that can be exploited by an attacker to potentially cause elevation of privilege...

9.9CVSS6.7AI score0.00708EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/18 12:0 a.m.9 views

Microsoft Azure Machine Learning 安全漏洞

Microsoft Azure Machine Learning is a machine learning services platform from Microsoft USA. Microsoft Azure Machine Learning has a security vulnerability that can be exploited by an attacker to potentially cause elevation of privilege...

8.8CVSS6.7AI score0.00644EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/18 12:0 a.m.7 views

Microsoft Azure Machine Learning 安全漏洞

Microsoft Azure Machine Learning is a machine learning services platform from Microsoft USA. Microsoft Azure Machine Learning has a security vulnerability that can be exploited by an attacker to potentially cause elevation of privilege...

9.9CVSS6.7AI score0.0066EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/07/17 12:0 a.m.8 views

Expanding ML-Documentation Standards for Better Security

This article presents the current state of ML-security and of the documentation of ML-based systems, models and datasets in research and practice based on an extensive review of the existing literature. It shows a generally low awareness of security aspects among ML-practitioners and organization...

6.7AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/07/17 12:0 a.m.15 views

How to Mitigate and Defend against DDoS Attacks in IoT Devices

Distributed Denial of Service DDoS attacks have become increasingly prevalent and dangerous in the context of Internet of Things IoT networks, primarily due to the low-security configurations of many connected devices. This paper analyzes the nature and impact of DDoS attacks such as those launch...

6.9AI score
SaveExploits0
CNNVD
CNNVD
added 2025/07/17 12:0 a.m.10 views

Xen 安全漏洞

Xen is an open source virtual machine monitor product from Xen Open Source. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen that stems from an...

7.5CVSS6.7AI score0.00723EPSS
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/16 4:31 p.m.6 views

Malicious code in datadog-instrumentations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbf74efed2b32abd010705d5410e78270b572065e8fc02c3a1961b4afc2585ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/07/16 12:0 a.m.11 views

The vulnerability of the Virtual Machine Communication Interface (VMCI) implementation in software products such as VMware ESXi, Workstation, Fusion, and Cloud Foundation allows a perpetrator to execute arbitrary code.

The vulnerability of the Virtual Machine Communication Interface VMCI implementation in software products such as VMware ESXi, Workstation, Fusion, and Cloud Foundation lies in buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code...

9.3CVSS8.1AI score0.0039EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2025/07/15 8:15 p.m.7 views

CVE-2025-50069

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.27 and 21.3-21.18. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise...

7.7CVSS5.8AI score0.00321EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/15 7:15 p.m.11 views

CVE-2025-41237

VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI Virtual Machine Communication Interface that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX...

9.3CVSS0.0039EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/15 6:35 p.m.48 views

CVE-2025-41239 vSockets information-disclosure vulnerability

VMware ESXi, Workstation, Fusion, and VMware Tools contains an information disclosure vulnerability due to the usage of an uninitialised memory in vSockets. A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to leak memory from processes...

7.1CVSS6AI score0.02154EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/07/15 6:34 p.m.13 views

CVE-2025-41238

VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI Paravirtualized SCSI controller that leads to an out of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine'...

9.3CVSS6.3AI score0.0039EPSS
SaveExploits0References2Affected Software5
ATTACKERKB
ATTACKERKB
added 2025/07/15 6:34 p.m.7 views

CVE-2025-41237

VMware ESXi, Workstation, and Fusion contain an integer-underflow in VMCI Virtual Machine Communication Interface that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX...

9.3CVSS6.3AI score0.0039EPSS
SaveExploits0References2Affected Software5
CVE
CVE
added 2025/07/15 6:34 p.m.65 views

CVE-2025-41237

CVE-2025-41237 describes an integer-underflow in the VMCI component of VMware ESXi, Workstation, and Fusion that can cause an out-of-bounds write. A local attacker with VM-level admin privileges may execute code as the VMX process on the host; exploitation is contained within the VMX sandbox on E...

9.3CVSS7.2AI score0.0039EPSS
SaveExploits0References1
Rows per page
Query Builder