Lucene search
K

5 matches found

OSV
OSV
added 2022/11/26 3:30 a.m.1 views

GHSA-47FC-VMWQ-366V PyTorch vulnerable to arbitrary code execution

In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely. The fix for this issue is available in version 1.13.1. There is a release checker in issue 89855...

9.8CVSS7.3AI score0.00829EPSS
Exploits1References8
Github Security Blog
Github Security Blog
added 2022/11/26 3:30 a.m.65 views

PyTorch vulnerable to arbitrary code execution

In PyTorch before trunk/89695, torch.jit.annotations.parsetypeline can cause arbitrary code execution because eval is used unsafely. The fix for this issue is available in version 1.13.1. There is a release checker in issue 89855...

9.8CVSS9.2AI score0.00829EPSS
Exploits1References8Affected Software1
Prion
Prion
added 2018/04/27 4:29 p.m.13 views

Security feature bypass

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...

5.5CVSS6.3AI score0.0008EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2018/04/27 4:29 p.m.12 views

CVE-2013-6739

IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855...

5.5CVSS5.1AI score0.0008EPSS
Exploits0References2
CVE
CVE
added 2018/04/27 4:0 p.m.36 views

CVE-2013-6739

Summary: CVE-2013-6739 affects IBM SPSS Modeler prior to 16 on UNIX, where SSO tokens can bypass access restrictions. The IBM Security Bulletin (CVE-2013-6739) confirms the UNIX server accepts an SSO token to a session, potentially enabling authenticated access. Affected versions include 14–15.0 ...

5.5CVSS5AI score0.0008EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder