Lucene search
K

1895 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2022/09/25 10:39 p.m.39 views

Security Bulletin: Privilege escalation vulnerability in IBM DB2's Audit Facility (CVE-2013-3475).

Abstract Vulnerability in IBM DB2's Audit Facility could allow an escalation of privilege attack. Content VULNERABILITY DETAILS CVE ID: CVE-2013-3475 Description: The IBM DB2 products listed below contain a security vulnerability in the DB2 Audit Facility which allows an attacker to gain DB2...

7.2CVSS6.2AI score0.00066EPSS
Exploits0Affected Software2
OSV
OSV
added 2022/09/16 10:17 p.m.1 views

GHSA-G35R-369W-3FQP TensorFlow vulnerable to segfault in `QuantizedInstanceNorm`

Impact If QuantizedInstanceNorm is given xmin or xmax tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack. python import tensorflow as tf outputrangegiven = False givenymin = 0 givenymax = 0 varianceepsilon = 1e-05 minseparation = 0.001 x =...

5.9CVSS6.9AI score0.00064EPSS
Exploits0References5
The Hacker News
The Hacker News
added 2022/09/16 3:8 a.m.31 views

Uber Says It's Investigating a Potential Breach of Its Computer Systems

Ride hailing giant Uber disclosed Thursday it's responding to a cybersecurity incident involving a breach of its network and that it's in touch with law enforcement authorities. The New York Times first reported the incident. The company pointed to its tweeted statement when asked for comment on...

0.1AI score
Exploits0
Fedora
Fedora
added 2022/09/16 12:18 a.m.37 views

[SECURITY] Fedora 37 Update: moby-engine-20.10.18-1.fc37

Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between - and they don'...

6.3CVSS6.7AI score0.00039EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2022/09/16 12:0 a.m.1 views

PT-2022-23069 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description: The issue arises when QuantizedInstanceNorm is given x min or x max tensors of ...

7.5CVSS7.3AI score0.00064EPSS
Exploits0References9
OSV
OSV
added 2022/09/01 6:15 p.m.4 views

CVE-2020-27784

A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printerioctl printerioctl tries to access of a printerdev instance. However, use-after-free arises because it had been freed by gprinterfree...

5.5CVSS7.5AI score
Exploits0References1
NVD
NVD
added 2022/09/01 6:15 p.m.21 views

CVE-2020-27784

A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printerioctl printerioctl tries to access of a printerdev instance. However, use-after-free arises because it had been freed by gprinterfree...

5.5CVSS0.00077EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/09/01 5:56 p.m.18 views

CVE-2020-27784

A vulnerability was found in the Linux kernel, where accessing a deallocated instance in printerioctl printerioctl tries to access of a printerdev instance. However, use-after-free arises because it had been freed by gprinterfree...

6.1AI score0.00077EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.23 views

Ubuntu: Security Advisory (USN-1771-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS6.7AI score0.01427EPSS
Exploits1References2
OSV
OSV
added 2022/08/25 11:15 p.m.0 views

CVE-2022-37316

Archer Platform 6.8 before 6.11 P3 6.11.0.3 contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated user of the affected system. 6.10 P3 HF1 6.10.0.3.1 is also a fixed release...

6.5CVSS5.8AI score
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/25 11:15 p.m.1 views

CVE-2022-37316

Archer Platform 6.8 before 6.11 P3 6.11.0.3 contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated user of the affected system. 6.10 P3 HF1 6.10.0.3.1 is also a fixed release...

6.5CVSS6.6AI score0.00327EPSS
Exploits0References3
Prion
Prion
added 2022/08/25 11:15 p.m.23 views

Improper access control

Archer Platform 6.8 before 6.11 P3 6.11.0.3 contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated user of the affected system. 6.10 P3 HF1 6.10.0.3.1 is also a fixed release...

4CVSS6.3AI score0.00327EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/08/25 10:49 p.m.14 views

CVE-2022-37316

Archer Platform 6.8 before 6.11 P3 6.11.0.3 contains an improper API access control vulnerability in a multi-instance system that could potentially present unauthorized metadata to an authenticated user of the affected system. 6.10 P3 HF1 6.10.0.3.1 is also a fixed release...

6.5CVSS6.5AI score0.00327EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.1 views

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform versions 6.8 through prior to 6.11 P3 6.11.0.3 that stems from the inclusion of incorrect API access controls in a multi-instance system, which can compromise...

6.5CVSS5.5AI score0.00327EPSS
Exploits0References3
Veeam
Veeam
added 2022/08/16 12:0 a.m.11 views

Restore to Google Cloud Engine Fails With "n1-standard-2 not found"

The Restore to Google Compute Engine utilizes the import-image API call, which in turn requires an N1 instance type, which is an instance type that is not available in certain regions...

2.2AI score
Exploits0
OSV
OSV
added 2022/08/04 6:15 p.m.2 views

CVE-2022-35241

In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can cause an increase in disk resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

6.5CVSS5.8AI score0.00654EPSS
Exploits0References1
NVD
NVD
added 2022/08/04 6:15 p.m.12 views

CVE-2022-35241

In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can cause an increase in disk resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

6.5CVSS0.00654EPSS
Exploits0References1
Prion
Prion
added 2022/08/04 6:15 p.m.17 views

Design/Logic Flaw

In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can cause an increase in disk resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

4CVSS6.5AI score0.00654EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/04 5:49 p.m.21 views

CVE-2022-35241 NGINX Instance Manager vulnerability CVE-2022-35241

In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can cause an increase in disk resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

6.5CVSS6.7AI score0.00654EPSS
Exploits0References1
CVE
CVE
added 2022/08/04 5:49 p.m.80 views

CVE-2022-35241

CVE-2022-35241 affects NGINX Instance Manager (NGINX IM) and is documented by F5 as an issue where undisclosed requests can cause increased disk resource utilization, enabling a remote, authenticated attacker to degrade system performance (DoS). Affected branches: NGINX IM 2.x (2.0.0–2.3.0) with ...

6.5CVSS6.8AI score0.00654EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder