1078 matches found
CVE-2020-7837: Stack-based Buffer Overflow
An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strings in parameters given by attacker. And it finally leads to a stack-based buffer overflow via acces...
PT-2020-19828
Name of the Vulnerable Software and Affected Versions Infraware ML Report version 2.19.312.0000 Description An issue was discovered in the ML Report Program, where a stack-based buffer overflow occurs in the function sub 41EAF0 at MLReportDeamon.exe. This happens because the function calls vsprin...
PT-2020-6145
Name of the Vulnerable Software and Affected Versions Pygments versions 1.5 to 2.7.3 Description The issue is related to an infinite loop in the SMLLexer function of the Pygments library. This can lead to a denial of service when performing syntax highlighting of a Standard ML SML source file. Th...
animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2020-15265 via tensorflow (1.12.2)
tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2020-15265 Source advisory: OSV:GHSA-RRFP-J2MP-HQ9C...
Cyberattacks against machine learning systems are more common than you think
Machine learning ML is making incredible transformations in critical areas such as finance, healthcare, and defense, impacting nearly every aspect of our lives. Many businesses, eager to capitalize on advancements in ML, have not scrutinized the security of their ML systems. Today, along with...
Cyberattacks against machine learning systems are more common than you think
Machine learning ML is making incredible transformations in critical areas such as finance, healthcare, and defense, impacting nearly every aspect of our lives. Many businesses, eager to capitalize on advancements in ML, have not scrutinized the security of their ML systems. Today, along with...
Akamai's Polymorphic AI Framework Preemptively Manages Bots
Too many security efforts react to threats as they come. While security teams often succeed through Herculean efforts, being constantly under siege takes its toll on your resources. The relentless barrage of bot attacks will eventually crack the human- and system-based methods to block or mitigat...
animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2020-15191 via tensorflow (1.12.2)
tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2020-15191 Source advisory: OSV:PYSEC-2020-114...
animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2020-15201 via tensorflow (1.12.2)
tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2020-15201 Source advisory: OSV:PYSEC-2020-124...
animalai-train (>=0.6.0, <=1.0.3), coach-cli (0.91.0) +3 more potentially affected by CVE-2020-15192 via tensorflow (1.12.2)
tensorflow PYPI version 1.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - animalai-train =0.6.0, =0.10.0, =0.3.2, =0.4.3 Source cves: CVE-2020-15192 Source advisory: OSV:PYSEC-2020-115...
aglvq (1.0.0), beacon-trellis (0.1.0) +74 more potentially affected by CVE-2020-15209 via tensorflow (>=2.1.0, <=2.1.1)
tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.2.2 - deepkingnet 0.0.1.dev0 - dgbpy-dm 0.1.2 and more Source cves: CVE-2020-15209 Source advisory: OSV:PYSEC-2020-132...
aglvq (1.0.0), beacon-trellis (0.1.0) +74 more potentially affected by CVE-2020-15203 via tensorflow (>=2.1.0, <=2.1.1)
tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.2.2 - deepkingnet 0.0.1.dev0 - dgbpy-dm 0.1.2 and more Source cves: CVE-2020-15203 Source advisory: MEND:CVE-2020-15203...
aglvq (1.0.0), beacon-trellis (0.1.0) +74 more potentially affected by CVE-2020-15207 via tensorflow (>=2.1.0, <=2.1.1)
tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.2.2 - deepkingnet 0.0.1.dev0 - dgbpy-dm 0.1.2 and more Source cves: CVE-2020-15207 Source advisory: MEND:CVE-2020-15207...
mlsolucioneshumanas.com Cross Site Scripting vulnerability OBB-1299928
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Avoid Alert Fatigue: How to Automatically Get Rid of WAF False Positive
Alert fatigue - introducing false positives in WAF All WAF experts know what it’s like handling massive amounts of alerts. They’re also very likely wasting a lot of time fishing false positives out of all these alerts. The WAF’s purpose is to block attacks and let legitimate traffic through. Fals...
Adversarial Machine Learning and the CFAA
I just co-authored a paper on the legal risks of doing machine learning research, given the current state of the Computer Fraud and Abuse Act: Abstract: Adversarial Machine Learning is booming with ML researchers increasingly targeting commercial ML systems such as those used in Facebook, Tesla,...
Email Sender Identity is Key to Solving the Phishing Crisis
Email is in crisis. Despite massive advancements in perimeter and endpoint defenses, email remains a cybersecurity weak link for many companies. Why? Email is at the heart of everything we do online. It’s an essential line of communication for one-on-one and group conversations, both...
Email Sender Identity is Key to Solving the Phishing Crisis
Email is in crisis. Despite massive advancements in perimeter and endpoint defenses, email remains a cybersecurity weak link for many companies. Why? Email is at the heart of everything we do online. It’s an essential line of communication for one-on-one and group conversations, both...
VirusTotal Adds Cynet's Artificial Intelligence-Based Malware Detection
VirusTotal, the famous multi-antivirus scanning service owned by Google, recently announced new threat detection capabilities it added with the help of an Israeli cybersecurity firm. VirusTotal provides a free online service that analyzes suspicious files and URLs to detect malware and...
ml-auto.by Cross Site Scripting vulnerability OBB-1203672
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...