CVE-2021-33974

Qihoo 360 https://www.360.cn/ Qihoo 360 Safeguard https://www.360.cn/ Qihoo 360 Chrome https://browser.360.cn/ee/ is affected by: Buffer Overflow. The impact is: execute arbitrary code remote. The component is: This is a set of vulnerabilities affecting popular software, and the installation...

PT-2023-12235 · Qihoo · Qihoo 360 Safeguard

Name of the Vulnerable Software and Affected Versions: Qihoo 360 Safe guard versions 12.1.0.1004 through 12.1.0.1005 Qihoo 360 Safe guard version 13.1.0.1001 Description: The issue allows an attacker to escalate privileges due to a Buffer Overflow vulnerability. Recommendations: For Qihoo 360 Saf...

CVE-2021-33972

CVE-2021-33972 is a buffer overflow vulnerability affecting Qihoo 360 Safe Browser version 13.0.2170.0. All connected sources consistently describe privileges escalation as the impact, stemming from a buffer overflow in the browser. The issue is reported across multiple feeds (NVD, Red Hat, CNNVD...

CVE-2021-33973

Consolidated reports describe CVE-2021-33973 as a Buffer Overflow vulnerability in Qihoo 360 Safe guard versions 12.1.0.1004/1005 and 13.1.0.1001 that allows local privilege escalation. The root cause is a buffer overflow in the Safe guard components, with no exploitation details provided in the ...

360 Safe Browser 安全漏洞

360 Safe Browser is a dual-core browser based on Internet Explorer and Chromium from Beijing Qihoo Technology Company Limited 360, a Chinese company. A security vulnerability exists in 360 Safe Browser version 13.0.2170.0, which stems from the presence of a buffer overflow vulnerability. An...

CVE-2021-33973

Buffer Overflow vulnerability in Qihoo 360 Safe guard v12.1.0.1004, v12.1.0.1005, v13.1.0.1001 allows attacker to escalate priveleges...

medecin-360.fr Cross Site Scripting vulnerability OBB-3252988

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`

Impact When the parameter summarize of tf.rawops.Print is zero, the new method SummarizeArray will reference to a nullptr, leading to a seg fault. python import tensorflow as tf tf.rawops.Printinput = tf.constant1, 1, 1, 1,dtype=tf.int32, data = False, False, False, False, False, False, False,...

TensorFlow has Null Pointer Error in SparseSparseMaximum

Impact When SparseSparseMaximum is given invalid sparse tensors as inputs, it can give an NPE. python import tensorflow as tf tf.rawops.SparseSparseMaximum aindices=1, avalues = 0.1 , ashape = 2, bindices=, bvalues =2 , bshape = 2, Patches We have patched the issue in GitHub commit...

TensorFlow has Floating Point Exception in AvgPoolGrad with XLA

Impact If the stride and window size are not positive for tf.rawops.AvgPoolGrad, it can give an FPE. python import tensorflow as tf import numpy as np @tf.functionjitcompile=True def test: y = tf.rawops.AvgPoolGradoriginputshape=1,0,0,0, grad=0.39117979, ksize=1,0,0,0, strides=1,0,0,0,...

TensorFlow has segmentation fault in tfg-translate

Impact Out-of-bounds access due to mismatched integer type sizes in ValueMap::Manager::GetValueOrCreatePlaceholder. Bug with tfg-translate call to InitMlir. The problem happens with generic functions, as it is already handled for non-generic functions. This is because they, unlike non-generic...

TensorFlow has Null Pointer Error in LookupTableImportV2

Impact The function tf.rawops.LookupTableImportV2 cannot handle scalars in the values parameter and gives an NPE. python import tensorflow as tf v = tf.Variable1 @tf.functionjitcompile=True def test: func = tf.rawops.LookupTableImportV2 para='tablehandle': v.handle,'keys': 62.98910140991211,...

TensorFlow has Segfault in Bincount with XLA

Impact When running with XLA, tf.rawops.Bincount segfaults when given a parameter weights that is neither the same shape as parameter arr nor a length-0 tensor. python import tensorflow as tf func = tf.rawops.Bincount para='arr': 6, 'size': 804, 'weights': 52, 351 @tf.functionjitcompile=True def...

TensorFlow has null dereference on ParallelConcat with XLA

Impact When running with XLA, tf.rawops.ParallelConcat segfaults with a nullptr dereference when given a parameter shape with rank that is not greater than zero. python import tensorflow as tf func = tf.rawops.ParallelConcat para = 'shape': 0, 'values': 1 @tf.functionjitcompile=True def test: y =...

TensorFlow has Floating Point Exception in TFLite in conv kernel

Impact Constructing a tflite model with a paramater filterinputchannel of less than 1 gives a FPE. Patches We have patched the issue in GitHub commit 34f8368c535253f5c9cb3a303297743b62442aaa. The fix will be included in TensorFlow 2.12. We will also cherrypick this commit on TensorFlow 2.11.1. Fo...

CVE-2023-27077

Stack Overflow vulnerability found in 360 D901 allows a remote attacker to cause a Distributed Denial of Service DDOS via a crafted HTTP package...

Stack overflow

Stack Overflow vulnerability found in 360 D901 allows a remote attacker to cause a Distributed Denial of Service DDOS via a crafted HTTP package...

CVE-2023-27077

CVE-2023-27077 is a heap-based buffer overflow vulnerability affecting the 360 D901 camera. Multiple connected sources describe a stack overflow-like issue that can be exploited remotely by sending a crafted HTTP package, enabling denial of service. The core detail across documents is that the 36...

CVE-2023-27077

Stack Overflow vulnerability found in 360 D901 allows a remote attacker to cause a Distributed Denial of Service DDOS via a crafted HTTP package...

360 D901 缓冲区错误漏洞

The 360 D901 is a Red Alert Outdoor Standard Edition Outdoor Camera from Qihoo Technology Limited 360, a company based in Beijing, China. The 360 D901 has a security vulnerability that stems from the presence of a heap-based buffer overflow issue...