315 matches found
SUSE CVE-2011-2371
Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via vectors involving a long JavaScript Array object...
SUSE CVE-2020-13092
scikit-learn aka sklearn through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load function, if reduce makes an os.system call. NOTE: third parties dispute this issue because the joblib.load function is documented as unsafe and it is the user's...
SUSE CVE-2021-41220
TensorFlow is an open source platform for machine learning. In affected versions the async implementation of CollectiveReduceV2 suffers from a memory leak and a use after free. This occurs due to the asynchronous computation and the fact that objects that have been std::moved from are still...
GSD-2023-1000527 scsi: ufs: Reduce the START STOP UNIT timeout
scsi: ufs: Reduce the START STOP UNIT timeout This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...
Top 3 Non-Technical Cybersecurity Trends for 2023
A strong cybersecurity strategy isn’t just about choosing the right tools. Cybersecurity experts Greg Young and William Malik discuss three non-technical cybersecurity trends for 2023 to help security leaders reduce cyber risk across the enterprise attack surface...
PT-2025-49616
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained an issue where the pci device is present function did not correctly identify Virtual Functions VFs. This occurred because the function read Vendor and Device...
Cybersecurity Awareness Month 2022: 3 Actionable Tips
Make Cybersecurity Awareness Month a year-long initiative with these three actionable security tips to reduce cyber risk across the attack surface...
CVE-2022-39816
In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials cleartext administrator password occur in the edit configuration page. Exploitation requires an authenticated attacker...
How to Apply a Zero Trust Security Model to ICS
Discover how to leverage the zero trust strategy to protect ICS environments, enabling a stronger security posture and reducing risk...
CVE-2021-33652
When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...
CVE-2021-33652
When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...
CVE-2021-33652
When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...
Design/Logic Flaw
When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...
CVE-2021-33652
When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...
CVE-2021-33652
CVE-2021-33652 affects Huawei MindSpore Community (open source deep learning framework). Connected sources describe a vulnerability in the Reduce operator: if axis_sizes contains a value of 0, a division by zero occurs during the Reduce run, leading to a potential crash or denial of service in af...
Huawei MindSpore Community 数字错误漏洞
Huawei MindSpore Community is an open source deep learning framework from Chinese company Huawei. A security vulnerability exists in Huawei MindSpore Community versions prior to 1.3.0, which stems from a divide-by-0 exception when performing a Reduce operator run operation if the parameter...
Malicious code in reduce-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4bbda58ef21daed386389cfdb52a4cbe3e2ca0e722e52ebe4a36d7666465b6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5726 Malicious code in reduce-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4bbda58ef21daed386389cfdb52a4cbe3e2ca0e722e52ebe4a36d7666465b6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-JJW5-XXJ6-PCV5 scikit-learn Deserialization of Untrusted Data
scikit-learn aka sklearn through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load function, if reduce makes an os.system call. NOTE: third parties dispute this issue because the joblib.load function is documented as unsafe and it is the user's...
GSD-2022-1002245 PCI: Reduce warnings on possible RW1C corruption
PCI: Reduce warnings on possible RW1C corruption This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...