Lucene search
+L

6009 matches found

CNNVD
CNNVD
added 2021/11/05 12:00 a.m.11 views

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow, an end-to-end open source machine learning platform, suffers from a heap out-of-bounds access vulnerability in the SparseBinCount implementation in versions prior to TensorFlow 2.7.0. The vulnerability stems from missing validation between the elements of the values parameter a...

7.1CVSS5.6AI score0.00201EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2021/11/03 8:57 a.m.9 views

QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting i...

7.5CVSS6.8AI score0.00522EPSS
SaveExploits0References4
OSV
OSV
added 2021/10/28 1:53 p.m.15 views

GSD-2021-1001872 kunit: fix reference count leak in kfree_at_end

kunit: fix reference count leak in kfreeatend This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.15 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/10/28 1:51 p.m.12 views

GSD-2021-1001839 mm, slub: fix mismatch between reconstructed freelist depth and cnt

mm, slub: fix mismatch between reconstructed freelist depth and cnt This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.76 by commit...

7.2AI score
SaveExploits0
NVD
NVD
added 2021/10/20 7:15 a.m.25 views

CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

8.4CVSS0.00165EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/20 7:15 a.m.24 views

Integer overflow

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

7.2CVSS7.7AI score0.00165EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/20 7:15 a.m.22 views

Buffer overflow

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity...

6.4CVSS9.2AI score0.00611EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/20 7:15 a.m.8 views

CVE-2021-1949

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables...

8.4CVSS7.6AI score0.00165EPSS
SaveExploits0References2
CVE
CVE
added 2021/10/20 6:31 a.m.65 views

CVE-2021-1949

This CVE (CVE-2021-1949) concerns an integer overflow in Qualcomm Snapdragon components when sanitizer is enabled, stemming from an improper check of the batch count value. Affected products include Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Voice & Music, and Wearables...

8.4CVSS7.7AI score0.00165EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/10/04 12:00 a.m.12 views

多款Qualcomm产品输入验证错误漏洞

The Qualcomm QCA6574AU and others are products of Qualcomm Incorporated Qualcomm, U.S.A. The QCA6574AU is a central processing unit CPU product.The SDX24 is a modem.The SDX55 is a modem. An input validation error vulnerability exists in multiple Qualcomm products, which stems from an integer...

8.4CVSS7.8AI score0.00165EPSS
SaveExploits0References6
OSV
OSV
added 2021/09/27 2:15 p.m.7 views

CVE-2021-34415

The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in incoming network packets, which leads to exhaustion of resources and system crash...

7.5CVSS7.1AI score0.00978EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/09/27 2:15 p.m.9 views

CVE-2021-34415

The Zone Controller service in the Zoom On-Premise Meeting Connector Controller before version 4.6.358.20210205 does not verify the cnt field sent in incoming network packets, which leads to exhaustion of resources and system crash...

7.8CVSS7AI score0.00978EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/09/23 12:00 a.m.4 views

PT-2024-11427

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a pin count leak in the gart.bo module of the Linux kernel's amdgpu driver. Specifically, the function gmc v9,10 0 gart disable is not called when matched with th...

5.5CVSS5.8AI score0.00222EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/09/09 8:15 a.m.7 views

CVE-2021-1963

Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

6.7CVSS6.6AI score0.0015EPSS
SaveExploits0References2
CVE
CVE
added 2021/09/09 7:36 a.m.95 views

CVE-2021-1963

CVE-2021-1963 describes a use-after-free in the IPA driver of Qualcomm Snapdragon SoCs (across Snapdragon Auto/Compute/Connectivity/IoT/Wearables families) caused by insufficient validation of the rule count in the filter table. The issue affects kernel components and is documented with a CVSS v3...

6.7CVSS6.7AI score0.0015EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:53 p.m.22 views

Use of Uninitialized Resource in ms3d

Affected versions of this crate passes an uninitialized buffer to a user-provided Read implementation. Arbitrary Read implementations can read from the uninitialized buffer memory exposure and also can return incorrect number of bytes written to the buffer. Reading from uninitialized memory...

7.5CVSS7.2AI score0.01557EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/08/25 2:43 p.m.10 views

GHSA-M7FM-4JFH-JRG6 Use after free in boosted trees creation

Impact The implementation for tf.rawops.BoostedTreesCreateEnsemble can result in a use after free error if an attacker supplies specially crafted arguments: python import tensorflow as tf v= tf.Variable0.0 tf.rawops.BoostedTreesCreateEnsemble treeensemblehandle=v.handle, stamptoken=0,...

8.5CVSS6.4AI score0.00173EPSS
SaveExploits0References7
CNVD
CNVD
added 2021/08/11 12:00 a.m.25 views

WordPress Cross-Site Scripting Vulnerability (CNVD-2021-61431)

WordPress is the WordPress Wordpress Foundation's set of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in the Page View Count plugin for WordPress prior to 2.4.9, which fails to escape the postid parameter of the pvcstats shortcode, allowing user...

5.4CVSS0.9AI score0.00624EPSS
SaveExploits2References1
OSV
OSV
added 2021/08/09 10:15 a.m.8 views

CVE-2021-24509

The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvcstats shortcode, allowing users with a role as low as Contributor to perform Stored XSS attacks. A post made by a contributor would still have to be approved by an admin to have the XSS triggered in the...

5.4CVSS6AI score0.00624EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2021/08/09 10:15 a.m.4 views

CVE-2021-24509

The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvcstats shortcode, allowing users with a role as low as Contributor to perform Stored XSS attacks. A post made by a contributor would still have to be approved by an admin to have the XSS triggered in the...

5.4CVSS6AI score0.00624EPSS
SaveExploits2References2
Rows per page
Query Builder