Lucene search
K

1329 matches found

RedhatCVE
RedhatCVE
added 2019/04/25 8:25 a.m.30 views

CVE-2019-5810

Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS2.9AI score0.00383EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2019/04/25 8:24 a.m.18 views

CVE-2019-5818

Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file...

6.5CVSS4.6AI score0.00823EPSS
Exploits0References4
Veracode
Veracode
added 2019/04/25 6:6 a.m.18 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An integer overflow in the BMP decoder allows an attacker to crash the process or gain access to unintended regions of the process memory...

6.5CVSS6.5AI score0.00128EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2019/04/24 5:29 p.m.19 views

CVE-2018-10055

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

8.1CVSS8.1AI score
Exploits0References1
OSV
OSV
added 2019/04/24 5:29 p.m.19 views

PYSEC-2019-222

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

8.1CVSS2.3AI score0.00174EPSS
Exploits0References1
OSV
OSV
added 2019/04/24 5:29 p.m.18 views

PYSEC-2019-225

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

8.1CVSS2.5AI score0.00166EPSS
Exploits0References1
Prion
Prion
added 2019/04/24 5:29 p.m.17 views

Code injection

Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory...

5.8CVSS7.8AI score0.00166EPSS
Exploits0References1Affected Software2
NVD
NVD
added 2019/04/24 5:29 p.m.16 views

CVE-2018-10055

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

8.1CVSS8.1AI score0.00174EPSS
Exploits0References1
Cvelist
Cvelist
added 2019/04/24 4:17 p.m.18 views

CVE-2018-10055

Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted configuration file...

8.1AI score0.00174EPSS
Exploits0References1
CNVD
CNVD
added 2019/03/28 12:0 a.m.1 views

Multiple Apple Products WebKit Memory Leak Vulnerability

Apple Safari is a web browser that is the default browser that comes with the MacOSX and iOS operating systems. apple iOS is a suite of operating systems for mobile devices. apple tvOS is a smart TV operating system. webKit is a component of the web browser engine. WebKit is one of the Web browse...

6.5CVSS6.3AI score0.00627EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/12 12:0 a.m.0 views

The vulnerability of the linux-astra-modules package of the Astra Linux operating system, which allows a hacker to circumvent established security policy rules

The vulnerability of the linux-astra-modules package in the Astra Linux operating system is related to an access control permission assignment error, which allows for bypassing the closed software environment by writing to /proc/$PID/mem. Exploiting this vulnerability can enable a perpetrator to...

6.3CVSS5.5AI score
Exploits0References1
OSV
OSV
added 2019/03/05 4:29 p.m.1 views

CVE-2019-6205

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes...

7.8CVSS7.2AI score0.08731EPSS
Exploits2References6
UbuntuCve
UbuntuCve
added 2019/02/19 5:29 p.m.22 views

CVE-2019-5765

An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent...

5.5CVSS6.8AI score0.00126EPSS
Exploits0References1
NVD
NVD
added 2019/02/19 5:29 p.m.21 views

CVE-2019-5765

An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent...

5.5CVSS5.7AI score0.00126EPSS
Exploits0References7
OSV
OSV
added 2019/02/19 5:29 p.m.1 views

DEBIAN-CVE-2019-5765

An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent...

5.5CVSS7AI score0.00126EPSS
Exploits0References1
Cvelist
Cvelist
added 2019/02/19 5:0 p.m.21 views

CVE-2019-5765

An exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted Intent...

5.6AI score0.00126EPSS
Exploits0References7
OSV
OSV
added 2019/02/12 12:58 p.m.13 views

SUSE-SU-2019:0334-1 Security update for nginx

This update for nginx to version 1.14.2 fixes the following issues: Security vulnerabilities addressed: - CVE-2018-16843 CVE-2018-16844: Fixed an issue whereby a client using HTTP/2 might cause excessive memory consumption and CPU usage bsc1115025 bsc1115022. - CVE-2018-16845: Fixed an issue whic...

8.2CVSS7AI score0.57804EPSS
Exploits1References7
Veracode
Veracode
added 2019/01/15 9:20 a.m.47 views

Use After Free

httpd24 is vulnerable to information disclosure attacks. The vulnerability exists as Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This...

7.5CVSS8.2AI score0.9384EPSS
Exploits9References84Affected Software15
OSV
OSV
added 2019/01/11 7:29 p.m.28 views

CVE-2018-16866

An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable...

3.3CVSS7.3AI score0.00061EPSS
Exploits2References14
NVD
NVD
added 2019/01/11 7:29 p.m.20 views

CVE-2018-16866

An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable...

4.3CVSS5.2AI score0.00061EPSS
Exploits2References14
Rows per page
Query Builder