PT-2023-5803 · Acronis · Acronis Cyber Protect Home Office +3

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office versions prior to build 40278 Acronis Agent versions prior to build 31637 Acronis Cyber Protect 15 versions prior to build 35979 Description: The issue is related to local privilege escalation due to insecure...

CVE-2023-35979

creationtimestamp| type| source ---|---|--- 2023-07-05 18:22:01+00:00| seen| https://t.me/cibsecurity/65978...

aliby (>=0.1.18 <=0.1.55), aliby-baby (>=0.1.11 <=0.1.17) +29 more potentially affected by CVE-2022-35979 via tensorflow (>=2.9.0 <=2.9.0rc2)

tensorflow PYPI version =2.9.0, =0.1.18, =0.1.11, =0.30.0, =0.0.0, =1.3.0, =0.3.0, =1.0.1, =1.2.0, =0.0.6, =1.0.12, =0.1.0, =0.1.1 and more Source cves: CVE-2022-35979 Source advisory: OSV:GHSA-V7VW-577F-VP8X...

animl (>=1.1.2 <=1.1.4), arekit (>=0.21.0 <=0.22.1) +183 more potentially affected by CVE-2022-35979 via tensorflow-gpu (>=1.10.1 <=2.7.0)

tensorflow-gpu PYPI version =1.10.1, =1.1.2, =0.21.0, =0.23.0, =0.9.2, =1.0.0, =0.1.0, =0.0.1, =0.0.9, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - brainhance =0.0.1 and more Source cves: CVE-2022-35979 Source advisory: OSV:GHSA-V7VW-577F-VP8X...

causalegm (>=0.2.1 <=0.2.5), chrombpnet (>=0.1.0 <=0.1.2) +3 more potentially affected by CVE-2022-35979 via tensorflow-gpu (=2.8.0)

tensorflow-gpu PYPI version =2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - causalegm =0.2.1, =0.1.0, =0.0.6, =2.3.5, =2.4.1 - tlaunch =0.0.2 Source cves: CVE-2022-35979 Source advisory: OSV:GHSA-V7VW-577F-V...

acuity (=6.18.0), acuitypro (=6.18.0) +60 more potentially affected by CVE-2022-35979 via tensorflow (>=2.8.0 <=2.8.0rc1)

tensorflow PYPI version =2.8.0, =1.2.8, =1.0.43, =0.2.2, =0.0.1, =0.0.2, =0.2.8, =0.14.0, =0.1.3, =0.0.9, =0.2.27, =0.2.41 - complaintclassify =0.0.5 - conversational-sentence-encoder =0.0.6 and more Source cves: CVE-2022-35979 Source advisory: OSV:GHSA-V7VW-577F-VP8X...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4899 more potentially affected by CVE-2022-35979 via tensorflow (>=1.0.1 <=2.7.1)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.5.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-35979 Source advisory: OSV:GHSA-V7VW-577F-VP8X...

clip-jax (=0.0.5) potentially affected by CVE-2022-35979 via tensorflow-cpu (=2.9.0)

tensorflow-cpu PYPI version =2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - clip-jax =0.0.5 Source cves: CVE-2022-35979 Source advisory: OSV:GHSA-V7VW-577F-VP8X...

CVE-2022-35979

CVE-2022-35979 affects TensorFlow. When QuantizedRelu or QuantizedRelu6 receive nonscalar inputs for min_features or max_features, a segfault can be triggered, leading to a denial of service. A fix was committed (49b3824d83af706df0ad07e4e677d88659756d89) and will be included in TensorFlow 2.10.0....

CVE-2022-35979 Segfault in `QuantizedRelu` and `QuantizedRelu6`

TensorFlow is an open source platform for machine learning. If QuantizedRelu or QuantizedRelu6 are given nonscalar inputs for minfeatures or maxfeatures, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2022-35979 Segfault in `QuantizedRelu` and `QuantizedRelu6`

TensorFlow is an open source platform for machine learning. If QuantizedRelu or QuantizedRelu6 are given nonscalar inputs for minfeatures or maxfeatures, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

CVE-2021-35979

creationtimestamp| type| source ---|---|--- 2021-10-08 18:40:11+00:00| seen| https://t.me/cibsecurity/30246...

CVE-2021-35979

CVE-2021-35979 concerns Digi RealPort up to version 4.8.488.0. The issue is in the product’s proprietary Serial-over-LAN RealPort, where the encrypted mode does not perform authentication, making it susceptible to network-based MITM attacks. Affected component: the encrypted mode of Digi RealPort...

CVE-2020-35979

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...

CVE-2020-35979

An issue was discovered in GPAC version 0.8.0 and 1.0.1. There is heap-based buffer overflow in the function gprtpbuilderdoavc in ietf/rtppckmpeg4.c...

CVE-2020-35979

GPAC 0.8.0 and 1.0.1 contain a heap-based buffer overflow in gp_rtp_builder_do_avc() (ietf/rtp_pck_mpeg4.c). Exploitation/impact details are not elaborated beyond this CVE, but related advisories recommend upgrading to GPAC &gt;= 2.2.0 (e.g., Gentoo GLSA 202408-21). Monitor for updates and apply ...

abdn.ac.uk Open Redirect vulnerability

Vulnerable URL: http://www.abdn.ac.uk/diss/news/service/motd/weblink.php?http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 23.01.2017 Latest check for patch:| 23.01.2017 08:01 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...