Google TensorFlow CTCBeamSearchDecoder Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow CTCBeamSearchDecoder. The vulnerability stems from a lack of authentication in tf.rawops.CTCBeamSearchDecoder. An attacker can exploit the vulnerability to cause a denial...

Improper Preservation of Permissions

In Gogs 0.11.91, MakeEmailPrimary in models/usermail.go lacks a "not the owner of the email" check...

CVE-2021-32403

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...

Cross site request forgery (csrf)

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...

Cross site request forgery (csrf)

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of validation and insecure configurations in inputs and modules...

CVE-2021-29023

InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable...

PT-2021-19701

Name of the Vulnerable Software and Affected Versions: Intelbras Router RF 301K Firmware version 1.1.2 Description: The issue is related to a lack of security mechanisms for token protection and the presence of unsafe inputs and modules, making it vulnerable to Cross Site Request Forgery CSRF...

PT-2021-19700

Name of the Vulnerable Software and Affected Versions: Intelbras Router RF 301K Firmware version 1.1.2 Description: The issue is related to a lack of validation and insecure configurations in inputs and modules, leading to Cross Site Request Forgery CSRF. Recommendations: For Intelbras Router RF...

CVE-2021-32402: Cross-Site Request Forgery (CSRF)

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of validation and insecure configurations in inputs and modules...

Intelbras Router RF 301K 跨站请求伪造漏洞

The Intelbras Router RF 301K is a router from Intelbras in China. A cross-site request forgery vulnerability exists in Intelbras Router RF 301K Firmware 1.1.2, which stems from a lack of authentication and insecure configuration in inputs and modules...

PT-2021-12154

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics Local version 2.0 Description The issue concerns the connection of IBM Planning Analytics Local to a Redis server, which is an in-memory data structure store. The Redis server, running on the remote host, lacks password...

PYSEC-2021-499

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPoolGradWithArgmax can cause reads outside of bounds of heap allocated data if attacker supplies specially crafted inputs. The...

PT-2021-15339

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.x through 13.1.3 F5 BIG-IP versions 14.1.x through 14.1.3 F5 BIG-IP versions 15.1.x through 15.1.2 F5 BIG-IP versions 16.0.x through 16.0.0 Description The issue is related to a lack of input validation for items used i...

CVE-2021-31445

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31443

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2021-31464

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2021-31443

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2020-11288: Improper Restriction of Operations within the Bounds of a Memory Buffer

Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...