13600 matches found
Apollo 访问控制错误漏洞
Apollo is a genome annotation editor in the Generic Model Organism Database open source. An access control error vulnerability exists in Apollo versions prior to 2.8.0 that stems from a lack of authentication and allows bypassing privilege checks...
Linux Distros Unpatched Vulnerability : CVE-2022-49194
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bcmgenet: Use stronger register read/writes to assure ordering GCC12 appears to be much smarter about its dependency tracking and is aware that the relaxed...
CVE-2019-1815 Cisco Meraki MX67 and MX68 Sensitive Information Disclosure Vulnerability
A security vulnerability was discovered in the local status page functionality of Cisco Meraki’s MX67 and MX68 security appliance models that may allow unauthenticated individuals to access and download logs containing sensitive, privileged device information. The vulnerability is due to improper...
Flowise 代码问题漏洞
Flowise is a FlowiseAI open source tool for easily building LLM applications. A security vulnerability exists in Flowise version 2.2.6 that stems from the presence of an arbitrary file upload issue...
DZS ZNID-GPON-2428B1-0ST 跨站脚本漏洞
The DZS ZNID-GPON-2428B1-0ST is a router from DZS. A cross-site scripting vulnerability exists in the DZS ZNID-GPON-2428B1-0ST, which stems from susceptibility to cross-site scripting attacks that allow injection of malicious code...
Linux Distros Unpatched Vulnerability : CVE-2015-2752
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The XENDOMCTLmemorymapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain user...
The vulnerability of TP-Link TL-WR840N router’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions.
The vulnerability of TP-Link TL-WR840N router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions by sending a specially crafted request with the Referer header set...
Linux Distros Unpatched Vulnerability : CVE-2021-26291
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Maven will follow repositories that are defined in a dependency's Project Object Model pom which may be surprising to some users, resulting in potential...
GHSA-769V-P64C-89PR PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions
CVE-2025-1889 Summary Picklescan fails to detect hidden pickle files embedded in PyTorch model archives due to its reliance on file extensions for detection. This allows an attacker to embed a secondary, malicious pickle file with a non-standard extension inside a model archive, which remains...
PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions
CVE-2025-1889 Summary Picklescan fails to detect hidden pickle files embedded in PyTorch model archives due to its reliance on file extensions for detection. This allows an attacker to embed a secondary, malicious pickle file with a non-standard extension inside a model archive, which remains...
CVE-2025-1889 picklescan - Security scanning bypass via non-standard file extensions
picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not...
Malicious code in linkedin-model (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1875 Malicious code in linkedin-model (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in iberia-model (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1841 Malicious code in iberia-model (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in google-model (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1825 Malicious code in google-model (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in coinbase-model (npm)
--- -= Per source details. Do not edit below this line.=-...