37 matches found
EUVD-2024-36200
Malicious code in bioql PyPI...
EUVD-2024-36197
Malicious code in bioql PyPI...
EUVD-2024-36196
Malicious code in bioql PyPI...
CVE-2024-36743
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.dot...
CVE-2024-36745
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the oneflow.indexselect parameter...
CVE-2024-36740
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index as a negative number exceeds the range of size...
CVE-2024-36734
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting a negative value into the dim parameter...
CVE-2024-36740
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when index as a negative number exceeds the range of size...
CVE-2024-36735
OneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter is floating...
CVE-2024-36732
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.tensordot...
CVE-2024-36730
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting negative values into the oneflow.zeros/ones parameter...
CVE-2024-36730
CVE-2024-36730 concerns OneFlow-Inc Oneflow v0.9.1 with improper input validation in the zeros/ones parameter, allowing a Denial of Service via negative values. The core issue is input validation weakness in creating arrays with negative inputs, leading to high-severity impact (per CVSS 3.1 data)...
CVE-2024-36730
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting negative values into the oneflow.zeros/ones parameter...
CVE-2024-36730
Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS via inputting negative values into the oneflow.zeros/ones parameter...
CVE-2024-36732
The deep learning framework Oneflow (version v0.9.1 ) contains a vulnerability that allows an attacker to cause a Denial of Service (DoS) . The root cause is triggered when an empty array is processed using the oneflow.tensordot function. No specific patch version or remediation is currently iden...
CVE-2024-36732
An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service DoS when an empty array is processed with oneflow.tensordot...
CVE-2024-36734
The deep learning framework Oneflow version v0.9.1 is affected by a Denial of Service (DoS) vulnerability caused by improper input validation . Attackers can trigger this condition by providing a negative value into the dim parameter . As a temporary workaround until a formal patch is released, u...
CVE-2024-36735
CVE-2024-36735 affects OneFlow v0.9.1. The issue is that the parameter oneflow.eye being floating does not trigger an error or warning, potentially allowing silent misconfiguration. Exploitation details are not provided in the connected documents. The PT Security entry recommends restricting the ...