CVE-2022-35967

TensorFlow is an open source platform for machine learning. If QuantizedAdd is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 49b3824d83af706df0ad07e4e677d88659756d89...

CVE-2021-42597

A Cross Site Scripting XSS vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14, SURMS V 1.0 via the Add New Tenant List Rent List form...

CVE-2021-42597

A Cross Site Scripting XSS vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14, SURMS V 1.0 via the Add New Tenant List Rent List form...

Cross site scripting

A Cross Site Scripting XSS vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14, SURMS V 1.0 via the Add New Tenant List Rent List form...

CVE-2021-42597

A Cross Site Scripting XSS vulnerability exists in Sourcecodester Storage Unit Rental Management System PHP 8.0.10 , Apache 2.4.14, SURMS V 1.0 via the Add New Tenant List Rent List form...

PT-2022-33535 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A potential issue exists in the iwlwifi driver, specifically in the iwl mvm mac wake tx queue function, where a double list add could occur. The actual impact and attack plausibility have no...

PT-2022-23071

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The issue arises when QuantizedBiasAdd is given min input, max input, min bias, m...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segmentation error that can be used to trigger a denial-of-service attack if...

TIBCO Security Advisory: September 21, 2022 - TIBCO EBX Add-ons -CVE-2022-30578

TIBCO EBX Add-ons Stored XSS vulnerability Original release date: September 21, 2022 Lastrevised: --- CVE-2022-30578 Source: TIBCOSoftware Inc. Products Affected TIBCO EBX Add-ons versions 5.4.1 and below The following component is affected: Web Server Description The component listed above...

CVE-2022-38295

Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...

CVE-2022-38295

Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...

CVE-2022-38295

Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /tablemanager/view/cuusergroups. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field under the Add New Group function...

CuppaCMS 跨站脚本漏洞

CuppaCMS is a content management system CMS. A security vulnerability exists in CuppaCMS v1.0, which originates from a cross-site scripting vulnerability in /tablemanager/view/cuusergroups that allows an attacker to execute arbitrary web script or HTML via a specially crafted payload injected int...

PT-2022-37274 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the SfxEntry::add, AffixMgr::expand rootword, and SuggestMgr::ngsuggest functions. N...

OSV-2022-882 Use-of-uninitialized-value in SfxEntry::test_condition

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51218 Crash type: Use-of-uninitialized-value Crash state: SfxEntry::testcondition SfxEntry::add AffixMgr::expandrootword...

PT-2022-37273 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash reported by OSS-Fuzz, with a Segv on an unknown address. The crash occurs in the HashMgr class, specifically in the add...

CVE-2022-37403

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in Nikhil Vaghela's Add User Role plugin = 0.0.1 at WordPress...

CVE-2022-37403

CVE-2022-37403 affects the WordPress Add User Role plugin (versions

WordPress plugin Add User Role 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

PT-2022-7434 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the kmalloc function in the Linux kernel, which can fail due to out-of-memory conditions. If it fails, the function should return an error code errno instead of...