Google TensorFlow Numeric Error Vulnerability (CNVD-2021-88253)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A numeric error vulnerability exists in Google TensorFlow versions prior to 2.7.0, which stems from the implementation of the convolution operator triggering division by 0 when TensorFlow is...

FusionPBX 输入验证错误漏洞

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A security vulnerability exists in FusionPBX before 4.5.30, which stems from faxpostsize ma...

Qualcomm 芯片缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. A buffer error vulnerability exists in Qualcomm chips. The following product...

NVIDIA Windows GPU Display Driver Input Validation Error Vulnerability

Nvidia NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from Nvidia dedicated to the Windows platform. The NVIDIA Windows GPU Display Driver is vulnerable to an input validation error vulnerability that arises from improper management of system resources by a...

Cisco Adaptive Security Appliances Software和Cisco Firepower Threat Defense 缓冲区错误漏洞

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

Cisco Firepower Threat Defense和Cisco Adaptive Security Appliances Software 缓冲区错误漏洞

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

MediaTek asf extractor 缓冲区错误漏洞

MediaTek asf extractor is a chipset from China's MediaTek Mediatek. MediaTek asf extractor suffers from a buffer error vulnerability that stems from incorrect boundary checking, where an out-of-bounds read may occur. This could result in the disclosure of local information without additional...

Apple macOS 缓冲区错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a buffer error vulnerability that originates from a malicious application that may be able to execute arbitrary code using kernel privileges...

AUVESY Versiondog Resource Management Error Vulnerability (CNVD-2021-82931)

AUVESY Versiondog is an automated production data and change management software solution from AUVESY Germany. a resource management error vulnerability exists in AUVESY Versiondog, which can be exploited by attackers to allocate unlimited memory buffers using API functions...

FreeRDP 缓冲区错误漏洞

FreeRDP is an open source implementation of Remote Desktop Protocol RDP from the Freerdp team.FreeRDP has a buffer error vulnerability in versions prior to 2.4.1, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory,...

Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-80242)

Oracle MySQL Server, a relational database from Oracle Corporation, has a security vulnerability in the Server: DDL component of Oracle MySQL Server 8.0.26 and earlier. An attacker could exploit this vulnerability to manipulate data...

Google Go 缓冲区错误漏洞

A buffer error vulnerability exists in Google Go, a statically strongly typed, compiled, concurrent, and garbage collected programming language from Google, Inc. An attacker could exploit this vulnerability to execute remote code. The following products and versions are affected: Google Go versio...

Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Reader is a PDF reader from the Chinese company Foxit. A buffer error vulnerability exists in Foxit PDF, which arises from a failure to validate the existence of an object before performing an operation on it, and allows a remote attacker to execute arbitrary code on an affected PDF...

Zephyr Number Error Vulnerability

Zephyr is an open source, small, scalable real-time operating system. Zephyr suffers from a numeric error vulnerability that stems from the reorganization header removal of Zephyr's integer downstream fragment in IEEE 802154. No detailed vulnerability details are provided at this time...

Brandy 缓冲区错误漏洞

Brandy is a Basic V Interpreter. A buffer error vulnerability exists in Brandy Basic V Interpreter that stems from the product's failure to properly handle data boundaries when the runinterpreter function is run. The following products and versions are affected: Brandy Basic V Interpreter version...

Libqt 缓冲区错误漏洞

Libqt is an open source software package. A buffer error vulnerability exists in Libqt that originates when rendering and displaying carefully crafted Scalable Vector Graphics SVG files; this flaw could lead to unauthorized memory access. The greatest threat of this vulnerability is data...

IBM Sterling B2B Integrator Input Validation Error Vulnerability

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities. IBM Sterling B2B Integrator Standard Edition prior to...

Cisco Small Business 220 Series Smart Switches缓冲区错误漏洞

The Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco USA. A buffer error vulnerability exists in the Cisco Small Business 220 Series Smart Switches, which can be exploited by an attacker to execute code on an affected device or cause the code to be...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. A buffer error vulnerability exists in Google Android. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

Corel WordPerfect 2020 缓冲区错误漏洞

Corel WordPerfect 2020 is a commercial word processing tool from Corel, a Canadian company of Corel Digital Technology Corel. A buffer error vulnerability in Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 can be exploited by an unauthenticated attacker to execute arbitrary code...