Lucene search
K

9473 matches found

Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.4 views

PT-2025-49243

Name of the Vulnerable Software and Affected Versions youlaitech youlai-mall versions 1.0.0 through 2.0.0 Description A flaw exists in youlaitech youlai-mall that involves improper control of dynamically-identified variables. The issue is located within an unknown function of the...

8.8CVSS6.3AI score0.00047EPSS
Exploits1References10
CVE
CVE
added 2025/12/04 10:32 p.m.11 views

CVE-2025-14051

CVE-2025-14051 affects youlaitech youlai-mall versions 1.0.0 through 2.0.0. The vulnerability resides in the functions getById(), updateAddress(), and deleteAddress() in the file /mall-ums/app-api/v1/addresses/. Exploitation can be performed remotely, and public exploits have been published. Reme...

8.8CVSS6.3AI score0.00056EPSS
Exploits1References7Affected Software1
OSV
OSV
added 2025/12/04 11:3 a.m.8 views

USN-7909-2 linux-intel-iot-realtime, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S39...

7.8CVSS6.5AI score0.00121EPSS
Exploits3References179
Tenable Nessus
Tenable Nessus
added 2025/12/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-65082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache HTTP Server through environment variables set via the Apache configuration...

6.5CVSS6.9AI score0.00145EPSS
Exploits0References3
Packet Storm News
Packet Storm News
added 2025/12/01 12:0 a.m.1 views

An Introductory Review of the Theory of Continuous-Variable Quantum Key Distribution: Fundamentals, Protocols, and Security

Continuous-variable quantum key distribution CV-QKD has emerged as a promising approach for secure quantum communication, offering advantages such as high key generation rates, compatibility with standard telecommunication infrastructure, and potential for integration on photonic chips. This revi...

6.8AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/11/27 4:59 p.m.4 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS6.9AI score0.00013EPSS
Exploits0References1
Debian
Debian
added 2025/11/27 10:26 a.m.6 views

[SECURITY] [DLA 4385-1] libssh security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4385-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort November 27, 2025 https://wiki.debian.org/LTS -...

8.8CVSS7.5AI score0.00246EPSS
Exploits0
OpenVAS
OpenVAS
added 2025/11/26 12:0 a.m.6 views

Ubuntu: Security Advisory (USN-7886-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.8AI score0.00125EPSS
Exploits0References2
EUVD
EUVD
added 2025/11/25 6:32 p.m.1 views

EUVD-2025-199613

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS6.9AI score0.00013EPSS
Exploits0References3
OSV
OSV
added 2025/11/25 6:15 p.m.3 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7.3AI score0.00013EPSS
Exploits0References3
NVD
NVD
added 2025/11/25 6:15 p.m.1 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS0.00013EPSS
Exploits0References3
CVE
CVE
added 2025/11/25 6:7 p.m.7 views

CVE-2025-33205

CVE-2025-33205 affects the NVIDIA NeMo Framework. The issue is a vulnerability in a predefined variable that could cause inclusion of functionality from an untrusted control sphere, potentially leading to code execution. Affected component: NVIDIA NeMo Framework (NeMo, various integrations as per...

7.3CVSS7AI score0.00013EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2025/11/25 6:7 p.m.6 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS0.00013EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/25 6:7 p.m.3 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7AI score0.00013EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/25 12:0 a.m.5 views

PT-2025-48064

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7.4AI score0.00013EPSS
Exploits0References3
Packet Storm News
Packet Storm News
added 2025/11/25 12:0 a.m.2 views

Quantum Key Distribution: Bridging Theoretical Security Proofs, Practical Attacks, and Error Correction for Quantum-Augmented Networks

Quantum Key Distribution QKD is revolutionizing cryptography by promising information-theoretic security through the immutable laws of quantum mechanics. Yet, the challenge of transforming these idealized security models into practical, resilient systems remains a pressing issue, especially as...

7.1AI score
Exploits0
Snyk
Snyk
added 2025/11/24 8:33 p.m.2 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
Exploits0References3
Snyk
Snyk
added 2025/11/24 8:33 p.m.0 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
Exploits0References3
Snyk
Snyk
added 2025/11/24 8:33 p.m.2 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
Exploits0References3
Snyk
Snyk
added 2025/11/24 8:33 p.m.1 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
Exploits0References3
Rows per page
Query Builder