CVE-2021-44488

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in opfnfnumber in srport/opfnfnumber.c in order to corrupt memory or crash the application...

PT-2022-12133

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 and V7.0-000 Description An issue was discovered that allows attackers to manipulate the value of a function pointer used in op write in sr port/op write.c using crafted input, which can lead to control of the fl...

PT-2022-12135 · Yottadb · Yottadb

Name of the Vulnerable Software and Affected Versions: YottaDB versions prior to r1.32 and V7.0-000 Description: An issue was discovered that allows attackers to control the size and input to calls to memcpy in op fnfnumber in sr port/op fnfnumber.c using crafted input. This can lead to memory...

PT-2022-12138

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 and V7.0-000 Description An issue was discovered where attackers can cause a calculation of the size of calls to memset in op fnj3 in sr port/op fnj3.c to result in an extremely large value, leading to a...

PT-2022-12136

Name of the Vulnerable Software and Affected Versions YottaDB versions prior to r1.32 and V7.0-000 Description An issue was discovered that allows attackers to cause an integer underflow of the size of calls to memset in op fnj3 in sr port/op fnj3.c. This can be achieved by using crafted input,...

PT-2022-12137

Name of the Vulnerable Software and Affected Versions YottaDB versions through r1.32 and V7.0-000 Description An issue was discovered where attackers can cause a calculation of the size of calls to memset in op fnj3 in sr port/op fnj3.c to result in an extremely large value. This can cause a...

PT-2022-17807

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.9 Description The issue arises from racy interactions between dirty vram tracking and paging log dirty hypercalls. Activation of log dirty mode done by XEN DMOP track dirty vram previously named HVMOP track dirty vram...

PT-2022-13604

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.6.6 Description The issue is related to a Use After Free condition in the op is set bp function. This condition can be exploited, potentially leading to unintended consequences. Recommendations For versions prior to...

PT-2022-29078

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.26 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29130

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.103 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29161

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.182 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-29011

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.12 Description A NULL pointer dereference issue exists in the zynq qspi exec mem op function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

AZL-8997 CVE-2022-0516 affecting package kernel for versions less than 5.15.32.1-2

A vulnerability was found in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4...

kernel: missing check in ioctl allows kernel memory read/write

A vulnerability was found in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access...

kernel: missing check in ioctl allows kernel memory read/write

A vulnerability was found in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access...

GHSA-3HQ6-RMV7-39VH Injection in op-browser

op-browser through 1.0.9 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function...

hiproxy (>=1.1.3, <=2.0.0-next.3) potentially affected by CVE-2020-7625 via op-browser (>=1.0.6, <=1.0.9)

op-browser NPM version =1.0.6, =1.1.3, =2.0.0-next.3 Source cves: CVE-2020-7625 Source advisory: OSV:GHSA-3HQ6-RMV7-39VH...

Injection in op-browser

op-browser through 1.0.9 is vulnerable to Command Injection. It allows execution of arbitrary commands via the url function...

GHSA-8CXV-76P7-JXWR Null-dereference in Tensorflow

Impact The implementation of GetInitOp is vulnerable to a crash caused by dereferencing a null pointer: cc const auto& initopsigit = metagraphdef.signaturedef.findkSavedModelInitOpSignatureKey; if initopsigit != sigdefmap.end initopname = initopsigit-second.outputs...

Stack overflow in TensorFlow

Impact The GraphDef format in TensorFlow does not allow self recursive functions. The runtime assumes that this invariant is satisfied. However, a GraphDef containing a fragment such as the following can be consumed when loading a SavedModel: library function signature name: "SomeOp" description:...