1319 matches found
Huawei HarmonyOS Security Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions prior to 4.0.0, 3.0.0, and 2.0.0. The vulnerability stems from an authentication bypass...
Out-of-bounds
In faceid service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges...
A week in security (October 23 – October 29)
Last week on Malwarebytes Labs: Malvertising via Dynamic Search Ads delivers malware bonanza Octo Tempest cybercriminal group is "a growing concern"—Microsoft Update now! Apple patches a raft of vulnerabilities Patch…later? Safari iLeakage bug not fixed Update vCenter Server now! VMWare fixes...
Buffer Overflow Vulnerability in Schneider Electric Pro-face GP-Pro EX
Schneider Electric GP-Pro EX is a set of HMI interface editing and logic programming software from Schneider Electric France. A buffer overflow vulnerability exists in Schneider Electric Pro-face GP-Pro EX. The vulnerability stems from improper manipulation of restrictions within memory buffer...
Schneider Electric GP-Pro EX is a set of HMI interface editing and logic programming software from Schneider Electric (France). A buffer overflow vulnerability exists in Schneider Electric Pro-face GP-Pro EX. The vulnerability stems from improper manipulation of restrictions within memory buffer ranges and can be exploited by an attacker to cause memory corruption.
The NETGEAR R7100LG is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. The NETGEAR R7100LG version 1.0.0.78 suffers from a command injection vulnerability that stems from the password parameter in...
Schneider Electric GP-Pro EX 缓冲区错误漏洞
Schneider Electric GP-Pro EX is a set of HMI interface editing and logic programming software from Schneider Electric France. A buffer overflow vulnerability exists in Schneider Electric Pro-face GP-Pro EX. The vulnerability stems from improper manipulation of restrictions within memory buffer...
Microsoft AI Red Team building future of safer AI
An essential part of shipping software securely is red teaming. It broadly refers to the practice of emulating real-world adversaries and their tools, tactics, and procedures to identify risks, uncover blind spots, validate assumptions, and improve the overall security posture of systems. Microso...
yolov5-face 代码问题漏洞
yolov5-face is a software application. No details are available at this time A security vulnerability exists in yolov5-face that originates from allowing an attacker to execute arbitrary code via a crafted yaml file...
yolov5-face 代码问题漏洞
yolov5-face is a software application. No details are available at this time A security vulnerability exists in yolov5-face that originates from allowing an attacker to execute arbitrary code via a crafted yaml file...
编号撤回
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by an out-of-bounds read in ftopenfaceinternal of ftobjs.c, which can be exploited by an attacker to obtain sensitive information...
CVE-2023-21152
In FaceStatsAnalyzer::InterpolateWeightList of facestatsanalyzer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service due to [CVE-2023-2800]
Summary Hugging Face Transformers is used by IBM App Connect Enterprise Certified Container for mapping assistance. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service. This bulletin provides patch information t...
PT-2023-17945 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the FaceStatsAnalyzer::InterpolateWeightList function due to a missing bounds check. This could lead to local information disclosure with User execution...
The vulnerability of the software for configuring Schneider Electric EcoStruxure Operator Terminal Expert HMI terminals and the SCADA Pro-face BLUE software allows a perpetrator to execute arbitrary codes.
The vulnerability of Schneider Electric EcoStruxure Operator Terminal Expert HMI configuration software and SCADA Pro-face BLUE software is related to the possibility of code injection. Exploiting this vulnerability allows a perpetrator to execute arbitrary code by loading a specially crafted...
PT-2023-3117 · Pro Face +1 · Pro-Face Blue +1
Name of the Vulnerable Software and Affected Versions: Schneider Electric EcoStruxure Operator Terminal Expert affected versions not specified Pro-face BLUE affected versions not specified Description: A code injection vulnerability exists, potentially allowing the execution of malicious code whe...
About the security content of watchOS 9.5
About the security content of watchOS 9.5 This document describes the security content of watchOS 9.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Hugging Face Transformers 安全漏洞
Hugging Face Transformers is advanced natural language processing for Jax, PyTorch and TensorFlow. A security vulnerability exists in Hugging Face Transformers versions prior to 4.30.0, which stems from the presence of an insecure temporary file in the program...
AI Hacking Village at DEF CON This Year
At DEF CON this year, Anthropic, Google, Hugging Face, Microsoft, NVIDIA, OpenAI and Stability AI will all open up their models for attack. The DEF CON event will rely on an evaluation platform developed by Scale AI, a California company that produces training for AI applications. Participants wi...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a missing memory length check vulnerability. Successful exploitation of this...
Huawei HarmonyOS 缓冲区错误漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a memory out-of-bounds read vulnerability. Successful exploitation of this vulnerabilit...