Lucene search
+L

7577 matches found

Vulnrichment
Vulnrichment
added 2022/02/04 10:32 p.m.6 views

CVE-2022-23574 Out of bounds read and write in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's SpecializeType which results in heap OOB read/write. Due to a typo, arg is initialized to the ith mutable argument in a loop where the loop index is j. Hence it is possible to assign to arg from outside the...

8.8CVSS8.6AI score0.00837EPSS
SaveExploits1References3
NVD
NVD
added 2022/02/03 1:15 p.m.38 views

CVE-2022-21725

Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can be made to execute a division by 0. The function fails to check that the stride argument is strictly positive. Hence, the fix is to add a check for the stride argument to ensure ...

6.5CVSS0.00783EPSS
SaveExploits1References3
OSV
OSV
added 2022/02/03 1:15 p.m.25 views

PYSEC-2022-49

Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can be made to execute a division by 0. The function fails to check that the stride argument is strictly positive. Hence, the fix is to add a check for the stride argument to ensure ...

6.5CVSS2AI score0.00783EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/02/03 12:21 p.m.38 views

CVE-2022-21725 Division by zero in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. The estimator for the cost of some convolution operations can be made to execute a division by 0. The function fails to check that the stride argument is strictly positive. Hence, the fix is to add a check for the stride argument to ensure ...

6.5CVSS6.8AI score0.00783EPSS
SaveExploits1References3
Prion
Prion
added 2022/02/03 11:15 a.m.26 views

Integer overflow

Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for Dequantize is vulnerable to an integer overflow weakness. The axis argument can be -1 the default value for the optional argument or any other positive value at most the number of dimensions of the...

6.5CVSS8.8AI score0.00659EPSS
SaveExploits1References3Affected Software1
Snyk
Snyk
added 2022/02/03 6:01 a.m.8 views

Denial of Service (DoS)

Overview libpq is a node native bindings to the PostgreSQL libpq C client library. Affected versions of this package are vulnerable to Denial of Service DoS when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. Note: pg-native ...

7.5CVSS7AI score0.01302EPSS
SaveExploits1References2
Snyk
Snyk
added 2022/02/03 6:01 a.m.7 views

Denial of Service (DoS)

Overview pg-native is a high performance native bindings between node.js and PostgreSQL via libpq with a simple API. Affected versions of this package are vulnerable to Denial of Service DoS when the addons attempt to cast the second argument to an array and fail. This happens for every non-array...

7.5CVSS7AI score0.01302EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/02/03 12:00 a.m.7 views

PT-2022-15064 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier Description: The estimator for the cost of some convolution operations in TensorFlow can be...

6.8CVSS6.3AI score0.00783EPSS
SaveExploits1References13
OSV
OSV
added 2022/01/27 1:52 p.m.12 views

CLSA-2022-1643291562 Fix of CVE: CVE-2021-4034

CVE-2021-4034: polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector...

7.8CVSS6.9AI score0.94921EPSS
SaveExploits154References1
OSV
OSV
added 2022/01/26 3:49 p.m.22 views

CLSA-2022-1643212149 Fix of CVE: CVE-2021-4034

CVE-2021-4034: polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector...

7.8CVSS7AI score0.94921EPSS
SaveExploits154References1
OSV
OSV
added 2022/01/26 3:42 p.m.12 views

CLSA-2022-1643211736 Fix CVE(s): CVE-2021-4034

SECURITY UPDATE: Local Privilege Escalation in pkexec - debian/patches/CVE-2021-4034.patch: properly handle command-line arguments in src/programs/pkcheck.c, src/programs/pkexec.c. - CVE-2021-4034...

7.8CVSS7AI score0.94921EPSS
SaveExploits154References1
RedHat Linux
RedHat Linux
added 2022/01/25 8:10 p.m.7 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154References7
RedHat Linux
RedHat Linux
added 2022/01/25 7:47 p.m.7 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154References7
RedHat Linux
RedHat Linux
added 2022/01/25 7:07 p.m.10 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154References7
RedHat Linux
RedHat Linux
added 2022/01/25 6:30 p.m.5 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154References7
RedHat Linux
RedHat Linux
added 2022/01/25 6:21 p.m.8 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154References7
RedHat Linux
RedHat Linux
added 2022/01/25 6:21 p.m.7 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154References7
RedHat Linux
RedHat Linux
added 2022/01/25 6:15 p.m.6 views

polkit: Local privilege escalation in pkexec due to incorrect handling of argument vector

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters coun...

7.8CVSS7.1AI score0.94921EPSS
SaveExploits154References7
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.13 views

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software lies in insufficient checking of the arguments passed in commands, allowing attackers to execute arbitrary commands.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to insufficient testing of the arguments passed in commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9.6CVSS8AI score0.00822EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/01/21 11:19 p.m.59 views

GHSA-2457-2263-MM9F Memory leak in micronaut-core

Impact Sending an invalid Content Type header leads to memory leak in DefaultArgumentConversionContext as this type is erroneously used in static state. Patches The problem is patched in Micronaut 3.2.7 and above. Workarounds The default content type binder can be replaced in an existing Micronau...

5.3CVSS5.9AI score0.0115EPSS
SaveExploits0References4
Rows per page
Query Builder