1234 matches found
EUVD-2024-48869
Malicious code in bioql PyPI...
EUVD-2025-23668
Malicious code in bioql PyPI...
EUVD-2025-6333
Malicious code in bioql PyPI...
EUVD-2023-43900
Malicious code in bioql PyPI...
EUVD-2025-27664
Malicious code in bioql PyPI...
EUVD-2023-12482
Malicious code in bioql PyPI...
EUVD-2021-32635
Malicious code in bioql PyPI...
EUVD-2025-24298
Malicious code in bioql PyPI...
EUVD-2025-20571
Malicious code in bioql PyPI...
EUVD-2023-40585
Malicious code in bioql PyPI...
CVE-2025-54288
Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration, and device information via spoofed process names in the...
SUSE CVE-2025-59044
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau 0.9.x derives numeric GIDs for Entra ID groups from the group display name when himmelblau.conf idattrmap = name the default configuration. Because Microsoft Entra ID allows multiple groups with the same...
NVIDIA CUDA toolkit and NVIDIA nvJPEG numeric error vulnerability
NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from NVIDIA. nVIDIA nvJPEG is an image codec library. A numeric error vulnerability exists in NVIDIA CUDA toolkit and NVIDIA nvJPEG, which arises from a divide-by-zero error in the...
NVIDIA CUDA toolkit 数字错误漏洞
NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from NVIDIA. nVIDIA nvJPEG is an image codec library. A numeric error vulnerability exists in NVIDIA CUDA toolkit and NVIDIA nvJPEG, which arises from a divide-by-zero error in the...
Prototype Pollution
devalue is vulnerable to prototype pollution. The vulnerability is due to devalue.parse not validating that an index is numeric, which allows an attacker to pass a crafted string with a proto property to assign prototypes to objects and properties...
The vulnerability of the SVG component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code.
The vulnerability of the SVG component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
CVE-2025-6051
A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library’s EnglishNormalizer.normalizenumbers method of the CLVP model. Maliciously crafted long numeric strings cause excessive CPU usage due to inefficient regex processing, leading to...
Hugging Face Transformers 安全漏洞
Hugging Face Transformers is Hugging Face's open source advanced natural language processing for Jax, PyTorch and TensorFlow. A security vulnerability exists in Hugging Face Transformers version 4.52.4 and earlier, which stems from the mishandling of numeric strings in the normalizenumbers method...
The vulnerability of the ICMP Echo Reply utility function “ping” allows a hacker to cause a service failure.
The vulnerability of the ICMP Echo Reply utility “ping” is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
