52327 matches found
CVE-2026-8750 h2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosure
A vulnerability was identified in h2oai h2o-3 up to 7402. Affected by this issue is the function importFiles of the file h2o-core/src/main/java/water/persist/PersistNFS.java of the component ImportFile API. Such manipulation leads to information disclosure. The attack can be executed remotely. Th...
Rethinking Side-Channel Analysis: Automated Discovery and Analysis of Side-Channel Leakage with LLM-Assisted Agents
Side-channel attacks exploit unintended information leakage from system behavior and continue to pose serious privacy risks in modern platforms. Despite extensive prior work, side-channel analysis remains largely manual and fragmented, typically assuming predefined target events and a fixed set o...
H2O 安全漏洞
H2O is an open-source memory platform for distributed, scalable machine learning developed by H2O.ai. Versions of H2O such as h2o-3 7402 and earlier contain security vulnerabilities. These vulnerabilities stem from improper access control in the exec function of the AstSetProperty.java file withi...
One Step Further: Understanding PLC Binaries through Cross-Platform Reverse Engineering and Function-Level Semantic Analysis
As emerging attacks increasingly target Industrial Control Systems ICS, the security of Programmable Logic Controllers PLCs has become a critical concern. Binary Code Analysis BCA, which enables analysts to understand compiled programs without source code, is essential for ICS security tasks such...
H2O 输入验证错误漏洞
H2O is an open-source memory platform for distributed, scalable machine learning developed by H2O.ai. Versions of H2O 7402 and earlier contained a vulnerability related to input validation errors. This vulnerability stemmed from a deserialization issue in the importBinaryModel function of the...
CVE-2025-52540
An improper input validation vulnerability within the AMD Platform Management Framework PMF Driver can allow a local attacker to write Out-of-Bounds, potentially resulting in privilege escalation...
CVE-2025-29938
An unchecked return value within the AMD Platform Management Framework PMF could allow an attacker to write to an arbitrary memory address resulting in denial of service or arbitrary code execution...
CVE-2025-29935
An out of bounds write within the AMD Platform Management Framework PMF could allow an attacker to execute arbitrary code at an elevated privilege level potentially leading to loss of confidentiality integrity, or availability...
CVE-2025-48519
An improper input validation vulnerability within the AMD Platform Management Framework PMF driver can allow a local attacker to read or write Out-of-Bounds, potentially resulting in privilege escalation...
CVE-2026-44678
Tuist is a virtual platform team for Swift app devs. In 1.180.8 and earlier, the DELETE /api/projects/accounthandle/projecthandle/previews/previewid endpoint loads the preview by its UUID without verifying that the preview belongs to the project resolved from the URL path. The route's project-lev...
CVE-2026-42217 vulnerabilities
Vulnerabilities for packages: openexr...
CVE-2026-40976 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-RC8C-94M4-FRFH vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
CVE-2026-43098 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
CVE-2026-43100 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
GHSA-585P-9MG2-6VMM vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
GHSA-JG3H-4JH8-MFWR vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...
GHSA-H53C-6597-VMFW vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...