Lucene search
+L

9238 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/05 12:00 a.m.•3 views

CVE-2021-41217: NULL Pointer Dereference

TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when nodes that should be paired are not. This occurs because the code assumes that the first node in th...

5.5CVSS5.6AI score0.00187EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/05 12:00 a.m.•4 views

CVE-2021-25507: Improper Authorization

Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user device to access part of notification data in Secure Folder without authorization...

5.7CVSS5.8AI score0.00295EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/11/05 12:00 a.m.•4 views

PT-2021-16699

Name of the Vulnerable Software and Affected Versions Samsung Flow Windows application versions prior to 4.8.5.0 Description A missing input validation in the Samsung Flow Windows application allows attackers to overwrite arbitrary files in the Windows known folders. Recommendations For versions...

7.1CVSS0.00228EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/05 12:00 a.m.•16 views

SAMSUNG Flow 安全漏洞

SAMSUNG Flow is a software product from Samsung South Korea. It is used to enable a seamless, secure, and connected experience on devices. A security vulnerability exists in the SAMSUNG Flow mobile application prior to version 4.8.03.5, which can be exploited by an attacker to gain unauthorized...

5.7CVSS6AI score0.00295EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/05 12:00 a.m.•4 views

CVE-2021-25509: Improper Input Validation

A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite abtraty file in the Windows known folders...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/05 12:00 a.m.•21 views

Samsung Flow 输入验证错误漏洞

Samsung Flow is a software product from Samsung South Korea. It is used to enable a seamless, secure, and connected experience on devices. A security vulnerability exists in the Samsung Flow Windows application prior to version 4.8.5.0, which stems from a lack of input validation in the...

7.1CVSS7.1AI score0.00228EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/02 4:15 p.m.•15 views

CVE-2021-29738

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

5.4CVSS6.1AI score0.00482EPSS
SaveExploits0References2
NVD
NVD
•added 2021/11/02 4:15 p.m.•22 views

CVE-2021-29738

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

5.5CVSS0.00482EPSS
SaveExploits0References2
NVD
NVD
•added 2021/11/02 4:15 p.m.•38 views

CVE-2021-29737

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

7.5CVSS0.00694EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/02 4:15 p.m.•14 views

CVE-2021-29737

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

7.5CVSS6.5AI score0.00694EPSS
SaveExploits0References2
Prion
Prion
•added 2021/11/02 4:15 p.m.•27 views

Input validation

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

5CVSS7.3AI score0.00694EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2021/11/02 4:15 p.m.•25 views

Server side request forgery (ssrf)

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

5.5CVSS5.2AI score0.00482EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/11/02 4:00 p.m.•34 views

CVE-2021-29738

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

5.4CVSS5.4AI score0.00482EPSS
SaveExploits0References2
CVE
CVE
•added 2021/11/02 4:00 p.m.•73 views

CVE-2021-29738

The CVE-2021-29738 issue affects IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7), where a server-side request forgery (SSRF) vulnerability can allow an authenticated attacker to issue unauthorized requests from the system, potentially enabling network enumeration or re...

5.5CVSS5.3AI score0.00482EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/11/02 4:00 p.m.•47 views

CVE-2021-29737

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

5.9CVSS7.3AI score0.00694EPSS
SaveExploits0References2
CVE
CVE
•added 2021/11/02 4:00 p.m.•67 views

CVE-2021-29737

The CVE-2021-29737 entry relates to IBM InfoSphere Data Flow Designer Engine within IBM InfoSphere Information Server 11.7, which is affected by improper validation of the REST API server certificate. The IBM Security Bulletin and NVD entry confirm the affected component and describe a REST certi...

7.5CVSS7.3AI score0.00694EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2021/11/02 12:00 a.m.•28 views

IBM InfoSphere DataStage Flow Designer Trust Management Issue Vulnerability

Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in Ibm InfoSphere DataStage Flow Designer that stems from an error in the validation of REST API server credentials by the IBM InfoSphere DataStage Flow Designer engine...

7.5CVSS6.6AI score0.00694EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/02 12:00 a.m.•4 views

CVE-2021-29737: Improper Certificate Validation

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

7.5CVSS5.8AI score0.00694EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/11/02 12:00 a.m.•21 views

IBM InfoSphere DataStage Flow Designer Code Issue Vulnerability

Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in IBM InfoSphere that allows an authenticated attacker to exploit the vulnerability to send unauthorized requests from the system, potentially resulting in network...

5.5CVSS6.3AI score0.00482EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/02 12:00 a.m.•3 views

PT-2021-18439

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7 Description The issue is related to improper validation of the REST API server certificate in the IBM InfoSphere Data Flow Designer Engine component. This could potentially allow for...

7.5CVSS0.00694EPSS
SaveExploits0References6
Rows per page
Query Builder