11105 matches found
Denial Of Service (DoS)
tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to a Null pointer exception via the values parameter in the tf.rawops.LookupTableImportV2 function, resulting in an application crash...
Denial Of Service (DoS)
tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to a floating point exception if the stride and window size are not positive for the rawops.AvgPoolGrad function, causing the application to crash...
Denial Of Service (DoS)
tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to a floating point exception in SpectrogramShapeFn when the window size is 1 or the stride is negative resulting in an application crash...
Denial Of Service (DoS)
tensorflow is vulnerable to Denial of Service DoS attacks. The vulnerability is due to a floating point exception in TensorListSplit because it does not check for negative lengths, causing the application to crash...
spring-data-keyvalue:KeyValueTemplateFuzzer: Security exception with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5209683580551168 Project: spring-data-keyvalue Fuzzing Engine: libFuzzer Fuzz Target: KeyValueTemplateFuzzer Job Type: libfuzzerasanspring-data-keyvalue Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer:...
SUSE CVE-2023-25673
TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...
SUSE CVE-2023-27579
TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater filterinputchannel of less than 1 gives a FPE. This issue has been patched in version 2.12. TensorFlow will also cherrypick the fix commit on TensorFlow 2.11.1...
Mageia: Security Advisory (MGASA-2023-0015)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-2216 · Sophos · Sophos Web Appliance
Name of the Vulnerable Software and Affected Versions: Sophos Web Appliance versions prior to 4.3.10.4 Description: A post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance allows administrators to execute arbitrary code. The vulnerability is related to the...
Frhed 1.6.0 Buffer Overflow
Exploit Title: Frhed Free hex editor v1.6.0 - Buffer overflow Discovery by: Rafael Pedrero Discovery Date: 2022-01-09 Vendor Homepage: http://frhed.sourceforge.net/ Software Link : http://frhed.sourceforge.net/ Tested Version: 1.6.0 Tested on: Windows 10 CVSS v3: 7.3 CVSS vector:...
Frhed (Free hex editor) v1.6.0 - Buffer overflow Vulnerability
Exploit Title: Frhed Free hex editor v1.6.0 - Buffer overflow Discovery by: Rafael Pedrero Vendor Homepage: http://frhed.sourceforge.net/ Software Link : http://frhed.sourceforge.net/ Tested Version: 1.6.0 Tested on: Windows 10 CVSS v3: 7.3 CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:...
Explorer32++ v1.3.5.531 - Buffer overflow Vulnerability
Exploit Title: Explorer32++ 1.3.5.531 - Buffer overflow Discovery by: Rafael Pedrero Vendor Homepage: http://www.explorerplusplus.com/ Software Link : http://www.explorerplusplus.com/ Tested Version: 1.3.5.531 Tested on: Windows 10 CVSS v3: 7.3 CVSS vector:...
Hex Workshop v6.7 - Buffer overflow DoS Vulnerability
Exploit Title: Hex Workshop v6.7 - Buffer overflow DoS Discovery by: Rafael Pedrero Vendor Homepage: http://www.bpsoft.com, http://www.hexworkshop.com Software Link : http://www.bpsoft.com, http://www.hexworkshop.com Tested Version: v6.7 Tested on: Windows 10 CVSS v3: 7.3 CVSS vector:...
CVE-2022-48353: Improper Privilege Management
Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system service exceptions...
Explorer32++ v1.3.5.531 - Buffer overflow
Exploit Title: Explorer32++ 1.3.5.531 - Buffer overflow Discovery by: Rafael Pedrero Discovery Date: 2022-01-09 Vendor Homepage: http://www.explorerplusplus.com/ Software Link : http://www.explorerplusplus.com/ Tested Version: 1.3.5.531 Tested on: Windows 10 CVSS v3: 7.3 CVSS vector:...
Frhed (Free hex editor) v1.6.0 - Buffer overflow
Exploit Title: Frhed Free hex editor v1.6.0 - Buffer overflow Discovery by: Rafael Pedrero Discovery Date: 2022-01-09 Vendor Homepage: http://frhed.sourceforge.net/ Software Link : http://frhed.sourceforge.net/ Tested Version: 1.6.0 Tested on: Windows 10 CVSS v3: 7.3 CVSS vector:...
Incorrect Comparison
Overview Affected versions of this package are vulnerable to Incorrect Comparison. Constructing a tflite model with a paramater filterinputchannel of less than 1 gives a float pointer exception. Remediation Upgrade tensorflow-lite to version 2.12.0 or higher. References - GitHub Commit Credit: Wa...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a floating point exception if the stride and window size are not positive for tf.rawops.AvgPoolGrad. PoC import tensorflow as tf import numpy as np @tf.functionjitcompile=True def test: y =...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a floating point exception in AudioSpectrogram. PoC import tensorflow as tf para = 'input': tf.constant14., 24., dtype=tf.float32, 'windowsize': 1, 'stride': 0, 'magnitudesquared': False func =...
lucene:QueryParserFuzzer: Security exception in java.base/java.util.Arrays.copyOf
Detailed Report: https://oss-fuzz.com/testcase?key=6250097532076032 Project: lucene Fuzzing Engine: libFuzzer Fuzz Target: QueryParserFuzzer Job Type: libfuzzerasanlucene Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...