Lucene search
+L

14630 matches found

Positive Technologies
Positive Technologies
added 2026/04/07 12:00 a.m.11 views

PT-2026-30936

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request header to the server. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.9AI score0.00471EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/04/07 12:00 a.m.14 views

NVIDIA Triton Inference Server 输入验证错误漏洞

NVIDIA Triton Inference Server is an open-source software developed by NVIDIA Corporation. It helps standardize model deployment and provide fast, scalable AI capabilities in production environments. NVIDIA Triton Inference Server has a vulnerability related to input validation. This vulnerabilit...

7.5CVSS5.8AI score0.00518EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/07 12:00 a.m.13 views

PT-2026-30935

NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a server crash by sending a malformed request to the server. A successful exploit of this vulnerability might lead to denial of service...

7.5CVSS5.9AI score0.00518EPSS
SaveExploits0References3
Nvidia
Nvidia
added 2026/04/07 12:00 a.m.95 views

Security Bulletin: NVIDIA Triton Inference Server - April 2026

NVIDIA has released a software update for NVIDIA® Triton Inference Server. To protect your system, clone or update this software to Triton Server r26.02 or later from the NVIDIA Triton Inference Server GitHub repo. Go to NVIDIA Product Security. Details The following table summarizes the potentia...

7.5CVSS5.9AI score0.00528EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2026/04/07 12:00 a.m.20 views

NVIDIA Triton Inference Server 安全漏洞

NVIDIA Triton Inference Server is an open-source software developed by NVIDIA Corporation. It helps standardize model deployment and provide fast, scalable AI in production environments. NVIDIA Triton Inference Server has a security vulnerability. This vulnerability arises from sending malformed...

7.5CVSS5.8AI score0.00518EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/07 12:00 a.m.16 views

PT-2026-30880

Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A flaw exists in libarchive's ACL parsing logic within the archive acl from text nl function. Insufficient validation when processing malformed ACL strings, such as a bare "d" or "default"...

5.5CVSS5.8AI score0.00163EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
added 2026/04/07 12:00 a.m.17 views

PT-2026-30923

SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. In 5.2.5188 and earlier, a pre-authentication denial-of-service vulnerability exists in SoftEther VPN Developer Edition 5.2.5188 and likely earlier versions of Developer Edition. An unauthenticated remote attacker can cra...

7.5CVSS6AI score0.0045EPSS
SaveExploits1References2
OSV
OSV
added 2026/04/07 12:00 a.m.20 views

UBUNTU-CVE-2026-28388

Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application...

7.5CVSS6AI score0.00885EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/06 9:32 p.m.7 views

CVE-2026-35410

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, an open redirect vulnerability exists in the login redirection logic. The isLoginRedirectAllowed function fails to correctly identify certain malformed URLs as external, allowing attackers to bypass...

6.1CVSS6.1AI score0.00256EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/06 9:32 p.m.11 views

CVE-2026-35410 Directus has an Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, an open redirect vulnerability exists in the login redirection logic. The isLoginRedirectAllowed function fails to correctly identify certain malformed URLs as external, allowing attackers to bypass...

6.1CVSS6.1AI score0.00256EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/06 9:32 p.m.14 views

CVE-2026-35410 Directus has an Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, an open redirect vulnerability exists in the login redirection logic. The isLoginRedirectAllowed function fails to correctly identify certain malformed URLs as external, allowing attackers to bypass...

6.1CVSS6.1AI score
SaveExploits0References3
EUVD
EUVD
added 2026/04/06 6:33 p.m.17 views

EUVD-2025-209237

An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory...

5.9AI score0.00278EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/06 5:51 p.m.20 views

EUVD-2026-7407

OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp...

6.5CVSS5.9AI score0.00523EPSS
SaveExploits1References4
OSV
OSV
added 2026/04/06 5:51 p.m.9 views

GHSA-Q6VJ-WXVF-5M8C OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp

Summary A heap-buffer-overflow OOB read occurs in the istreamnonparallelread function in ImfContextInit.cpp when parsing a malformed EXR file through a memory-mapped IStream. A signed integer subtraction produces a negative value that is implicitly converted to sizet, resulting in a massive lengt...

6.5CVSS5.9AI score0.00523EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/04/06 3:31 p.m.8 views

EUVD-2026-19250

A double free vulnerability exists in librz/bin/format/le/le.c in the function leloadfixuprecord. When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the...

6.2CVSS5.8AI score0.00149EPSS
SaveExploits1References3
OSV
OSV
added 2026/04/06 7:58 a.m.17 views

BIT-NODE-MIN-2026-21712

A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

6.5CVSS6.7AI score0.0032EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/06 7:58 a.m.13 views

BIT-NODE-2026-21712

A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

6.5CVSS6.7AI score0.0032EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/06 12:00 a.m.12 views

PT-2026-30615

A double free vulnerability exists in librz/bin/format/le/le.c in the function le load fixup record. When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the...

5.8AI score0.00149EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/04/06 12:00 a.m.29 views

CVE-2025-57835

An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory...

0.00278EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/06 12:00 a.m.9 views

CVE-2026-31053

A double free vulnerability exists in librz/bin/format/le/le.c in the function leloadfixuprecord. When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the...

6.2CVSS6AI score
SaveExploits0References4
Rows per page
Query Builder