246 matches found
EUVD-2022-40647
Malicious code in bioql PyPI...
EUVD-2021-7158
Malicious code in bioql PyPI...
EUVD-2024-34248
Malicious code in bioql PyPI...
EUVD-2025-12997
Malicious code in bioql PyPI...
EUVD-2024-48470
Malicious code in bioql PyPI...
EUVD-2024-53204
Malicious code in bioql PyPI...
EUVD-2025-5971
Malicious code in bioql PyPI...
CVE-2025-48039
A resource exhaustion flaw has been discovered in the Erlang OTP and ssh module. Accessing unverified paths from authenticated SFTP users can lead to excessive CPU and memory usage, potentially affecting system stability. Mitigation Users unable to upgrade may disable Erlang SFTP access to mitiga...
CVE-2025-39763
CVE-2025-39763 affects the Linux kernel and describes an ACPI: APEI path where a synchronous memory error that is not recovered can cause the kernel to queue memory_failure() and poison a page, unmap it, and send SIGBUS to the triggering process to avoid a system-wide panic. The issue arises when...
CVE-2025-10043
A path traversal validation flaw exists in Keycloak’s vault key handling on Windows. The previous fix for CVE-2024-10492 did not account for the Windows file separator \. As a result, a high-privilege administrator could probe for the existence of files outside the expected realm context through...
NVIDIA Isaac-GR00T Code Injection Vulnerability
NVIDIA Isaac-GR00T is an open base modeling platform from NVIDIA. The NVIDIA Isaac-GR00T suffers from a code injection vulnerability, which originates in a Python component, that can be exploited by an attacker to perform malicious operations and compromise system stability by bypassing security...
NVIDIA Apex Code Injection Vulnerability
NVIDIA Apex is a set of utility kits from NVIDIA. NVIDIA Apex suffers from a code injection vulnerability, which originates in a Python component, that can be exploited by an attacker to perform malicious operations and compromise system stability by bypassing security mechanisms...
NVIDIA Merlin Transformers4Rec 代码注入漏洞
NVIDIA Merlin Transformers4Rec is a software for building serialized and conversational recommender systems from NVIDIA. NVIDIA Merlin Transformers4Rec suffers from a code injection vulnerability, which originates from a Python dependency, that can be exploited by an attacker to perform malicious...
Linux Distros Unpatched Vulnerability : CVE-2024-27028
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler The TX buffer in spitransfer can be a NULL pointer, so the interrupt handler may end up writing to...
Linux Distros Unpatched Vulnerability : CVE-2022-48925
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.srcaddr outside state checks If the state is not idle the...
NewStart CGSL MAIN 7.02 : python-cryptography Multiple Vulnerabilities (NS-SA-2025-0151)
The remote NewStart CGSL host, running version MAIN 7.02, has python-cryptography packages installed that are affected by multiple vulnerabilities: - cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions Cipher.updateinto woul...
CVE-2025-38298
CVE-2025-38298 corresponds to a Linux kernel EDAC issue (EDAC/skx_common) where reloading i10nm_edac after unloading and reloading can trigger a general protection fault. The root cause was that the adxl_component_count variable, which tracks ADXL components, was not reset during the reload seque...
CVE-2025-38283
In the Linux kernel, the following vulnerability has been resolved: hisiaccvfiopci: bugfix live migration function without VF device driver If the VF device driver is not loaded in the Guest OS and we attempt to perform device data migration, the address of the migrated data will be NULL. The liv...
CVE-2025-38276
In the Linux kernel, the following vulnerability has been resolved: fs/dax: Fix "don't skip locked entries when scanning entries" Commit 6be3e21d25ca "fs/dax: don't skip locked entries when scanning entries" introduced a new function, waitentryunlockedexclusive, which waits for the current entry ...
