UBUNTU-CVE-2021-3402

An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4...

PT-2021-18331 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 TensorFlow version 2.3.3 TensorFlow version 2.2.3 TensorFlow version 2.1.4 Description: The implementation of tf.raw ops.FractionalMaxPoolGrad triggers an undefined behavior if one o...

WordPress plugin WP Maintenance Mode & Site Under Construction 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . WP Maintenance Mode & Site Under Construction An...

PT-2021-18287 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier Description: An attacker can cause a heap buffer overfl...

PT-2021-18320 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow versions 2.4.2 and earlier TensorFlow versions 2.3.3 and earlier TensorFlow versions 2.2.3 and earlier TensorFlow versions 2.1.4 and earlier Description: The implementation of tf.raw...

Linux Kernel Post-Release Reuse Vulnerability (CNVD-2021-34748)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A post-release reuse vulnerability exists in the nfc socket in Linux Kernel versions prior to 5.12.2. A local attacke...

Mcafee McAfee Total Protection 后置链接漏洞

McAfee Total Protection MTP is a one-stop security suite. An elevation of privilege vulnerability exists in the File Lock component of McAfee Total Protection prior to version 16.0.32. An attacker could use this vulnerability to elevate privileges by manipulating symbolic links in the IOCTL...

JetBrains Hub 安全漏洞

JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. A security vulnerability exists in JetBrains Hub versions prior to 2021.1.13079. The vulnerability stems from "two-factor authentication"...

JetBrains WebStorm 安全漏洞

JetBrains WebStorm is a JavaScript integrated development environment from Czech software development company JetBrains. versions prior to JetBrains WebStorm 2021.1 have a local code execution vulnerability that could be exploited by an attacker to make WebStrom execute local code when pulling co...

Jetbrains JetBrains TeamCity 跨站脚本漏洞

TeamCity is a Java-based build management and continuous integration server from JetBrains. A stored cross-site scripting vulnerability exists in several pages in versions of JetBrains TeamCity prior to 2020.2.3. Detailed vulnerability details are not available at this time...

CVE-2021-23014

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, and 14.1.x before 14.1.4, BIG-IP Advanced WAF and ASM are missing authorization checks for file uploads to a specific directory within the REST API which might allow Authenticated users with guest privileges to upload files. Note: Software...

Google Chrome 安全特征问题漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An improper offline implementation vulnerability exists in versions of Google Chrome prior to 90.0.4430.212. No detailed vulnerability details are provided at this...

PT-2021-16502 · Pillow +8 · Pillow +8

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 8.2.0 Description: An issue was discovered in Pillow. There is an out-of-bounds read in J2kDecode, in j2ku gray i. This issue dates back to Pillow 2.4.0. Recommendations: For Pillow versions prior to 8.2.0, update to...

HPE IlO Amplifier Pack 跨站脚本漏洞

HPE IlO Amplifier Pack is a database management software for use in clustered environments from HPE, USA. The software supports Gen8, Gen9 and Gen10 Hewlett Packard Enterprise automatic update of firmware, drivers, support for manual or automatic recovery of firmware damage to the system, maximiz...

GHSA-PF2J-9QMP-JQR2 TypeORM vulnerable to MAID and Prototype Pollution

Prototype pollution vulnerability in the TypeORM package 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks...

Nim 信任管理问题漏洞

Nim is a statically typed programming language from the Nim community. A security vulnerability exists in Nim versions prior to 1.4.2, which stems from the fact that httpClient SSL TLS certificate validation is disabled by default...

WordPress 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin Business Directory version...

WordPress Sina Extension for Elementor 跨站脚本漏洞

WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Sina Extension for Elementor Plugin versions prior to 3.3.12. An attacker can exploit this vulnerability to launch a cross-site scripting attack...

SolarWinds Serv-U FTP Server 跨站脚本漏洞

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the U.S. company SolarWinds. A cross-site scripting vulnerability exists in SolarWinds Serv-U versions prior to 15.1.6, which originates from being subject to cross-site scripting XSS via a directory name containin...

handlebars 安全漏洞

handlebars is a semanticized web template system. A security vulnerability exists in handlebars versions prior to 4.7.7 that stems from vulnerability to prototype contamination when certain compilation options are selected to compile templates from untrusted sources...