12101 matches found
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in WavPack ( CVE-2021-44269)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in WavPack, caused by a heap out-of-bounds read flaw in WavpackPackSamples function in src/packutils.c CVE-2021-44269. WavPack is included as part of the runtimes in our service. This...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow (CVE-2023-25658)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in TensorFlow, caused by an out-of-bounds read in GRUBlockCellGrad CVE-2023-25658. TensorFlow is included as part of the runtimes in our service. This vulnerabilitiy has been addressed...
Missing Authorization
github.com/mattermost/mattermost-server is vulnerable to Missing Authorization. The vulnerability exists because the library does not verify whether the requestor is a system admin or not before allowing install requests to the Apps, allowing regular users to send malicious install requests to th...
Google Pixel competition condition issue vulnerabilities
Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in installKey in KeyUtil.cpp, where file encryption may fail due to a competitive condition, which could lead to local information disclosure...
CVE-2023-25307
nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...
Directory traversal
nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...
CVE-2023-25307
nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...
CVE-2023-25307: Improper Limitation of a Pathname to a Restricted Directory
nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...
mrpack-install path traversal vulnerability
mrpack-install is a cli application for installing Minecraft servers and Modrinth modpacks by Florian H. Individual developer. A security vulnerability exists in mrpack-install version 0.16.2 and earlier versions, which stems from the presence of a path traversal vulnerability...
CVE-2023-25307
nothub mrpack-install = v0.16.2 is vulnerable to Directory Traversal...
CVE-2023-25307
CVE-2023-25307 affects the command‑line tool nothub/mrpack-install, specifically versions
fuadmin vulnerable to insecure file upload
funadmin v3.3.2 and v3.3.3 are vulnerable to insecure file upload via the plugins install...
GHSA-5M3M-Q8CQ-77G4 fuadmin vulnerable to insecure file upload
funadmin v3.3.2 and v3.3.3 are vulnerable to insecure file upload via the plugins install...
CVE-2023-36097
funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install...
Design/Logic Flaw
funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install...
CVE-2023-36097
funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install...
CVE-2023-36097
CVE-2023-36097 affects FunAdmin v3.3.2 and v3.3.3. The issue is an insecure file upload in the plugin installation process, caused by insufficient validation/restrictions on uploaded plugin files. This vulnerability allows an attacker to upload malicious files via the local install mechanism, pot...
PT-2023-25428
Name of the Vulnerable Software and Affected Versions funadmin versions 3.3.2 through 3.3.3 Description The issue concerns insecure file upload via the plugins install. Recommendations For versions 3.3.2 and 3.3.3, consider disabling the plugins install feature until a patch is available. Restric...
Ubuntu: Security Advisory (USN-6170-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...