EUVD-2021-29613

Malicious code in bioql PyPI...

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

CVE-2021-42650: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

Portainer cross-site scripting vulnerabilities

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer suffers from a cross-site scripting vulnerability that stems from a cross-site scripting XSS vulnerability in the node input box in custom templates prior to Portainer version 2.9.1...

PT-2021-23644

Name of the Vulnerable Software and Affected Versions Portainer versions prior to 2.9.1 Description A Cross Site Scripting XSS issue exists in the node input box in Custom Templates. This allows for potential exploitation. Recommendations For versions prior to 2.9.1, update to version 2.9.1 or...

PYSEC-2020-324

In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLite model can force a node to have as input a tensor backed by a nullptr buffer. This can be achieved by changing a buffer index in the flatbuffer serialization to convert a read-only tensor to a read-write one...

Mozilla Firefox AudioParamTimeline::AudioNodeInputValue function information disclosure vulnerability

Mozilla Firefox is a web browser/email client released by Mozilla. An information disclosure vulnerability exists in the Mozilla Firefox AudioParamTimeline::AudioNodeInputValue function due to a failure of the AudioParamTimeline::AudioNodeInputValue function to properly compute the ellipse...