Lucene search
+L

517 matches found

Github Security Blog
Github Security Blog
added 2022/02/09 11:28 p.m.67 views

Reachable Assertion in Tensorflow

Impact When decoding a tensor from protobuf, a TensorFlow process can encounter cases where a CHECK assertion is invalidated based on user controlled arguments, if the tensors have an invalid dtype and 0 elements or an invalid shape. This allows attackers to cause denial of services in TensorFlow...

6.5CVSS3.4AI score0.00469EPSS
SaveExploits0References6Affected Software3
Cvelist
Cvelist
added 2022/02/04 10:32 p.m.40 views

CVE-2022-23564 Reachable Assertion in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. When decoding a resource handle tensor from protobuf, a TensorFlow process can encounter cases where a CHECK assertion is invalidated based on user controlled arguments. This allows attackers to cause denial of services in TensorFlow...

6.5CVSS6.5AI score0.00469EPSS
SaveExploits0References2
ICS
ICS
added 2021/12/07 12:0 a.m.41 views

Hitachi Energy RTU500 OpenLDAP

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: RTU500 Series Vulnerabilities: Type Confusion, Reachable Assertion 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause a denial-of-service condition...

7.5CVSS8.2AI score0.1229EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/12/03 11:15 a.m.4 views

CVE-2021-44022

A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the program on affected installations, leading to a denial-of-service DoS. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit th...

5.5CVSS6.2AI score0.00237EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/12/03 11:15 a.m.4 views

CVE-2021-44022

A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the program on affected installations, leading to a denial-of-service DoS. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit th...

5.5CVSS6AI score0.00237EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/03 11:15 a.m.18 views

Authentication flaw

A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the program on affected installations, leading to a denial-of-service DoS. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit th...

2.1CVSS5.7AI score0.00237EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/12/02 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2021:3854-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.7AI score0.03518EPSS
SaveExploits17References24
OpenVAS
OpenVAS
added 2021/11/02 12:0 a.m.12 views

OpenLDAP < 2.4.43 DoS Vulnerability

OpenLDAP is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

5CVSS4.3AI score0.19984EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/07/13 5:31 a.m.36 views

CVE-2021-1953

Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

7.5CVSS7.8AI score0.00587EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/06/21 12:0 a.m.3 views

CVE-2021-3430

Assertion reachable with repeated LLCONNECTIONPARAMREQ. Zephyr versions = v1.14 contain Reachable Assertion CWE-617. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-46h3-hjcq-2jjr...

7.5CVSS7.1AI score0.0085EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/06/09 6:20 a.m.73 views

CVE-2021-1937

CVE-2021-1937 describes a reachable assertion during processing of peer association WLAN messages from a host and nonstandard incoming packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industr...

7.5CVSS7.6AI score0.00587EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2019:0997-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.028EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/20 7:15 p.m.3 views

DEBIAN-CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS7.3AI score0.01423EPSS
SaveExploits1References1
Prion
Prion
added 2021/05/20 7:15 p.m.19 views

Design/Logic Flaw

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

5CVSS7.4AI score0.01423EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/05/20 7:15 p.m.27 views

CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS7.1AI score0.01423EPSS
SaveExploits1References2
OSV
OSV
added 2021/05/20 7:15 p.m.5 views

UBUNTU-CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS7.1AI score0.01423EPSS
SaveExploits1References3
NVD
NVD
added 2021/05/20 5:15 p.m.20 views

CVE-2021-29258

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...

7.5CVSS0.01738EPSS
SaveExploits0References5
OSV
OSV
added 2021/05/20 5:15 p.m.25 views

CVE-2021-29258

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...

7.5CVSS7.5AI score
SaveExploits0References5
Prion
Prion
added 2021/05/20 5:15 p.m.29 views

Authentication flaw

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...

5CVSS7.4AI score0.01738EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2021/05/20 4:40 p.m.33 views

CVE-2021-29258

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...

7.8AI score0.01738EPSS
SaveExploits0References4
Rows per page
Query Builder