Lucene search
+L

2250 matches found

osv_pysec
osv_pysec
•added 2021/03/23 5:15 p.m.•27 views

PYSEC-2021-140

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.9AI score0.02759EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2021/03/23 4:40 p.m.•66 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.6AI score0.02759EPSS
SaveExploits0References5
Mend
Mend
•added 2021/03/23 4:40 p.m.•9 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

8.7CVSS0.02759EPSS
SaveExploits0References10
CVE
CVE
•added 2021/03/23 4:40 p.m.•394 views

CVE-2021-20270

CVE-2021-20270 describes an infinite loop in Pygments’ SMLLexer, affecting Pygments 1.5–2.7.3, which can cause DoS during syntax highlighting of StandardML sources (e.g., input containing only the keyword “exception”). Connected advisories confirm affected distributions (e.g., Debian, AlmaLinux, ...

7.5CVSS7.3AI score0.02759EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2021/03/23 4:40 p.m.•56 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS8.1AI score0.02759EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2021/03/23 4:40 p.m.•64 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS7.6AI score0.02759EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/23 12:00 a.m.•4 views

CVE-2021-20270: Loop with Unreachable Exit Condition

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS5.7AI score0.02759EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2021/03/09 4:10 p.m.•10 views

python-pygments: Infinite loop in SML lexer may lead to DoS

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS7.4AI score0.02759EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2021/03/09 12:00 a.m.•10 views

UBUNTU-CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS6.9AI score0.02759EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2021/03/05 10:35 a.m.•54 views

CVE-2021-20270

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

7.5CVSS3.3AI score0.02759EPSS
SaveExploits0References3
Huntr
Huntr
•added 2021/01/28 12:00 a.m.•27 views

Code Injection in tensorflow/tfx

Description TensorFlow Extended TFX is a Google-production-scale machine learning platform based on TensorFlow. It provides a configuration framework to express ML pipelines consisting of TFX components. Vulnerability Vulnerable to YAML deserialization attack caused by unsafe loading. Proof of...

2.5AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2020/12/16 5:15 p.m.•17 views

CVE-2020-7837

An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via acces...

8.8CVSS6.1AI score0.00749EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/16 5:15 p.m.•36 views

CVE-2020-7837

An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via acces...

8.8CVSS8AI score0.00749EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/16 5:15 p.m.•30 views

Stack overflow

An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via acces...

6.8CVSS8.7AI score0.00749EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/12/16 4:09 p.m.•47 views

CVE-2020-7837

An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via acces...

7.5CVSS8.9AI score0.00749EPSS
SaveExploits0References1
CVE
CVE
•added 2020/12/16 4:09 p.m.•62 views

CVE-2020-7837

The CVE-2020-7837 entry describes a stack-based buffer overflow in Infraware’s ML Report Program (MLReportDeamon.exe). The root cause is an unchecked vsprintf call within function sub_41EAF0, allowing attacker-supplied strings to overflow a stack buffer via crafted web page access. Affected produ...

8.8CVSS8.7AI score0.00749EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/12/16 6:50 a.m.•15 views

CVE-2020-7837

An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via acces...

8.8CVSS8.5AI score0.00749EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/16 12:00 a.m.•11 views

CVE-2020-7837: Stack-based Buffer Overflow

An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via acces...

8.8CVSS6.2AI score0.00749EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/12/16 12:00 a.m.•9 views

PT-2020-19828

Name of the Vulnerable Software and Affected Versions Infraware ML Report version 2.19.312.0000 Description An issue was discovered in the ML Report Program, where a stack-based buffer overflow occurs in the function sub 41EAF0 at MLReportDeamon.exe. This happens because the function calls vsprin...

8.8CVSS0.00749EPSS
SaveExploits0References5
vulnersOsv
vulnersOsv
•added 2020/12/10 10:10 p.m.•2 views

aglvq (1.0.0), beacon-trellis (0.1.0) +74 more potentially affected by CVE-2020-26270 via tensorflow (>=2.1.0, <=2.1.2)

tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.2.2 - deepkingnet 0.0.1.dev0 - dgbpy-dm 0.1.2 and more Source cves: CVE-2020-26270 Source advisory: MEND:CVE-2020-26270...

4.4CVSS0.00173EPSS
SaveExploits0
Rows per page
Query Builder