4723 matches found
Google TensorFlow security vulnerabilities
Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. Google TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4 are vulnerable to a code issue stemming from tf.rawops. QuantizedConv2D does not fully validate input parameters. No detailed...
new packages: perl-Compress-Raw-Zlib
An update is available for perl-Compress-Raw-Zlib. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...
new packages: perl-Compress-Raw-Bzip2
An update is available for perl-Compress-Raw-Bzip2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...
GHSA-29RM-6752-GVWV Code execution in Apache Struts 1 plugin
The Struts 1 plugin used with Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage...
GHSA-F9QV-J5G6-G5CR Trac is vulnerable to improper policy checks and missing 'raw' role check in docutils
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to 1 "policy checks in report results when using alternate formats" or 2 a "check for the 'raw' role that is missing in docutils 0.6."...
Trac is vulnerable to improper policy checks and missing 'raw' role check in docutils
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to 1 "policy checks in report results when using alternate formats" or 2 a "check for the 'raw' role that is missing in docutils 0.6."...
GHSA-7WHR-J8VF-R4WJ Zope allows attackers to modify raw image and file data
Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects...
PT-2022-3306 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.6 Description: The issue is related to a concurrency use-after-free flaw in the raw cmd ioctl function after deallocating raw cmd, which can lead to a denial of service. This flaw is located in the...
PHP php_raw_url_encode DoS
The vulnerability of the phprawurlencode function in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures...
PT-2022-38076
Уязвимость функции denali pci probe модуля drivers/mtd/nand/raw/denali pci.c драйвера поддержки памяти MTD ядра операционной системы Linux связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
dcraw input validation vulnerability
dcraw is a set of open source tools for converting camera-shot RAW film into PPM or TIFF format images. A security vulnerability exists in dcraw, which stems from an integer overflow vulnerability. An attacker could execute arbitrary code on the victim's system via a maliciously crafted X3F input...
RUSTSEC-2022-0092 `rmp-serde` `Raw` and `RawRef` unsound
It was found that Raw::fromutf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash...
`rmp-serde` `Raw` and `RawRef` unsound
It was found that Raw::fromutf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash...
expat: Integer overflow in storeRawNames()
An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution...
expat: Integer overflow in storeRawNames()
An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution...
RAW image plugin Code Execution
The vulnerability of the plugin for viewing RAW images is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
RAW image plugin Code Execution
The vulnerability of the plugin for viewing RAW images is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
RAW image plugin Code Execution
The vulnerability of the plugin for viewing RAW images is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
PT-2022-18706
Name of the Vulnerable Software and Affected Versions stb image.h aka the stb image loader version 2.19 Description The issue is related to a reachable assertion in the stbi create png image raw function of the stb image loader. Recommendations For version 2.19, consider updating to a newer versi...
CVE-2021-40906
CheckMK Raw Edition software versions 1.5.0 to 1.6.0 does not sanitise the input of a web service parameter that is in an unauthenticated zone. This Reflected XSS allows an attacker to open a backdoor on the device with HTML content and interpreted by the browser such as JavaScript or other...