EUVD-2021-29613

Malicious code in bioql PyPI...

CVE-2021-42650

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

Portainer 跨站脚本漏洞

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer suffers from a cross-site scripting vulnerability that stems from a cross-site scripting XSS vulnerability in the node input box in custom templates prior to Portainer version 2.9.1...

CVE-2021-42650: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in Portainer before 2.9.1 via the node input box in Custom Templates...

PYSEC-2020-324

In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, a crafted TFLite model can force a node to have as input a tensor backed by a nullptr buffer. This can be achieved by changing a buffer index in the flatbuffer serialization to convert a read-only tensor to a read-write one...

Mozilla Firefox AudioParamTimeline::AudioNodeInputValue function information disclosure vulnerability

Mozilla Firefox is a web browser/email client released by Mozilla. An information disclosure vulnerability exists in the Mozilla Firefox AudioParamTimeline::AudioNodeInputValue function due to a failure of the AudioParamTimeline::AudioNodeInputValue function to properly compute the ellipse...