Lucene search
+L

2699 matches found

Code423n4
Code423n4
added 2021/11/17 12:0 a.m.8 views

Prevent Minting During Emergency Exit

Handle TimmyToes Vulnerability details Impact Potential increased financial loss during security incident. Proof of Concept Consider a critical incident where a vault is being drained or in danger of being drained due to a vulnerability within the vault or its strategies. At this stage, you want ...

6.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/11/15 3:30 p.m.17 views

Researchers Demonstrate New Fingerprinting Attack on Tor Encrypted Traffic

A new analysis of website fingerprinting WF attacks aimed at the Tor web browser has revealed that it's possible for an adversary to glean a website frequented by a victim, but only in scenarios where the threat actor is interested in a specific subset of the websites visited by users. "While...

6.7AI score
SaveExploits0
OSV
OSV
added 2021/11/10 6:55 p.m.3 views

GHSA-5CRJ-C72X-M7GQ Null pointer exception when `Exit` node is not preceded by `Enter` op

Impact The process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not: python import tensorflow as tf @tf.function def func: return tf.rawops.Exitdata=False,False func This occurs because the code assumes th...

5.5CVSS5.8AI score0.00181EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2021/11/05 9:15 p.m.5 views

CVE-2021-41217

TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This occurs because the code assumes that the first node in th...

5.5CVSS6.1AI score0.00181EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2021/11/05 8:55 p.m.8 views

CVE-2021-41217

TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This occurs because the code assumes that the first node in th...

5.5CVSS7.1AI score0.00181EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.8 views

The vulnerability of the software for ensuring high availability and load balancing for TCP and HTTP applications managed by Haproxy arises from the execution of a loop with an unreachable exit condition. This allows a attacker to cause a service failure.

The vulnerability of the software used for ensuring high availability and load balancing for TCP and HTTP applications managed by Haproxy is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.4AI score0.7024EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.9 views

The vulnerability in the hw/net/e1000e_core.c component of the hardware emulation software QEMU allows a hacker to induce a system failure.

The vulnerability in the hw/net/e1000ecore.c component of the hardware emulation software QEMU is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS6.8AI score0.00654EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.8 views

The vulnerability of the reading component of the DjVu library for viewing, creating, and editing DjVu files, related to the execution of a loop with an unreachable exit condition, allows attackers to cause service failures.

The vulnerability of the reading component of the DjVu library for viewing, creating, and editing DjVu files in DjVuLibre lies in the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.1CVSS6AI score0.01707EPSS
SaveExploits1References8Affected Software3
NVD
NVD
added 2021/10/28 1:15 p.m.29 views

CVE-2021-22406

There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly...

7.5CVSS0.00695EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/28 1:15 p.m.8 views

CVE-2021-22406

There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly...

7.5CVSS5.8AI score
SaveExploits0References1
CVE
CVE
added 2021/10/28 12:22 p.m.53 views

CVE-2021-22406

Technical details about CVE-2021-22406 are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories; current sources only reiterate an Uncaught Exception vulnerability in Huawei Smartphone with no specifics on affected versions or fixes.

7.5CVSS7.4AI score0.00695EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/10/28 12:22 p.m.34 views

CVE-2021-22406

There is an Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the app to exit unexpectedly...

7.7AI score0.00695EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/28 12:0 a.m.9 views

Huawei Smartphone 安全漏洞

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI have a security vulnerability that could be exploited by attackers to cause the application to exit unexpectedly...

7.5CVSS5.9AI score0.00695EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/10/28 12:0 a.m.8 views

PT-2021-15030 · Huawei · Huawei Smartphone

Name of the Vulnerable Software and Affected Versions: Huawei Smartphone affected versions not specified Description: The issue is related to an Uncaught Exception, which can cause the app to exit unexpectedly when successfully exploited. Recommendations: At the moment, there is no information...

7.5CVSS7.2AI score0.00695EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.8 views

The vulnerability in the hw/usb/hcd-ohci.c component of the QEMU hardware emulation software allows a malicious actor to trigger a service failure by executing a loop with an unavailable exit condition.

The vulnerability in the component hw/usb/hcd-ohci.c is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.3CVSS6.8AI score0.00445EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.17 views

The vulnerability of the Input Method Editor (IME) component in Windows operating systems, which allows a hacker to exploit their privileges

The vulnerability of the Input Method Editor IME component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by exiting from the isolated software environment using a specially created...

9.3CVSS5.4AI score0.47679EPSS
SaveExploits0References8
OSV
OSV
added 2021/09/21 10:11 p.m.20 views

CLSA-2021-1632262269 Fix of CVE: CVE-2021-34693, CVE-2021-20292, CVE-2021-28972, CVE-2021-20265, CVE-2021-32399, CVE-2014-4508, CVE-2021-3612, CVE-2021-3178, CVE-2021-37159, CVE-2021-38205, CVE-2021-3573, CVE-2021-38160

ELSCVE-666: CVE-2021-34693: can: bcm: fix infoleak in struct bcmmsghead - ELSCVE-705: CVE-2021-38160: virtioconsole: Assure used length from device is limited - ELSCVE-769: CVE-2014-4508: x8632, entry: Do syscall exit work on badsys CVE-2014-4508 - ELSCVE-844: CVE-2021-3573: Bluetooth: use...

7.8CVSS7AI score0.02417EPSS
SaveExploits3References1
OSV
OSV
added 2021/09/09 7:15 p.m.6 views

CVE-2021-25460

An improper access control vulnerability in sspExit in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to terminate BlockchainTZService...

5.5CVSS5.8AI score0.00096EPSS
SaveExploits0References1
Redos
Redos
added 2021/09/08 12:0 a.m.22 views

ROS-2-1933

2.1933 Multiple vulnerabilities of libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.6AI score0.02662EPSS
SaveExploits1
Redos
Redos
added 2021/09/08 12:0 a.m.10 views

ROS-2-1637

2.1637 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS10AI score0.02662EPSS
SaveExploits0
Rows per page
Query Builder