Lucene search
+L

7292 matches found

OSV
OSV
added 2023/04/21 8:11 p.m.25 views

CVE-2023-30620 Arbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdb

mindsdb is a Machine Learning platform to help developers build AI solutions. In affected versions an unsafe extraction is being performed using tarfile.extractall from a remotely retrieved tarball. Which may lead to the writing of the extracted files to an unintended location. Sometimes, the...

7.5CVSS7.2AI score
SaveExploits0References5
Citrix
Citrix
added 2023/04/20 12:00 a.m.10 views

AppFW (WAF) Learning not working anymore

The learning for WAF features is not working anymore, no new data is learned. Even after cleaning the AppFW learning data CLI command 'reset appfw learningdata', WAF learning is not working as no new data is learned...

7.3AI score
SaveExploits0
Patchstack
Patchstack
added 2023/04/19 12:00 a.m.19 views

WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection

Software The School Management – Education & Learning Management Type Plugin Vulnerable versions = 4.1 Fixed in 4.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-47430 Patch priority Low CVSS severity Low 6.7 Developer Claim ownership PSID 25a7149a9ecc Credits minhtuanact...

9.8CVSS7.2AI score0.00681EPSS
SaveExploits0References2Affected Software1
Schneier on Security
Schneier on Security
added 2023/04/18 11:19 a.m.19 views

Using LLMs to Create Bioweapons

Im not sure there are good ways to build guardrails to prevent this sort of thing: There is growing concern regarding the potential misuse of molecular machine learning models for harmful purposes. Specifically, the dual-use application of models for predicting cytotoxicity18 to create new poison...

6.7AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2023/04/18 4:00 a.m.44 views

Swatting-as-a-Service is a growing and complicated problem to solve

One Telegram channel has been found to be behind a great deal of swatting incidents in the US. Using the anonymity provided by Telegram, caller ID spoofing, and voices generated by Artificial Intelligence AI, a person or group of persons calling themselves Torswats is suspected to be behind dozen...

6.4AI score
SaveExploits0
OSV
OSV
added 2023/04/17 10:15 p.m.9 views

CVE-2023-28984

A Use After Free vulnerability in the Layer 2 Address Learning Manager l2alm of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet Forwarding Engine to crash and restart, leading to a Denial of Service DoS. The PFE may crash when a lot of MAC learning and agin...

5.3CVSS6.1AI score0.00212EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/04/17 12:00 a.m.12 views

CVE-2023-28984 Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged

A Use After Free vulnerability in the Layer 2 Address Learning Manager l2alm of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet Forwarding Engine to crash and restart, leading to a Denial of Service DoS. The PFE may crash when a lot of MAC learning and agin...

5.3CVSS6.9AI score0.00212EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/17 12:00 a.m.28 views

CVE-2023-28984 Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged

A Use After Free vulnerability in the Layer 2 Address Learning Manager l2alm of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet Forwarding Engine to crash and restart, leading to a Denial of Service DoS. The PFE may crash when a lot of MAC learning and agin...

5.3CVSS5.7AI score0.00212EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2023/04/15 12:30 p.m.35 views

GVision - A Reverse Image Search App That Use Google Cloud Vision API To Detect Landmarks And Web Entities From Images, Helping You Gather Valuable Information Quickly And Easily

GVision is a reverse image search app that use Google Cloud Vision API to detect landmarks and web entities from images, helping you gather valuable information quickly and easily. About Google Cloud Vision API Google Cloud Vision API is a machine learning-powered image analysis service that...

6.9AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/04/14 12:00 a.m.23 views

FreeBSD : py-tflite -- denial of service vulnerability (d82bcd2b-5cd6-421c-8179-b3ff0231029f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d82bcd2b-5cd6-421c-8179-b3ff0231029f advisory. - TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attack...

7.8CVSS5.3AI score0.00165EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/04/14 12:00 a.m.34 views

FreeBSD : py-tflite -- buffer overflow vulnerability (326b2f3e-6fc7-4661-955d-a772760db9cf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 326b2f3e-6fc7-4661-955d-a772760db9cf advisory. - TensorFlow is an open source platform for machine learning. The reference kernel of the CONV3DTRANSPO...

8.1CVSS8.2AI score0.00542EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2023/04/14 12:00 a.m.25 views

FreeBSD : py-tensorflow -- denial of service vulnerability (ae132c6c-d716-11ed-956f-7054d21a9e2a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ae132c6c-d716-11ed-956f-7054d21a9e2a advisory. - TensorFlow is an open source platform for machine learning. The implementation of...

7.5CVSS7.3AI score0.00471EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2023/04/13 12:00 a.m.31 views

Juniper Junos OS Vulnerability (JSA70610)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70610 advisory. - A Use After Free vulnerability in the Layer 2 Address Learning Manager l2alm of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet...

5.3CVSS5.8AI score0.00212EPSS
SaveExploits0References5
NVD
NVD
added 2023/04/11 9:15 p.m.31 views

CVE-2023-28312

Azure Machine Learning Information Disclosure Vulnerability...

6.5CVSS6.4AI score0.01752EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/11 9:15 p.m.11 views

CVE-2023-28312

Azure Machine Learning Information Disclosure Vulnerability...

6.5CVSS7.3AI score0.01752EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/11 9:15 p.m.17 views

Information disclosure

Azure Machine Learning Information Disclosure Vulnerability...

3.3CVSS6.4AI score0.01752EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/11 7:14 p.m.18 views

CVE-2023-28312 Azure Machine Learning Information Disclosure Vulnerability

...

6.5CVSS6.8AI score0.01752EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/04/11 7:14 p.m.46 views

CVE-2023-28312 Azure Machine Learning Information Disclosure Vulnerability

...

6.5CVSS6.9AI score0.01752EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/11 7:14 p.m.118 views

CVE-2023-28312

CVE-2023-28312 affects Azure Machine Learning. It is an information-disclosure vulnerability in the Azure Machine Learning component that can allow an attacker located in the same secured network (attack vector: adjacent) to access system logs or sensitive data. The CVSSv3.1 base score is 6.5 (ME...

6.5CVSS6.4AI score0.01752EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
added 2023/04/11 7:00 a.m.37 views

Azure Machine Learning Information Disclosure Vulnerability

...

6.5CVSS7AI score0.01752EPSS
SaveExploits0
Rows per page
Query Builder