Lucene search
K

4504 matches found

CNNVD
CNNVD
added 2022/09/16 12:0 a.m.4 views

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segmentation error that can be used to trigger a denial-of-service attack if...

7.5CVSS7.3AI score0.00409EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/09/16 12:0 a.m.4 views

National Instruments System Configuration Manager 输入验证错误漏洞

National Instruments System Configuration Manager is a configuration manager from National Instruments. A utility program used to monitor and control various NI devices in the system. An input validation error vulnerability exists in National Instruments System Configuration Manager versions prio...

7.8CVSS7.4AI score0.00199EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/09/16 12:0 a.m.4 views

Adobe Illustrator 输入验证错误漏洞

Adobe Illustrator is a software released by Adobe Systems for graphics. Adobe Illustrator is vulnerable to an input validation error, which can be exploited by attackers to execute arbitrary code in the context of the current user...

7.8CVSS7.6AI score0.00456EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/09/15 12:0 a.m.4 views

OpenAM 输入验证错误漏洞

OpenAM is an all-in-one access management solution organized by the OpenAM Consortium. It provides authentication, authorization, delegation and federation capabilities. A security vulnerability exists in OpenAM Consortium Edition version 14.0.0, which stems from the fact that when accessing the...

6.1CVSS5.7AI score0.00438EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/09/14 12:0 a.m.2 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, an American company. An input validation error vulnerability exists in the DevTools component of Google Chrome versions prior to 105.0.5195.125. An attacker can exploit this vulnerability to convince users to install a malicious extension that bypasses...

5.4CVSS6.5AI score0.00581EPSS
Exploits0References14
CNNVD
CNNVD
added 2022/09/14 12:0 a.m.3 views

Trend Micro Apex One 输入验证错误漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in the Trend Micro Apex One 2019 On-prem SaaS version that stems from an attacker who can log in to the product management console and execute arbitrary code...

7.2CVSS7.7AI score0.02934EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/09/11 12:0 a.m.3 views

Gophish 输入验证错误漏洞

Gophish is an open source phishing framework. A security vulnerability exists in Gophish versions prior to 0.12.0, which can be exploited by attackers to redirect users to a relative url...

5.4CVSS5.7AI score0.00542EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/09/09 12:0 a.m.3 views

OAuthLib 输入验证错误漏洞

OAuthLib is OAuthLib open source a Python framework for OAuth1 and OAuth2. An input validation error vulnerability exists in OAuthLib versions 3.1.1 through 3.2.1. An attacker exploiting this vulnerability to provide a malicious redirect uri can cause a denial of service...

6.5CVSS7AI score0.01258EPSS
Exploits1References12
CNNVD
CNNVD
added 2022/09/09 12:0 a.m.3 views

RISC-V 输入验证错误漏洞

RISC-V is an open source instruction set architecture based on the principle of reduced instruction sets, which is easily interpreted as a form of "open source hardware" corresponding to the open source software movement. The RISC-V kernel suffers from an Input Validation Error vulnerability, whi...

5.5CVSS6.5AI score0.0023EPSS
Exploits0References17
CNNVD
CNNVD
added 2022/09/07 12:0 a.m.5 views

mangadex-downloader 输入验证错误漏洞

mangadex-downloader is a command line tool for downloading comics from MangaDex by the individual developer Rahman Yusuf. An input validation error vulnerability exists in versions of mangadex-downloader prior to 1.7.2, which stems from an attempt to open and read a file on local disk for each li...

5.3CVSS5.7AI score0.00553EPSS
Exploits0References3
CNVD
CNVD
added 2022/09/06 12:0 a.m.27 views

BlueZ input validation error vulnerability

BlueZ is a Bluetooth protocol stack written in C, which is primarily used to provide support for the core Bluetooth layer and protocol. versions prior to BlueZ 5.59 have an input validation error vulnerability that stems from the failure of the profiles/audio/avrcp.c component to validate...

8.8CVSS3.6AI score0.00657EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/09/06 12:0 a.m.4 views

Elrond go 输入验证错误漏洞

Elrond go is an open source go implementation of the Elrond Network protocol by Elrond Network. An input validation error vulnerability exists in Elrond go versions prior to 1.3.34, which stems from a missing function name in MultiESDTNFTTransfer...

7.5CVSS7.2AI score0.00952EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/09/02 12:0 a.m.4 views

Qualcomm Multimedia 输入验证错误漏洞

Qualcomm Multimedia is a camera driver component from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Multimedia that originates from an improper array index validation leading to multimedia memory corruption...

8.4CVSS7.3AI score0.00119EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/09/02 12:0 a.m.2 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome has a security vulnerability that stems from insufficient data validation in Mojo...

9.6CVSS8.4AI score0.0568EPSS
Exploits0References10
CNNVD
CNNVD
added 2022/08/31 12:0 a.m.5 views

GitLab 输入验证错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in all versions of GitLab Community Edition CE a...

6.5CVSS6.9AI score0.01044EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/08/30 12:0 a.m.3 views

Freedesktop Poppler 输入验证错误漏洞

Freedesktop Poppler is a Freedesktop community C++ class library for generating PDFs, which is inherited from Xpdf PDF reader. A security vulnerability exists in Poppler version 22.08.0 and prior versions, which stems from an integer overflow in the JBIG2 decoder...

7.8CVSS6.6AI score0.00574EPSS
Exploits1References23
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.4 views

Lexmark 输入验证错误漏洞

Lexmark is a line of printers in the United States. Lexmark 2022-04-27 An input validation error vulnerability exists in some previous products, which stems from incorrect input validation and allows external control over system or configuration settings...

8.1CVSS5.5AI score0.00841EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.3 views

ImageMagick 输入验证错误漏洞

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert, or write images in a variety of formats. ImageMagick has a security vulnerability, the vulnerability stems from its MagickCore/quantum-export.c component of the...

5.5CVSS6.8AI score0.00365EPSS
Exploits0References11
CNNVD
CNNVD
added 2022/08/23 12:0 a.m.3 views

Lenovo ThinkPad 输入验证错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The Lenovo ThinkPad suffers from an input validation error vulnerability that stems from an input validation flaw in the SMM driver in the ThinkPad BIOS on certain models, which could lead to arbitrary code execution...

6.7CVSS6.1AI score0.00195EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/08/19 12:0 a.m.3 views

Apache Zeppelin 输入验证错误漏洞

Apache Zeppelin is a Web-based open source laptop application from the Apache USA Foundation. The program supports interactive data analysis and collaborative documentation. An input validation error vulnerability exists in Apache Zeppelin that stems from the presence of an incorrect input...

5.3CVSS5.7AI score0.01327EPSS
Exploits0References4
Rows per page
Query Builder