7582 matches found
Google TensorFlow 安全漏洞
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google. A security vulnerability exists in Google TensorFlow, which stems from an assertion failure given by Unbatch when it receives a non-scalar input id, which could trigger a denial-of-service attack. T...
CVE-2022-36159
creationtimestamp| type| source ---|---|--- 2022-09-15 15:19:29+00:00| seen| https://t.me/truesecator/3425 2022-09-20 16:35:14+00:00| seen| https://t.me/icscert/607 2022-09-21 19:28:48+00:00| seen| https://t.me/icscert/608 2022-09-26 14:22:26+00:00| seen| https://t.me/cibsecurity/50460...
CVE-2022-40137
creationtimestamp| type| source ---|---|--- 2022-09-15 13:07:32+00:00| seen| https://t.me/codebysec/6575 2025-03-27 15:26:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9112 2026-07-26 02:02:40+00:00| seen| https://t.me/EchelonEyes/681 2026-07-27 00:01:16+00:00| seen|...
CVE-2022-34831
An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to possible inconsistencies in DNS identifiers submitted in an ACME order and the corresponding CSR submitted during finalization. During the ACME enrollment process, an order is submitted containing an identifier for one o...
Input validation
An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to possible inconsistencies in DNS identifiers submitted in an ACME order and the corresponding CSR submitted during finalization. During the ACME enrollment process, an order is submitted containing an identifier for one o...
CVE-2022-34831
An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to possible inconsistencies in DNS identifiers submitted in an ACME order and the corresponding CSR submitted during finalization. During the ACME enrollment process, an order is submitted containing an identifier for one o...
CVE-2022-34831
Keyfactor PrimeKey EJBCA (before 7.9.0) is vulnerable to an ACME-related issue where, after DNS identifiers are validated in the ACME challenge, a non‑compliant client can add extra dnsNames in the CSR at finalize, causing EJBCA to issue a certificate containing unvalidated identifiers. This bypa...
Primekey Solutions PrimeKey EJBCA 信任管理问题漏洞
Primekey Solutions PrimeKey EJBCA is a full-featured CA system software from Primekey Solutions, Sweden. The software is used for domain certificate management, enrollment and enrollment-to-certificate validation and other functions to achieve access security. A security vulnerability in Primekey...
PT-2022-23192 · Shopware · Shopware
Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 5.7.15 Description: The request for the customer detail view in the backend administration contained sensitive data like the hashed password and the session ID. There are no known workarounds for this issue...
PT-2022-23678 · Unknown · Waterplugin
Name of the Vulnerable Software and Affected Versions: Waterplugin versions prior to 2.2.11.22040751 Description: The issue is related to improper handling of insufficient permissions or privileges, allowing an attacker to access sensitive device information, including the IMEI and Serial number...
The vulnerability of extension XEP-0308: Last Message Correction for the Jabber/XMPP client Gajim, which allows a violator to trigger a service failure.
The vulnerability of extension XEP-0308, “Last Message Correction” for the Jabber/XMPP client Gajim, is related to insufficient validation of input data during the verification of message identifiers in a multi-user chat. Exploiting this vulnerability can allow a malicious actor, operating...
OpenJDK: Multiple Vulnerabilities
Background OpenJDK is an open source implementation of the Java programming language. Description Multiple vulnerabilities have been discovered in OpenJDK. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround...
CVE-2021-39324
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2022-0844
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2022-38127
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Oracle VirtualBox: Multiple Vulnerabilities
Background VirtualBox is a powerful virtualization product from Oracle. Description Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no...
CVE-2022-0644
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2022-3019
The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see bruteforcing comment id's might also be an option but I wouldn't count on it, since it would take a long time to find a valid one...