Lucene search
+L

3482 matches found

Cvelist
Cvelist
•added 2021/12/17 6:43 p.m.•45 views

CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

6AI score0.01679EPSS
SaveExploits1References2
Mend
Mend
•added 2021/12/17 6:43 p.m.•3 views

CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

6.9CVSS0.01679EPSS
SaveExploits1References8
CVE
CVE
•added 2021/12/17 6:43 p.m.•313 views

CVE-2021-34141

CVE-2021-34141 affects NumPy (numpy.core); the issue is an incomplete string comparison in versions prior to 1.22.0, potentially enabling a DoS via crafted input. Vendor notes describe the behavior as harmless, and no exploit details are provided in the sources beyond the vulnerability descriptio...

5.3CVSS5.5AI score0.01679EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2021/12/17 6:43 p.m.•54 views

CVE-2021-34141

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

5.3CVSS6.5AI score0.01679EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/17 12:00 a.m.•5 views

CVE-2021-41500: Incorrect Comparison

Incomplete string comparison vulnerability exits in cvxopt.org cvxop = 1.2.6 in APIs cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, cvxopt.cholmod.spsolve, which allows attackers to conduct Denial of Service attacks by construct fake Capsule objects...

7.5CVSS5.8AI score0.01189EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/17 12:00 a.m.•5 views

CVE-2021-34141: Incorrect Comparison

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."...

5.3CVSS5.8AI score0.01679EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/12/17 12:00 a.m.•10 views

PT-2021-23314 · Cvxopt +2 · Cvxopt +2

Name of the Vulnerable Software and Affected Versions: cvxopt version 1.2.6 and earlier Description: The issue is related to an incomplete string comparison vulnerability in certain APIs, specifically cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxopt.cholmod.solve, and cvxopt.cholmod.spsolve...

8.7CVSS6.5AI score0.01189EPSS
SaveExploits1References22
OSV
OSV
•added 2021/12/16 7:07 p.m.•16 views

CLSA-2021-1639681626 Fix CVE(s): CVE-2021-2388

Fix CVE-2021-2388 OpenJDK: Incorrect comparison during range check elimination...

7.5CVSS6.7AI score0.04008EPSS
SaveExploits0References1
SonarSource Blog
SonarSource Blog
•added 2021/12/07 12:00 a.m.•38 views

Modernizing your code with C++20

​C++20 is here! In fact, as we head towards 2022, it’s been here a while. It may surprise some, but we’re only a few months from a freeze on new proposals for C++23! But let’s not get ahead of ourselves. C++20 is a big release - at least the biggest since C++11 - some have said it's the biggest...

7.1AI score
SaveExploits0
Akamai Blog
Akamai Blog
•added 2021/12/01 9:05 p.m.•23 views

Cyber Monday Web Traffic Up Over 2020

Online retail traffic that Akamai delivered during Cyber Monday was up 5% globally compared to Cyber Monday 2020 and 31% compared to average Monday traffic...

2.4AI score
SaveExploits0
OSV
OSV
•added 2021/11/18 6:15 p.m.•21 views

CVE-2021-23146

An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3; 8.20 versions prior to 8.20.1259 MR5; 8.1...

7.5CVSS5.8AI score0.0088EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/18 6:15 p.m.•34 views

CVE-2021-23146

An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3; 8.20 versions prior to 8.20.1259 MR5; 8.1...

7.5CVSS0.0088EPSS
SaveExploits0References1
Prion
Prion
•added 2021/11/18 6:15 p.m.•38 views

Privilege escalation

An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3; 8.20 versions prior to 8.20.1259 MR5; 8.1...

5CVSS7.5AI score0.0088EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/11/18 5:59 p.m.•71 views

CVE-2021-23146

The CVE-2021-23146 entry concerns an Incomplete Comparison with Missing Factors vulnerability in Gallagher Command Centre (Gallagher Controller). Affected software: Gallagher Command Centre versions prior to 8.40.1888 (MR3); prior to 8.30.1454 (MR3); prior to 8.20.1291 (MR5); prior to 8.10.1284 (...

7.5CVSS7.5AI score0.0088EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/18 12:00 a.m.•4 views

CVE-2021-23146: Incomplete Comparison with Missing Factors

An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3; 8.20 versions prior to 8.20.1259 MR5; 8.1...

7.5CVSS5.8AI score0.0088EPSS
SaveExploits0References3
Code423n4
Code423n4
•added 2021/11/16 12:00 a.m.•20 views

setReserve() can be front-run

Handle palina Vulnerability details Impact The reserve address variable in NestedFactory.sol remains equal to 0 before the setReserve function is called by an owner. This may lead to incorrect transfers of tokens or invalid comparison with e.g., the asset reserve nestedRecords.getAssetReservenftI...

6.9AI score
SaveExploits0
Oracle linux
Oracle linux
•added 2021/11/16 12:00 a.m.•70 views

kernel security, bug fix, and enhancement update

4.18.0-348.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and shim-x...

8.8CVSS6.3AI score0.07604EPSS
SaveExploits13
attackerkb
attackerkb
•added 2021/11/15 7:34 a.m.•17 views

CVE-2021-23146

An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 MR3; 8.30 versions prior to 8.30.1359 MR3; 8.20 versions prior to 8.20.1259 MR5; 8.1...

7.5CVSS7.1AI score0.0088EPSS
SaveExploits0References2Affected Software1
RedHat Linux
RedHat Linux
•added 2021/11/11 6:30 p.m.•15 views

OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated...

4.3CVSS7.4AI score0.04411EPSS
SaveExploits0References4
Trend Micro Simply Security
Trend Micro Simply Security
•added 2021/11/11 12:00 a.m.•66 views

TeamTNT Upgrades Arsenal, Refines Focus on Kubernetes and GPU Environments

Using a new batch of campaign samples, we take a look at its more recent cybercrime contributions and compare them with its previous deployments to demonstrate the group’s use of upgraded tools and payloads...

7AI score
SaveExploits0
Rows per page
Query Builder