2487 matches found
SUSE CVE-2022-29212
TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, certain TFLite models that were created using TFLite model converter would crash when loaded in the TFLite interpreter. The culprit is that during quantization the scale of values could b...
SUSE CVE-2022-36027
TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. We have patched the issue in GitHub commit aa0b852a4588cea4d36b74feb05d93055540b450. The fix will be...
CVE-2023-24813
Dompdf is an HTML to PDF converter written in php. Due to the difference in the attribute parser of Dompdf and php-svg-lib, an attacker can still call arbitrary URLs with arbitrary protocols. Dompdf parses the href attribute of image tags and respects xlink:href even if href is specified. However...
CVE-2023-24813
Dompdf (PHP HTML‑to‑PDF) has two CVEs (CVE-2023-23924 and CVE-2023-24813) related to SVG parsing. The root cause is inconsistent attribute parsing between Dompdf and php-svg-lib: Dompdf considers xlink:href when present, but php-svg-lib also reads href, allowing an empty xlink:href to bypass prot...
CVE-2023-23924
Dompdf 2.0.1 is vulnerable to URI validation bypass during SVG parsing. If an attacker provides an SVG containing an tag with uppercase letters, the parser may bypass protection and allow arbitrary URL calls via the phar wrapper. In PHP
CVE-2023-23924
Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing tags with uppercase letters. This may lead to arbitrary object unserialize on PHP 8, through the phar URL wrapper. An attacker can exploit the vulnerability to call arbitrary URL with...
Kerberos ticket converter
This module converts tickets to the ccache format from the kirbi format and vice versa. Module Options msf use auxiliary/admin/kerberos/ticketconverter msf auxiliaryticketconverter show actions ...actions... msf auxiliaryticketconverter set ACTION msf auxiliaryticketconverter show options ...show...
UBUNTU-CVE-2023-22457
CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he CKEditor.HTMLConverter document lacked a protection against Cross-Site Request Forgery CSRF, allowing to execute macros with the rights of the current user. If a privileged user with...
PT-2023-4802 · Unknown · Ckeditor Integration Ui +1
Name of the Vulnerable Software and Affected Versions: CKEditor Integration UI versions prior to 1.64.3 XWiki Platform versions prior to 14.6 RC1 Description: The issue is related to insufficient authentication checks for executed requests in the CKEditor integration interface of the XWiki...
AimOne Video Converter V2.04 Build 103 Denial of Service Exploit
Exploit Title: AimOne Video Converter V2.04 Build 103 Denial of Service Exploit Date: 30.12.2022 Vendor Homepage:www.aimonesoft.com Software Link: https://aimone-video-converter.software.informer.com/download/downloading Exploit Author: Achilles Tested Version: v2.04 Tested on: Windows 7 x64 1.-...
CVE-2022-44283
AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...
CVE-2022-44283
AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...
Buffer overflow
AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...
CVE-2022-44283
AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...
CVE-2022-44283
AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...
AVS4YOU AVS Audio Converter 安全漏洞
AVS4YOU AVS Audio Converter is a software application from AVS4YOU Inc. It is used to convert audio files from one format to another according to your wishes and save them to your hard drive. A security vulnerability exists in AVS4YOU AVS Audio Converter version 10.3 that stems from vulnerability...
CVE-2022-44283
CVE-2022-44283 affects AVS Audio Converter 10.3 and is described as a buffer overflow. Public metrics indicate a critical impact (CVSS v3.1: 9.8, HIGH confidentiality/Integrity/Availability, NETWORK attack vector, no user interaction). The vulnerability targets a component/stream handling within ...
PT-2022-27166 · Unknown · Avs Audio Converter
Name of the Vulnerable Software and Affected Versions: AVS Audio Converter version 10.3 Description: The issue is related to a Buffer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
Missing Authorization in Filter Stream Converter Application of XWiki-platform
Impact The application allow anyone with view access to modify any page of the wiki by importing a crafted XAR package. Patches The problem has been patched in XWiki 14.6RC1, 14.6 and 13.10.8. Workarounds The problem can be patched immediately by setting the right of the page Filter.WebHome and...
The vulnerability of the microprogrammed software of the Moxa NE-4100T serial interface converter lies in the lack of authentication procedures, which allows attackers to circumvent existing security restrictions.
The vulnerability of the Microprogrammed Software for Serial Interface Converters Moxa NE-4100T is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...