452 matches found
CVE-2025-14929 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability
Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this...
CVE-2025-68325
In the Linux kernel, the following vulnerability has been resolved: net/sched: schcake: Fix incorrect qlen reduction in cakedrop In cakedrop, qdisctreereducebacklog is used to update the qlen and backlog of the qdisc hierarchy. Its caller, cakeenqueue, assumes that the parent qdisc will enqueue t...
EUVD-2025-204282
Integer overflow vulnerability in the yuv2ya16Xctemplate function in libswscale/output.c in FFmpeg 8.0...
RockyLinux 10 : keylime (RLSA-2025:23201)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:23201 advisory. keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration CVE-2025-13609 Tenable has extracted the preceding description block direct...
EUVD-2025-203972
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Local unprivileged users can manipulate a DriveLock process to execute arbitrary commands on Windows computers...
CVE-2025-68248
In the Linux kernel, the following vulnerability has been resolved: vmwballoon: indicate success when effectively deflating during migration When migrating a balloon page, we first deflate the old page to then inflate the new page. However, if inflating the new page succeeded, we effectively...
CVE-2025-43523
creationtimestamp| type| source ---|---|--- 2025-12-12 23:12:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7t7mcvrjb2q...
CVE-2025-63067
creationtimestamp| type| source ---|---|--- 2025-12-09 15:25:37+00:00| seen| https://gist.github.com/Darkcrai86/7a2852d294125071f4b18d7e51d4847d...
CVE-2022-49443
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
CVE-2022-49521
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
CVE-2025-6195
creationtimestamp| type| source ---|---|--- 2025-11-26 23:36:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kzivoppn2n 2025-11-27 14:45:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m6mmc2leh72h...
EUVD-2025-199733
This CVE ID was duplicated of CVE-2025-32801...
CLSA-2025-1764028069 sssd: Fix of CVE-2025-11561
CVE-2025-11561: prevent unexpected Kerberos principal-to-account mappings when SSSD's localauth plugin cannot resolve a principal...
EUVD-2025-145307
Malicious code in liasurmanidze npm...
EUVD-2025-120826
Malicious code in venus-avior-hugo-epimetheus npm...
EUVD-2025-93674
Malicious code in zain-lumpur70-breki npm...
CVE-2025-60721
creationtimestamp| type| source ---|---|--- 2025-11-11 17:29:38+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0358 2025-11-11 17:30:42+00:00| seen| https://www.thezdi.com/blog/2025/11/11/the-november-2025-security-update-review...
CVE-2025-12440
Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
EUVD-2025-53041
Malicious code in neutral-copper-viper npm...
AZL-69854 CVE-2025-46404 affecting package lasso 2.8.0-1
A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...