CVE-2018-17453

Removed by vendor...

CVE-2023-29199 vm2 Sandbox escape vulnerability

There exists a vulnerability in source code transformer exception sanitization logic of vm2 for versions up to 3.9.15, allowing attackers to bypass handleException and leak unsanitized host exceptions which can be used to escape the sandbox and run arbitrary code in host context. A threat actor c...

K000133512: Intel platform vulnerabilities (INTEL-SA-00737) CVE-2021-39295, CVE-2021-39296, CVE-2022-29493, CVE-2022-29494, and CVE-2022-35729

Security Advisory Description CVE-2021-39295 In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipmid IPMI lan+ interface. CVE-2021-39296 In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control ...

EulerOS 2.0 SP8 : net-snmp (EulerOS-SA-2023-1616)

According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - handleipDefaultTTL in agent/mibgroup/ip-mib/ipscalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a...

PT-2023-2352

Name of the Vulnerable Software and Affected Versions vm2 versions up to 3.9.15 Description The issue is related to the source code transformer's exception sanitization logic in vm2, allowing attackers to bypass the handleException function and leak unsanitized host exceptions. This can be used t...

The vulnerability of the Wizard service, a security and management tool for web devices, allows a hacker to execute arbitrary commands.

The vulnerability of the Wizard service, a security and management tool for web devices, Sophos Web Appliance SWA, is related to the failure to take measures to neutralize special elements during exception handling. Exploiting this vulnerability allows an attacker operating remotely to execute...

CVE-2022-4934

A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...

CVE-2022-4934

A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...

Command injection

A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...

CVE-2022-4934

A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...

CVE-2022-4934: Improper Neutralization of Special Elements used in a Command

A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4 allows administrators to execute arbitrary code...

Denial Of Service (DoS)

tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due the tflite model with the parameter filterinputchannel less than 1 which causes a floating point exception, resulting in an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to a Null pointer exception via the values parameter in the tf.rawops.LookupTableImportV2 function, resulting in an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to a floating point exception if the stride and window size are not positive for the rawops.AvgPoolGrad function, causing the application to crash...

Denial Of Service (DoS)

tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to a floating point exception in SpectrogramShapeFn when the window size is 1 or the stride is negative resulting in an application crash...

Denial Of Service (DoS)

tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to a floating point exception in TensorListSplit because it does not check for negative lengths, causing the application to crash...

SUSE CVE-2023-25673

TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

SUSE CVE-2023-27579

TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater filterinputchannel of less than 1 gives a FPE. This issue has been patched in version 2.12. TensorFlow will also cherrypick the fix commit on TensorFlow 2.11.1...

PT-2023-2216 · Sophos · Sophos Web Appliance

Name of the Vulnerable Software and Affected Versions: Sophos Web Appliance versions prior to 4.3.10.4 Description: A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance allows administrators to execute arbitrary code. The vulnerability is related to the...

Mageia: Security Advisory (MGASA-2023-0015)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...