Lucene search
+L

6787 matches found

CNNVD
CNNVD
added 2021/11/05 12:0 a.m.10 views

SAMSUNG Flow 安全漏洞

SAMSUNG Flow is a software product from Samsung South Korea. It is used to enable a seamless, secure, and connected experience on devices. A security vulnerability exists in the SAMSUNG Flow mobile application prior to version 4.8.03.5, which can be exploited by an attacker to gain unauthorized...

5.7CVSS6AI score0.00286EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/11/05 12:0 a.m.6 views

PT-2021-23190 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier Description: The process of building the control flow graph for a TensorFlow model is...

5.5CVSS5.3AI score0.00181EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2021/11/05 12:0 a.m.12 views

Samsung Flow 输入验证错误漏洞

Samsung Flow is a software product from Samsung South Korea. It is used to enable a seamless, secure, and connected experience on devices. A security vulnerability exists in the Samsung Flow Windows application prior to version 4.8.5.0, which stems from a lack of input validation in the...

7.1CVSS7.1AI score0.0022EPSS
SaveExploits0References2
NVD
NVD
added 2021/11/02 4:15 p.m.15 views

CVE-2021-29738

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

5.5CVSS0.00467EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/02 4:15 p.m.6 views

CVE-2021-29737

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

7.5CVSS6.5AI score0.00671EPSS
SaveExploits0References2
NVD
NVD
added 2021/11/02 4:15 p.m.30 views

CVE-2021-29737

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

7.5CVSS0.00671EPSS
SaveExploits0References2
OSV
OSV
added 2021/11/02 4:15 p.m.5 views

CVE-2021-29738

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

5.4CVSS6.1AI score0.00467EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/02 4:15 p.m.19 views

Input validation

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

5CVSS7.3AI score0.00671EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/11/02 4:15 p.m.19 views

Server side request forgery (ssrf)

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

5.5CVSS5.2AI score0.00467EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/02 4:0 p.m.22 views

CVE-2021-29738

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

5.4CVSS5.4AI score0.00467EPSS
SaveExploits0References2
CVE
CVE
added 2021/11/02 4:0 p.m.58 views

CVE-2021-29738

The CVE-2021-29738 issue affects IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7), where a server-side request forgery (SSRF) vulnerability can allow an authenticated attacker to issue unauthorized requests from the system, potentially enabling network enumeration or re...

5.5CVSS5.3AI score0.00467EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/11/02 4:0 p.m.50 views

CVE-2021-29737

The CVE-2021-29737 entry relates to IBM InfoSphere Data Flow Designer Engine within IBM InfoSphere Information Server 11.7, which is affected by improper validation of the REST API server certificate. The IBM Security Bulletin and NVD entry confirm the affected component and describe a REST certi...

7.5CVSS7.3AI score0.00671EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/11/02 4:0 p.m.32 views

CVE-2021-29737

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

5.9CVSS7.3AI score0.00671EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/11/02 12:0 a.m.11 views

IBM InfoSphere DataStage Flow Designer Trust Management Issue Vulnerability

Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in Ibm InfoSphere DataStage Flow Designer that stems from an error in the validation of REST API server credentials by the IBM InfoSphere DataStage Flow Designer engine...

7.5CVSS6.6AI score0.00671EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.6 views

The vulnerability of the Leptonica image processing library, related to the implementation of an incorrect control flow, allows a hacker to trigger a service failure.

The vulnerability of the Leptonica image processing library is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.5CVSS7.2AI score0.02433EPSS
SaveExploits1References12Affected Software6
CNVD
CNVD
added 2021/11/02 12:0 a.m.11 views

IBM InfoSphere DataStage Flow Designer Code Issue Vulnerability

Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in IBM InfoSphere that allows an authenticated attacker to exploit the vulnerability to send unauthorized requests from the system, potentially resulting in network...

5.5CVSS6.3AI score0.00467EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/29 12:0 a.m.8 views

IBM InfoSphere DataStage Flow Designer 代码问题漏洞

Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in IBM InfoSphere that allows an authenticated attacker to exploit the vulnerability to send unauthorized requests from the system, potentially resulting in network...

5.5CVSS5.6AI score0.00467EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/10/29 12:0 a.m.6 views

IBM InfoSphere DataStage Flow Designer 信任管理问题漏洞

Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in Ibm InfoSphere DataStage Flow Designer that stems from an error in the validation of REST API server credentials by the IBM InfoSphere DataStage Flow Designer engine...

7.5CVSS5.5AI score0.00671EPSS
SaveExploits0References4
OSV
OSV
added 2021/10/27 1:15 a.m.7 views

CVE-2021-38450

The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software...

8.8CVSS7.4AI score0.00977EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/27 12:48 a.m.108 views

CVE-2021-38450

CVE-2021-38450 (Trane Tracer) is caused by improper sanitization of input containing code syntax, enabling code injection that could alter controller flow. Affected products and versions: Tracer SC (all versions before v4.4 SP7), Tracer SC+ (before v5.5 SP3), Tracer Concierge (before v5.5 SP3). I...

9.9CVSS9.2AI score0.00977EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder