Lucene search
+L

11950 matches found

Microsoft CVE
Microsoft CVE
added 2021/12/28 8:00 a.m.7 views

Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19 which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be created by an already privileged user (or internally)

...

5.5CVSS9.5AI score0.00368EPSS
SaveExploits1
Code423n4
Code423n4
added 2021/12/21 12:00 a.m.8 views

Out of gas.

Handle Jujic Vulnerability details There is no upper limit on poolColl.tokens, it increments each time when a new collateral is added. Eventually, as the count of collateral increases, gas cost of smart contract calls will raise and that there is no implemented function to reduce the array size...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2021/12/21 12:00 a.m.107 views

NumPy buffer overflow vulnerability

NumPy is a Python scientific computing package. NumPy version 1.9 is vulnerable to a buffer overflow vulnerability caused by the lack of a limit on array length in the PyArrayNewFromDescrint function in ctor .c, which leads to a buffer overflow vulnerability that can be exploited to cause a denia...

5.3CVSS4.8AI score0.01074EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/19 7:42 p.m.15 views

GSD-2021-1002557 net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()

net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3infoblock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by comm...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/12/19 7:42 p.m.19 views

GSD-2021-1002554 ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()

ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version...

7.4AI score
SaveExploits0
OSV
OSV
added 2021/12/19 7:36 p.m.16 views

GSD-2021-1002413 ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()

ethernet: hisilicon: hns: hnsdsafmisc: fix a possible array overflow in hnsdsafgesrstbyport This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version...

7.4AI score
SaveExploits0
OSV
OSV
added 2021/12/19 7:35 p.m.11 views

GSD-2021-1002393 net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()

net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3infoblock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.257 by...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/12/19 7:35 p.m.12 views

GSD-2021-1002392 net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound

net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.257 by...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/12/19 7:34 p.m.12 views

GSD-2021-1002374 net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound

net: tulip: de4x5: fix the problem that the array 'lp-phy8' may be out of bound This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.292 by comm...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/12/19 7:33 p.m.17 views

GSD-2021-1002360 net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()

net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3infoblock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.294 by...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/12/17 8:15 p.m.2 views

DEBIAN-CVE-2021-41496

Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be...

5.5CVSS7.2AI score0.00368EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/17 8:15 p.m.9 views

UBUNTU-CVE-2021-41496

Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be...

5.5CVSS6.8AI score0.00368EPSS
SaveExploits1References6
PyPA
PyPA
added 2021/12/17 8:15 p.m.11 views

PYSEC-2021-857

Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values...

5.5CVSS7.2AI score0.00368EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/12/17 8:15 p.m.42 views

Buffer overflow

DISPUTED Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can onl...

2.1CVSS5.4AI score0.00368EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/12/17 12:00 a.m.50 views

NumPy 缓冲区错误漏洞

NumPy is a Python scientific computing package. NumPy version 1.9 is vulnerable to a buffer overflow vulnerability caused by the lack of a limit on array length in the PyArrayNewFromDescrint function in ctor .c, which leads to a buffer overflow vulnerability that can be exploited to cause a denia...

5.3CVSS5.9AI score0.01074EPSS
SaveExploits1References12
Tenable Nessus
Tenable Nessus
added 2021/12/17 12:00 a.m.35 views

Debian DLA-2846-1 : raptor2 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2846 advisory. - A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon. CVE-2020-25713 Note that Nessus has not tested fo...

6.5CVSS6.5AI score0.02143EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/12/17 12:00 a.m.11 views

PT-2021-8282

Name of the Vulnerable Software and Affected Versions NumPy versions prior to 1.19 Description The issue is related to a buffer overflow in the array from pyobj function of fortranobject.c in NumPy, which can be exploited to conduct Denial of Service attacks by carefully constructing an array wit...

5.5CVSS6.7AI score0.01561EPSS
SaveExploits4References62
ATTACKERKB
ATTACKERKB
added 2021/12/16 7:15 p.m.5 views

CVE-2021-38244

A regular expression denial of service ReDoS vulnerability exits in cbioportal 3.6.21 and older via a POST request to /ProteinArraySignificanceTest.json...

7.5CVSS7.1AI score0.0118EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.13 views

The vulnerability of the HarmonyOS operating system’s kernel, related to incorrect array indexing, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the HarmonyOS operating system’s kernel is related to incorrect array indexing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

4.6CVSS7.8AI score0.00741EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.10 views

The vulnerability of the HarmonyOS operating system’s kernel, related to incorrect array indexing, allows a attacker to trigger a device reboot.

The vulnerability of the HarmonyOS operating system’s kernel is related to incorrect array indexing. Exploiting this vulnerability can allow a malicious actor to remotely trigger a system reboot...

7.8CVSS7.2AI score0.00667EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder