Lucene search
+L

246 matches found

Prion
Prion
•added 2022/02/04 11:15 p.m.•30 views

Integer overflow

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior...

7.5CVSS9.4AI score0.00896EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/02/04 11:15 p.m.•18 views

PYSEC-2022-151

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior...

9.8CVSS7.2AI score0.00896EPSS
SaveExploits1References3
PyPA
PyPA
•added 2022/02/04 11:15 p.m.•12 views

PYSEC-2022-96

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior...

9.8CVSS7.2AI score0.00896EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/02/04 11:15 p.m.•25 views

PYSEC-2022-96

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior...

9.8CVSS3.2AI score0.00896EPSS
SaveExploits1References3
OSV
OSV
•added 2022/02/04 10:32 p.m.•41 views

CVE-2022-23587 Integer overflow in Tensorflow

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior...

8.8CVSS9.2AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/04 12:00 a.m.•1 views

CVE-2022-23587: Integer Overflow or Wraparound

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior...

9.8CVSS8.1AI score0.00896EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/02/04 12:00 a.m.•7 views

PT-2022-16104 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier Description: The Grappler component of TensorFlow is vulnerable to an integer overflow during...

9.8CVSS9.4AI score0.00896EPSS
SaveExploits1References12
Code423n4
Code423n4
•added 2021/09/08 12:00 a.m.•11 views

Unhandled reverts from Cosmos to Eth batches can cause *Denial Of Service*

Handle hack3r-0m Vulnerability details At the above-mentioned places in Gravity contract, it makes external call to a function to transfer erc20 token. This can cause revert in cases where erc20 safeTransfer fails for e.g erc20 contract has blacklisted address of gravity contract to alllow...

6.8AI score
SaveExploits0
OSV
OSV
•added 2021/06/22 11:15 a.m.•10 views

CVE-2021-0562

In RasterIntraUpdate of motionest.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

5.5CVSS5.9AI score0.00115EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/06/22 11:15 a.m.•9 views

CVE-2021-0562

In RasterIntraUpdate of motionest.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

5.5CVSS6.1AI score0.00115EPSS
SaveExploits0References2
OSV
OSV
•added 2021/06/01 12:00 a.m.•16 views

PUB-A-176084648

In RasterIntraUpdate of motionest.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00115EPSS
SaveExploits0References2
Veeam
Veeam
•added 2020/11/26 12:00 a.m.•20 views

Additional Information on Cost Estimation in Veeam Plug-In for Google Cloud

Challenge The cost estimation feature allows you to approximately estimate the costs of Google Cloud resources required to run data protection operations for a backup policy. You can obtain granular information on how much costs running the policy will incur, with an option to export the estimati...

5.9AI score
SaveExploits0Affected Software1
OSV
OSV
•added 2020/07/07 5:15 p.m.•14 views

CVE-2020-15350

RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64decode uses an output buffer estimation function to compute the required buffer capacity and validate against the provided buffer size. The base64estimatedecodesize function calculates the expected decoded size...

9.8CVSS6.2AI score0.01475EPSS
SaveExploits0References2
Prion
Prion
•added 2020/07/07 5:15 p.m.•26 views

Buffer overflow

RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64decode uses an output buffer estimation function to compute the required buffer capacity and validate against the provided buffer size. The base64estimatedecodesize function calculates the expected decoded size...

7.5CVSS9.6AI score0.01475EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2020/04/15 2:15 p.m.•29 views

Buffer overflow

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite component: Estimate and Actual Charges. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Depot...

5.8CVSS8.1AI score0.01314EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
•added 2020/04/13 12:00 p.m.•100 views

Sherloq - An Open-Source Digital Image Forensic Toolset

An open source image forensic toolset Introduction "Forensic ImageAnalysis is the application of image science and domain expertise to interpret the content of an image and/or the image itself in legal matters. Major subdisciplines of Forensic Image Analysis with law enforcement applications...

7.2AI score
SaveExploits0References1
Veeam
Veeam
•added 2019/12/02 12:00 a.m.•35 views

Additional Information on “Cost Estimation” in Veeam Plug-In for AWS

Related User Guide Page This KB article provides additional information to the following pages: Creating EC2 Backup Policies Step 9. Review Estimated Cost Creating RDS Backup Policies Step 9. Review Estimated Cost Challenge Cost Estimation provides the administrator feedback on estimates of AWS...

5.9AI score
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/14 12:00 a.m.•5 views

CVE-2019-9768: Undefined Security Weakness

Thinkst Canarytokens through commit hash 4e89ee0 2019-03-01 relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers to estimate whether a Word document contains a token...

7.5CVSS5.8AI score0.11682EPSS
SaveExploits4References2
Malwarebytes
Malwarebytes
•added 2019/02/18 4:30 p.m.•79 views

A week in security (February 11 – 17)

Last week on Malwarebytes Labs we discussed the return of the Sextortion Bitcoin scams, we gave you an early overview of the exploit kits in the winter of 2019, we talked about the destruction of VFEmail service, for consumers we discussed whether you should remove yourself from social media, for...

0.1AI score
SaveExploits0
WPVulnDB
WPVulnDB
•added 2019/02/14 12:00 a.m.•12 views

WP Cost Estimation < 9.660 - Upload Directory Traversal

The WPEstimationForm WordPress plugin was affected by an Upload Directory Traversal security vulnerability...

3.1AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder