Lucene search
+L

7583 matches found

OSV
OSV
added 2022/02/09 10:00 p.m.13 views

GHSA-F85H-23MF-2FWH Argument Injection in Ansible

A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified. If a previous task is executed with a malicious user, the module sent can be selected by the attacker using the ansible facts file. All versions in 2.7.x, 2.8.x and 2.9.x branch...

3.9CVSS6.8AI score0.00384EPSS
SaveExploits0References8
OSV
OSV
added 2022/02/09 6:29 p.m.9 views

GHSA-C6FH-56W7-FVJW Integer overflow in Tensorflow

Impact The implementation of shape inference for Dequantize is vulnerable to an integer overflow weakness: python import tensorflow as tf input = tf.constant1,1,dtype=tf.qint32 @tf.function def test: y = tf.rawops.Dequantize input=input, minrange=1.0, maxrange=10.0, mode='MINCOMBINED',...

7.6CVSS5.9AI score0.00659EPSS
SaveExploits1References7
Veracode
Veracode
added 2022/02/08 4:24 a.m.20 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker can crash the application through the GraphDef in tensorflow SavedModel by providing an invalid argument to ctortype...

7.5CVSS3.8AI score0.00973EPSS
SaveExploits1References6Affected Software3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.24 views

Mitsubishi IU1 Argument Injection (CVE-2020-5546)

Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows an attacker on the same network segment to stop the network functio...

8.9AI score0.00901EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.31 views

Siemens Improper Neutralization of Argument Delimiters in a Command in Wind River VxWorks (CVE-2019-12265)

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report. This plugin only works with Tenable.ot. Please visit...

5.3CVSS7.7AI score0.59798EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:00 a.m.39 views

Siemens Improper Neutralization of Argument Delimiters in a Command in Wind River VxWorks (CVE-2019-12258)

Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. C Tenable,...

7.5CVSS8.5AI score0.23354EPSS
SaveExploits2References14
Vulnrichment
Vulnrichment
added 2022/02/04 10:32 p.m.6 views

CVE-2022-23574 Out of bounds read and write in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's SpecializeType which results in heap OOB read/write. Due to a typo, arg is initialized to the ith mutable argument in a loop where the loop index is j. Hence it is possible to assign to arg from outside the...

8.8CVSS8.6AI score0.00837EPSS
SaveExploits1References3
NVD
NVD
added 2022/02/03 1:15 p.m.38 views

CVE-2022-21725

Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can be made to execute a division by 0. The function fails to check that the stride argument is strictly positive. Hence, the fix is to add a check for the stride argument to ensure ...

6.5CVSS0.00783EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/03 1:15 p.m.25 views

PYSEC-2022-49

Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can be made to execute a division by 0. The function fails to check that the stride argument is strictly positive. Hence, the fix is to add a check for the stride argument to ensure ...

6.5CVSS2AI score0.00783EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/02/03 12:21 p.m.38 views

CVE-2022-21725 Division by zero in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can be made to execute a division by 0. The function fails to check that the stride argument is strictly positive. Hence, the fix is to add a check for the stride argument to ensure ...

6.5CVSS6.8AI score0.00783EPSS
SaveExploits1References3
Prion
Prion
added 2022/02/03 11:15 a.m.26 views

Integer overflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for Dequantize is vulnerable to an integer overflow weakness. The axis argument can be -1 the default value for the optional argument or any other positive value at most the number of dimensions of the...

6.5CVSS8.8AI score0.00659EPSS
SaveExploits1References3Affected Software1
Snyk
Snyk
added 2022/02/03 6:01 a.m.8 views

Denial of Service (DoS)

Overview libpq is a node native bindings to the PostgreSQL libpq C client library. Affected versions of this package are vulnerable to Denial of Service DoS when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. Note: pg-native ...

7.5CVSS7AI score0.01302EPSS
SaveExploits1References2
Snyk
Snyk
added 2022/02/03 6:01 a.m.7 views

Denial of Service (DoS)

Overview pg-native is a high performance native bindings between node.js and PostgreSQL via libpq with a simple API. Affected versions of this package are vulnerable to Denial of Service DoS when the addons attempt to cast the second argument to an array and fail. This happens for every non-array...

7.5CVSS7AI score0.01302EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/02/03 12:00 a.m.7 views

PT-2022-15064 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier Description: The estimator for the cost of some convolution operations in TensorFlow can be...

6.8CVSS6.3AI score0.00783EPSS
SaveExploits1References13
OSV
OSV
added 2022/01/27 1:52 p.m.12 views

CLSA-2022-1643291562 Fix of CVE: CVE-2021-4034

CVE-2021-4034: polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector...

7.8CVSS6.9AI score0.94921EPSS
SaveExploits154References1
OSV
OSV
added 2022/01/26 3:49 p.m.22 views

CLSA-2022-1643212149 Fix of CVE: CVE-2021-4034

CVE-2021-4034: polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector...

7.8CVSS7AI score0.94921EPSS
SaveExploits154References1
OSV
OSV
added 2022/01/26 3:42 p.m.13 views

CLSA-2022-1643211736 Fix CVE(s): CVE-2021-4034

SECURITY UPDATE: Local Privilege Escalation in pkexec - debian/patches/CVE-2021-4034.patch: properly handle command-line arguments in src/programs/pkcheck.c, src/programs/pkexec.c. - CVE-2021-4034...

7.8CVSS7AI score0.94921EPSS
SaveExploits154References1
RedHat Linux
RedHat Linux
added 2022/01/25 8:10 p.m.7 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154References7
RedHat Linux
RedHat Linux
added 2022/01/25 7:47 p.m.7 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154References7
RedHat Linux
RedHat Linux
added 2022/01/25 7:07 p.m.10 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154References7
Rows per page
Query Builder