PYSEC-2021-224

TensorFlow is an end-to-end open source platform for machine learning. The Prepare step of the SpaceToDepth TFLite operator does not check for 0 before divisionhttps://github.com/tensorflow/tensorflow/blob/5f7975d09eac0f10ed8a17dbb6f5964977725adc/tensorflow/lite/kernels/spacetodepth.ccL63-L67. An...

PYSEC-2021-515

TensorFlow is an end-to-end open source platform for machine learning. The Prepare step of the SpaceToDepth TFLite operator does not check for 0 before divisionhttps://github.com/tensorflow/tensorflow/blob/5f7975d09eac0f10ed8a17dbb6f5964977725adc/tensorflow/lite/kernels/spacetodepth.ccL63-L67. An...

PT-2021-8106 · Htmldoc +3 · Htmldoc +3

Name of the Vulnerable Software and Affected Versions: htmldoc version 1.9.12 Description: A flaw in htmldoc may lead to a heap buffer overflow in the pspdf prepare page function, located in ps-pdf.cxx, potentially allowing an attacker to execute arbitrary code and cause a denial of service. The...

PT-2021-8100 · Htmldoc +4 · Htmldoc +4

Name of the Vulnerable Software and Affected Versions: htmldoc versions prior to 1.9.12 Description: A flaw was found in the htmldoc tool, specifically a heap buffer overflow in the pspdf prepare outpages function, located in ps-pdf.cxx. This issue may lead to the execution of arbitrary code and...

PT-2021-27548

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions token stream prepare, token stream peek string, and token stream...

PT-2021-27546

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A heap-buffer-overflow read issue has been identified, which can cause a crash. The crash occurs in the token stream prepare function, and is related to...

PT-2020-22420

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to an index-out-of-bounds crash. Technical details about the crash include the functions gcry md setkey and gcry mac setkey, which are...

CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

DEBIAN-CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

UBUNTU-CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

Default configuration

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

CVE-2020-14004

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

PT-2020-13832

Name of the Vulnerable Software and Affected Versions Icinga2 versions prior to 2.12.0-rc1 Description An issue was discovered where the prepare-dirs script, part of the icinga2 systemd service, executes chmod 2750 /run/icinga2/cmd. Since /run/icinga2 is under control of an unprivileged user by...

CVE-2020-14004: Improper Link Resolution Before File Access

An issue was discovered in Icinga2 before v2.12.0-rc1. The prepare-dirs script run as part of the icinga2 systemd service executes chmod 2750 /run/icinga2/cmd. /run/icinga2 is under control of an unprivileged user by default. If /run/icinga2/cmd is a symlink, then it will by followed and arbitrar...

Denial Of Service (DoS)

mysql is vulnerable to denial of service. A flaw in the way MySQL processed PREPARE statements containing both GROUPCONCAT and the WITH ROLLUP modifier could allow a remote, authenticated attacker to crash mysqld...

Online Privacy: What to Expect in 2020

By Uzair Amir Without much ado, let's see what to expect in the world of online privacy in 2020 and how to prepare for the new changes. This is a post from HackRead.com Read the original post: Online Privacy: What to Expect in 2020...

PT-2019-12644 · Miniupnp +1 · Miniupnpd +1

Name of the Vulnerable Software and Affected Versions: MiniUPnPd versions prior to 2.1 Description: The issue allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value in the upnp event prepare function. Recommendations: For versions prior t...