Lucene search
+L

122 matches found

vulnersOsv
vulnersOsv
added 2021/08/25 2:42 p.m.5 views

complaintclassify (=0.0.9) potentially affected by CVE-2021-37659 via tensorflow-cpu (=2.4.0)

tensorflow-cpu PYPI version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - complaintclassify =0.0.9 Source cves: CVE-2021-37659 Source advisory: OSV:GHSA-Q3G3-H9R4-PRRC...

7.8CVSS6.4AI score0.00176EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2021/08/12 9:15 p.m.6 views

complaintclassify (=0.0.9) potentially affected by CVE-2021-37657 via tensorflow-cpu (=2.4.0)

tensorflow-cpu PYPI version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - complaintclassify =0.0.9 Source cves: CVE-2021-37657 Source advisory: OSV:PYSEC-2021-570...

7.8CVSS6.4AI score0.00167EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2021/05/21 2:28 p.m.4 views

brainhance (=0.0.1), crystal4d (>=0.0.4 <=0.1.2) +3 more potentially affected by CVE-2021-29616 via tensorflow-gpu (>=2.4.0 <=2.4.1)

tensorflow-gpu PYPI version =2.4.0, =0.0.4, =1.1.1, =1.0.0, =1.0.1 - tf-yarn-gpu =0.6.3 Source cves: CVE-2021-29616 Source advisory: OSV:GHSA-4HVV-7X94-7VQ8...

7.8CVSS7AI score0.00206EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2021/05/21 2:28 p.m.3 views

complaintclassify (=0.0.9) potentially affected by CVE-2021-29608 via tensorflow-cpu (=2.4.0)

tensorflow-cpu PYPI version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - complaintclassify =0.0.9 Source cves: CVE-2021-29608 Source advisory: OSV:GHSA-RGVQ-PCVF-HX75...

7.8CVSS7AI score0.00234EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2021/05/21 2:21 p.m.5 views

abmarl (>=0.1.1 <=0.1.3), agrothon (>=1.1.5 <=1.3.2) +92 more potentially affected by CVE-2021-29527 via tensorflow (>=2.4.0 <=2.4.1)

tensorflow PYPI version =2.4.0, =0.1.1, =1.1.5, =2.1.0, =0.0.1, =0.0.6, =0.1.0, =1.4.0, =1.2.2, =20210221.0.0, =0.7.2, =0.0.0, =0.0.0.post0 and more Source cves: CVE-2021-29527 Source advisory: OSV:GHSA-X4G7-FVJJ-PRG8...

5.5CVSS5.9AI score0.00189EPSS
Exploits1
OSV
OSV
added 2021/05/20 2:15 a.m.1 views

DEBIAN-CVE-2021-20718

modauthopenidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of-service DoS condition via unspecified vectors...

7.5CVSS7.7AI score0.03395EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2021/05/14 8:15 p.m.5 views

complaintclassify (=0.0.9) potentially affected by CVE-2021-29583 via tensorflow-cpu (=2.4.0)

tensorflow-cpu PYPI version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-cpu and may be impacted: - complaintclassify =0.0.9 Source cves: CVE-2021-29583 Source advisory: OSV:PYSEC-2021-511...

7.8CVSS7AI score0.00211EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2021/02/09 12:0 a.m.5 views

PT-2021-2951 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to a lack of protection for SQL query structures in the Magento Commerce platform, which can be...

9.1CVSS8.3AI score0.02772EPSS
Exploits0References10
ATTACKERKB
ATTACKERKB
added 2020/10/15 11:0 p.m.4 views

CVE-2020-24407

Magento versions 2.4.0 and 2.3.5p1 and earlier are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components...

9.1CVSS8.8AI score0.0552EPSS
Exploits1References2
CNVD
CNVD
added 2018/04/04 12:0 a.m.5 views

Wireshark Denial of Service Vulnerability (CNVD-2018-07444)

Wireshark formerly Ethereal is a suite of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.LWAPP dissector is one of the lightweight access point protocol parsers. A security...

7.5CVSS6.7AI score0.02337EPSS
Exploits1References1
OSV
OSV
added 2017/07/17 1:18 p.m.2 views

CVE-2017-2247

Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

7.8CVSS5.8AI score0.01059EPSS
Exploits0References2
CNVD
CNVD
added 2017/07/06 12:0 a.m.4 views

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-14504)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

7.8CVSS7.1AI score0.0031EPSS
Exploits0References1
CNVD
CNVD
added 2017/07/06 12:0 a.m.4 views

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-14501)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

7.8CVSS7.1AI score0.0031EPSS
Exploits0References1
CNVD
CNVD
added 2017/07/06 12:0 a.m.3 views

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-19914)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

7.8CVSS7.2AI score0.00988EPSS
Exploits0References1
CNVD
CNVD
added 2017/07/06 12:0 a.m.5 views

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-14628)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

7.8CVSS7.9AI score0.01556EPSS
Exploits0References1
OSV
OSV
added 2017/07/05 8:29 p.m.6 views

CVE-2017-10751

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133."...

7.8CVSS5.8AI score0.0031EPSS
Exploits0References1
Snyk
Snyk
added 2017/04/03 5:59 a.m.4 views

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation. The parsecharclass function in regparse.c in the Onigmo aka Oniguruma-mod regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service deep recursion and application...

7.5CVSS6.7AI score0.03647EPSS
Exploits0References2
RubySec
RubySec
added 2017/04/03 12:0 a.m.5 views

DoS caused by infinite recursion (stack overflow) in parse_char_class()

The parsecharclass function in regparse.c in the Onigmo aka Oniguruma-mod regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service deep recursion and application crash via a crafted regular expression...

7.5CVSS5.6AI score0.03647EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2016/11/14 12:0 a.m.4 views

OIC Exponent CMS Information Disclosure Vulnerability (CNVD-2016-11167)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. An information disclosure...

5.3CVSS6.3AI score0.01476EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2016/01/29 12:0 a.m.5 views

PT-2016-4394

Name of the Vulnerable Software and Affected Versions OpenStack Object Storage Swift versions prior to 2.4.0 Description The issue allows remote attackers to cause a denial of service by consuming proxy-server resources through a series of interrupted requests to a Large Object URL, due to the...

7.5CVSS7.1AI score0.03788EPSS
Exploits0References35
Rows per page
Query Builder