Huawei MindSpore Community Concat Information Disclosure Vulnerability

Huawei MindSpore Community is an open source deep learning framework from Huawei, China. Huawei MindSpore Community suffers from an information disclosure vulnerability that stems from accessing a shape allocated from the heap buffer if the input shape size is 0 when performing inferred shape...

Security Bulletin: Vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Operations Center and Client Management Service (CVE-2021-35550, CVE-2021-35603)

Summary Vulnerabilities in IBM® Runtime Environment Java™ were disclosed as part of the IBM Java SDK updates in October 2021. IBM® Runtime Environment Java™, used by IBM Spectrum Protect Operations Center and Client Management Service, may be affected by the below vulnerabilities CVEs...

Security Bulletin: Information Disclosure in IBM Spectrum Protect Operations Center (CVE-2022-22494)

Summary IBM Spectrum Protect Operations Center may disclosure database information in error messages sent to the user which could be used in future attacks. Vulnerability Details CVEID:CVE-2022-22494 DESCRIPTION: IBM Spectrum Protect Operations Center could allow a remote attacker to gain details...

Veeam's VSS Operations With SMB 3.0 Impacted by Windows June 14, 2022 Update

Challenge After installing the Windows June 14,2022 update KB5014702/KB5014746 on a Windows file server hosting SMB 3.0 shares, the follow Veeam Backup & Replication operations may be impacted: If those SMB 3.0 shares are added to Veeam Backup & Replication with the "Backup from Microsoft VSS...

Heap overflow

When performing the inference shape operation of Affine, Concat, MatMul, ArgMinMax, EmbeddingLookup, and Gather operators, if the input shape size is 0, it will access data outside of bounds of shape which allocated from heap buffers...

PT-2022-22019 · Benjamin Balet · Jorani

Name of the Vulnerable Software and Affected Versions: Benjamin BALET Jorani version 1.0 Description: The issue is related to a Cross-Site Request Forgery CSRF in the component /application/controllers/Users.php. This allows for unauthorized actions to be performed on behalf of a user without the...

Detecting malicious key extractions by compromised identities for Azure Cosmos DB

Azure Cosmos DB is a fully managed NoSQL cloud database service for modern app development. It offers a variety of advanced built-in features, such as automatic worldwide data replication, lightning-fast response types, and a variety of APIs. In this blog post, we describe security practices for...

The vulnerability of microprogrammed solid-state storage devices from Intel(R) Optane, Intel(R) Optane(TM) DC, and Intel(R) DC, related to the simultaneous execution using a shared resource with incorrect synchronization, allows attackers to cause service failures.

The vulnerability of microprogrammed solid-state storage devices from IntelR Optane, IntelR OptaneTM DC, and IntelR DC involves the simultaneous execution of operations using shared resources with improper synchronization. Exploiting this vulnerability can allow attackers to cause service failure...

Red Hat OpenShift 资源管理错误漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying, and running applications. Red Hat OpenShift GitOps 1.5 suffers from a resource management error vulnerability that stems from vulnerability to uncontrolled...

Red Hat OpenShift 后置链接漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift GitOps 1.5 that stems from vulnerability to symbolic links, which can be exploite...

IBM Spectrum Protect Operations Center暴力破解漏洞

IBM Spectrum Protect Operations Center is a software from IBM USA that provides visual control of the IBM Spectrum Protect environment. IBM Spectrum Protect Operations Center is vulnerable to a brute-force cracking vulnerability that stems from cumulative login Failure count is invalid, and an...

Ubuntu: Security Advisory (USN-5486-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-26668

ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privileged API functions to perform partial system operations or cause partial disrupt of service...

Improper access control

ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privileged API functions to perform partial system operations or cause partial disrupt of service...

CVE-2022-26668 ASUS Control Center - Broken Access Control

ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privileged API functions to perform partial system operations or cause partial disrupt of service...

USN-5486-1: Intel Microcode vulnerabilities

It was discovered that some Intel processors did not implement sufficient control flow management. A local attacker could use this to cause a denial of service. CVE-2021-0127 Joseph Nuzman discovered that some Intel processors did not properly initialise shared resources. A local attacker could u...

CVE-2022-22485

IBM Spectrum Protect Server vulnerable to brute-force access because Operations Center login failures may not increment the invalid-sign-on counter. Affected: Spectrum Protect Server, 8.1.0.000–8.1.14.000 (Operations Center 8.1.x). Root cause: administrator sign-on failure count not incremented, ...

PT-2022-15465 · Ibm · Ibm Spectrum Protect Operations Center +1

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Operations Center versions 8.1.0.000 through 8.1.14.000 Description: The issue allows an attacker to exploit it using brute force techniques to gain unauthorized administrative access to the IBM Spectrum Protect Server...

Online Tours And Travels Management System SQL注入漏洞

Online Tours And Travels Management System is an online tour management system. v1.0 of Online Tours And Travels Management System is vulnerable to SQL injection, which originates from /admin/operations/tax. The tname parameter in php lacks validation for external input SQL statements. An attacke...

PT-2022-20956 · Mercury · Mercury Mipc451-4

Name of the Vulnerable Software and Affected Versions: MERCURY MIPC451-4 version 1.0.22 Build 220105 Rel.55642n Description: The issue is a remote code execution RCE vulnerability. It can be exploited via a crafted POST request. Recommendations: For MERCURY MIPC451-4 version 1.0.22 Build 220105...