Lucene search
+L

56 matches found

Cvelist
Cvelist
•added 2022/02/05 5:26 p.m.•51 views

CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

9.7AI score0.01826EPSS
SaveExploits1References5
Mend
Mend
•added 2022/02/05 5:26 p.m.•5 views

CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

9.8CVSS0.01826EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2022/02/05 12:00 a.m.•3 views

PT-2022-10697

Name of the Vulnerable Software and Affected Versions perM version 0.4.0 Description The issue is related to a Buffer Overflow in the strncpy function. Debian initially fixed this in version 0.4.0-7. Recommendations For perM version 0.4.0, update to version 0.4.0-7 or later to resolve the issue...

9.8CVSS0.01826EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/05 12:00 a.m.•6 views

CVE-2021-38172: Buffer Copy without Checking Size of Input

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

9.8CVSS8.2AI score0.01826EPSS
SaveExploits1References2
osv_ghsa
osv_ghsa
•added 2021/11/10 6:57 p.m.•22 views

GHSA-3FF2-R28G-W7H9 Heap buffer overflow in `Transpose`

Impact The shape inference function for Transpose is vulnerable to a heap buffer overflow: python import tensorflow as tf @tf.function def test: y = tf.rawops.Transposex=1,2,3,4,perm=-10 return y test This occurs whenever perm contains negative elements. The shape inference function does not...

5.5CVSS7AI score0.00161EPSS
SaveExploits0References8
PyPA
PyPA
•added 2021/11/05 11:15 p.m.•15 views

PYSEC-2021-408

TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for Transpose is vulnerable to a heap buffer overflow. This occurs whenever perm contains negative elements. The shape inference function does not validate that the indices in perm are al...

7.8CVSS7.3AI score0.00161EPSS
SaveExploits0References2Affected Software1
osv_pysec
osv_pysec
•added 2021/11/05 11:15 p.m.•32 views

PYSEC-2021-408

TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for Transpose is vulnerable to a heap buffer overflow. This occurs whenever perm contains negative elements. The shape inference function does not validate that the indices in perm are al...

7.8CVSS7.3AI score0.00161EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/11/05 11:15 p.m.•28 views

CVE-2021-41216

TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for Transpose is vulnerable to a heap buffer overflow. This occurs whenever perm contains negative elements. The shape inference function does not validate that the indices in perm are al...

7.8CVSS7.4AI score0.00161EPSS
SaveExploits0References3Affected Software1
osv_pysec
osv_pysec
•added 2021/11/05 11:15 p.m.•36 views

PYSEC-2021-625

TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for Transpose is vulnerable to a heap buffer overflow. This occurs whenever perm contains negative elements. The shape inference function does not validate that the indices in perm are al...

7.8CVSS2.3AI score0.00161EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/11/05 10:10 p.m.•48 views

CVE-2021-41216 Heap buffer overflow in `Transpose`

TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for Transpose is vulnerable to a heap buffer overflow. This occurs whenever perm contains negative elements. The shape inference function does not validate that the indices in perm are al...

5.5CVSS7.9AI score0.00161EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2021/11/05 10:10 p.m.•21 views

CVE-2021-41216

TensorFlow is an open source platform for machine learning. In affected versions the shape inference function for Transpose is vulnerable to a heap buffer overflow. This occurs whenever perm contains negative elements. The shape inference function does not validate that the indices in perm are al...

7.8CVSS7.3AI score0.00161EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/02/20 12:00 a.m.•4 views

PT-2021-28102

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 8 crash type. The crash state involves several functions, including cil verify classperms, verify map pe...

5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/01/22 12:00 a.m.•6 views

PT-2019-18127

Name of the Vulnerable Software and Affected Versions creditease-sec insight through 2018-09-11 Description An issue was discovered that allows CSRF in the role perm delete function located in srcpm/app/admin/views.py. Recommendations For creditease-sec insight through 2018-09-11, consider...

8.8CVSS0.0065EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
•added 2018/07/26 12:28 a.m.•22 views

perm-ozon.ru Improper Access Control vulnerability

Open Bug Bounty ID: OBB-654012 Description| Value ---|--- Affected Website:| perm-ozon.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

0.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2013/11/30 12:00 a.m.•2 views

PT-2013-4047

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.12.2 Description The issue is related to the perf trace event perm function in the Linux kernel, which does not properly restrict access to the perf subsystem. This allows local users to enable function tracing...

3.6CVSS0.00661EPSS
SaveExploits0References71
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/05/11 12:00 a.m.•7 views

CVE-2005-1506: Undefined Security Weakness

SQL injection vulnerability in out.php in CJ Ultra CJUltra Plus 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via the perm parameter...

7.5CVSS6.4AI score0.01027EPSS
SaveExploits1References1
Rows per page
Query Builder