AXIS Network cameras security vulnerabilities

AXIS Network cameras are webcams from the Swedish company AXIS. A security vulnerability exists in AXIS Network cameras P1204, P3225, P3367, M3045, M3005, and M3007, which stems from improper privilege management in component CGI scripts...

CVE-2022-31480

An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service DoS. This vulnerability impacts products based on HID Mercury Intelligent Controllers LP1501, LP1502, LP2500, LP4502, and EP4502 which contain firmware versions prior t...

animl (>=1.1.2, <=1.1.4), audio-classification-models (1.0.1) +42 more potentially affected by CVE-2022-29201 via tensorflow-gpu (>=2.0.0, <=2.6.2)

tensorflow-gpu PYPI version =2.0.0, =1.1.2, =0.0.1, =0.0.9, =0.0.4, =1.1.1, =1.1.0, =0.1.1, =0.1.0, =0.1.5, =0.2.0, =0.2.1 and more Source cves: CVE-2022-29201 Source advisory: GHSA-PQHM-4WVF-2JG8...

animl (>=1.1.2, <=1.1.4), audio-classification-models (1.0.1) +42 more potentially affected by CVE-2022-29198 via tensorflow-gpu (>=2.0.0, <=2.6.2)

tensorflow-gpu PYPI version =2.0.0, =1.1.2, =0.0.1, =0.0.9, =0.0.4, =1.1.1, =1.1.0, =0.1.1, =0.1.0, =0.1.5, =0.2.0, =0.2.1 and more Source cves: CVE-2022-29198 Source advisory: OSV:GHSA-MG66-QVC5-RM93...

GHSA-C7RM-W2HJ-X8G3 Guard bypass in Eloquent models affecting Laravel illuminate database component

An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database component in some situations in which table names are stripped during a mass assignment...

Guard bypass in Eloquent models affecting Laravel illuminate database component

An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database component in some situations in which table names are stripped during a mass assignment...

CVE-2022-31263

app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions...

CVE-2022-31263: Undefined Security Weakness

app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions...

Stack overflow

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, certain TFLite models that were created using TFLite model converter would crash when loaded in the TFLite interpreter. The culprit is that during quantization the scale of values could b...

Google TensorFlow input validation error vulnerability

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Google TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, which stems from a vulnerability that can be...

CVE-2022-29212 Core dump when loading TFLite models with quantization in TensorFlow

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, certain TFLite models that were created using TFLite model converter would crash when loaded in the TFLite interpreter. The culprit is that during quantization the scale of values could b...

CVE-2022-29212 Core dump when loading TFLite models with quantization in TensorFlow

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, certain TFLite models that were created using TFLite model converter would crash when loaded in the TFLite interpreter. The culprit is that during quantization the scale of values could b...

CVE-2022-29212

TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, certain TFLite models that were created using TFLite model converter would crash when loaded in the TFLite interpreter. The culprit is that during quantization the scale of values could b...

PT-2022-19465

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.9.0 TensorFlow versions prior to 2.8.1 TensorFlow versions prior to 2.7.2 TensorFlow versions prior to 2.6.4 Description TensorFlow is an open source platform for machine learning. Certain TFLite models that were...

Vulnerabilities in permission management and access control of various Apple products

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. Apple iOS and iPadOS are vulnerable to a privilege-granting and access-control issue that stems from a logic issue in...

Apple iOS and Apple iPadOS buffer error vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. Apple iOS and Apple iPadOS suffer from a buffer error vulnerability that stems from a boundary error in GPU Drivers. An...

CVE-2022-29307

IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copylangcontent in application/models/langmodel.php...

PT-2022-2515

Name of the Vulnerable Software and Affected Versions Zyxel USG FLEX 100W versions 5.00 through 5.21 Patch 1 Zyxel USG FLEX 200 versions 5.00 through 5.21 Patch 1 Zyxel USG FLEX 500 versions 5.00 through 5.21 Patch 1 Zyxel USG FLEX 700 versions 5.00 through 5.21 Patch 1 Zyxel USG FLEX 50W version...

CVE-2022-29306: Improper Neutralization of Special Elements used in an SQL Command

IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the idpage parameter in application/models/articlemodel.php...

CVE-2022-29307: Improper Control of Generation of Code

IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copylangcontent in application/models/langmodel.php...