Lucene search
+L

3716 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2021/08/25 12:0 a.m.10 views

Free of uninitialized memory in adtensor

An issue was discovered in the adtensor crate through 0.0.3 for Rust. There is a drop of uninitialized memory via the FromIterator implementation for Vector and Matrix...

9.8CVSS7.2AI score0.01326EPSS
SaveExploits1References5Affected Software1
FreeBSD
FreeBSD
added 2021/08/23 12:0 a.m.39 views

Matrix clients -- several vulnerabilities

Matrix developers report: Today we are disclosing a critical security issue affecting multiple Matrix clients and libraries including Element Web/Desktop/Android, FluffyChat, Nheko, Cinny, and SchildiChat. Specifically, in certain circumstances it may be possible to trick vulnerable clients into...

5.9CVSS0.7AI score0.00662EPSS
SaveExploits0References1
PyPA
PyPA
added 2021/08/12 9:15 p.m.8 views

PYSEC-2021-571

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type tf.rawops.MatrixSetDiagV. The implementation has incomplete validation that the value of k is a...

7.8CVSS7.1AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.10 views

PYSEC-2021-769

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type tf.rawops.MatrixSetDiagV. The implementation has incomplete validation that the value of k is a...

7.8CVSS7.1AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.6 views

PYSEC-2021-768

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type tf.rawops.MatrixDiagV. The implementation has incomplete validation that the value of k is a valid...

7.8CVSS7.1AI score0.00167EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/08/12 9:15 p.m.8 views

PYSEC-2021-768

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type tf.rawops.MatrixDiagV. The implementation has incomplete validation that the value of k is a valid...

7.8CVSS6AI score0.00167EPSS
SaveExploits0References2
OSV
OSV
added 2021/08/12 9:15 p.m.9 views

PYSEC-2021-280

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type tf.rawops.MatrixSetDiagV. The implementation has incomplete validation that the value of k is a...

7.8CVSS6.6AI score0.00167EPSS
SaveExploits0References2
PyPA
PyPA
added 2021/08/12 7:15 p.m.8 views

PYSEC-2021-754

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS7.2AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.7 views

PYSEC-2021-265

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS7.2AI score0.0016EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/08/12 7:15 p.m.7 views

CVE-2021-37643

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS5.9AI score0.0016EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.7 views

PYSEC-2021-556

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS7.2AI score0.0016EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/08/12 7:15 p.m.6 views

PYSEC-2021-754

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS6.1AI score0.0016EPSS
SaveExploits0References2
OSV
OSV
added 2021/08/12 7:15 p.m.6 views

PYSEC-2021-265

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS6.6AI score0.0016EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2021/08/12 6:10 p.m.6 views

CVE-2021-37643

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS7.2AI score0.0016EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/08/12 12:0 a.m.10 views

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow, which could be exploited by an attacker to bind a reference to a null pointer in all operations of type tf.rawops.MatrixSetDiagV to cause undefined...

7.8CVSS5.3AI score0.00167EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/08/12 12:0 a.m.8 views

PT-2021-21774 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: An attacker can cause undefined behavior via binding a reference to null pointer...

9.3CVSS5.8AI score0.00451EPSS
SaveExploits5References88
CNNVD
CNNVD
added 2021/08/12 12:0 a.m.9 views

Google TensorFlow缓冲区错误漏洞

Google TensorFlow is an end-to-end open-source platform for machine learning from Google, Inc. A security vulnerability exists in Google TensorFlow, which could be exploited by an attacker to bind a reference to a null pointer in all operations of type "tf.rawops.MatrixDiagV" to cause undefined...

7.8CVSS5.3AI score0.00167EPSS
SaveExploits0References4
Microsoft KB
Microsoft KB
added 2021/08/10 7:0 a.m.89 views

Cumulative Update 26 for Microsoft Dynamics 365 Business Central April'19 on-premises (Application Build 14.27.47563, Platform Build 14.0.47540)

None None...

5.4CVSS6.4AI score0.0095EPSS
SaveExploits0
OSV
OSV
added 2021/08/08 6:15 a.m.7 views

CVE-2020-36432

An issue was discovered in the algds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new...

9.8CVSS7.3AI score0.0123EPSS
SaveExploits0References2
NVD
NVD
added 2021/08/08 6:15 a.m.26 views

CVE-2020-36432

An issue was discovered in the algds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new...

9.8CVSS0.0123EPSS
SaveExploits0References2
Rows per page
Query Builder