Lucene search
+L

5359 matches found

CNNVD
CNNVD
added 2022/02/07 12:0 a.m.8 views

Google Android 输入验证错误漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has an elevation of privilege vulnerability, which stems from incorrectly entered authentication and can be exploited by attackers to cause a local privilege escalation...

7.8CVSS5.7AI score0.00123EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/02/07 12:0 a.m.7 views

Qualcomm 多款产品输入验证错误漏洞

The Qualcomm Qca chip and others are products of Qualcomm Incorporated.The Qualcomm Qca chip is a Bluetooth module chip.The Qualcomm Sd chip is a processor.The Qualcomm Wcd chip is an Aqstic™ audio codec. An input validation error vulnerability exists in multiple Qualcomm products. The...

6.7CVSS6.6AI score0.00145EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/02/07 12:0 a.m.8 views

Qualcomm 多款产品输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way of miniaturizing circuits including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. An input validation error vulnerability exists in...

8.4CVSS7.5AI score0.00188EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/02/07 12:0 a.m.5 views

Iipimage 输入验证错误漏洞

Iipimage is Ruven individual developers of an advanced high-performance , feature-rich image server system . It is used for web-based streaming viewing and scaling of ultra-high resolution images. An input validation error vulnerability exists in IIPImage High Resolution Streaming Image Server th...

7.5CVSS7.4AI score0.01177EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.10 views

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. Google Tensorflow is vulnerable to an input validation error that could be exploited by an attacker to build a TFLite model that would result in an integer overflow in TfLiteIntArrayCreate...

8.8CVSS5.7AI score0.00811EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.6 views

GitLab Enterprise Edition和GitLab Community Edition 输入验证错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An input validation error vulnerability exists in GitLab Enterprise Edition and Gitlab Community Edition that stems from improper handling of bulk requests to...

4.9CVSS5.3AI score0.00909EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.8 views

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. Google TensorFlow is vulnerable to an input validation error that could be exploited by an attacker to create an operation that contains a tensor with enough elements to cause an integer overflow...

6.5CVSS5.7AI score0.00783EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.8 views

ABB SPIET800 输入验证错误漏洞

Abb Spiet800 is an Ethernet Ciu transport module from Abb Switzerland. A security vulnerability exists in the ABB SPIET800 and PNI800 due to an input validation error vulnerability exists, which arises from improper input validation in the module and allows an attacker to exploit the vulnerabilit...

7.5CVSS7.3AI score0.01059EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.9 views

Google Tensorflow 输入验证错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. Google Tensorflow is vulnerable to an input validation error that could be exploited by an attacker to build a TFLite model that leads to an integer overflow in the embedding lookup operation...

8.8CVSS5.6AI score0.01173EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.7 views

SeedDMS 输入验证错误漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is primarily used for storing and sharing documents. SeedDMS suffers from an input validation error vulnerability that stems from an open redirection vulnerability in...

6.1CVSS6.3AI score0.00647EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.9 views

ABB SPIET800 输入验证错误漏洞

Abb Spiet800 is an Ethernet Ciu transport module from Abb Switzerland. A security vulnerability exists in the ABB SPIET800 and PNI800 due to an input validation error vulnerability exists, which arises from improper input validation in the module and allows an attacker to exploit the vulnerabilit...

7.5CVSS7.3AI score0.01059EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.6 views

Schneider Electric EcoStruxure Power Monitoring Expert 输入验证错误漏洞

Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric, a French company, used for power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert suffers from an input validation error vulnerability that stems from...

6.5CVSS6.7AI score0.00771EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/02/04 12:0 a.m.9 views

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, U.S. Google TensorFlow is vulnerable to an input validation error that could be exploited by an attacker to create an operation containing a tensor with enough elements to cause an integer overflow...

6.5CVSS5.7AI score0.00783EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/02/03 12:0 a.m.13 views

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google USA. Google Tensorflow is vulnerable to an input validation error, which can be exploited by attackers to cause a denial of service...

6.5CVSS5.6AI score0.00821EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/02/03 12:0 a.m.68 views

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google USA. Google Tensorflow suffers from an input validation error vulnerability, which can be exploited by an attacker to cause a CHECK failure denial-of-service based assertion failure and result in a denial of...

6.5CVSS5.7AI score0.008EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/02/01 12:0 a.m.7 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, Inc. An input validation error vulnerability exists in Google Chrome, which could be exploited by remote attackers to spoof the contents of the multi-function box URL bar via a crafted HTML page...

6.5CVSS8.3AI score0.0063EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2022/02/01 12:0 a.m.10 views

gh-ost 输入验证错误漏洞

gh-ost is a trigger-free online mode migration solution for MySQL. It is testable and provides suspendability, dynamic control/reconfiguration, auditing, and many operational privileges. gh-ost suffers from an input validation error vulnerability that stems from the presence of an arbitrary file...

6.8CVSS6.7AI score0.01003EPSS
SaveExploits0References3
Redos
Redos
added 2022/02/01 12:0 a.m.62 views

ROS-20220128-02

A vulnerability in the Python Pillow image library is related to buffer re-reading during the ImagePath.Path initialization in the pathgetbbox function in path.c. Exploitation of the vulnerability could allow an attacker acting remotely to pass a specially crafted file to a vulnerable library and...

9.8CVSS8.7AI score0.03399EPSS
SaveExploits0
Veracode
Veracode
added 2022/01/31 7:3 a.m.19 views

Cross-site Scripting (XSS)

laminas/laminas-form is vulnerable to cross-site scripting XSS attacks. A remote unauthenticated attacker is able to inject and execute malicious javascript on victim's browser through the unescaped submitted values when rendering validation error messages via the formElementErrors function...

6.1CVSS5.4AI score0.00989EPSS
SaveExploits0References8Affected Software1
CNNVD
CNNVD
added 2022/01/31 12:0 a.m.7 views

Apache Pulsar 输入验证错误漏洞

Apache Pulsar is the United States Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as one of the distributed message flow platform. The software supports multi-tenant, persistent storage, multi-machine room cross-region data replication,...

6.5CVSS5.7AI score0.01726EPSS
SaveExploits1References5
Rows per page
Query Builder