Lucene search
+L

614 matches found

CNVD
CNVD
•added 2017/08/16 12:00 a.m.•18 views

Numpy 'numpy.pad' function denial of service vulnerability

NumPy is a Python scientific computing package developed by the NumPy contributors that includes a powerful N-dimensional array object, useful linear algebra, Fourier transform, and random number generation functions, and other features. A security vulnerability exists in the 'numpy.pad' function...

7.5CVSS6.9AI score0.02715EPSS
SaveExploits1References1
Veracode
Veracode
•added 2017/08/15 9:55 p.m.•25 views

Denial Of Service (DoS) Through Infinite Loop

numpy is vulnerable to denial of service DoS attacks. These attacks are possible because the numpy.pad function is missing some validation, allowing an empty list or a ndarray to cause an infinite loop...

7.5CVSS7AI score0.02715EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2017/08/15 4:29 p.m.•39 views

CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

7.5CVSS7.4AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2017/08/15 4:29 p.m.•11 views

CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

7.5CVSS7AI score0.02715EPSS
SaveExploits1References3
NVD
NVD
•added 2017/08/15 4:29 p.m.•46 views

CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

7.5CVSS7.4AI score0.02715EPSS
SaveExploits1References2
Prion
Prion
•added 2017/08/15 4:29 p.m.•25 views

Input validation

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

5CVSS7.3AI score0.02715EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2017/08/15 4:29 p.m.•37 views

CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

7.5CVSS7AI score0.02715EPSS
SaveExploits1References2
OSV
OSV
•added 2017/08/15 4:29 p.m.•13 views

UBUNTU-CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

7.5CVSS7AI score0.02715EPSS
SaveExploits1References3
PyPA
PyPA
•added 2017/08/15 4:29 p.m.•12 views

PYSEC-2017-1

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

7.5CVSS7AI score0.02715EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2017/08/15 4:29 p.m.•29 views

PYSEC-2017-1

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

7.5CVSS7AI score0.02715EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2017/08/15 4:00 p.m.•69 views

CVE-2017-12852

Removed by vendor...

7.5CVSS7AI score0.02715EPSS
SaveExploits1
CVE
CVE
•added 2017/08/15 4:00 p.m.•168 views

CVE-2017-12852

CVE-2017-12852 is associated with NumPy’s numpy.pad implementation. The connected documents identify the issue as a missing input validation in numpy.pad for NumPy 1.13.1 and older, where an empty list or ndarray can cause an infinite loop and enable a DoS. Multiple sources (NVD/NPD and Nessus/Op...

7.5CVSS7AI score0.02715EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2017/08/15 4:00 p.m.•59 views

CVE-2017-12852

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

7.4AI score0.02715EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/08/15 12:00 a.m.•447 views

PT-2017-12727

Name of the Vulnerable Software and Affected Versions Numpy versions 1.13.1 and earlier Description The issue is related to missing input validation in the numpy.pad function. This can cause an infinite loop when an empty list or ndarray is used, potentially allowing attackers to conduct a Denial...

7.5CVSS7AI score0.02715EPSS
SaveExploits1References29
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/15 12:00 a.m.•4 views

CVE-2017-12852: Loop with Unreachable Exit Condition

The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack...

7.5CVSS7AI score0.02715EPSS
SaveExploits1References2
myhack58
myhack58
•added 2017/04/07 12:00 a.m.•109 views

Using the memory corruption vulnerability in the Python sandbox escape-vulnerability warning-the black bar safety net

Simply skip the text the author's README, we directly enter into the technical details. The Python environment using a custom whitelist/blacklist programs to prevent access to dangerous built-in functions, modules, functions, etc. Based on theoperating systemthe isolation provides some additional...

8AI score
SaveExploits0
Veracode
Veracode
•added 2017/04/03 12:48 a.m.•6 views

Integer Overflow

numpy contains an integer overflow issue which could possibly lead to other attacks. By leveraging this flaw attackers can read or write arbitrary memory. This can be done by indexing from an array with overflown size, and subsequently causing a memory error...

7AI score
SaveExploits0
n0where
n0where
•added 2017/02/14 5:45 a.m.•39 views

Detects Clickbait Headlines Using Deep Learning: Clickbait Detector

Detects Clickbait Headlines Using Deep Learning People continually fall for clickbait and as Wired in it’s article mentioned Whether you think clickbait is on the rise, obscurant and self-negating, not such a big deal, or the root of all evil, one thing is clear about it: It’s increasingly hard t...

7.2AI score
SaveExploits0References3
n0where
n0where
•added 2016/10/07 2:40 p.m.•42 views

CERT Basic Fuzzing Framework: BFF

CERT Basic Fuzzing Framework The CERT Basic Fuzzing Framework BFF is a software testing tool that finds defects in applications that run on the Linux and Mac OS X platforms. BFF performs mutational fuzzing on software that consumes file input. Mutational fuzzing is the act of taking well-formed...

0.4AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2015/09/08 12:00 a.m.•34 views

Amazon Linux: Security Advisory (ALAS-2014-302)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00471EPSS
SaveExploits0References2
Rows per page
Query Builder