Lucene search
+L

3431 matches found

CNNVD
CNNVD
added 2022/02/14 12:0 a.m.12 views

Atheme IRC Services 授权问题漏洞

Atheme IRC Services is a set of IRC services designed for large IRC networks with high scalability requirements. An authorization issue vulnerability exists in Atheme IRC Services that originates when used with InspIRCd and allows authentication to be bypassed by ending the IRC handshake at some...

9.1CVSS8.1AI score0.0182EPSS
SaveExploits1References5
OSV
OSV
added 2022/02/09 6:29 p.m.5 views

GHSA-6GMV-PJP9-P8W8 Out of bounds read in Tensorflow

Impact The implementation of shape inference for ReverseSequence does not fully validate the value of batchdim and can result in a heap OOB read: python import tensorflow as tf @tf.function def test: y = tf.rawops.ReverseSequence input = 'aaa','bbb', seqlengths = 1,1,1, seqdim = -10, batchdim = -...

8.1CVSS5.8AI score0.01125EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.22 views

Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 Predictable Value Range From Previous Values (CVE-2017-7901)

A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series...

9CVSS7.4AI score0.06674EPSS
SaveExploits0References4
OSV
OSV
added 2022/02/03 11:15 a.m.7 views

PYSEC-2022-107

Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for ReverseSequence does not fully validate the value of batchdim and can result in a heap OOB read. There is a check to make sure the value of batchdim does not go over the rank of the input, but there...

8.1CVSS5.9AI score0.01125EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2022/02/03 10:55 a.m.7 views

CVE-2022-21728

Tensorflow is an Open Source Machine Learning Framework. The implementation of shape inference for ReverseSequence does not fully validate the value of batchdim and can result in a heap OOB read. There is a check to make sure the value of batchdim does not go over the rank of the input, but there...

8.1CVSS6.9AI score0.01125EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2022/02/03 12:0 a.m.9 views

PT-2022-15067 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier Description: The implementation of shape inference for ReverseSequence does not fully validat...

8.1CVSS7.9AI score0.01125EPSS
SaveExploits1References14
OSV
OSV
added 2022/01/28 8:15 p.m.5 views

CVE-2022-21134

A firmware update vulnerability exists in the "update" firmware checks functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vulnerability...

7.5CVSS5.8AI score0.00907EPSS
SaveExploits0References1
NVD
NVD
added 2022/01/28 8:15 p.m.37 views

CVE-2021-40419

A firmware update vulnerability exists in the 'factory' binary of reolink RLC-410W v3.0.0.13620121102. A specially-crafted series of network requests can lead to arbitrary firmware update. An attacker can send a sequence of requests to trigger this vulnerability...

10CVSS0.01232EPSS
SaveExploits1References1
Amazon
Amazon
added 2022/01/28 12:0 a.m.9 views

Important: kernel

Issue Overview: An out-of-bounds write flaw was found in the Linux kernel's seqfile in the Filesystem layer. This flaw allows a local attacker with a user privilege to gain access to out-of-bound memory, leading to a system crash or a leak of internal kernel information. The issue results from no...

7.8CVSS6.6AI score0.09729EPSS
SaveExploits6
Microsoft CVE
Microsoft CVE
added 2022/01/19 8:0 a.m.4 views

Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imap_qresync setting for QRESYNC is not enabled by default.

...

9.1CVSS8.2AI score0.02551EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/01/19 12:0 a.m.6 views

The vulnerability of Thunderbird email client, Firefox and Firefox ESR browsers, arises from improper validation of an empty sequence “pkcs7” when it is transmitted as part of the certificate data. This allows attackers to execute a DoS (Denial-of-Service) attack.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to improper validation of an empty pkcs7 sequence that is transmitted as part of the certificate data. Exploiting this vulnerability allows a remote attacker to send a specially crafted...

5CVSS7AI score0.0063EPSS
SaveExploits0References14Affected Software9
RedhatCVE
RedhatCVE
added 2022/01/12 11:23 p.m.73 views

CVE-2022-22747

The Mozilla Foundation Security Advisory describes this flaw as: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable...

6.5CVSS1.4AI score0.0063EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/01/12 1:9 p.m.4 views

Mozilla: Crash when handling empty pkcs7 sequence

The Mozilla Foundation Security Advisory describes this flaw as: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable...

6.5CVSS7.3AI score0.0063EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/01/12 12:35 p.m.9 views

Mozilla: Crash when handling empty pkcs7 sequence

The Mozilla Foundation Security Advisory describes this flaw as: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable...

6.5CVSS7.3AI score0.0063EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/01/12 12:27 p.m.5 views

Mozilla: Crash when handling empty pkcs7 sequence

The Mozilla Foundation Security Advisory describes this flaw as: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable...

6.5CVSS7.3AI score0.0063EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/01/12 12:8 p.m.5 views

Mozilla: Crash when handling empty pkcs7 sequence

The Mozilla Foundation Security Advisory describes this flaw as: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable...

6.5CVSS7.3AI score0.0063EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/01/12 12:4 p.m.13 views

Mozilla: Crash when handling empty pkcs7 sequence

The Mozilla Foundation Security Advisory describes this flaw as: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable...

6.5CVSS7.3AI score0.0063EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/01/12 12:4 p.m.8 views

Mozilla: Crash when handling empty pkcs7 sequence

The Mozilla Foundation Security Advisory describes this flaw as: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable...

6.5CVSS7.3AI score0.0063EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/01/12 11:59 a.m.6 views

Mozilla: Crash when handling empty pkcs7 sequence

The Mozilla Foundation Security Advisory describes this flaw as: After accepting an untrusted certificate, handling an empty pkcs7 sequence as part of the certificate data could have lead to a crash. This crash is believed to be unexploitable...

6.5CVSS7.3AI score0.0063EPSS
SaveExploits0References6
VulnCheck KEV
VulnCheck KEV
added 2022/01/12 12:0 a.m.6 views

VulnCheck KEV: CVE-2011-2474

Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.../../\ sequence in a path...

5CVSS5.9AI score0.63612EPSS
SaveExploits2References1
Rows per page
Query Builder