PT-2023-9520 · Openlink +4 · Openlink Virtuoso-Opensource +4

Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.9 Description: The issue in the nss database lookup component of openlink virtuoso-opensource is related to the improper neutralization of special elements used in SQL commands, allowing attackers to...

NetworkManager bug fix and enhancement update

An update is available for NetworkManager. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list NetworkManager is a system network service that manages network device...

SUSE-SU-2023:1792-1 Security update for go1.19

This update for go1.19 fixes the following issues: Update to 1.19.8 CVE-2023-24534: security: net/http, net/textproto: denial of service from excessive memory allocation bsc1210127 CVE-2023-24536: security: net/http, net/textproto, mime/multipart: denial of service from excessive resource...

SUSE-SU-2023:1791-1 Security update for go1.20

This update for go1.20 fixes the following issues: Update to version 1.20.3: CVE-2023-24534: security: net/http, net/textproto: denial of service from excessive memory allocation bsc1210127 CVE-2023-24536: security: net/http, net/textproto, mime/multipart: denial of service from excessive resourc...

SUSE CVE-2021-43314

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368...

SUSE CVE-2021-43317

A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404...

Aero CMS 0.0.1 Remote Shell Upload

Exploit Title: Aero CMS v0.0.1 - PHP Code Injection auth Date: 15/10/2022 Exploit Author: Hubert Wojciechowski Contact Author: [email protected] Vendor Homepage: https://github.com/MegaTKC/AeroCMS Software Link: https://github.com/MegaTKC/AeroCMS Version: 0.0.1 Testeted on: Windows 10 using...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and iPadOS that originates from viewing photos belonging to a hidden album...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to the generic pointer p pointing to an inaccessible address in the getle32 function. The problem is essentially caused in PackLinuxElf64::elflookup at plxelf.cpp:5404. Remediation Upgrade upx to version...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to the generic pointer p pointing to an inaccessible address in the getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5368. Remediation Upgrade upx to version 4.2.1 or...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to the generic pointer 'p' points to an inaccessible address in the getle32 function. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349. Remediation Upgrade upx to version...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference. When ctx-stepcontainter is a null ptr, the Lookup function will be executed with a null pointer. PoC import tensorflow as tf tf.rawops.TensorArrayConcatV2handle='a', 'b', flowin = 0.1, dtype=tf.int32,...

AZL-35308 CVE-2023-25663 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when ctx-stepcontainter is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in TensorFlow 2.12.0 and 2.11.1...

AZL-35317 CVE-2023-25672 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. The function tf.rawops.LookupTableImportV2 cannot handle scalars in the values parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

AZL-31210 CVE-2023-25672 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. The function tf.rawops.LookupTableImportV2 cannot handle scalars in the values parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

Google TensorFlow 代码问题漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. A code issue vulnerability exists in TensorFlow version 2.12 prior to version 2.12.0 and version 2.11 prior to version 2.11.1, which stems from the inability of the functi...

Google TensorFlow 代码问题漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. A code issue vulnerability exists in Google TensorFlow version 2.12 prior to version 2.12.0 and version 2.11 prior to version 2.11.1, which stems from the Lookup function...

SUSE SLED15: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2023:1571-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:1571-1 advisory. Update to version 3.11.1 bsc1208084: - CVE-2023-25165: Fixed a information disclosure problem via...

CVE-2023-25663

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when ctx-stepcontainter is a null ptr, the Lookup function will be executed with a null pointer. A fix is included in TensorFlow 2.12.0 and 2.11.1...

CVE-2023-25672

TensorFlow is an open source platform for machine learning. The function tf.rawops.LookupTableImportV2 cannot handle scalars in the values parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...