PT-2023-4016 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server versions 10.5, 11.1, and 11.5 Description: The issue is related to insufficient input validation in the database management system, which can be exploited by a remote attacker to...

PT-2023-6619 · Oracle +1 · Java +1

Name of the Vulnerable Software and Affected Versions: Adobe LiveCycle ES4 versions 11.0 and earlier Adobe LiveCycle ES4 version 11.0.1 and later with Java environment 7u21 and earlier Description: A Java insecure deserialization vulnerability allows unauthenticated remote attackers to gain...

Adobe LiveCycle ES4 代码问题漏洞

Adobe LiveCycle ES4 is a solution comprised of related assets from Audobee Adobe USA. A security vulnerability exists in Adobe LiveCycle ES4 version 11.0 and earlier, which stems from the presence of a deserialization vulnerability...

Genetec Security Center SQL注入漏洞

Genetec Security Center is a unified security platform from Genetec. Connect your security systems, sensors and data in one interface to streamline your operations. A security vulnerability exists in Genetec Security Center version 5.11.2 that stems from a SQL injection vulnerability in the...

PT-2023-17878 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a missing bounds check in the nci snd set routing cmd function of nci hmsgs.cc, which could lead to a possible out of bounds write. This might result in remot...

NVIDIA GPU Display Driver 安全漏洞

NVIDIA GPU Display Driver is a driver from NVIDIA Corporation that is used to interactively support the graphics card display module in the operating system. A security vulnerability exists in NVIDIA GPU Display Driver that originates from a denial of service or information disclosure. Affected...

NVIDIA GPU Display Driver for Windows 安全漏洞

NVIDIA GPU Display Driver for Windows is a driver software from NVIDIA Corporation that is used for interactive support of graphics card display modules in Windows systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from not properly checking memory permissions,...

NVIDIA GPU Display Driver for Linux 缓冲区错误漏洞

NVIDIA GPU Display Driver for Linux is a driver from NVIDIA Corporation that is used for interactive support of graphics card display modules in Linux systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from the presence of an out-of-bounds write, which could lea...

SUSE CVE-2022-48434

libavcodec/pthreadframe.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances e.g., hardware re-initialization upon a mid-video SPS change when...

PT-2023-21440 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 14.3 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 Description: The issue allows a sandboxed app to collect system logs. This was addressed with improved entitlements. Recommendations:...

CVE-2022-48434

libavcodec/pthreadframe.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances e.g., hardware re-initialization upon a mid-video SPS change when...

DEBIAN-CVE-2022-48434

libavcodec/pthreadframe.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances e.g., hardware re-initialization upon a mid-video SPS change when...

Rocket Software UniData 和 UniVerse 缓冲区错误漏洞

Rocket Software UniVerse and Rocket Software UniData are both products of Rocket Software, Inc. Rocket Software UniVerse is a suite of database management and support software now owned by Rocket Software. Software UniData is a MultiValue application platform. Rocket Software UniData is a...

SUSE CVE-2023-25673

TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

SUSE CVE-2023-27579

TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater filterinputchannel of less than 1 gives a FPE. This issue has been patched in version 2.12. TensorFlow will also cherrypick the fix commit on TensorFlow 2.11.1...

PT-2023-21436 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 15.7.4 iPadOS versions prior to 15.7.4 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 Description: A validation issue was addressed with improved input...

AZL-31215 CVE-2023-25663 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when ctx-stepcontainter is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in TensorFlow 2.12.0 and 2.11.1...

AZL-35305 CVE-2023-25659 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the parameter indices for DynamicStitch does not match the shape of the parameter data, it can trigger an stack OOB read. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

AZL-31209 CVE-2023-25662 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 are vulnerable to integer overflow in EditDistance. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

AZL-35312 CVE-2023-25667 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when 2^31 = numframes height width channels 2^32, for example Full HD screencast of at least 346 frames. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...