11056 matches found
WordPress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in...
PT-2021-3803 · Realtek · Realtek Jungle Sdk
Name of the Vulnerable Software and Affected Versions: Realtek Jungle SDK versions v2.x through v3.4.14B Description: The Realtek Jungle SDK provides an HTTP web server exposing a management interface that can be used to configure the access point. Two versions of this management interface exist:...
Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities
Summary IBM Data Risk Manager has addressed the following vulnerabilities: Vulnerability Details CVEID: CVE-2020-13871 DESCRIPTION: SQLite is vulnerable to a denial of service, caused by a use-after-free in resetAccumulator in select.c. By sending a specially crafted request, a remote attacker...
CVE-2021-37669
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause denial of service in applications serving models using tf.rawops.NonMaxSuppressionV5 by triggering a division by 0. The implementation uses a user controlled argument to resize a...
CVE-2021-27790
The command ipfilter in Brocade Fabric OS before Brocade Fabric OS v.9.0.1a, v8.2.3, and v8.2.0CBN4, and v7.4.2h uses unsafe string function to process user input. Authenticated attackers can abuse this vulnerability to exploit stack-based buffer overflows, allowing execution of arbitrary code as...
PT-2021-21796 · Google · Tensorflow
Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: TensorFlow and Keras can be tricked to perform arbitrary code execution when...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2021-38586
CVE-2021-38586 affects cPanel prior to 98.0.1. The issue is in /scripts/cpan_config, performing unsafe operations on files (SEC-589). The NVD metrics show CVSSv2/2.0: Low (2.1) with local access; CVSSv3.1/3.1: Medium (4.4) with local access, high integrity impact. Exploitation details or remediat...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
rust: heap-based buffer overflow in read_to_end() because it does not validate the return value from Read in an unsafe context
In the standard library in Rust before 1.50.0, readtoend does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow...
rust: heap-based buffer overflow in read_to_end() because it does not validate the return value from Read in an unsafe context
In the standard library in Rust before 1.50.0, readtoend does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow...
PYSEC-2021-119
23andMe Yamale before 3.0.8 allows remote attackers to execute arbitrary code via a crafted schema file. The schema parser uses eval as part of its processing, and tries to protect from malicious expressions by limiting the builtins that are passed to the eval. When processing the schema, each li...
CVE-2021-38188
An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new, slice.getuncheckedslice.length is used unsafely...
Code injection
An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new, slice.getuncheckedslice.length is used unsafely...
CVE-2021-38188
The CVE-2021-38188 issue concerns the iced-x86 crate (Rust) up to version 1.10.3. The root cause is unsafe use of slice.get_unchecked(slice.length()) in Decoder::new(), which can lead to undefined behavior and potential security impact as described by multiple advisories. Public details consisten...
CVE-2021-38188
An issue was discovered in the iced-x86 crate through 1.10.3 for Rust. In Decoder::new, slice.getuncheckedslice.length is used unsafely...