CVE-2021-3835

Buffer overflow in usb device class. Zephyr versions = v2.6.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-fm6v-8625-99jf...

CamaleonCMS Denial of Service Vulnerability

CamaleonCMS is a RubyonRails-based advanced dynamic content management system CMS from the Camaleon CMS team.A denial-of-service vulnerability exists in Camaleon CMS versions 2.0.1 through 2.6.0, which stems from a vulnerability to uncaught exceptions in Camaleon CMS. An attacker with low privile...

Server side request forgery (ssrf)

In Camaleon CMS, versions 2.1.2.0 to 2.6.0, are vulnerable to Server-Side Request Forgery SSRF in the media upload feature, which allows admin users to fetch media files from external URLs but fails to validate URLs referencing to localhost or other internal servers. This allows attackers to read...

CVE-2021-25971 Camaleon CMS - SVG File Upload Creates DoS for Media Upload Feature

In Camaleon CMS, versions 2.0.1 to 2.6.0 are vulnerable to an Uncaught Exception. The app's media upload feature crashes permanently when an attacker with a low privileged access uploads a specially crafted .svg file...

Camaleon CMS 跨站脚本漏洞

CamaleonCMS is an advanced dynamic content management system CMS based on RubyonRails from the CamaleonCMS team.CamaleonCMS has a cross-site scripting vulnerability in versions 0.0.1 through 2.6.0 that stems from a lack of checksum filtering of user-supplied and output data. An attacker could...

CamaleonCMS 安全漏洞

CamaleonCMS is a RubyonRails-based advanced dynamic content management system CMS from the Camaleon CMS team.A denial-of-service vulnerability exists in Camaleon CMS versions 2.0.1 through 2.6.0, which stems from a vulnerability to uncaught exceptions in Camaleon CMS. An attacker with low privile...

CamaleonCMS 代码问题漏洞

CamaleonCMS is an advanced RubyonRails-based dynamic content management system CMS from the CamaleonCMS team. A security vulnerability exists in Camaleon CMS versions 0.1.7 through 2.6.0, which stems from an issue with the software's password change control that does not terminate a user's active...

WordPress Post Expirator plugin <= 2.5.1 - Arbitrary Post Schedule Deletion vulnerability

Arbitrary Post Schedule Deletion vulnerability discovered by apple502j in WordPress Post Expirator plugin versions = 2.5.1. Solution Update the WordPress Post Expirator plugin to the latest available version at least 2.6.0...

CVE-2021-39325

The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the loadpreviews function found in the /OMAPI/Output.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.6.0...

Cross site scripting

The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the loadpreviews function found in the /OMAPI/Output.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.6.0...

Duplicate Advisory: Uncaught Exception in libpulse-binding

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xvcg-2q82-r87j. This link is maintained to preserve external references. Original Description Affected versions of this crate failed to catch panics crossing FFI boundaries via callbacks, which is a form of UB...

Floating point exception in `SparseDenseCwiseDiv`

Impact The implementation of tf.rawops.SparseDenseCwiseDiv is vulnerable to a division by 0 error: python import tensorflow as tf import numpy as np tf.rawops.SparseDenseCwiseDiv spindices=np.array4, spvalues=np.array-400, spshape=np.array647., dense=np.array0 The implementation uses a common cla...

GHSA-HP4C-X6R7-6555 Floating point exception in `SparseDenseCwiseDiv`

Impact The implementation of tf.rawops.SparseDenseCwiseDiv is vulnerable to a division by 0 error: python import tensorflow as tf import numpy as np tf.rawops.SparseDenseCwiseDiv spindices=np.array4, spvalues=np.array-400, spshape=np.array647., dense=np.array0 The implementation uses a common cla...

GHSA-95XM-G58G-3P88 Integer division by 0 in sparse reshaping

Impact The implementation of tf.rawops.SparseReshape can be made to trigger an integral division by 0 exception: python import tensorflow as tf tf.rawops.SparseReshape inputindices = np.ones1,3, inputshape = np.array1,1,0, newshape = np.array1,0 The implementation calls the reshaping functor...

Integer division by 0 in sparse reshaping

Impact The implementation of tf.rawops.SparseReshape can be made to trigger an integral division by 0 exception: python import tensorflow as tf tf.rawops.SparseReshape inputindices = np.ones1,3, inputshape = np.array1,1,0, newshape = np.array1,0 The implementation calls the reshaping functor...

Null pointer dereference in `MatrixDiagPartOp`

Impact If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first: python import tensorflow as tf tf.rawops.MatrixDiagPartV2...

GHSA-6GV8-P3VJ-PXVR Null pointer dereference in `UncompressElement`

Impact The code for tf.rawops.UncompressElement can be made to trigger a null pointer dereference: python import tensorflow as tf data = tf.data.Dataset.fromtensors0.0 tf.rawops.UncompressElement compressed=tf.data.experimental.tovariantdata, outputtypes=tf.int64, outputshapes=2 The implementatio...

GHSA-F8H4-7RGH-Q2GM Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord`

Impact The implementation for tf.rawops.ExperimentalDatasetToTFRecord and tf.rawops.DatasetToTFRecord can trigger heap buffer overflow and segmentation fault: python import tensorflow as tf dataset = tf.data.Dataset.range3 dataset = tf.data.experimental.tovariantdataset...

GHSA-HPV4-7P9C-MVFR Heap buffer overflow in `FractionalAvgPoolGrad`

Impact The implementation for tf.rawops.FractionalAvgPoolGrad can be tricked into accessing data outside of bounds of heap allocated buffers: python import tensorflow as tf tf.rawops.FractionalAvgPoolGrad originputtensorshape=0,1,2,3, outbackprop = np.array541,541,541,541, rowpoolingsequence=0, 0...

Heap buffer overflow in `FractionalAvgPoolGrad`

Impact The implementation for tf.rawops.FractionalAvgPoolGrad can be tricked into accessing data outside of bounds of heap allocated buffers: python import tensorflow as tf tf.rawops.FractionalAvgPoolGrad originputtensorshape=0,1,2,3, outbackprop = np.array541,541,541,541, rowpoolingsequence=0, 0...