3729 matches found
PYSEC-2024-139
Stack overflow in paddle.linalg.luunpackin PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage...
PT-2024-12757 · Unknown · Paddlepaddle
Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: This issue can cause a runtime crash and a denial of service. It is related to a flaw in the paddle.linalg.matrix rank function. Recommendations: For versions prior to 2.6.0, update to version...
CVE-2023-24609
Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server. An attacked device calculates an SHA-2 hash over at least 65 KB in RAM. With a large number of crafted TLS messages, the CPU...
Integer overflow
Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server. An attacked device calculates an SHA-2 hash over at least 65 KB in RAM. With a large number of crafted TLS messages, the CPU...
CVE-2023-24609
Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server. An attacked device calculates an SHA-2 hash over at least 65 KB in RAM. With a large number of crafted TLS messages, the CPU...
PT-2023-19708 · Rambus · Rambus Tls Toolkit
Name of the Vulnerable Software and Affected Versions: Matrix SSL versions 4.x through 4.6.0 Rambus TLS Toolkit affected versions not specified Description: The issue is related to a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server. This...
MatrixSSL Security Vulnerability
Inside Secure MatrixSSL is an embedded, open-source SSLv3 stack designed for small applications and devices from Inside Secure, France. A security vulnerability exists in Rambus TLS Toolkit, MatrixSSL versions 4.x through 4.6.0, which stems from a length-subtracting integer overflow in the parsin...
CVE-2023-24609
Matrix SSL versions 4.x–4.6.0 and Rambus TLS Toolkit are affected by a length-subtraction integer overflow in the TLS 1.3 server ClientHello PSK extension parsing. The overflow can cause an attacked device to compute an SHA-2 hash over at least 65 KB in RAM, leading to heavy CPU load when many cr...
The vulnerability of the Password Change function in the microprogrammed control access controller SmartGard Silver with Matrix Keyboard allows a intruder to disclose the protected information.
The vulnerability of the Password Change function in the microprogrammed access control device SmartGard Silver with Matrix Keyboard involves the transmission of critical information in plaintext. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose the protected...
The vulnerability of the SQL Query component of the microprogramming software for the programmable access controller SmartGard Silver with Matrix Keyboard allows a intruder to disclose protected information.
The vulnerability of the SQL Query component of the microprogramming system used in SmartGard Silver access controllers with matrix keyboards is related to the transmission of critical information in open text. Exploiting this vulnerability could allow a malicious actor to disclose the protected...
CVE-2023-47685
Cross-Site Request Forgery CSRF vulnerability in Lukman Nakib Preloader Matrix.This issue affects Preloader Matrix: from n/a through 2.0.1...
CVE-2023-47685
Cross-Site Request Forgery CSRF vulnerability in Lukman Nakib Preloader Matrix.This issue affects Preloader Matrix: from n/a through 2.0.1...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Lukman Nakib Preloader Matrix.This issue affects Preloader Matrix: from n/a through 2.0.1...
CVE-2023-47685 WordPress Preloader Matrix Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Lukman Nakib Preloader Matrix.This issue affects Preloader Matrix: from n/a through 2.0.1...
CVE-2023-47685 WordPress Preloader Matrix Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Lukman Nakib Preloader Matrix.This issue affects Preloader Matrix: from n/a through 2.0.1...
CVE-2023-47685
CVE-2023-47685 : WordPress plugin Preloader Matrix (versions n/a–2.0.1) is documented as a CSRF vulnerability caused by missing nonce validation in handleEndPoint(). Exploitation could allow unauthenticated attackers to modify plugin settings via forged requests. Status in provided sources indica...
WordPress Plugin Preloader Matrix Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...
PT-2023-30565 · Unknown · Lukman Nakib Preloader Matrix
Name of the Vulnerable Software and Affected Versions: Lukman Nakib Preloader Matrix versions n/a through 2.0.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...
Scattered Spider
SUMMARY The Federal Bureau of Investigation FBI and Cybersecurity and Infrastructure Security Agency CISA are releasing this joint Cybersecurity Advisory CSA in response to recent activity by Scattered Spider threat actors against the commercial facilities sectors and subsectors. This advisory...
[SECURITY] Fedora 38 Update: matrix-synapse-1.95.1-1.fc38
Matrix is an ambitious new ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference "homeserver" implementation of Matrix from the core development team at matrix.org, written in Python/Twisted. It is intended to showcase the concept of Matrix and let folks see the spec in...