Lucene search
K

911 matches found

RedHat Linux
RedHat Linux
added 2021/11/09 5:42 p.m.2 views

openjpeg: denial of service in function opj_t1_encode_cblks in openjp2/t1.c

No description is available for this CVE...

5.5CVSS7.3AI score0.00104EPSS
Exploits0References4
OSV
OSV
added 2021/09/17 9:15 p.m.1 views

UBUNTU-CVE-2020-21548

Libsixel 1.8.3 contains a heap-based buffer overflow in the sixelencodehighcolor function in tosixel.c...

8.8CVSS7.5AI score0.00381EPSS
Exploits1References4
CNNVD
CNNVD
added 2021/09/17 12:0 a.m.1 views

libsixel 缓冲区错误漏洞

libsixel is a SIXEL encoder/decoder implementation. a heap buffer overflow vulnerability exists in the sixelencodehighcolor function in tosixel.c in Libsixel version 1.8.3. No detailed vulnerability details are currently available...

8.8CVSS8.2AI score0.00381EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/08/26 12:0 a.m.13 views

Fedora: Security Advisory for perl-Encode (FEDORA-2021-44c65203cc)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.8AI score0.0011EPSS
Exploits0References2
Fedora
Fedora
added 2021/08/25 8:4 p.m.24 views

[SECURITY] Fedora 33 Update: perl-Encode-3.08-459.fc33

The Encode module provides the interface between Perl strings and the rest of the system. Perl strings are sequences of characters...

7.8CVSS4AI score0.0011EPSS
Exploits0
OSV
OSV
added 2021/08/25 2:42 p.m.0 views

GHSA-W74J-V8XH-3W5H Reference binding to nullptr in unicode encoding

Impact An attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.UnicodeEncode: python import tensorflow as tf from tensorflow.python.ops import genstringops genstringops.unicodeencode inputvalues=, inputsplits=, outputencoding='UTF-8', errors='ignore',...

8.5CVSS6.4AI score0.00013EPSS
Exploits0References7
NVD
NVD
added 2021/08/23 1:15 p.m.12 views

CVE-2021-3694

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure...

9.6CVSS0.00252EPSS
Exploits0References4
Prion
Prion
added 2021/08/23 1:15 p.m.11 views

Information disclosure

LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure...

6.8CVSS9.1AI score0.00252EPSS
Exploits0References4Affected Software2
Fedora
Fedora
added 2021/08/13 1:22 a.m.35 views

[SECURITY] Fedora 34 Update: perl-Encode-3.12-460.fc34

The Encode module provides the interface between Perl strings and the rest of the system. Perl strings are sequences of characters...

7.8CVSS4AI score0.0011EPSS
Exploits0
OpenVAS
OpenVAS
added 2021/08/13 12:0 a.m.10 views

Fedora: Security Advisory for perl-Encode (FEDORA-2021-92e07de1dd)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.8AI score0.0011EPSS
Exploits0References2
PyPA
PyPA
added 2021/08/12 10:15 p.m.4 views

PYSEC-2021-289

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.UnicodeEncode. The implementation reads the first dimension of the inputsplits tensor before validating that th...

7.8CVSS6.9AI score0.00013EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/08/12 10:15 p.m.1 views

CVE-2021-37667

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.UnicodeEncode. The implementation reads the first dimension of the inputsplits tensor before validating that th...

7.8CVSS5.6AI score0.00013EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2021/08/12 9:40 p.m.3 views

CVE-2021-37667

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.UnicodeEncode. The implementation reads the first dimension of the inputsplits tensor before validating that th...

7.8CVSS6.9AI score0.00013EPSS
Exploits0
OSV
OSV
added 2021/08/11 11:15 p.m.1 views

ALPINE-CVE-2021-36770

Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...

7.8CVSS7.1AI score0.0011EPSS
Exploits0References1
OSV
OSV
added 2021/08/11 11:15 p.m.1 views

DEBIAN-CVE-2021-36770

Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...

7.8CVSS7.5AI score0.0011EPSS
Exploits0References1
Prion
Prion
added 2021/08/11 11:15 p.m.16 views

Design/Logic Flaw

Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...

6.8CVSS7.5AI score0.0011EPSS
Exploits0References8Affected Software2
Debian CVE
Debian CVE
added 2021/08/11 10:49 p.m.39 views

CVE-2021-36770

Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library in the current working directory that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm 3.05...

7.8CVSS7.6AI score0.0011EPSS
Exploits0
Kitploit
Kitploit
added 2021/08/11 9:30 p.m.249 views

Wsh - Web Shell Generator And Command Line Interface

wsh pronounced woosh is a web shell generator and command line interface. This started off as just an http client since interacting with webshells is a pain. There's a form, to send a command you have to type in an input box and press a button. I wanted something that fits into my workflow better...

7.6AI score
Exploits0References1
Ubuntu
Ubuntu
added 2021/08/09 3:30 p.m.109 views

USN-5033-1: Perl vulnerability

It was discovered that the Perl Encode library incorrectly handled paths. A local attacker could possibly use this issue to trick the library into executing arbitrary code from the current working directory...

7.8CVSS7.8AI score0.0011EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2021/08/09 12:20 p.m.53 views

CVE-2021-36770

A flaw was found in perl-Encode, where the Perl5 Encode module loaded modules within the current directory. This flaw allows an attacker with write access to the current directory of a Perl5 process to inject arbitrary Perl code when this module is loaded, which can be used for a local privilege...

7.8CVSS1.7AI score0.0011EPSS
Exploits0References4
Rows per page
Query Builder