12676 matches found
Malicious code in gd-user-login (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f8c4667e1ba1cf0b991c3e4aa7d507fb454eff764c8d233a48cb8b81839b61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-linux-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35c4bd5ef8ff0e892a90a96125e449d042cdc2adfa37c8ff18e60499b8cf4472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @ncr-design-system/cxd-npm-releases (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006d2f71b3519c6fc98d63cb3fe8db7b056395cb490db6a35bd2b75de7da5d12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dckvisgimhpbkhd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26f7f6c72ca3ea4fd0378193059f390bd5bfed9d6fc74dfdc29b026ea3ea3d50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in leypamfdtqqmjky (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abc0bf953ef2256ceb19f14801f0b45a3077eee7d698ff3673e63757252eb5e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in matic-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f86c86d3e42f1a874421dd446c136e620e387b8672356395e507a8517fd2b1e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2020-25459
An issue was discovered in function synctree in heterodecisiontreeguest.py in WeBank FATE Federated AI Technology Enabler 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling...
Design/Logic Flaw
An issue was discovered in function synctree in heterodecisiontreeguest.py in WeBank FATE Federated AI Technology Enabler 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling...
CVE-2020-25459
CVE-2020-25459 affects WeBank FATE (Federated AI Technology Enabler) versions 0.1–1.4.2, via the function sync_tree in hetero_decision_tree_guest.py, allowing an attacker to read sensitive information during training. Connected advisories corroborate the issue and note patches in affected project...
Attacking the Performance of Machine Learning Systems
Interesting research: "Sponge Examples: Energy-Latency Attacks on Neural Networks": Abstract: The high energy costs of neural network training and inference led to the use of acceleration hardware such as GPUs and TPUs. While such devices enable us to train large-scale neural networks in...
AutomationDirect C-more EA9 HMI 代码问题漏洞
AutomationDirect DirectLOGIC is a programmable logic controller from AutomationDirect, Inc. A code issue vulnerability exists in the AutomationDirect C-more EA9 HMI that stems from a security issue in the installation directory that could allow an attacker to execute code during installation and...
CVE-2022-21180
Improper input validation for some IntelR Processors may allow an authenticated user to potentially cause a denial of service via local access...
CVE-2021-41415
Subscription-Manager v1.0 /main.js has a cross-site scripting XSS vulnerability in the machineDetail parameter...
CVE-2022-20817 Cisco IP Phone Duplicate Key Vulnerability
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...
CVE-2022-20817 Cisco IP Phone Duplicate Key Vulnerability
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...
Cisco IP Phone Duplicate Key Vulnerability
A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager CUCM is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could resul...
Subscription-Manager 跨站脚本漏洞
Subscription-Manager is a subscription management system by the individual developer of China's JiYouRan youranreus. A cross-site scripting vulnerability exists in Subscription-Manager v1.0, which stems from a lack of filtering and escaping of the machineDetail parameter in /main.js...
The vulnerability of the Java VM component of the Oracle Database Server system allows a hacker to cause partial service disruption.
The vulnerability of the Java VM component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a partial service failure using the Oracle Net network protocol...
CVE-2022-27221
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. An attacker in machine-in-the-middle could obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown strin...
