CVE-2023-38348

A CSRF issue was discovered in LWsystems Benno MailArchiv 2.10.1...

PT-2023-26475 · Unknown · Metersphere

Name of the Vulnerable Software and Affected Versions: MeterSphere versions prior to 2.10.4 LTS Description: MeterSphere is an open-source continuous testing platform. Some interfaces of the Cloud version of MeterSphere do not have configuration permissions, and are sensitively leaked by attacker...

SUSE CVE-2020-20276

An unauthenticated stack-based buffer overflow vulnerability in common.c's handlePORT in uftpd FTP server versions 2.10 and earlier can be abused to cause a crash and could potentially lead to remote code execution...

SUSE CVE-2022-35974

TensorFlow is an open source platform for machine learning. If QuantizeDownAndShrinkRange is given nonscalar inputs for inputmin or inputmax, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

SUSE CVE-2022-35979

TensorFlow is an open source platform for machine learning. If QuantizedRelu or QuantizedRelu6 are given nonscalar inputs for minfeatures or maxfeatures, it results in a segfault that can be used to trigger a denial of service attack. We have patched the issue in GitHub commit...

SUSE CVE-2022-36003

TensorFlow is an open source platform for machine learning. When RandomPoissonV2 receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack. We have patched the issue in GitHub commit 552bfced6ce4809db5f3ca305f60ff80dd40c5a3. The fix will be included i...

PT-2023-14048 · Autolab · Autolab

Name of the Vulnerable Software and Affected Versions: Autolab versions prior to 2.10.0 Description: A file disclosure issue was found in Autolab's remote handin feature, allowing users to submit assignments using paths outside their submission directory and view the file's contents...

Amasty Blog 跨站脚本漏洞

Amasty Blog is a website page extension for Amasty, Inc. A cross-site scripting vulnerability exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plug-ins, which can be exploited by attackers to inject cross-site code and launch XSS attacks...

PT-2022-26128

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1, 2.9.3, and 2.8.4 Description TensorFlow is an open source platform for machine learning. If FractionMaxPoolGrad is given outsize inputs row pooling sequence and col pooling sequence...

GHSA-M6CV-4FMF-66XF TensorFlow vulnerable to `CHECK` fail in `RaggedTensorToVariant`

Impact If RaggedTensorToVariant is given a rtnestedsplits list that contains tensors of ranks other than one, it results in a CHECK fail that can be used to trigger a denial of service attack. python import tensorflow as tf batchedinput = True rtnestedsplits = tf.constant0,32,64, shape=3,...

Quarkus 环境问题漏洞

Quarkus is a cloud-native Linux container-first framework for writing Java applications. A security vulnerability exists in Quarkus version 2.10.x that stems from an HTTP request header environment that will not terminate...

CVE-2022-1034

There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4...

hostapd 加密问题漏洞

hostapd is a user space daemon for access points and authentication servers. A cryptographic issue vulnerability exists in hostapd that stems from a cached access mode error in the hostapd and wpa supplicant components of the product. An attacker could launch a side-channel attack via this...

Spacewalk 代码注入漏洞

spacewalk is an open source Linux system administration solution. Spacewalk 2.10 suffers from a code injection vulnerability, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

Piwigo 跨站脚本漏洞

Piwigo is a set of Web-based open source photo gallery software. Piwigo version 2.10.1 has a cross-site scripting vulnerability that allows attackers to execute arbitrary Web scripts or HTML...

CVE-2018-2833

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Enterprise Management Console. Supported versions that are affected are 2.7, 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP ...

CloudView NMS Information Disclosure Vulnerability

CloudView NMS is a network management and monitoring system that automatically discovers, monitors and performs tasks from CloudView NMS USA. A security vulnerability exists in CloudView NMS versions prior to 2.10a. A remote attacker could exploit the vulnerability by sending a direct request to...

WebsiteBaker cross-site scripting vulnerability (CNVD-2017-08708)

WebsiteBaker is an open source PHP content management system CMS maintained and developed by the WebsiteBaker organization. The system supports WYSIWYG editor, search engine optimization and add-ons. A cross-site scripting vulnerability exists in the /account/details.php file in WebsiteBaker...

Pidgin MXIT Protocol Memory Disclosure Vulnerability

Pidgin is a cross-platform real-time communication client that supports several commonly used real-time communication protocols and allows users to log into different real-time communication services with the same software. A security vulnerability exists in the MXIT protocol processing of Pidgin...

Belkin N600 Spoofing Vulnerability

Belkin N600 is a wireless dual-band router product. Belkin F9K1102 2 device firmware version 2.10.17 uses an incorrect algorithm when selecting the ID value within the DNS query header. This could allow a remote attacker to exploit this vulnerability for response spoofing by predicting the value...