CVE-2021-36814

CVE-2021-36814 entry is rejected and not used as described.

CVE-2021-36815

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2021-36810

CVE-2021-36810 is rejected/not used; the entry does not represent an active vulnerability.

CVE-2021-27010

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-27015

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-27014

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-27008

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-27009

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-27016

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-27011

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-27015

CVE-2021-27015 entry is rejected/not used and does not represent an active vulnerability.

CVE-2021-27013

This CVE entry is rejected and does not represent an active vulnerability.

CVE-2021-27011

This CVE-2021-27011 entry is rejected and not used per the Initial Description.

CLSA-2022-1646071990 Fix of CVE: CVE-2021-3667, CVE-2021-3631

CVE-2021-3631: security: fix SELinux label generation logic - CVE-2021-3667: storagedriver: Unlock object on ACL fail in storagePoolLookupByTargetPath...

After debt seizure from InsuranceFund, user can dilute all past participants.

Lines of code Vulnerability details Impact A user can get a much larger portion of the pool as it recovers from a debt seizure. The intent of the insurance pool seems to be that it could recover from a bad debt event. Proof of Concept 1. Alice is the first LP to the insurance pool, and deposits...

ThecosomataETH.addLiquidity can be subject to sandwich attack

Lines of code Vulnerability details Impact Liquidity addition can happen at a manipulated pool state and result in receiving fewer LP shares than actual market state dictates Proof of Concept addLiquidity measures slippage based on the pool returned amount via calctokenamount: Pool returned amoun...

wasmtime:instantiate-many: Segv on unknown address in core::ptr::drop_in_place$LT$wasmtime_runtime..instance..Instance$GT$::h41cb0d5e5

Project: https://github.com/bytecodealliance/wasmtime.git Detailed Report: https://oss-fuzz.com/testcase?key=5305807502180352 Project: wasmtime Fuzzing Engine: libFuzzer Fuzz Target: instantiate-many Job Type: libfuzzerasanwasmtime Platform Id: linux Crash Type: Segv on unknown address Crash...

me.prettyprint:hector-core (>=0.7.0-29, <=0.7.0-31), me.prettyprint:hector-object-mapper (>=1.0-07, <=1.0-09) +2 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (0.7.4)

org.apache.cassandra:cassandra-all MAVEN version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - me.prettyprint:hector-core =0.7.0-29, =1.0-07, =1.0-09 -...

GHSA-87V6-CRGM-2GFJ Division by zero in Tensorflow

Impact The implementation of FractionalMaxPool can be made to crash a TensorFlow process via a division by 0: python import tensorflow as tf import numpy as np tf.rawops.FractionalMaxPool value=tf.constantvalue=1, 4, 2, 3, dtype=tf.int64, poolingratio=1.0, 1.44, 1.73, 1.0, pseudorandom=False,...

GHSA-C582-C96P-R5CQ Memory exhaustion in Tensorflow

Impact The implementation of ThreadPoolHandle can be used to trigger a denial of service attack by allocating too much memory: python import tensorflow as tf y = tf.rawops.ThreadPoolHandlenumthreads=0x60000000,displayname='tf' This is because the numthreads argument is only checked to not be...