NVIDIA Triton Inference Server, part of the NVIDIA AI platform and available with NVIDIA AI Enterprise, is open-source software that standardizes AI model deployment and execution across every workload.

Triton Inference Server

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by sending a request. A successful exploit of this vulnerability might lead to information disclosure.

CVE-2025-23334

Linux

Linux Kernel

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause the shared memory limit to be exceeded by sending a very large request. A successful exploit of this vulnerability might lead to information disclosure.

CVE-2025-23320

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds write by sending a request. A successful exploit of this vulnerability might lead to remote code execution, denial of service, data tampering, or information disclosure.

CVE-2025-23319

Trend Micro Apex One is an automated threat detection and response solution for endpoint protection. Apex One offers a single agent for physical, virtual, and cloud deployments.

Trend Micro Apex One Agent

Trend Micro Apex One is an automated threat detection and response solution that provides endpoint protection. Apex One offers a single agent for physical, virtual, and cloud deployments.

Trend Micro Apex One Server

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.

CVE-2025-54987

Windows

Windows Cumulative Update

A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations.

CVE-2025-54948

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers (ACRH) header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt to cause a denial of service.

CVE-2025-47908

GoLang

GitHub Advisory Database

Class based , object oriented programming language. Designed to have less dependencies as possible. The syntex of Java is smilier to C and C++. Commonly used for client-server applications. Java files are compiled by JVM (Java Virtual Machine)

Java

A vulnerability was found in Keycloak-services. Special characters used during e-mail registration may perform SMTP Injection and unexpectedly send short unwanted e-mails. The email is limited to 64 characters (limited local part of the email), so the attack is limited to very shorts emails (subject and little data, the example is 60 chars). This flaw's only direct consequence is an unsolicited email being sent from the Keycloak server. However, this action could be a precursor for more sophisticated attacks.

CVE-2025-8419

Maven

Cisco Identity Services Engine (ISE) is a network administration and security platform that provides secure access control, device profiling, and policy enforcement. It enables organizations to manage network access across wired, wireless, and VPN connections while ensuring compliance with security policies.

Cisco ISE

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device.

This vulnerability is due to the lack of server-side validation of Administrator permissions. An attacker could exploit this vulnerability by submitting a crafted HTTP request to an affected system. A successful exploit could allow the attacker to modify descriptions of files on a specific page. To exploit this vulnerability, an attacker would need valid read-only Administrator&nbsp;credentials.

CVE-2025-20332

VulnCheck NVD++

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface.

This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have at least a low-privileged account on the affected device.

CVE-2025-20331

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identified specific security implications tied to the guidance and configuration steps outlined in the April announcement. Microsoft is issuing CVE-2025-53786 to document a vulnerability that is addressed by taking the steps documented with the April 18th announcement. Microsoft strongly recommends reading the information, installing the April 2025 (or later) Hot Fix and implementing the changes in your Exchange Server and hybrid environment.

CVE-Kennung	Strenge	Punktzahl	Technologieen	Name der Komponente	CISA KEV-Exploit	Hat fix	Veröffentlichungsdatum
CVE-2025-23334	MEDIUM	5.9	Triton Inference Server	cpe:2.3:a:nvidia:triton_inference_server	Nein	Ja	Aug 06, 2025
CVE-2025-23320	HIGH	7.5	Triton Inference Server	cpe:2.3:a:nvidia:triton_inference_server	Nein	Ja	Aug 06, 2025
CVE-2025-23319	HIGH	8.1	Triton Inference Server	cpe:2.3:a:nvidia:triton_inference_server	Nein	Ja	Aug 06, 2025
CVE-2025-54987	CRITICAL	9.4	Trend Micro Apex One Agent	cpe:2.3:a:trendmicro:apex_one	Nein	Ja	Aug 05, 2025
CVE-2025-54948	CRITICAL	9.4	Trend Micro Apex One Agent	cpe:2.3:a:trendmicro:apex_one	Nein	Ja	Aug 05, 2025

CVE-Kennung	Strenge	Punktzahl	Technologieen	Name der Komponente	CISA KEV-Exploit	Hat fix	Veröffentlichungsdatum
CVE-2025-47908	N/A	N/A	N/A	github.com/rs/cors	Nein	Ja	Aug 06, 2025
CVE-2025-8419	MEDIUM	6.5	Java	org.keycloak:keycloak-services	Nein	Nein	Aug 06, 2025
CVE-2025-20332	MEDIUM	4.3	Cisco ISE	cpe:2.3:a:cisco:identity_services_engine	Nein	Ja	Aug 06, 2025
CVE-2025-20331	MEDIUM	5.4	Cisco ISE	cpe:2.3:a:cisco:identity_services_engine	Nein	Ja	Aug 06, 2025
CVE-2025-53786	HIGH	8	N/A	N/A	Nein	Ja	Aug 06, 2025

Datenbank für Wiz-Schwachstellen

Nach Technologie erkunden

Beliebte Filter

Hohes Profil

Neuesten

Schwachstellen in Zahlen

Das Gute, das Böse und das Verletzliche

Zusätzliche Wiz-Ressourcen

Cloud Vulnerability DB

PEACH

Bist du bereit, Wiz in Aktion zu sehen?