Lucene search
+L

613 matches found

Cvelist
Cvelist
added 2024/05/16 8:46 p.m.38 views

CVE-2024-21792

Time-of-check Time-of-use race condition in IntelR Neural Compressor software before version 2.5.0 may allow an authenticated user to potentially enable information disclosure via local access...

4.7CVSS4.4AI score0.00136EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/16 8:46 p.m.24 views

CVE-2024-21792

Time-of-check Time-of-use race condition in IntelR Neural Compressor software before version 2.5.0 may allow an authenticated user to potentially enable information disclosure via local access...

4.7CVSS6.2AI score0.00136EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/16 8:46 p.m.133 views

CVE-2024-22476

Improper input validation in some IntelR Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access...

10CVSS9.8AI score0.35723EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/16 8:46 p.m.125 views

CVE-2024-22476

CVE-2024-22476 affects Intel Neural Compressor before version 2.5.0, due to improper input validation that enables an unauthenticated attacker to potentially achieve remote escalation of privilege via SQL injection. The Nuclei template and Intel advisory corroborate the affected product/version a...

10CVSS7.5AI score0.35723EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/16 8:46 p.m.25 views

CVE-2024-22476

Improper input validation in some IntelR Neural Compressor software before version 2.5.0 may allow an unauthenticated user to potentially enable escalation of privilege via remote access...

10CVSS7.6AI score0.35723EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/05/16 12:00 a.m.24 views

PT-2024-19060 · Intel · Intel Neural Compressor

Name of the Vulnerable Software and Affected Versions: IntelR Neural Compressor versions prior to 2.5.0 Description: A Time-of-check Time-of-use race condition may allow an authenticated user to potentially enable information disclosure via local access. Recommendations: For versions prior to...

4.7CVSS6.5AI score0.00136EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/05/16 12:00 a.m.11 views

Intel Neural Compressor 安全漏洞

Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily implement AI model optimization. A security vulnerability previously existed in Intel Neural Compressor version 2.5.0, which stemmed from the presence of a race condition issue. It coul...

4.7CVSS5.8AI score0.00136EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/16 12:00 a.m.19 views

Intel Neural Compressor 安全漏洞

Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily implement AI model optimization. A security vulnerability previously existed in Intel Neural Compressor version 2.5.0, which stemmed from the presence of incorrect input validation. It...

10CVSS7.1AI score0.35723EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/16 12:00 a.m.18 views

PT-2024-3895 · Intel · Intel Neural Compressor

Name of the Vulnerable Software and Affected Versions: Intel Neural Compressor versions prior to 2.5.0 Description: The issue is related to improper input validation in the Intel Neural Compressor software, which may allow an unauthenticated user to potentially enable escalation of privilege via...

10CVSS8.1AI score0.35723EPSS
SaveExploits0References15
Intel
Intel
added 2024/05/14 12:00 a.m.16 views

Intel® Neural Compressor Software Advisory

Summary: Potential security vulnerabilities in some Intel® Neural Compressor software may allow escalation of privilege and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-22476 Description: Improper...

10CVSS7.4AI score0.35723EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2024/03/24 9:26 a.m.88 views

Exploit for CVE-2022-32898

CVE-2022-32898: ANEProgramCreate multiple kernel memory cor...

10CVSS7.8AI score0.0456EPSS
SaveExploits3
OSV
OSV
added 2024/03/06 11:09 a.m.26 views

BIT-TENSORFLOW-2023-25661 Denial of Service in TensorFlow

TensorFlow is an Open Source Machine Learning Framework. In versions prior to 2.11.1 a malicious invalid input crashes a tensorflow model Check Failed and can be used to trigger a denial of service attack. A proof of concept can be constructed with the Convolution3DTranspose function. This...

6.5CVSS6.4AI score0.00432EPSS
SaveExploits1References3
The Hacker News
The Hacker News
added 2024/02/27 10:18 a.m.80 views

New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks

Cybersecurity researchers have found that it's possible to compromise the Hugging Face Safetensors conversion service to ultimately hijack the models submitted by users and result in supply chain attacks. "It's possible to send malicious pull requests with attacker-controlled data from the Huggin...

6.5CVSS7.8AI score0.01185EPSS
SaveExploits1
CNNVD
CNNVD
added 2024/02/23 12:00 a.m.6 views

Open Neural Network Exchange Path Traversal Vulnerability

Open Neural Network Exchange ONNX is an open ecosystem that enables AI developers to choose the right tools as their projects evolve. A security vulnerability exists in Open Neural Network Exchange versions 1.15.0 and earlier, which stems from a field in the externaldata tensor prototype that may...

7.5CVSS6.8AI score0.01189EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/02/23 12:00 a.m.9 views

Open Neural Network Exchange Buffer Error Vulnerability

The Open Neural Network Exchange ONNX is an open ecosystem that enables AI developers to choose the right tools for their projects as they evolve. A buffer error vulnerability exists in Open Neural Network Exchange 1.15.0 and prior versions, which stems from the ONNXASSERT and ONNXASSERTM functio...

9.1CVSS7AI score0.00594EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:00 a.m.22 views

The vulnerability of the Neural Engine component of the macOS operating system allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the macOS operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges...

7.8CVSS8AI score0.00224EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:00 a.m.10 views

The vulnerability of Apple Neural Engine in the macOS operating system allows a hacker to execute arbitrary code with root privileges.

The vulnerability of Apple Neural Engine in the macOS operating system relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code with root privileges...

7.8CVSS8.1AI score0.00224EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:00 a.m.28 views

The vulnerability of Apple Neural Engine in the macOS operating system allows a hacker to execute arbitrary code with root privileges.

The vulnerability of Apple Neural Engine in the macOS operating system relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code with root privileges...

7.8CVSS8.1AI score0.00224EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/25 12:00 a.m.9 views

The vulnerability of the Apple Neural Engine (ANE) in operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS allows attackers to escalate their privileges, execute arbitrary code, or cause system failures.

The vulnerability of the Apple Neural Engine ANE in operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges, execute arbitrary code, or...

8.8CVSS7.8AI score0.00368EPSS
SaveExploits0References9Affected Software5
Apple
Apple
added 2024/01/22 12:00 a.m.68 views

About the security content of iOS 17.3 and iPadOS 17.3

About the security content of iOS 17.3 and iPadOS 17.3 This document describes the security content of iOS 17.3 and iPadOS 17.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

7.8CVSS9.1AI score0.01789EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder