PT-2021-21781 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: An attacker can read from outside of bounds of heap allocated data by sending...

PT-2021-21752 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: It is possible to trigger a null pointer dereference in TensorFlow by passing an...

PT-2021-21759 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow version 2.5.1 TensorFlow version 2.4.3 TensorFlow version 2.3.4 Description: The issue arises when a negative element is provided to the num elements list argument of tf.raw ops.TensorListReserve,...

PT-2021-21768 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: The implementation for tf.raw ops.BoostedTreesCreateEnsemble can result in a use...

PT-2021-7493 · Haproxy +2 · Haproxy +2

Name of the Vulnerable Software and Affected Versions: HAProxy versions 2.2 before 2.2.16 HAProxy versions 2.3 before 2.3.13 HAProxy versions 2.4 before 2.4.3 Description: The issue is related to a mismatch between Host and authority being mishandled, which can lead to an attacker-controlled HTTP...

CVE-2021-28925

Nagios Network Analyzer prior to version 2.4.3 contains a SQL injection vulnerability in the o[col] parameter of api/checks/read/. The issue is due to improper input handling that allows arbitrary SQL execution, potentially enabling an attacker to read and modify database data. Multiple sources c...

Nagios SQL注入漏洞

Nagios Network Analyzer is a network data flow analyzer that provides a view of all network traffic and bandwidth utilization. A SQL injection vulnerability exists in Nagios Network Analyzer versions prior to 2.4.3. The vulnerability can be exploited to read sensitive data from the database and...

Containous Traefik Security Vulnerability

Containous Traefik is a reverse proxy and load balancer from Containous USA. A security vulnerability exists in Containous Traefik. The vulnerability stems from the software allowing IFRAME to be loaded from other domains.The following products and versions are affected:Containous Traefik 2.4.3...

Wyzi < 2.4.3 - Reflected Cross-Site Scripting (XSS)

The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature https://example.com/business/?keyword=%22%3E%3Cimg%20src=x%20onerror=alert/XSS/%3Easd&wyz-loc-filter-txt=&loc-filter-txt=&loc-filter-lat=&loc-filter-lng=&category=&radius=0...

Wyzi < 2.4.3 - Reflected Cross-Site Scripting (XSS)

The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature PoC https://example.com/business/?keyword=%22%3E%3Cimg%20src=x%20onerror=alert/XSS/%3Easd&wyz-loc-filter-txt;=&loc-filter-txt;=&loc-filter-lat;=&loc-filter-lng;===0...

MGASA-2020-0417 Updated tpm2-tss packages fix a security vulnerability

FAPI PolicyPCR not instatiating correctly CVE-2020-24455. Note that all TPM object created with a PolicyPCR with the currentPcrs and currentPcrsAndBank options have been created with an incorrect policy that omits PCR checks. All such objects have to be recreated. The tpm2-tss package has been...

WordPress Paid Memberships Pro plugin <= 2.4.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress Paid Memberships Pro plugin versions = 2.4.2. Solution Update the WordPress Paid Memberships Pro plugin to the latest available version at least 2.4.3...

Security Bulletin: Multiple Eclipse Jetty Vulnerabilities Affect IBM Sterling Secure External Authentication Server

Summary Three Eclipse Jetty vulnerabilities were addressed by IBM Sterling Secure External Authentication Server. Vulnerability Details CVE-ID: CVE-2019-10241 Description: Eclipse Jetty is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the DefaultServl...

McAfee Active Response (MAR) for Mac Elevation of Privilege Vulnerability

McAfee Active Response MAR is an endpoint detection and response tool for security threats from the U.S.-based McAfee. The product supports features such as rapid access to threat data, threat alerts and centralized management. A security vulnerability exists in McAfee MAR prior to version 2.4.3...

CVE-2020-7289

Privilege Escalation vulnerability in McAfee Active Response MAR for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to...

Wondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path

Exploit Title: Wondershare Application Framework Service 2.4.3.231 - 'WsAppService' Unquote Service Path Google Dork: N/A Date: 2019-11-11 Exploit Author: chuyreds Vendor Homepage: https://www.wondershare.com/ Software Link: https://www.wondershare.com/drfone/ Version: 2.4.3.231 Tested on: Window...

OPENSUSE-SU-2019:2466-1 Security update for gdal

This update for gdal to version 2.4.3 fixes the following issues: gdal was updated to 2.4.3: - CVE-2019-17545: Fixed a double free vulnerability in OGRExpatRealloc boo1153918. - Multiple bug and stability fixes For more information regarding the release at:...

gdnsd Buffer Overflow Vulnerability

gdnsd is a DNS server written in C. It can be used as a server for the DNS server. A buffer error vulnerability exists in the 'setipv6' function of the zscanrfc1035.rl file in gdnsd versions prior to 2.4.3 and 3.x versions prior to 3.2.1. The vulnerability stems from a network system or product...

Stack overflow

The setipv6 function in zscanrfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data...

CVE-2019-1678 Cisco Meeting Server Denial of Service Vulnerability

A vulnerability in Cisco Meeting Server could allow an authenticated, remote attacker to cause a partial denial of service DoS to Cisco Meetings application users who are paired with a Session Initiation Protocol SIP endpoint. The vulnerability is due to improper validation of coSpaces...