CVE-2021-29527

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in tf.rawops.QuantizedConv2D. This is because the...

CVE-2020-27149

By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration changed...

PT-2021-18313 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 TensorFlow version 2.3.3 TensorFlow version 2.2.3 TensorFlow version 2.1.4 Description: An attacker can cause a denial of service by exploiting a CHECK-failure coming from the...

PT-2021-18301 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.5.0 TensorFlow version 2.4.2 TensorFlow version 2.3.3 TensorFlow version 2.2.3 TensorFlow version 2.1.4 Description: An attacker can cause a runtime division by zero error and denial of service in tf.raw...

Google TensorFlow 数字错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. A divide-by-zero error vulnerability exists in the tf.rawops.Conv2DBackpropInput implementation in TensorFlow versions prior to 2.5.0. No detailed vulnerability details are provided at this time...

WordPress 插件安全漏洞

WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in the WordPress plugin EWWW Image Optimizer prior to version 2.8.5 that allows remote command execution because it relies on a protection mechanism involving boolval, which was not available prio...

CVE-2021-29241

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

Ciscoxa0Adaptive Security Appliance 和 Ciscoxa0Firepower Threat Defense 操作系统命令注入漏洞

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance are both products of Cisco Corporation.Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services. Cisco Adaptive Security Appliance is a network appliance. Used to protect...

Trend Micro Antivirus for Mac 安全漏洞

Trend Micro Antivirus is a professional anti-virus application developed by Trend Micro, a globally recognized leader in computer security.Trend Micro Antivirus for Mac is the Mac version. An elevation of privilege vulnerability exists in Trend Micro Antivirus for Mac versions 2020 v10.5, 2021 v1...

IMAGE CONQUEST DICOM SERVER 命令注入漏洞

IMAGE CONQUEST DICOM SERVER is IMAGE an open source application. It can store, validate, query and retrieve through programmable SQL database tables. A security vulnerability exists in CONQUEST DICOM SERVER before 1.5.0, which can be exploited by attackers to execute malicious code...

Stored XSS vulnerability in build-with-parameters

build-with-parameters 1.5 and earlier does not escape parameter names and descriptions. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. build-with-parameters 1.5.1 escapes parameter names and descriptions...

CVE-2021-3027

app/viewsmod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided search filter because user input gets no sanitization...

LibrIT PaSSHport 注入漏洞

PaSSHport is an SSH access software from LibrIT that controls IT components. An injection vulnerability exists in LibrIT PaSSHport version 2.5 and prior versions, which stems from user input that is not processed in any way, and can lead to information disclosure via a carefully crafted special...

SUSE-SU-2021:0933-1 Security update for ruby2.5

This update for ruby2.5 fixes the following issues: - CVE-2020-25613: Fixed a potential HTTP Request Smuggling in WEBrick bsc1177125. - Enable optimizations also on ARM64 bsc1177222...

CVE-2021-28824

The Windows Installation component of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpaces - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions o...

CVE-2021-28819

The Windows Installation component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating...

CVE-2021-28821

The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local acce...

CVE-2021-26578

A potential security vulnerability has been identified in HPE Network Orchestrator NetO versions: Prior to 2.5. The vulnerability could be remotely exploited with SQL injection...

CVE-2021-26237

FastStone Image Viewer = 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service DoS or possibly to achieve code execution...

FastStone Image Viewer 缓冲区错误漏洞

FastStone Image Viewer is a free image viewing, converting and editing tool. A stack buffer overflow vulnerability exists in the CUR file parsing feature in FastStone Image Viewer 7.5 and earlier versions. The vulnerability can be exploited to execute arbitrary code via specially crafted CUR file...