1079 matches found
Fortinet FortiPortal 代码问题漏洞
Fortinet FortiPortal is a hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi and FortiAP product lines, available as a virtual machine for MSPs.Fortinet FortiPortal is vulnerable in versions 6.0.0 to 6.0.4, 5.3 .0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2...
CVE-2021-34802
A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges...
An issue was discovered in lxml before 4.2.5. lxml/html/clean.py in the lxml.html.clean module does not remove javascript: URLs that use escaping allowing a remote attacker to conduct XSS attacks as demonstrated by "j a v a s c r i p t:" in Internet Explorer. This is a similar issue to CVE-2014-3146.
...
CVE-2021-28127
An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur...
PT-2021-15883 · WordPress · Sp Project & Document Manager
Name of the Vulnerable Software and Affected Versions: The SP Project & Document Manager WordPress plugin versions prior to 4.22 Description: The issue allows users to upload files, but the plugin attempts to prevent php and other similar files that could be executed on the server from being...
UBUNTU-CVE-2020-22043
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifoalloccommon function in libavutil/fifo.c...
FFmpeg 缓冲区错误漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video. A heap buffer overflow vulnerability exists in fffillrectangle in libavfilter/drawutils.c in FFmpeg version 4.2. An attacker could exploit this vulnerability to cause memory corruption...
FFmpeg 缓冲区错误漏洞
FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg Ffmpeg team. A security vulnerability exists in FFmpeg 4.2, which stems from the fact that FFmpeg 4.2 can cause a denial of service to a remote malicious user in libavfilter vf vmafmotion.c. The...
UBUNTU-CVE-2020-22026
Buffer Overflow vulnerability exists in FFmpeg 4.2 in the configinput function at libavfilter/aftremolo.c, which could let a remote malicious user cause a Denial of Service...
FFmpeg 安全漏洞
FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A buffer overflow vulnerability exists in the configinput function in libavfilter/aftremolo.c in FFmpeg version 4.2. An attacker could exploit thi...
FFmpeg 安全漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg Ffmpeg team. A denial of service vulnerability exists in FFmpeg version 4.2, which stems from a resource management error in fftools/cmdutils.c, and can be exploited by an attacker to cause a...
FFmpeg 数字错误漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg Ffmpeg team. A security vulnerability exists in FFmpeg version 4.2, which stems from a "divide-by-zero" issue in libavcodec/aacpsy.c, which allows a remote malicious user to cause a denial of...
FFmpeg 数字错误漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg Ffmpeg team. A security vulnerability exists in FFmpeg version 4.2, which stems from a "divide-by-zero" issue in libavcodec/aaccoder, which allows a remote malicious user to cause a denial of...
PYSEC-2021-181
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.QuantizeAndDequantizeV4Grad. This is because the...
PYSEC-2021-448
TensorFlow is an end-to-end open source platform for machine learning. Missing validation between arguments to tf.rawops.Conv3DBackprop operations can result in heap buffer overflows. This is because the...
PYSEC-2021-236
TensorFlow is an end-to-end open source platform for machine learning. The implementation of the Split TFLite operator is vulnerable to a division by zero errorhttps://github.com/tensorflow/tensorflow/blob/e2752089ef7ce9bcf3db0ec618ebd23ea119d0c7/tensorflow/lite/kernels/split.ccL63-L65. An attack...
PYSEC-2021-741
TensorFlow is an end-to-end open source platform for machine learning. The implementation of ParseAttrValuehttps://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/framework/attrvalueutil.ccL397-L453 can be tricked into stack overflow due to recursion...
PYSEC-2021-171
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.SparseConcat. This is because the...
PYSEC-2021-670
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.QuantizeAndDequantizeV4Grad. This is because the...