CVE-2023-28332 Moodle: algebra filter xss when filter is misconfigured

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

CVE-2023-28332 Moodle: algebra filter xss when filter is misconfigured

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

CVE-2023-28332: Improper Neutralization of Input During Web Page Generation

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

PYSEC-2022-158

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

Google TensorFlow 代码问题漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a code issue vulnerability that stems from TensorFlow triggering null pointer dereferences if default settings are used when building the XLA compilation cache. No...

OESA-2021-1478 openblas security update

An optimized BLAS library based on GotoBLAS2 1.13 BSD version. Security Fixes: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these...

Fedora: Security Advisory for lapack (FEDORA-2021-0d4b58060d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for lapack (FEDORA-2021-aec9d01057)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: lapack-3.10.0-4.fc35

LAPACK Linear Algebra PACKage is a standard library for numerical linear algebra. LAPACK provides routines for solving systems of simultaneous linear equations, least-squares solutions of linear systems of equations, eigenvalue problems, and singular value problems. Associated matrix factorizatio...

[SECURITY] Fedora 34 Update: lapack-3.9.0-7.fc34

LAPACK Linear Algebra PACKage is a standard library for numerical linear algebra. LAPACK provides routines for solving systems of simultaneous linear equations, least-squares solutions of linear systems of equations, eigenvalue problems, and singular value problems. Associated matrix factorizatio...

[SECURITY] Fedora 34 Update: python-mpmath-1.2.1-2.fc34

Mpmath is a pure-Python library for multiprecision floating-point arithmetic. It provides an extensive set of transcendental functions, unlimited exponent sizes, complex numbers, interval arithmetic, numerical integration and differentiation, root-finding, linear algebra, and much more. Almost an...

PT-2021-22895 · Openblas +10 · Openblas +10

Name of the Vulnerable Software and Affected Versions: lapack versions 3.10.0 and earlier OpenBLAS versions 0.3.18 and earlier Description: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions. Specially crafted inputs passed to these functions could cause an...

Re-Deriving the edwards25519 Decoding Formulas

A lot of my job is implementing specifications, and sometimes in a crypto spec youll encounter something like this p+3/8 3 p-5/8 x = u/v = u v u v^7 mod p and what you do is nod, copy it into a comment, break it down into a sequence of operations, and check that the result matches a test case.1...

PT-2023-21655 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue arises when the algebra filter is enabled but not functional, typically due to missing necessary binaries from the server. This presents a cross-site scripting XSS risk...

Debian pari/gp 2.x Arbitrary File Overwrite Vulnerability

pari/gp versions 2.9.1 on Debian Stretch and 2.11 on Debian Buster allow arbitrary file write and hence arbitrary code execution. pari/gp on debian stable allow arbitrary file write pari/gp is CAS computer algebra system. pari/gp version 2.9.1 on debian stretch and 2.11 on debian buster allow...

pari/gp 2.x Arbitrary File Overwrite

pari/gp on debian stable allow arbitrary file write pari/gp is CAS computer algebra system. pari/gp version 2.9.1 on debian stretch and 2.11 on debian buster allow arbitrary file write and hence arbitrary code execution. poc: ======== \ a.gp \ to run: \r a.gp...

Fedora Update for blis FEDORA-2019-5fec758a3f

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 30 Update: blis-0.6.0-4.fc30

BLIS is a portable software framework for instantiating high-performance BLAS-like dense linear algebra libraries. The framework was designed to isolate essential kernels of computation that, when optimized, immediately enable optimized implementations of most of its commonly used and...

[SECURITY] Fedora 31 Update: blis-0.6.0-4.fc31

BLIS is a portable software framework for instantiating high-performance BLAS-like dense linear algebra libraries. The framework was designed to isolate essential kernels of computation that, when optimized, immediately enable optimized implementations of most of its commonly used and...

CVE-2019-14318

Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp...