6539 matches found
CVE-2017-1077
CVE-2017-1077 is rejected/not used and does not represent an active vulnerability entry.
CVE-2020-6006
CVE-2020-6006 entry is rejected/not used and does not represent an active vulnerability.
CVE-2020-5998
CVE-2020-5998 is rejected and does not represent an active vulnerability entry.
PT-2021-3281
Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description The vulnerability is related to errors in privilege management in the Windows Cloud Files Mini Filter Driver. It allows an attacker to elevate their privileges...
The vulnerability of the org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool component in the Jackson-databind library of the FasterXML project allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource component in the Jackson-databind library of the FasterXML project allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability may allow an attacker to compromise the confidentialit...
The vulnerability of the org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource component in the Jackson-databind library of the FasterXML project allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability may allow an attacker to compromise the...
PT-2024-11178 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc2+ 45 Description: A vulnerability in the Linux kernel has been resolved, which was introduced by a commit that removed the xsk buff pool from the VSI structure. This change broke the Tx side of AF XDP ...
DEBIAN-CVE-2020-22048
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ffframepoolget function in framepool.c...
PT-2024-11180 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel's nvmet module, where it attempts to free memory from the wrong pool, causing a crash. Specifically, when a p2p device is found but the p2p poo...
FFmpeg 资源管理错误漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which stems from a memory leak in the ffframepoolget function in framepool.c. The vulnerability is caused by a memory leak in the ffframepoolget function in the...
FYTokens can be minted for free
Handle cmichel Vulnerability details The core issue is that one can force the protocol to do an arbitrary trade in the pool using Ladle.roll. The function allows specifying a base amount and the protocol will mint as many fyTokens as needed for the trade, and trade them in the pool. This can be...
GHSA-X8H6-XGQX-JQGP Undefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad`
Impact The implementation of tf.rawops.FractionalMaxPoolGrad triggers an undefined behavior if one of the input tensors is empty: python import tensorflow as tf originput = tf.constant2, 3, shape=1, 1, 1, 2, dtype=tf.int64 origoutput = tf.constant, dtype=tf.int64 outbackprop = tf.zeros2, 3, 6, 6,...
GHSA-6F89-8J54-29XF Heap buffer overflow in `FractionalAvgPoolGrad`
Impact The implementation of tf.rawops.FractionalAvgPoolGrad is vulnerable to a heap buffer overflow: python import tensorflow as tf originputtensorshape = tf.constant1, 3, 2, 3, shape=4, dtype=tf.int64 outbackprop = tf.constant2, shape=1, 1, 1, 1, dtype=tf.int64 rowpoolingsequence = tf.constant1...
GHSA-V6R6-84GR-92RM Heap buffer overflow in `AvgPool3DGrad`
Impact The implementation of tf.rawops.AvgPool3DGrad is vulnerable to a heap buffer overflow: python import tensorflow as tf originputshape = tf.constant10, 6, 3, 7, 7, shape=5, dtype=tf.int32 grad = tf.constant0.01, 0, 0, shape=3, 1, 1, 1, 1, dtype=tf.float32 ksize = 1, 1, 1, 1, 1 strides = 1, 1...
GHSA-F78G-Q7R4-9WCV Division by 0 in `FractionalAvgPool`
Impact An attacker can cause a runtime division by zero error and denial of service in tf.rawops.FractionalAvgPool: python import tensorflow as tf value = tf.constant60, shape=1, 1, 1, 1, dtype=tf.int32 poolingratio = 1.0, 1.0000014345305555, 1.0, 1.0 pseudorandom = False overlapping = False...
RHEL 8 : httpd:2.4 (RHSA-2021:1809)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1809 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modsessioncookie...
httpd: mod_http2 concurrent pool usage
A flaw was found in Apache httpd in versions 2.4.20 to 2.4.43. Logging using the wrong pool by modhttp2 at debug/trace log level may lead to potential crashes and denial of service. The highest threat from this vulnerability is to system availability...
CVE-2021-29570
TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPoolGradWithArgmax can cause reads outside of bounds of heap allocated data if attacker supplies specially crafted inputs. The...
