1141 matches found
PT-2024-12757 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: This issue can cause a runtime crash and a denial of service. It is related to a flaw in the paddle.linalg.matrix rank function. Recommendations: For versions prior to 2.6.0, update to version...
PT-2024-12758 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: This issue is related to a null pointer in paddle.dot, which can cause a runtime crash and a denial of service. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later t...
PT-2024-12756 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is related to a flaw in the paddle.nanmedian function, which can cause a runtime crash and a denial of service. This flaw can lead to a denial of service. Recommendations: For versio...
PaddlePaddle Buffer Error Vulnerability
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle 2.6.0 version of the previous security vulnerability, the vulnerability stems from may lead to denial of service, or even greater damage...
PT-2024-12760 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is related to out-of-bounds OOB access in paddle.mode within PaddlePaddle. This flaw can cause a runtime crash and a denial of service. Recommendations: For versions prior to 2.6.0,...
PaddlePaddle Number Error Vulnerability
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. PaddlePaddle 2.6.0 version of the previous security vulnerability, the vulnerability stems from the possibility of runtime crashes and denial of service...
PT-2024-14511 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a stack overflow in the paddle.searchsorted function. This flaw can lead to a denial of service or potentially more severe consequences. Recommendations: For versions prior to...
Cross site scripting
Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them later. Reflected XSS issue occurs when /queues is appended with /". This issue has been patched in version 2.6.0...
CVE-2023-50727 Resque vulnerable to reflected XSS in Queue Endpoint
Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them later. Reflected XSS issue occurs when /queues is appended with /". This issue has been patched in version 2.6.0...
CVE-2023-50727 Resque vulnerable to reflected XSS in Queue Endpoint
Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them later. Reflected XSS issue occurs when /queues is appended with /". This issue has been patched in version 2.6.0...
Resque Cross-Site Scripting Vulnerability
Resque is a Redis-powered library open-sourced by Resque for creating background jobs, placing them on multiple queues and processing them later. A cross-site scripting vulnerability exists in versions of Resque prior to 2.6.0, which stems from vulnerability to reflective cross-site scripting XSS...
Apache Airflow has a stored cross-site scripting vulnerability
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG. This Javascript can be executed on the client side of any of the user who looks at the tasks in the...
GHSA-PXCH-WR7M-RWXJ Apache Airflow has a stored cross-site scripting vulnerability
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG. This Javascript can be executed on the client side of any of the user who looks at the tasks in the...
CVE-2023-47265
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG. This Javascript can be executed on the client side of any of the user who looks at the tasks in the...
PYSEC-2023-264
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG.This Javascript can be executed on the client side of any of the user who looks at the tasks in the...
CVE-2023-47265 Apache Airflow: DAG Params alllow to embed unchecked Javascript
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG. This Javascript can be executed on the client side of any of the user who looks at the tasks in the...
GHSA-VWGG-2Q82-38C5 Solon is vulnerable to Deserialization of Untrusted Data
Ssolon = 2.6.0 and =2.5.12 is vulnerable to Deserialization of Untrusted Data...
CVE-2023-48967
Ssolon = 2.6.0 and =2.5.12 is vulnerable to Deserialization of Untrusted Data...
Ubuntu 23.04 / 23.10 : OpenVPN vulnerabilities (USN-6484-1)
The remote Ubuntu 23.04 / 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6484-1 advisory. It was discovered that OpenVPN incorrectly handled the --fragment option in certain configurations. A remote attacker could possibly use this issue t...