Lucene search
+L

179 matches found

Prion
Prion
added 2021/12/17 9:15 p.m.19 views

Design/Logic Flaw

Incomplete string comparison vulnerability exits in cvxopt.org cvxop = 1.2.6 in APIs cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve, which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects...

5CVSS7.4AI score0.01184EPSS
SaveExploits1References2Affected Software2
OSV
OSV
added 2021/12/17 9:15 p.m.5 views

UBUNTU-CVE-2021-41500

Incomplete string comparison vulnerability exits in cvxopt.org cvxop = 1.2.6 in APIs cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve, which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects...

7.5CVSS5.8AI score0.01184EPSS
SaveExploits1References3
OSV
OSV
added 2021/12/17 9:15 p.m.10 views

PYSEC-2021-870

Incomplete string comparison vulnerability exits in cvxopt.org cvxop = 1.2.6 in APIs cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve, which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects...

7.5CVSS5.9AI score0.01184EPSS
SaveExploits1References3
CVE
CVE
added 2021/12/17 8:44 p.m.109 views

CVE-2021-41500

CVE-2021-41500 is an incomplete string comparison vulnerability in the cvxopt.org cvxop API surface (versions

7.5CVSS7.3AI score0.01184EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2021/12/17 8:44 p.m.54 views

CVE-2021-41500

Incomplete string comparison vulnerability exits in cvxopt.org cvxop = 1.2.6 in APIs cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve, which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects...

7.5CVSS7.3AI score0.01184EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/12/17 8:44 p.m.49 views

CVE-2021-41500

Incomplete string comparison vulnerability exits in cvxopt.org cvxop = 1.2.6 in APIs cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve, which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects...

7.6AI score0.01184EPSS
SaveExploits1References2
NVD
NVD
added 2021/12/17 7:15 p.m.27 views

CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

5.3CVSS0.01561EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/17 7:15 p.m.5 views

CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

5.3CVSS6.8AI score0.01561EPSS
SaveExploits1References3
OSV
OSV
added 2021/12/17 7:15 p.m.1 views

DEBIAN-CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

5.3CVSS6.6AI score0.01561EPSS
SaveExploits1References1
Prion
Prion
added 2021/12/17 7:15 p.m.25 views

Design/Logic Flaw

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

5CVSS5.5AI score0.01561EPSS
SaveExploits1References2Affected Software2
OSV
OSV
added 2021/12/17 7:15 p.m.10 views

UBUNTU-CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

5.3CVSS6.8AI score0.01561EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2021/12/17 7:15 p.m.57 views

CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

5.3CVSS6.9AI score0.01561EPSS
SaveExploits1References4
OSV
OSV
added 2021/12/17 7:15 p.m.62 views

PYSEC-2021-855

Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects...

5.3CVSS5.3AI score0.01561EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/12/17 6:43 p.m.35 views

CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

6AI score0.01561EPSS
SaveExploits1References2
CVE
CVE
added 2021/12/17 6:43 p.m.297 views

CVE-2021-34141

CVE-2021-34141 affects NumPy (numpy.core); the issue is an incomplete string comparison in versions prior to 1.22.0, potentially enabling a DoS via crafted input. Vendor notes describe the behavior as harmless, and no exploit details are provided in the sources beyond the vulnerability descriptio...

5.3CVSS5.5AI score0.01561EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2021/12/17 6:43 p.m.45 views

CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

5.3CVSS5.8AI score0.01561EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/12/17 12:0 a.m.5 views

PT-2021-23314 · Cvxopt +2 · Cvxopt +2

Name of the Vulnerable Software and Affected Versions: cvxopt version 1.2.6 and earlier Description: The issue is related to an incomplete string comparison vulnerability in certain APIs, specifically cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, and cvxopt.cholmod.spsolve...

8.7CVSS6.5AI score0.01184EPSS
SaveExploits1References22
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.8 views

The vulnerability of the SysController and MailHandlerController components of the Redmine project and task management web application, related to the disclosure of information due to incompatibility, allows a hacker to gain access to confidential data.

The vulnerability of the SysController and MailHandlerController components in the Redmine project and task management web application is related to changes in the time required for string comparison operations. Exploiting this vulnerability could allow a malicious actor to gain access to...

5.3CVSS5.9AI score0.01215EPSS
SaveExploits0References8Affected Software3
OSV
OSV
added 2021/09/15 1:15 p.m.21 views

CVE-2021-3797

hestiacp is vulnerable to Use of Wrong Operator in String Comparison...

9.8CVSS6.8AI score
SaveExploits0References2
Prion
Prion
added 2021/09/15 1:15 p.m.19 views

Design/Logic Flaw

hestiacp is vulnerable to Use of Wrong Operator in String Comparison...

7.5CVSS9.4AI score0.01148EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder