Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2022/11/26 3:30 a.m.67 views

PyTorch vulnerable to arbitrary code execution

In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely. The fix for this issue is available in version 1.13.1. There is a release checker in issue 89855...

9.8CVSS9.2AI score0.01192EPSS
Exploits1References8Affected Software1
OSV
OSV
added 2022/11/26 3:30 a.m.3 views

GHSA-47FC-VMWQ-366V PyTorch vulnerable to arbitrary code execution

In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely. The fix for this issue is available in version 1.13.1. There is a release checker in issue 89855...

9.8CVSS7.3AI score0.01192EPSS
Exploits1References8
Prion
Prion
added 2018/04/27 4:29 p.m.16 views

Security feature bypass

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...

5.5CVSS6.3AI score0.00935EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2018/04/27 4:29 p.m.18 views

CVE-2013-6739

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...

5.5CVSS5.1AI score0.00935EPSS
Exploits0References2
CVE
CVE
added 2018/04/27 4:0 p.m.38 views

CVE-2013-6739

Summary: CVE-2013-6739 affects IBM SPSS Modeler prior to 16 on UNIX, where SSO tokens can bypass access restrictions. The IBM Security Bulletin (CVE-2013-6739) confirms the UNIX server accepts an SSO token to a session, potentially enabling authenticated access. Affected versions include 14–15.0 ...

5.5CVSS5AI score0.00935EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder