3285 matches found
CVE-2021-41213 Deadlock in mutually recursive `tf.function` objects
TensorFlow is an open source platform for machine learning. In affected versions the code behind tf.function API can be made to deadlock when two tf.function decorated Python functions are mutually recursive. This occurs due to using a non-reentrant Lock Python object. Loading any model which...
Huawei HarmonyOS infinite self-recursive vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a microkernel-based distributed operating system. Huawei HarmonyOS is vulnerable to an infinite self-recursive vulnerability, which could be exploited by local attackers to cause a kernel dump...
CVE-2021-41213: Improper Locking
TensorFlow is an open source platform for machine learning. In affected versions the code behind tf.function API can be made to deadlock when two tf.function decorated Python functions are mutually recursive. This occurs due to using a non-reentrant Lock Python object. Loading any model which...
PT-2021-23186 · Google · Tensorflow
Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier Description: The code behind the tf.function API can be made to deadlock when two tf.function...
CVE-2021-21688
The agent-to-controller security check FilePathreadingFileVisitor in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier does not reject any operations, allowing users to have unrestricted read access using certain operations creating archives, FilePathcopyRecursiveTo...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a microkernel-based distributed operating system. Huawei HarmonyOS is vulnerable to an infinite self-recursive vulnerability, which could be exploited by local attackers to cause a kernel dump...
openSUSE 15 Security Update : hivex (openSUSE-SU-2021:1319-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1319-1 advisory. - hivex: stack overflow due to recursive call of getchildren CVE-2021-3622 Note that Nessus has not tested for this issue but has instead relied onl...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability to create recursive pipeline connections. Exploiting this vulnerability allows a malicious actor to trigger service interruptions remotely...
WWWGrep - OWASP Foundation Web Respository
WWWGrep is a rapid search “grepping” mechanism that examines HTML elements by type and permits focused single, multiple file based URLs and recursive with respect to root domain or not searches to be performed. Header names and values may also be recursively searched in this manner. WWWGrep was...
CVE-2021-39257
A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...
CVE-2021-39257
A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...
CVE-2021-39257
A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...
CVE-2021-39257
A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...
CVE-2021-39257
A crafted NTFS image with an unallocated bitmap can lead to a endless recursive function call chain starting from ntfsattrpwrite, causing stack consumption in NTFS-3G 2021.8.22...
Prototype Pollution
Overview @cookiex/deep is a Tool to assign properties recursively and create recursion features in an easy way. Affected versions of this package are vulnerable to Prototype Pollution. The global proto object can be polluted using the proto object. PoC var deep = require"@cookiex/deep" const targ...
CentOS 7 : hivex (RHSA-2021:3338)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:3338 advisory. - A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to...
Scientific Linux Security Update : hivex on SL7.x i686/x86_64 (2021:3338)
The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3338-1 advisory. - hivex: stack overflow due to recursive call of getchildren CVE-2021-3622 Note that Nessus has not tested for this issue but has instead relied only on t...
hivex: stack overflow due to recursive call of _get_children()
A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to recursively call the getchildren function, leading to a stack overflow. The highest threat from this vulnerability is to system availability...
akaze (>=0.1.0, <=0.1.2), babelfish (>=0.1.0, <=0.1.1) +73 more potentially affected by CVE-2019-25001 via serde_cbor (>=0.3.3, <=0.9.0)
serdecbor CARGO version =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.10.0, =0.10.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.3 - ec-client 0.1.0 and more Source cves: CVE-2019-25001 Source advisory: OSV:GHSA-XR7R-88QV-Q7HM...