Lucene search
+L

9970 matches found

Github Security Blog
Github Security Blog
•added 2021/05/21 2:21 p.m.•54 views

Division by zero in `Conv3D`

Impact A malicious user could trigger a division by 0 in Conv3D implementation: python import tensorflow as tf inputtensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 filtertensor = tf.constant, shape=0, 0, 0, 0, 0, dtype=tf.float32 tf.rawops.Conv3Dinput=inputtensor, filter=filtertensor,...

5.5CVSS1.1AI score0.00189EPSS
SaveExploits1References7Affected Software3
NVD
NVD
•added 2021/05/20 7:15 p.m.•17 views

CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS0.01423EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2021/05/20 7:15 p.m.•8 views

DEBIAN-CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS7.3AI score0.01423EPSS
SaveExploits1References1
Prion
Prion
•added 2021/05/20 7:15 p.m.•30 views

Design/Logic Flaw

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

5CVSS7.4AI score0.01423EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2021/05/20 7:15 p.m.•34 views

CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS7.1AI score0.01423EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2021/05/20 7:15 p.m.•19 views

UBUNTU-CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS7.1AI score0.01423EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/05/20 7:15 p.m.•14 views

CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS5.2AI score0.01423EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/05/20 6:36 p.m.•46 views

CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.6AI score0.01423EPSS
SaveExploits1References2
Mend
Mend
•added 2021/05/20 6:36 p.m.•5 views

CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

8.7CVSS0.01423EPSS
SaveExploits1References6
Debian CVE
Debian CVE
•added 2021/05/20 6:36 p.m.•64 views

CVE-2021-28905

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS7.4AI score0.01423EPSS
SaveExploits1
osv_cve
osv_cve
•added 2021/05/20 5:15 p.m.•39 views

CVE-2021-29258

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...

7.5CVSS7.5AI score
SaveExploits0References5
NVD
NVD
•added 2021/05/20 5:15 p.m.•31 views

CVE-2021-29258

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...

7.5CVSS0.01772EPSS
SaveExploits0References5
Prion
Prion
•added 2021/05/20 5:15 p.m.•38 views

Authentication flaw

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...

5CVSS7.4AI score0.01772EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2021/05/20 4:40 p.m.•58 views

CVE-2021-29258

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...

7.8AI score0.01772EPSS
SaveExploits0References4
Veracode
Veracode
•added 2021/05/20 3:28 p.m.•44 views

Denial Of Service (DoS)

unbound is vulnerable to denial of service DoS. The vulnerability exists through an assertion failure through a compressed name in dnamepktcopy...

7.5CVSS7.5AI score0.02155EPSS
SaveExploits0References7Affected Software3
Veracode
Veracode
•added 2021/05/20 3:27 p.m.•41 views

Denial Of Service (DoS)

unbound is vulnerable to denial of service. The vulnerability exists due to an assertion failure. in synthcname. An attacker is able to crash the system by sending invalid packets to the server...

7.5CVSS3.3AI score0.0207EPSS
SaveExploits0References7Affected Software3
RedHat Linux
RedHat Linux
•added 2021/05/20 12:45 p.m.•15 views

keycloak: Backchannel logout not working when Principal Type is set to Attribute Name for external SAML IDP

A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SAML identity provider and Principal Type is set to Attribute Name...

7.1CVSS5.7AI score0.00297EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/20 12:00 a.m.•8 views

CVE-2021-28905: Reachable Assertion

In function lysnodefree in libyang module can't be NULL. But in some cases, node-module can be null, which triggers a reachable assertion CWE-617...

7.5CVSS5.8AI score0.01423EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/05/20 12:00 a.m.•23 views

PT-2021-18151 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy version 1.14.0 Description: An issue was discovered that allows for a remotely exploitable crash for HTTP2 Metadata. This occurs because an empty METADATA map triggers a Reachable Assertion. Recommendations: For Envoy version 1.14.0, at...

7.5CVSS7.3AI score0.01772EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/20 12:00 a.m.•8 views

CVE-2021-29258: Reachable Assertion

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...

7.5CVSS5.7AI score0.01772EPSS
SaveExploits0References2
Rows per page
Query Builder