CVE-2021-39920

NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file...

CVE-2021-39920

CVE-2021-39920 affects Wireshark IPPUSB dissector: a NULL pointer dereference in versions 3.4.0–3.4.9 can cause a denial of service via crafted captures or packet injection. Public advisories document DoS impact on network-access attacker and list fixes in Wireshark updates (e.g., Debian 3.4.10-b...

CVE-2021-39928

Wireshark vulnerability CVE-2021-39928 is a NULL pointer dereference in the IEEE 802.11 dissector that may allow a denial of service via crafted captures or packet injection. Affected ranges include Wireshark 3.4.0–3.4.9 and 3.2.0–3.2.17. Public advisories indicate fixes are available: Debian Bul...

CVE-2021-39920

NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file...

Authentication Bypass by CSRF Weakness

Impact CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of solidusauthdevise are affected if protectfromforgery method is both: - Executed whether as: - A beforeaction callback the default - A prependbeforeaction option prepend: tr...

CVE-2021-39928

NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture file...

CVE-2021-41275

spreeauthdevise is an open source library which provides authentication and authorization services for use with the Spree storefront framework by using an underlying Devise authentication framework. In affected versions spreeauthdevise is subject to a CSRF vulnerability that allows user account...

Huawei CloudEngine Resource Management Error Vulnerability

Huawei CloudEngine is a data center switch from Huawei China. Huawei CloudEngine is vulnerable to a resource management error, which can be exploited by attackers to cause a service exception by sending a specific tampered message...

Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89162)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK contains a security vulnerability that results from an exception vulnerability in the sample The ODA Viewer continues to process...

CVE-2021-43272

An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious DWF files instead of stopping upon an exception. An attacker can leverage this vulnerability to execute code in the...

Design/Logic Flaw

An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious DWF files instead of stopping upon an exception. An attacker can leverage this vulnerability to execute code in the...

CVE-2021-43272

CVE-2021-43272 relates to Open Design Alliance ODAViewer: a parsing flaw in DWF handling that can lead to remote code execution. The ZDI advisories (ZDI-21-1358, ZDI-21-1360, ZDI-21-1363) describe a stack-based buffer overflow in the DWF file parser, caused by insufficient validation of the lengt...

EulerOS 2.0 SP5 : python-werkzeug (EulerOS-SA-2021-2671)

According to the versions of the python-werkzeug package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Cross-site scripting XSS vulnerability in the renderfull function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11...

Null pointer exception in `DeserializeSparse`

Impact The shape inference code for DeserializeSparse can trigger a null pointer dereference: python import tensorflow as tf dataset = tf.data.Dataset.range3 @tf.function def test: y = tf.rawops.DeserializeSparse serializedsparse=tf.data.experimental.tovariantdataset, dtype=tf.int32 test This is...

Null pointer exception when `Exit` node is not preceded by `Enter` op

Impact The process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not: python import tensorflow as tf @tf.function def func: return tf.rawops.Exitdata=False,False func This occurs because the code assumes th...

Design/Logic Flaw

An improper handling of exceptional conditions vulnerability exists in Palo Alto Networks GlobalProtect portal and gateway interfaces that enables an unauthenticated network-based attacker to send specifically crafted traffic to a GlobalProtect interface that causes the service to stop responding...

OSV-2021-1549 Uncaught exception in com.google.gson.internal.bind.TypeAdapters$27.read

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40830 Crash type: Uncaught exception Crash state: com.google.gson.internal.bind.TypeAdapters$27.read java.base/java.lang.StringUTF16.compress java.base/java.lang.String...

Null pointer dereference

TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This occurs because the code assumes that the first node in th...

CVE-2021-41215 Null pointer exception in `DeserializeSparse`

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for DeserializeSparse can trigger a null pointer dereference. This is because the shape inference function assumes that the serializesparse tensor is a tensor with positive rank and having 3 ...

Python < 3.7.0 DoS Vulnerability (Mar 2018) - Linux

Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...