WS-2022-0137

The implementation of depthwise ops in TensorFlow is vulnerable to a denial of service via "CHECK"-failure assertion failure caused by overflowing the number of elements in a tensor: This is another instance of "TFSA-2021-198"...

com.googlecode.wicketelements:wicket-elements-components (>=1.4.9, <=1.4.10), com.googlecode.wicketelements:wicket-elements-library (>=1.4.9, <=1.4.10) +191 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.4)

org.apache.wicket:wicket-core MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicketelements:wicket-elements-components =1.4.9, =1.4.9, =1.4.9, =1.4.9, =1.4.9,...

com.googlecode.wicketelements:wicket-elements-components (1.4.8), com.googlecode.wicketelements:wicket-elements-library (1.4.8) +214 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.3)

org.apache.wicket:wicket-core MAVEN version 1.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicketelements:wicket-elements-components 1.4.8 -...

GHSA-68P4-PJPF-XWCQ insert_slice_clone can double drop if Clone panics.

Affected versions of this crate used ptr::copy when inserting into the middle of a Vec. When ownership was temporarily duplicated during this copy, it calls the clone method of a user provided element. This issue can result in an element being double-freed if the clone call panics. Commit 20cb73d...

GHSA-65P8-5423-FW3X Pimcore XSS Vulnerability

Pimcore 6prior to 6.3.0 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements...

Pimcore XSS Vulnerability

Pimcore 6prior to 6.3.0 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements...

GO-2021-0319 Incorrect computation for some invalid field elements in crypto/elliptic

Some big.Int values that are not valid field elements negative or overflowing might cause Curve.IsOnCurve to incorrectly return true. Operating on those values may cause a panic or an invalid curve operation. Note that Unmarshal will never return such values...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44209)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Google TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, which stems from the presence of a non-numeric...

MISP Threat Analysis XSS

The vulnerability in the app/View/GalaxyElements/ajax/index.ctp component of the MISP threat analysis and information sharing platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks...

CVE-2022-29211: Improper Input Validation

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of tf.histogramfixedwidth is vulnerable to a crash when the values array contain Not a Number NaN elements. The implementation assumes that all floating point operation...

Twig Template Compiler Template Injection

The vulnerability of the Twig template compiler exists because measures to neutralize special elements are not taken. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information by executing certain PHP...

ImageProcessing Command Injection

The vulnerability of the ImageProcessing software exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute shell commands...

CVE-2022-1358

The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database...

GHSA-V4VM-GJ2X-6QHM DCE extension for Typo3 Discloses Environment Information

The default configuration in the Dynamic Content Elements dce extension before 0.11.5 for TYPO3 allows remote attackers to obtain sensitive installation environment information by reading the update check request...

GHSA-6R5V-HP32-FJQW Improper Access Control in Apache WSS4J

Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a vectors related to "wrapping attacks."...

Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ

The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a denial of service shutdown via a shutdown command...

at.molindo:molindo-wicket-utils (>=2.0.0-alpha-1, <=2.0.0), br.net.woodstock.rockframework:rockframework-web (1.2.4) +373 more potentially affected by CVE-2014-7808 via org.apache.wicket:wicket-core (>=1.5-rc1, <=1.5.12)

org.apache.wicket:wicket-core MAVEN version =1.5-rc1, =2.0.0-alpha-1, =1.3.0, =1.0.0, =1.0.0, =1.2.1, =1.0, =1.2.0, =1.2.1, =1.5.10, =1.5.10, =1.5.10, =1.5.10, =1.5.10, =1.4.8, =1.4.10 and more Source cves: CVE-2014-7808 Source advisory:...

Dropwizard-Validation Code Execution

The vulnerability of the Dropwizard-Validation software exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with privileges of the Dropwizard service account...

golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

A flaw was found in the elliptic package of the crypto library in golang when the IsOnCurve function could return true for invalid field elements. This flaw allows an attacker to take advantage of this undefined behavior, affecting the availability and integrity of the resource...

kernel: wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()

An integer overflow flaw was found in the Linux kernel's nl80211 wireless configuration interface in the MBSSID element parsing logic. A local user with CAPNETADMIN capability can trigger this issue by specifying 256 or more MBSSID elements through the nl80211 interface, causing the u8 counter...