pycnet-audio (>=0.5.1 <=0.5.8) potentially affected by CVE-2021-29596 via tensorflow-cpu (=2.2.0)

tensorflow-cpu PYPI version =2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - pycnet-audio =0.5.1, =0.5.8 Source cves: CVE-2021-29596 Source advisory: OSV:GHSA-4VRF-FF7V-HPGR...

Command Execution Vulnerability in XStream

XStream is an open source Java class library , it is mainly used to serialize objects into XML JSON or deserialize objects . A command execution vulnerability exists in XStream. An attacker could exploit the vulnerability to execute arbitrary code in the context of an affected application run by ...

ai.stainless:grails-tika (=0.1.0), au.com.turingg:turingg-files (=0.0.1) +1719 more potentially affected by CVE-2021-27906 via org.apache.pdfbox:pdfbox (>=2.0.0 <=2.0.22)

org.apache.pdfbox:pdfbox MAVEN version =2.0.0, =0.2.1, =0.5.0, =0.11.1, =1.0.0, =1.0, =1.3.5, =0.1.8, =1.1.7 - cc.drx:pdf2.13 =ee - cc.drx:poi2.13 =ee and more Source cves: CVE-2021-27906 Source advisory: OSV:GHSA-6VQP-H455-42MR...

atila-vue (>=0.1.3 <=0.1.3.5), contrail (>=0.3.0 <=1.0.2) +28 more potentially affected by CVE-2021-28658 via django (>=3.0.0 <=3.0.11)

django PYPI version =3.0.0, =0.1.3, =0.3.0, =0.1.1, =0.0.1, =0.0.1, =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.5.0, =0.6.4 and more Source cves: CVE-2021-28658 Source advisory: OSV:PYSEC-2021-6...

HAXX libcurl man-in-the-middle attack vulnerability (CNVD-2021-31934)

HAXX libcurl is an open source client-side URL transport library from the Swedish company Haxx. It supports protocols such as FTP, SFTP, TFTP and HTTP. HAXX libcurl suffers from a man-in-the-middle attack vulnerability that can be exploited by an attacker to act as a man-in-the-middle by...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. An uncontrolled resource consumption memory leak flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers ...

Denial of Service (DoS)

Overview mongo-express is a web-based MongoDB admin interface written with Node.js, Express and Bootstrap3 Affected versions of this package are vulnerable to Denial of Service DoS when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash. Details Denial of...

lodash Security Vulnerabilities

lodash is an open source JavaScript utility library. A security vulnerability exists in lodash that stems from vulnerability to Regular Expression Denial of Service ReDoS attacks...

struct2json buffer overflow vulnerability

struct2json is an open source C structure and JSON fast intertransfer library , you can quickly achieve structure objects and JSON objects between serialization and deserialization requirements. A buffer overflow vulnerability exists in versions of struct2json prior to 2020-11-18. Currently there...

Unspecified Vulnerability in GNU C Library (CNVD-2021-26206)

The GNU C Library glibc, libc6 is an open-source, free C language compiler released under the LGPL license.Library is one of the libraries. A security vulnerability exists in the GNU C Library aka glibc versions prior to 2.2. The vulnerability stems from a missing statement about the unspecified...

CentOS 7 : openjpeg2 (RHSA-2020:0262)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0262 advisory. - OpenJPEG through 2.3.1 has a heap-based buffer overflow in opjt1clbldecodeprocessor in openjp2/t1.c because of lack of opjj2kupdateimagedimensions validation...

Denial of Service Vulnerability in Android-Gif-Drawable

Android-Gif-Drawable is an open source library for Android Gif view and drawing. Android-Gif-Drawable suffers from a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

Red Hat JBoss AeroGear Cross-Site Scripting Vulnerability

Red Hat JBoss AeroGear is an open source library for mobile service connectivity from Red Hat USA. The product provides features such as data synchronization, identity management and push notifications. A cross-site scripting vulnerability exists in Red Hat JBoss AeroGear, which stems from the la...

Cryptocurrency Firm Itself Hacked Its Customers to Protect Their Funds From Hackers

Are you using Komodo's Agama Wallet to store your KMD and BTC cryptocurrencies? Were your funds also unauthorisedly transferred overnight to a new address? If yes, don't worry, it's probably safe, and if you are lucky, you will get your funds back. Here's what exactly happened… Komodo, a...

OpenSSL Information Disclosure Vulnerability (CNVD-2019-05906)

OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. The product supports a variety of cryptographic algorithms , including symmetric ciphers , hash algorithms ,...

OpenDolphin Elevation of Privilege Vulnerability

OpenDolphin is a free open source library that protects business applications from changing visualization technologies. An elevation of privilege vulnerability exists in OpenDolphin, which could allow a user to perform unintended actions with administrative privileges...

libopencad buffer overflow vulnerability (CNVD-2020-54085)

libopencad is an open source library that supports the use of CAD files. A buffer overflow vulnerability exists in libopencad. An attacker could exploit this vulnerability to cause the application to crash...

UBUNTU-CVE-2017-12863

In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function PxMDecoder::readData has an integer overflow when calculate srcpitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

GNU oSIP libosip2 Denial of Service Vulnerability (CNVD-2017-07201)

GNU oSIP is a library developed by the GNU Project to provide developers with an interface to multimedia and communications. libosip2 is a standard library for multithreading safety written in C. It is a library that is used in the GNU Project. A denial of service vulnerability exists in the...

PCRE2 Buffer Overflow Vulnerability (CNVD-2017-07003)

PCRE2 is an API for modifying PCRE Open Source Regular Expression Library developed by software developer Philip Hazel. A buffer overflow vulnerability exists in the pcre2match.c file in versions of PCRE2 prior to 2017-03-10. An attacker can exploit this vulnerability to cause a denial of service...