CVE-2021-33654

CVE-2021-33654 affects Huawei MindSpore Community (open‑source deep learning framework). The issue occurs during the initialization of the Split operator when an input shape dimension is 0, causing a division by zero exception. Public references across multiple databases reiterate this root cause...

CVE-2021-33653

When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter blockshape element, it will cause a division by 0 exception...

CVE-2021-33653

MindSpore SpaceToBatch derivation shape bug CVE-2021-33653: a value of 0 in block_shape triggers a divide-by-zero during the derivation operation. Documentation across sources (including Red Hat and CNNVD) links this to Huawei MindSpore Community prior to 1.3.0. Remediation is to upgrade to versi...

CVE-2021-33651

CVE-2021-33651 affects the DepthwiseConv2D operator in MindSpore (Huawei MindSpore Community context). The root cause described across sources is a division by zero when the attribute depth_multiplier is 0. Public records indicate a potential availability impact (NVD CVSS 3.1 vector shows HIGH im...

CVE-2021-33651

When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depthmultiplier is 0, it will cause a division by 0 exception...

CVE-2021-33652

When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...

CVE-2021-33652

CVE-2021-33652 affects Huawei MindSpore Community (open source deep learning framework). Connected sources describe a vulnerability in the Reduce operator: if axis_sizes contains a value of 0, a division by zero occurs during the Reduce run, leading to a potential crash or denial of service in af...

IStaking(contracts[i]).canBatchContracts() will revert due to the fact that contracts[i] can contain address(0)

Lines of code Vulnerability details Issue: canBatchContracts will revert due to the fact that contractsi can contain address0 as an address which will revert the whole call. Affected Code File: BatchRequests.sol 33: function canBatchContracts external view returns Batch memory 34: uint256...

Division by 0

Lines of code Vulnerability details Division by 0 can lead to accidentally revert, An example of a similar issue - code-423n4/2021-10-defiprotocol-findings84 Code instances: https://github.com/code-423n4/2022-06-nibbl/tree/main/contracts/NibblVault.solL183 initialTokenSupply, initialTokenPrice...

CVE-2022-23081

In openlibrary versions deploy-2016-07-0 through deploy-2021-12-22 are vulnerable to Reflected XSS...

MAL-2022-10 Malicious code in 0-shadowenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf1d6de72cf4196c8a98c6abbdb26e2db9257d0bd8c7556a1f753f6b84b6c621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5961 Malicious code in scheduler-0-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d131b97aab3988f77e132d75ebbf1c80b1d4f4f52f4aa6452dc94e064f8dcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-9 Malicious code in 0-dns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9345f1024aa16e4fbd012768ffc1ab4a6aa5863e13d3abb1043dbc7e503fa35f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Division by 0 can lead to accidentally revert

Lines of code Vulnerability details Division by 0 can lead to accidentally revert, An example of a similar issue - code-423n4/2021-10-defiprotocol-findings84 Code instances: https://github.com/code-423n4/2022-06-nested/tree/main/contracts/operators/Beefy/lp/BeefyZapBiswapLPVaultOperator.solL286...

Division by 0

Lines of code Vulnerability details Division by 0 can lead to accidentally revert, An example of a similar issue - code-423n4/2021-10-defiprotocol-findings84 Code instances: https://github.com/code-423n4/2022-06-nested/tree/main/contracts/operators/Beefy/lp/BeefyZapBiswapLPVaultOperator.solL286...

An Autopsy on a Zombie In-the-Wild 0-day

Posted by Maddie Stone, Google Project Zero Whenever there’s a new in-the-wild 0-day disclosed, I’m very interested in understanding the root cause of the bug. This allows us to then understand if it was fully fixed, look for variants, and brainstorm new mitigations. This blog is the story of a...

Apache 2.4.x < 2.4.54 Multiple Vulnerabilities

According to its banner, the version of Apache running on the remote host is 2.4.x prior to 2.4.54. It is, therefore, affected by multiple vulnerabilities: - Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' vulnerability in modproxyajp of Apache HTTP Server allows an attacker...

PT-2022-19180 · Rakuten · Rakuten Casa

Name of the Vulnerable Software and Affected Versions: Rakuten Casa versions AP F V1 4 1 through AP F V2 0 0 Description: The issue is related to improper access control, allowing a remote attacker to log in with root privilege and perform arbitrary operations if the product is in its default...

Debian: Security Advisory (DLA-3050-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0...