13895 matches found
Gradio Command Injection Vulnerability
Gradio is an open source Python library that is a way to demonstrate machine learning models through a friendly web interface. Gradio suffers from a command injection vulnerability that stems from the application exposing sensitive information to unauthorized participants...
CVE-2023-46247
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine EVM. Contracts containing large arrays might underallocate the number of slots they need by 1. Prior to v0.3.8, the calculation to determine how many slots a storage variable needed used math.ceiltype.sizeinbytes / 32. T...
Design/Logic Flaw
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine EVM. Contracts containing large arrays might underallocate the number of slots they need by 1. Prior to v0.3.8, the calculation to determine how many slots a storage variable needed used math.ceiltype.sizeinbytes / 32. T...
CVE-2023-46247 Vyper has incorrect storage layout for contracts containing large arrays
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine EVM. Contracts containing large arrays might underallocate the number of slots they need by 1. Prior to v0.3.8, the calculation to determine how many slots a storage variable needed used math.ceiltype.sizeinbytes / 32. T...
CVE-2023-46247: Off-by-one Error
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine EVM. Contracts containing large arrays might underallocate the number of slots they need by 1. Prior to v0.3.8, the calculation to determine how many slots a storage variable needed used math.ceiltype.sizeinbytes / 32. T...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges, gain access to sensitive data, or to impersonate another user via a cross-site scripting attack. Such an attack can lead to execution of...
Exposure of Sensitive Information in mltable
Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability...
GHSA-M5PC-86X8-WCXG Exposure of Sensitive Information in mltable
Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability...
CVE-2023-35624
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
CVE-2023-35625
Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability...
CVE-2023-35624
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
CVE-2023-35624
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
CVE-2023-35625
Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability...
CVE-2023-35625
Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability...
Privilege escalation
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
Information disclosure
Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability...
CVE-2023-35624
Azure Connected Machine Agent contains an Elevation of Privilege vulnerability (CVE-2023-35624). Affected: Azure Connected Machine Agent on Windows. Root cause: insufficient access control enabling a local attacker with LOW privileges and user interaction to escalate to HIGH privileges (CVSSv3.1:...
CVE-2023-35624 Azure Connected Machine Agent Elevation of Privilege Vulnerability
...
CVE-2023-35625
Azure Machine Learning Compute Instance for SDK Users (CVE-2023-35625) is an information disclosure vulnerability with a CVSS v3.1 base score of 4.7 (Local attack, High confidentiality impact; others not impacted). Affected component is the Azure Machine Learning Compute Instance for SDK Users. R...
