rpnet (>=0.0.1 <=0.1.0), rpnet-dev (>=0.0.5 <=0.0.12) +4 more potentially affected by CVE-2022-21726 via tensorflow-gpu (=2.7.0)

tensorflow-gpu PYPI version =2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - rpnet =0.0.1, =0.0.5, =1.0.5, =1.1.1 - tpu-tf2 =1.0.0 - troj =1.0.0 Source cves: CVE-2022-21726 Source advisory:...

rpnet (>=0.0.1 <=0.1.0), rpnet-dev (>=0.0.5 <=0.0.12) +4 more potentially affected by CVE-2022-23580 via tensorflow-gpu (=2.7.0)

tensorflow-gpu PYPI version =2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - rpnet =0.0.1, =0.0.5, =1.0.5, =1.1.1 - tpu-tf2 =1.0.0 - troj =1.0.0 Source cves: CVE-2022-23580 Source advisory:...

rpnet (>=0.0.1 <=0.1.0), rpnet-dev (>=0.0.5 <=0.0.12) +4 more potentially affected by CVE-2022-23581 via tensorflow-gpu (=2.7.0)

tensorflow-gpu PYPI version =2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - rpnet =0.0.1, =0.0.5, =1.0.5, =1.1.1 - tpu-tf2 =1.0.0 - troj =1.0.0 Source cves: CVE-2022-23581 Source advisory:...

Gerbv 资源管理错误漏洞

Gerbv is a Gerber file Rs-274X only viewer. It is used to view Rs-274X Gerber files, Excellon drilling files, and Pick-N-Place files. A resource management error vulnerability exists in Gerbv that stems from the product RS-274X Aperture Definition Marker feature reusing released resources. An...

CVE-2021-4160 BN_mod_exp may produce incorrect results on MIPS

There is a carry propagation bug in the MIPS32 and MIPS64 squaring procedure. Many EC algorithms are affected, including some of the TLS 1.3 default curves. Impact was not analyzed in detail, because the pre-requisites for attack are considered unlikely and include reusing private keys. Analysis...

GLSA-202107-19 : Jinja: Denial of service

The remote host is affected by the vulnerability described in GLSA-202107-19 Jinja: Denial of service The urlize filter in Jinja utilized an inefficient regular expression that could be exploited to consume excess CPU. Impact : An attacker could cause a Denial of Service condition via crafted inp...

GLSA-202107-36 : urllib3: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-36 urllib3: Multiple vulnerabilities Multiple vulnerabilities have been discovered in urllib3. Please review the CVE identifiers referenced below for details. Impact : An attacker could cause a possible Denial of Service...

Cross-site Scripting (XSS)

pimcore/pimcore is vulnerable to cross-site scripting XSS attacks. An attacker is able to bypass the validations due to improper input neutralization during web page generation. The vulnerability can be exploited via changing the rule name in the admin dev page allowing attackers to inject and...

Destructive malware targeting Ukrainian organizations

Microsoft Threat Intelligence Center MSTIC has identified evidence of a destructive malware operation targeting multiple organizations in Ukraine. This malware first appeared on victim systems in Ukraine on January 13, 2022. Microsoft is aware of the ongoing geopolitical events in Ukraine and...

Debian: Security Advisory (DLA-2877-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-8403

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified, specifically in the btrfs module. The problem occurs when certain functions, such as btrfs qgroup inherit, btrfs alloc tree block, or btr...

PT-2025-7974

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified where the dev set name function's return value is not properly checked. If dev set name fails, dev name may return null, potential...

CVE-2021-44926

A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gfnodegettag function, which causes a segmentation fault and application crash...

CVE-2021-44919

A Null Pointer Dereference vulnerability exists in the gfsgvrmlmfalloc function in gpac 1.1.0-DEV, which causes a segmentation fault and application crash...

CVE-2021-44919

A Null Pointer Dereference vulnerability exists in the gfsgvrmlmfalloc function in gpac 1.1.0-DEV, which causes a segmentation fault and application crash...

CVE-2021-44919

A Null Pointer Dereference vulnerability exists in the gfsgvrmlmfalloc function in gpac 1.1.0-DEV, which causes a segmentation fault and application crash...

CVE-2021-44919

The CVE-2021-44919 issue affects GPAC (gpac 1.1.0-DEV) with a null pointer dereference in gf_sg_vrml_mf_alloc, leading to a segmentation fault and application crash. Affected component: GPAC’s core library (gf_sg_vrml_mf_alloc). Practical impact: potential crash of vulnerable builds. Public detai...

PT-2021-8142 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an incorrect structure access in the Linux kernel's net component, specifically in the prestera module. This can cause invalid memory access for certain events,...

CVE-2021-44041

UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI handler for uipath-assistant://. This allows an attacker to execute code on a victim's machine or capture NTLM credentials by supplying a networked or WebDAV...

CVE-2021-44041

UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI handler for uipath-assistant://. This allows an attacker to execute code on a victim's machine or capture NTLM credentials by supplying a networked or WebDAV...