Lucene search
+L

3146 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 2:42 p.m.35 views

Division by 0 in inplace operations

Impact An attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0: python import tensorflow as tf tf.rawops.InplaceSubx=,i=-99,-1,-1,v=1,1,1 The implementation has a logic error: it should skip processing if x and v a...

5.5CVSS6AI score0.00154EPSS
SaveExploits0References7Affected Software3
CNNVD
CNNVD
added 2021/08/18 12:0 a.m.7 views

ISC BIND 处理逻辑错误漏洞

ISC BIND is a suite of open source software from ISC that implements the DNS protocol. A Processing Logic Error vulnerability exists in ISC BIND, which originates when named attempts to respond via UDP with a response larger than the currently valid interface's Maximum Transmission Unit MTU and...

7.5CVSS6.3AI score0.03589EPSS
SaveExploits1References9
Prion
Prion
added 2021/08/12 6:15 p.m.18 views

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0. The implementation has a logic error: it should skip processing i...

2.1CVSS5.7AI score0.00154EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/08/12 6:15 p.m.3 views

PYSEC-2021-771

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0. The implementation has a logic error: it should skip processing i...

5.5CVSS6AI score0.00154EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2021/08/12 5:35 p.m.7 views

CVE-2021-37660

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0. The implementation has a logic error: it should skip processing i...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/08/11 12:0 a.m.6 views

Intel Ethernet Adapters 800 处理逻辑错误漏洞

Intel Ethernet Adapters 800 is an Ethernet Adapter from Intel Corporation. A Processing Logic Error vulnerability exists in the Intel Ethernet Adapters 800 family of devices, which can be exploited by an attacker to cause a denial of service because the product does not properly catch certain...

4.4CVSS5.3AI score0.0023EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/08/11 12:0 a.m.10 views

Citrix Systems Citrix ShareFile 处理逻辑错误漏洞

Citrix Systems Citrix ShareFile is a file sharing solution from Citrix Systems, Inc. A Processing Logic Error vulnerability exists in Citrix Systems Citrix ShareFile, which stems from the product no longer being able to select the Enable Encryption option when running the CTX269106 mitigation too...

7.5CVSS7.3AI score0.00411EPSS
SaveExploits0References3
NVD
NVD
added 2021/08/05 9:15 p.m.21 views

CVE-2021-22924

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively,which could lead ...

4.3CVSS0.0627EPSS
SaveExploits1References15
OSV
OSV
added 2021/08/05 9:15 p.m.37 views

CVE-2021-22924

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively,which could lead ...

3.7CVSS2.5AI score0.0627EPSS
SaveExploits1References15
AlpineLinux
AlpineLinux
added 2021/08/05 8:16 p.m.51 views

CVE-2021-22924

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively,which could lead ...

4.3CVSS6.2AI score0.0627EPSS
SaveExploits1
CVE
CVE
added 2021/08/05 8:16 p.m.466 views

CVE-2021-22924

CVE-2021-22924 — libcurl connection reuse flaw : The issue arises when libcurl reuses connections from its pool without correctly accounting for the issuer certificate and with path comparisons that are case-insensitive. This can cause a transfer to use the wrong, previously opened connection. Pu...

4.3CVSS5.7AI score0.0627EPSS
SaveExploits1References15Affected Software1
Cvelist
Cvelist
added 2021/08/05 8:16 p.m.27 views

CVE-2021-22924

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively,which could lead ...

6AI score0.0627EPSS
SaveExploits1References15
Debian CVE
Debian CVE
added 2021/08/05 8:16 p.m.61 views

CVE-2021-22924

libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths case insensitively,which could lead ...

4.3CVSS6.5AI score0.0627EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/08/05 12:0 a.m.8 views

Acronis True Image 处理逻辑错误漏洞

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image suffers from a Processing Logic Error vulnerability that stems from Acronis...

7.8CVSS7.4AI score0.00234EPSS
SaveExploits0References2
OSV
OSV
added 2021/08/02 5:15 p.m.6 views

CVE-2021-22398

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Affected product versions...

4.6CVSS5.8AI score0.00159EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/02 5:15 p.m.25 views

CVE-2021-22398

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Affected product versions...

4.6CVSS0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/08/02 4:13 p.m.27 views

CVE-2021-22398

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Affected product versions...

4.9AI score0.00159EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/02 4:13 p.m.54 views

CVE-2021-22398

The CVE-2021-22398 entry corresponds to a Huawei logic‑error vulnerability in several smartphones. Affected devices and software include Hulk-AL00C (9.1.1.201), Jennifer-AN00C (10.1.1.171), Jenny-AL10B (10.1.0.228), and OxfordPL-AN10B (10.1.0.116). The root cause is a logic error that does not pr...

4.6CVSS4.6AI score0.00159EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/08/02 12:0 a.m.61 views

Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway DoS (cisco-sa-alg-dos-hbBS7SZE)

According to its self-reported version, Cisco IOS-XE Software is affected by a denial of service vulnerability in the DNS Application Layer Gateway ALG functionality used by Network Address Translation NAT. The vulnerability is due to a logic error that occurs when an affected device inspects...

8.6CVSS7.4AI score0.01494EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/07/23 12:0 a.m.27 views

Cisco Adaptive Security Appliance Software Release 7.0.0 IPsec DoS (cisco-sa-asa-ftd-ipsec-dos-TFKQbgWC)

A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the...

7.7CVSS7.4AI score0.01188EPSS
SaveExploits0References3
Rows per page
Query Builder