ClearML and Nvidia vulns

Cisco Talos disclosed and documented six vulnerabilities — two in ClearML (an XSS allowing HTML upload and JS execution for authenticated users, and an information-disclosure bug exposing disabled vaults) and four in NVIDIA's nvJPEG2000 library (memory corruption and heap overflows that can lead to arbitrary code execution when processing crafted JPEG2000 files). All issues have been patched by the vendors and Talos provides advisories and Snort rule guidance for detection.