Lucene search
+L

9936 matches found

OSV
OSV
•added 2021/11/14 3:13 p.m.•17 views

UVI-2021-1001972 comedi: vmk80xx: fix transfer-buffer overflows

comedi: vmk80xx: fix transfer-buffer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.255 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/11/14 3:13 p.m.•22 views

GSD-2021-1001972 comedi: vmk80xx: fix transfer-buffer overflows

comedi: vmk80xx: fix transfer-buffer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.255 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/11/14 3:13 p.m.•18 views

UVI-2021-1001950 comedi: vmk80xx: fix transfer-buffer overflows

comedi: vmk80xx: fix transfer-buffer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.290 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/11/14 3:13 p.m.•20 views

GSD-2021-1001950 comedi: vmk80xx: fix transfer-buffer overflows

comedi: vmk80xx: fix transfer-buffer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.290 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2021/11/14 3:12 p.m.•19 views

UVI-2021-1001930 comedi: vmk80xx: fix transfer-buffer overflows

comedi: vmk80xx: fix transfer-buffer overflows This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.4.292 by commit...

7.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•27 views

Mozilla Firefox Security Advisory (MFSA2013-96) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

4.3CVSS5.8AI score0.02088EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•20 views

Mozilla Firefox Security Advisory (MFSA2015-89) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

10CVSS7AI score0.08447EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/11/10 7:12 p.m.•37 views

Missing validation during checkpoint loading

Impact An attacker can trigger undefined behavior, integer overflows, segfaults and CHECK-fail crashes if they can change saved checkpoints from outside of TensorFlow. This is because the checkpoints loading infrastructure is missing validation for invalid file formats. Patches We have patched th...

7.8CVSS1.8AI score0.00189EPSS
SaveExploits0References10Affected Software3
Cvelist
Cvelist
•added 2021/11/09 11:32 a.m.•39 views

CVE-2021-31887

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and = V2.3 and...

9.5AI score0.02449EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2021/11/08 10:15 p.m.•33 views

CVE-2021-41253

Zydis is an x86/x86-64 disassembler library. Users of Zydis versions v3.2.0 and older that use the string functions provided in zycore in order to append untrusted user data to the formatter buffer within their custom formatter hooks can run into heap buffer overflows. Older versions of Zydis...

8.1CVSS7.2AI score0.01864EPSS
SaveExploits1References2
Prion
Prion
•added 2021/11/05 10:15 p.m.•30 views

Design/Logic Flaw

TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the tf.range kernel, there is a conditional statement of type int64 = condition ? int64 : double. Due to C++ implicit conversion rules, both branches of the condition...

2.1CVSS5.4AI score0.00209EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2021/11/05 9:45 p.m.•117 views

CVE-2021-41202

The CVE-2021-41202 family describes an overflow in TensorFlow's tf.range kernel caused by a conditional int64 = condition ? int64 : double, where implicit C++ casting to double truncates the result. Affected are TF releases in the 2.4.x–2.7.x range (including 2.7.0 and cherry-picks to 2.6.1, 2.5....

5.5CVSS5.4AI score0.00209EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2021/11/05 9:15 p.m.•27 views

CVE-2021-41203

TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and CHECK-fail crashes if they can change saved checkpoints from outside of TensorFlow. This is because the checkpoints loading infrastructure ...

7.8CVSS7.6AI score
SaveExploits0References5
attackerkb
attackerkb
•added 2021/11/05 9:15 p.m.•18 views

CVE-2021-41203

TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and CHECK-fail crashes if they can change saved checkpoints from outside of TensorFlow. This is because the checkpoints loading infrastructure ...

7.8CVSS7.1AI score0.00189EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2021/11/05 9:15 p.m.•18 views

PYSEC-2021-396

TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and CHECK-fail crashes if they can change saved checkpoints from outside of TensorFlow. This is because the checkpoints loading infrastructure ...

7.8CVSS7.1AI score0.00189EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2021/11/05 9:05 p.m.•49 views

CVE-2021-41203 Missing validation during checkpoint loading

TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and CHECK-fail crashes if they can change saved checkpoints from outside of TensorFlow. This is because the checkpoints loading infrastructure ...

7.8CVSS7.9AI score0.00189EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2021/11/05 9:05 p.m.•20 views

CVE-2021-41203

TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and CHECK-fail crashes if they can change saved checkpoints from outside of TensorFlow. This is because the checkpoints loading infrastructure ...

7.8CVSS7AI score0.00189EPSS
SaveExploits0
Mend
Mend
•added 2021/11/05 9:05 p.m.•3 views

CVE-2021-41203

TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and CHECK-fail crashes if they can change saved checkpoints from outside of TensorFlow. This is because the checkpoints loading infrastructure ...

8.5CVSS0.00189EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2021/11/03 12:00 a.m.•47 views

Debian DLA-2806-1 : glusterfs - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2806 advisory. Multiple security vulnerabilities were discovered in GlusterFS, a clustered file system. Buffer overflows and path traversal issues may lead to information...

8.8CVSS7.1AI score0.05487EPSS
SaveExploits1References42
OpenVAS
OpenVAS
•added 2021/11/02 12:00 a.m.•40 views

Debian: Security Advisory (DLA-2806-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.9AI score0.05487EPSS
SaveExploits1References4
Rows per page
Query Builder