Archive
6 August 2025
Vulnerabilities first published on this day (UTC), newest first.
217 results · Feed
-
High 8.1
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker …
-
High 8.1
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker …
-
Critical 9.1
NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse she…
-
Critical 9.8
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through speciall…
-
Critical 9.8
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack buffe…
-
Medium 5.3
Regular Expression Denial of Service (ReDoS) in huggingface/transformers
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the `convert_tf_weight_name_to_pt_weight_name()` function. This function, responsible for converting TensorFlow weight names to PyTor…
-
Medium 6.5
-
High 7.5
-
Medium 6.5
-
Medium 4.3
-
High 8.8
-
High 8.8
-
Medium 6.5
Vault LDAP MFA Enforcement Bypass When Using Username As Alias
Vault and Vault Enterprise’s (“Vault”) ldap auth method may not have correctly enforced MFA if username_as_alias was set to true and a user had multiple CNs that are equal but with leading or trailing spaces. Fixed in Vault Community Edition 1.20.2 and Vault …
-
Critical 9.8
CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1 allow crafted dangerous fil…
-
High 7.3
OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions p…
-
High 8.7CVE-2025-7771 Public exploit
Code Execution / Escalation of Privileges in ThrottleStop
ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the ru…
-
Medium 5.3
GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposure
The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.6.0. This makes it possible for unauthenticated attackers to extract donor names, emails, and donor id. CV…
-
Low 3.7
Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results
A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.
-
Medium 5.1
Cross-Site Request Forgery (CSRF) allowed remote control of Elgato Key Lights
A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights.
-
High 7.5
Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
Information disclosure while accessing and modifying the PIB file of a remote device via powerline.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Display
Memory corruption while processing simultaneous requests via escape path.
-
High 7.8
Improper Validation of Array Index in Bluetooth HOST
Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.
-
High 7.5
Reachable Assertion in WLAN Firmware
Transient DOS while creating NDP instance.
-
Medium 5.5
Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks
Information disclosure while processing a packet at EAVB BE side with invalid header length.
-
High 7.3
Buffer Copy Without Checking Size of Input in Powerline Communication Firmware
Memory corruption while processing specific files in Powerline Communication Firmware.
-
High 7.8
Untrusted Pointer Dereference in DSP Service
Memory corruption while processing DDI command calls.
-
High 7.8
Buffer Over-read in Camera
Memory corruption while processing an IOCTL command with an arbitrary address.
-
High 7.8
Improper Validation of Array Index in DSP Service
Memory corruption while processing DDI call with invalid buffer.
-
High 7.5
Reachable Assertion in WLAN Firmware
Transient DOS while processing an ANQP message.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while processing a frame with malformed shared-key descriptor.
-
High 7.8
Improper Access Control in Automotive Multimedia
Memory corruption while handling client exceptions, allowing unauthorized channel access.
-
High 7.5
Improper Input Validation in Modem
Transient DOS while processing CCCH data when NW sends data with invalid length.
-
High 7.8
Use After Free in BTHOST
Memory corruption while processing commands from A2dp sink command queue.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.
-
Medium 5.5
Leftover Debug Code in Secure Element
Information disclosure while capturing logs as eSE debug messages are logged.
-
Medium 6.5
Out-of-bounds Read in Core
Information disclosure while processing the hash segment in an MBN file.
-
Medium 6.5
Out-of-bounds Read in Core
Information disclosure while reading data from an image using specified offset and size parameters.
-
High 7.8
Out-of-bounds Write in Camera_Linux
Memory corruption when programming registers through virtual CDM.
-
High 7.8
Use After Free in NPU
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
-
Medium 6.1
Buffer Over-read in Automotive OS Platform Android
Information disclosure while opening a fastrpc session when domain is not sanitized.