Lucene search
+L

12495 matches found

OSV
OSV
added 2021/05/16 8:54 p.m.11 views

MGASA-2021-0212 Updated avahi packages fix a security vulnerability

Avoid infinite loop by handling HUP event in clientwork. CVE-2021-3468...

5.5CVSS5.6AI score0.00443EPSS
SaveExploits0References5
Mageia
Mageia
added 2021/05/16 8:54 p.m.47 views

Updated avahi packages fix a security vulnerability

Avoid infinite loop by handling HUP event in clientwork. CVE-2021-3468...

5.5CVSS1.7AI score0.00443EPSS
SaveExploits0References4
OSV
OSV
added 2021/05/15 11:04 a.m.5 views

OESA-2021-1184 golang security update

Security Fixes: encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader for xml.NewTokenDecoder returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method.CVE-2021-27918...

7.5CVSS7AI score0.02474EPSS
SaveExploits0References2
NVD
NVD
added 2021/05/14 8:15 p.m.46 views

CVE-2021-29591

TensorFlow is an end-to-end open source platform for machine learning. TFlite graphs must not have loops between nodes. However, this condition was not checked and an attacker could craft models that would result in infinite loop during evaluation. In certain cases, the infinite loop would be...

7.8CVSS0.00262EPSS
SaveExploits1References3
PyPA
PyPA
added 2021/05/14 8:15 p.m.9 views

PYSEC-2021-717

TensorFlow is an end-to-end open source platform for machine learning. TFlite graphs must not have loops between nodes. However, this condition was not checked and an attacker could craft models that would result in infinite loop during evaluation. In certain cases, the infinite loop would be...

7.8CVSS7AI score0.00262EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.8 views

PYSEC-2021-228

TensorFlow is an end-to-end open source platform for machine learning. TFlite graphs must not have loops between nodes. However, this condition was not checked and an attacker could craft models that would result in infinite loop during evaluation. In certain cases, the infinite loop would be...

7.8CVSS7AI score0.00262EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2021/05/14 8:15 p.m.7 views

PYSEC-2021-228

TensorFlow is an end-to-end open source platform for machine learning. TFlite graphs must not have loops between nodes. However, this condition was not checked and an attacker could craft models that would result in infinite loop during evaluation. In certain cases, the infinite loop would be...

7.8CVSS7.1AI score0.00262EPSS
SaveExploits1References3
OSV
OSV
added 2021/05/14 8:15 p.m.10 views

PYSEC-2021-717

TensorFlow is an end-to-end open source platform for machine learning. TFlite graphs must not have loops between nodes. However, this condition was not checked and an attacker could craft models that would result in infinite loop during evaluation. In certain cases, the infinite loop would be...

7.8CVSS7.1AI score0.00262EPSS
SaveExploits1References3
OSV
OSV
added 2021/05/14 7:45 a.m.15 views

SUSE-SU-2021:1605-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue within virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. - CVE-2021-29650: Fix...

5.5CVSS7.7AI score0.01071EPSS
SaveExploits0References75
Github Security Blog
Github Security Blog
added 2021/05/13 8:23 p.m.62 views

Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

Impact Passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Patches Pydantic is be patched with fixes available in the following versions: v1.8.2 v1.7.4 v1.6.2 All these versions are available...

7.5CVSS7.2AI score0.00967EPSS
SaveExploits0References11Affected Software1
OSV
OSV
added 2021/05/13 8:23 p.m.13 views

GHSA-5JQP-QGF6-3PVH Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

Impact Passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Patches Pydantic is be patched with fixes available in the following versions: v1.8.2 v1.7.4 v1.6.2 All these versions are available...

5.3CVSS7.2AI score0.00967EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2021/05/13 6:55 p.m.95 views

CVE-2021-29510 Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic

Pydantic is a data validation and settings management using Python type hinting. In affected versions passing either 'infinity', 'inf' or float'inf' or their negatives to datetime or date fields causes validation to run forever with 100% CPU usage on one CPU. Pydantic has been patched with fixes...

3.3CVSS7.6AI score0.00967EPSS
SaveExploits0References5
OSV
OSV
added 2021/05/13 11:12 a.m.6 views

SUSE-SU-2021:1595-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-36312: Fixed an issue within virt/kvm/kvmmain.c that had a kvmiobusunregisterdev memory leak upon a kmalloc failure bnc1184509. - CVE-2021-29650: Fixed ...

7.8CVSS7.7AI score0.01071EPSS
SaveExploits0References77
Vulnrichment
Vulnrichment
added 2021/05/12 1:18 p.m.12 views

CVE-2021-27385

A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels V15 7" & 15" incl. SIPLUS variants All versions V15.1 Update 6, SIMATIC HMI Comfort Outdoor Panels V16 7" & 15" incl. SIPLUS variants All versions V16 Update 4, SIMATIC HMI Comfort Panels V15 4" - 22" incl. SIPLUS...

7AI score0.02555EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2021/05/11 8:55 p.m.44 views

CVE-2021-28676

A flaw was found in python-pillow. FliDecode.c did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load. This issue dates to the PIL fork. The highest threat from this vulnerability is to system availability. Mitigation To mitigate this feature o...

7.5CVSS1.5AI score0.02521EPSS
SaveExploits0References4
OSV
OSV
added 2021/05/10 3:23 p.m.51 views

GHSA-567X-M4WM-87V8 Infinite loop in Apache Tika

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS5.5AI score0.02752EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2021/05/10 3:23 p.m.63 views

Infinite loop in Apache Tika

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later...

5.5CVSS3.1AI score0.02752EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2021/05/10 12:00 a.m.9 views

UBUNTU-CVE-2021-28676

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...

7.5CVSS6.8AI score0.02521EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2021/05/10 12:00 a.m.30 views

CVE-2021-28676

An issue was discovered in Pillow before 8.2.0. For FLI data, FliDecode did not properly check that the block advance was non-zero, potentially leading to an infinite loop on load...

7.5CVSS6.8AI score0.02521EPSS
SaveExploits0References4
OSV
OSV
added 2021/05/09 6:05 p.m.9 views

OPENSUSE-SU-2021:0694-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. This update was imported from the SUSE:SLE-15-SP1:Update update project...

5.5CVSS5.9AI score0.00443EPSS
SaveExploits0References3
Rows per page
Query Builder