PT-2025-7924 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit affected versions not specified Description: The issue is related to the nvdisasm binary in the NVIDIA CUDA toolkit, where passing a malformed ELF file could cause an out-of-bounds read, potentially leading to a partial...

PT-2025-7916 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit affected versions not specified Description: The issue is related to an out-of-bounds read in the cuobjdump binary of the NVIDIA CUDA toolkit. This can be triggered by passing a malformed ELF file to cuobjdump, potentially...

PT-2025-7925 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit affected versions not specified Description: The issue is related to a NULL pointer exception that can occur when a malformed ELF file is passed to the nvdisasm binary. This could lead to a partial denial of service...

PT-2025-7917 · Nvidia · Nvidia Cuda Toolkit

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit for Windows affected versions not specified Description: The issue is related to the cuobjdump binary in the NVIDIA CUDA toolkit for Windows, where passing a malformed ELF file could cause an out-of-bounds read. This might...

PT-2025-7922 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit affected versions not specified Description: The issue is related to an out-of-bounds read in the cuobjdump binary of the NVIDIA CUDA toolkit. This can be triggered by passing a malformed ELF file to cuobjdump, potentially...

PT-2025-7915 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit affected versions not specified Description: The issue is related to the nvdisasm binary in the NVIDIA CUDA toolkit, where passing a malformed ELF file could cause an out-of-bounds read. This might lead to a partial denial...

PT-2025-7926 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit affected versions not specified Description: The issue is related to a crash that can be caused by passing a malformed ELF file to the cuobjdump binary, potentially leading to a partial denial of service. Recommendations: ...

RHEL 8 : redhat-ds:11 (RHSA-2025:1632)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:1632 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...

OESA-2025-1126 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A heap-buffer-overflow vulnerability...

OESA-2025-1127 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A heap-buffer-overflow vulnerability...

Ubuntu 16.04 LTS : libsndfile vulnerability (USN-7267-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7267-1 advisory. It was discovered that libsndfile incorrectly handled certain malformed OggVorbis files. An attacker could possibly use this issue to cause libsndfile to crash,...

USN-7267-1: libsndfile vulnerability

It was discovered that libsndfile incorrectly handled certain malformed OggVorbis files. An attacker could possibly use this issue to cause libsndfile to crash, resulting in a denial of service...

USN-7267-1 libsndfile vulnerability

It was discovered that libsndfile incorrectly handled certain malformed OggVorbis files. An attacker could possibly use this issue to cause libsndfile to crash, resulting in a denial of service...

CVE-2024-54951

Monica 4.1.2 is vulnerable to Cross Site Scripting XSS. A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS...

CVE-2024-54951

Monica 4.1.2 is vulnerable to Cross Site Scripting XSS. A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS...

Monica 安全漏洞

Monica is an AI assistant from Monica Inc. A security vulnerability exists in Monica version 4.1.2 that originates from a malicious user being able to create a contact that is formatted incorrectly and use it in the HOW YOU MET customization option to trigger cross-site scripting...

PT-2025-6719 · Monica · Monica

Name of the Vulnerable Software and Affected Versions: Monica version 4.1.2 Description: The issue allows a malicious user to create a malformed contact and use it in the "HOW YOU MET" customization options to trigger Cross Site Scripting XSS. Recommendations: For Monica version 4.1.2, as a...

GHSA-VJH7-7G9H-FJFH Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)

Summary Private key can be extracted from ECDSA signature upon signing a malformed input e.g. a string or a number, which could e.g. come from JSON network input Note that elliptic by design accepts hex strings as one of the possible input types Details In this code:...

Information Exposure

Overview org.webjars.npm:elliptic is a Fast elliptic-curve cryptography in a plain javascript implementation. Affected versions of this package are vulnerable to Information Exposure due to the sign function which allows an attacker to extract the private key from an ECDSA signature by signing a...

Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)

Summary Private key can be extracted from ECDSA signature upon signing a malformed input e.g. a string or a number, which could e.g. come from JSON network input Note that elliptic by design accepts hex strings as one of the possible input types Details In this code:...