Lucene search
+L

13890 matches found

CNVD
CNVD
added 2021/06/06 12:00 a.m.15 views

Unspecified Vulnerability in Apache Dubbo (CNVD-2021-41082)

Apache Dubbo is the United States Apache Apache Foundation of a lightweight Java-based RPC Remote Procedure Call framework. The product provides interface-based remote calling , fault tolerance and load balancing and automatic service registration and discovery. A security vulnerability exists in...

6.1CVSS6.6AI score0.02073EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/06 12:00 a.m.39 views

Unspecified Vulnerability in Apache Dubbo

Apache Dubbo is the United States Apache Apache Foundation of a lightweight Java-based RPC Remote Procedure Call framework. The product provides interface-based remote calling , fault tolerance and load balancing and automatic service registration and discovery. A security vulnerability previousl...

9.8CVSS6.9AI score0.60427EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/06/01 12:00 a.m.12 views

The vulnerability of the XLookupColor() function in the libX11 library, which stems from insufficient input data validation, allows a malicious actor to perform denial-of-service attacks.

The vulnerability of the XLookupColor function in the libX11 library is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a denial-of-service attack by running a specially created application on the system...

3.3CVSS7AI score0.10634EPSS
SaveExploits2References20Affected Software10
OSV
OSV
added 2021/05/28 3:15 p.m.10 views

CVE-2021-29628

In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause SMAP protections to be disabled for the duration of the system call. This weakness could be combined with other kernel...

7.5CVSS5.8AI score0.01249EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/05/28 3:15 p.m.5 views

CVE-2021-29628

In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause SMAP protections to be disabled for the duration of the system call. This weakness could be combined with other kernel...

7.5CVSS6.9AI score0.01249EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/05/27 12:00 a.m.12 views

GE Reason RPV311 信任管理问题漏洞

The GE Reason RPV311 is a network device from General Electric GE. A digital fault recorder with a PMU and TWFL. The GE Reason RPV311 suffers from a trust management issue vulnerability that can be exploited by an attacker to execute code in the context of the downloading user...

7.5CVSS7AI score0.0264EPSS
SaveExploits0References4
FreeBSD Advisory
FreeBSD Advisory
added 2021/05/26 12:00 a.m.24 views

FreeBSD-SA-21:11.smap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:11.smap Security Advisory The FreeBSD Project Topic: SMAP bypass Category: core Module: amd64 Announced: 2021-05-26 Credits: I lost my dog if you see him...

7.5CVSS7AI score0.01249EPSS
SaveExploits1
Fedora
Fedora
added 2021/05/24 1:15 a.m.50 views

[SECURITY] Fedora 33 Update: slurm-20.11.7-1.fc33

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

6.5CVSS1.7AI score0.02902EPSS
SaveExploits0
Fedora
Fedora
added 2021/05/24 1:02 a.m.38 views

[SECURITY] Fedora 34 Update: slurm-20.11.7-1.fc34

Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...

6.5CVSS1.7AI score0.02902EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2021/05/21 2:26 p.m.51 views

Segfault in `CTCBeamSearchDecoder`

Impact Due to lack of validation in tf.rawops.CTCBeamSearchDecoder, an attacker can trigger denial of service via segmentation faults: python import tensorflow as tf inputs = tf.constant, shape=18, 8, 0, dtype=tf.float32 sequencelength = tf.constant11, -43, -92, 11, -89, -83, -35, -100, shape=8,...

5.5CVSS3.1AI score0.00189EPSS
SaveExploits1References7Affected Software3
Github Security Blog
Github Security Blog
added 2021/05/21 2:23 p.m.44 views

Segfault in tf.raw_ops.ImmutableConst

Impact Calling tf.rawops.ImmutableConst with a dtype of tf.resource or tf.variant results in a segfault in the implementation as code assumes that the tensor contents are pure scalars. python import tensorflow as tf tf.rawops.ImmutableConstdtype=tf.resource, shape=, memoryregionname="/tmp/test.tx...

5.5CVSS1.9AI score0.00189EPSS
SaveExploits1References7Affected Software3
Github Security Blog
Github Security Blog
added 2021/05/21 2:21 p.m.44 views

Segfault in SparseCountSparseOutput

Impact Specifying a negative dense shape in tf.rawops.SparseCountSparseOutput results in a segmentation fault being thrown out from the standard library as std::vector invariants are broken. python import tensorflow as tf indices = tf.constant, shape=0, 0, dtype=tf.int64 values = tf.constant,...

5.5CVSS2.2AI score0.00189EPSS
SaveExploits1References7Affected Software3
OSV
OSV
added 2021/05/21 2:21 p.m.50 views

GHSA-HR84-FQVP-48MM Segfault in SparseCountSparseOutput

Impact Specifying a negative dense shape in tf.rawops.SparseCountSparseOutput results in a segmentation fault being thrown out from the standard library as std::vector invariants are broken. python import tensorflow as tf indices = tf.constant, shape=0, 0, dtype=tf.int64 values = tf.constant,...

2.5CVSS6AI score0.00189EPSS
SaveExploits1References6
OSV
OSV
added 2021/05/21 1:15 p.m.12 views

CVE-2020-27211

Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection APPROTECT can be bypassed by injecting a fault during the boot phase...

5.7CVSS6.2AI score0.00273EPSS
SaveExploits0References5
Prion
Prion
added 2021/05/21 1:15 p.m.26 views

Design/Logic Flaw

Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection APPROTECT can be bypassed by injecting a fault during the boot phase...

3.3CVSS5.6AI score0.00273EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/05/21 1:15 p.m.8 views

CVE-2020-27211

Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection APPROTECT can be bypassed by injecting a fault during the boot phase...

5.7CVSS5.2AI score0.00273EPSS
SaveExploits0References6
OSV
OSV
added 2021/05/21 12:15 p.m.12 views

CVE-2020-27212

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...

7CVSS5.8AI score0.00342EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/05/21 12:15 p.m.6 views

CVE-2020-27212

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...

7CVSS5.4AI score0.00342EPSS
SaveExploits0References4
Prion
Prion
added 2021/05/21 12:15 p.m.26 views

Design/Logic Flaw

STMicroelectronics STM32L4 devices through 2020-10-19 have incorrect access control. The flash read-out protection RDP can be degraded from RDP level 2 no access via debug interface to level 1 limited access via debug interface by injecting a fault during the boot phase...

4.4CVSS6.8AI score0.00342EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/05/21 12:04 p.m.58 views

CVE-2020-27211

Nordic Semiconductor nRF52840 devices through 2020-10-19 have improper protection against physical side channels. The flash read-out protection APPROTECT can be bypassed by injecting a fault during the boot phase...

5.5AI score0.00273EPSS
SaveExploits0References5
Rows per page
Query Builder