Lucene search
+L

793 matches found

NVD
NVD
•added 2021/12/07 1:15 p.m.•30 views

CVE-2021-40092

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

5.4CVSS0.00605EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/07 1:15 p.m.•16 views

CVE-2021-40092

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

5.4CVSS5.8AI score0.00605EPSS
SaveExploits0References3
Prion
Prion
•added 2021/12/07 1:15 p.m.•31 views

Cross site scripting

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

3.5CVSS5.3AI score0.00605EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/12/07 12:42 p.m.•53 views

CVE-2021-40092

The CVE-2021-40092 entry describes a cross-site scripting (XSS) vulnerability in the Image Tile feature of SquaredUp for SCOM 5.2.1.6654. The issue allows remote attackers to inject arbitrary web script or HTML via an SVG file. Connected sources corroborate the same description across multiple fe...

5.4CVSS5.2AI score0.00605EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/12/07 12:00 a.m.•17 views

Squaredup 跨站脚本漏洞

Squaredup is a Web service from Squaredup UK that provides data monitoring capabilities for cloud environments. a cross-site scripting vulnerability exists in Image Tile in SquaredUp for SCOM version 5.2.1.6654, which can be exploited by remote attackers to inject arbitrary Web scripts or HTML...

5.4CVSS5.4AI score0.00605EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/07 12:00 a.m.•6 views

PT-2021-22801

Name of the Vulnerable Software and Affected Versions SquaredUp for SCOM version 5.2.1.6654 Description A cross-site scripting XSS issue in the Image Tile component allows remote attackers to inject arbitrary web script or HTML via an SVG file. This enables attackers to execute malicious scripts ...

5.4CVSS0.00605EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/07 12:00 a.m.•5 views

CVE-2021-40092: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

5.4CVSS5.8AI score0.00605EPSS
SaveExploits0References2
OSV
OSV
•added 2021/11/10 7:33 p.m.•38 views

GHSA-2P25-55C9-H58Q Overflow/crash in `tf.tile` when tiling tensor is large

Impact If tf.tile is called with a large input argument then the TensorFlow process will crash due to a CHECK-failure caused by an overflow. python import tensorflow as tf import numpy as np tf.keras.backend.tilex=np.ones1,1,1, n=100000000,100000000, 100000000 The number of elements in the output...

6.8CVSS6AI score0.00238EPSS
SaveExploits1References8
PyPA
PyPA
•added 2021/11/05 8:15 p.m.•14 views

PYSEC-2021-806

TensorFlow is an open source platform for machine learning. In affected versions if tf.tile is called with a large input argument then the TensorFlow process will crash due to a CHECK-failure caused by an overflow. The number of elements in the output tensor is too much for the int64t type and th...

5.5CVSS7.2AI score0.00238EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2021/11/05 8:15 p.m.•19 views

PYSEC-2021-608

TensorFlow is an open source platform for machine learning. In affected versions if tf.tile is called with a large input argument then the TensorFlow process will crash due to a CHECK-failure caused by an overflow. The number of elements in the output tensor is too much for the int64t type and th...

5.5CVSS7.2AI score0.00238EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2021/11/05 8:15 p.m.•12 views

PYSEC-2021-391

TensorFlow is an open source platform for machine learning. In affected versions if tf.tile is called with a large input argument then the TensorFlow process will crash due to a CHECK-failure caused by an overflow. The number of elements in the output tensor is too much for the int64t type and th...

5.5CVSS6.1AI score0.00238EPSS
SaveExploits1References3
OSV
OSV
•added 2021/11/05 8:15 p.m.•10 views

PYSEC-2021-806

TensorFlow is an open source platform for machine learning. In affected versions if tf.tile is called with a large input argument then the TensorFlow process will crash due to a CHECK-failure caused by an overflow. The number of elements in the output tensor is too much for the int64t type and th...

5.5CVSS6.2AI score0.00238EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/11/05 12:00 a.m.•8 views

PT-2021-23170 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.7.0 TensorFlow versions 2.6.1 and earlier TensorFlow versions 2.5.2 and earlier TensorFlow versions 2.4.4 and earlier Description: In affected versions, if tf.tile is called with a large input argument, then the...

6.8CVSS5.4AI score0.00238EPSS
SaveExploits1References15
BDU FSTEC
BDU FSTEC
•added 2021/07/20 12:00 a.m.•23 views

The vulnerability of the writeTileData function in the OpenEXR library, related to writing beyond the buffer boundary, allows a attacker to cause a service failure.

The vulnerability of the writeTileData function in the OpenEXR library lies in the issue of writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.9AI score0.01148EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
•added 2021/07/13 12:00 a.m.•19 views

The vulnerability of the ImfTileOffsets.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the allowable buffer size. This allows attackers to cause system failures.

The vulnerability of the ImfTileOffsets.cpp library in software for storing images with wide dynamic range brightness in OpenEXR is related to the operation being performed within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.5CVSS6.9AI score0.01793EPSS
SaveExploits1References11Affected Software3
OSV
OSV
•added 2021/07/01 3:15 a.m.•16 views

DEBIAN-CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

5.5CVSS6.1AI score0.00946EPSS
SaveExploits1References1
OSV
OSV
•added 2021/07/01 3:15 a.m.•14 views

UBUNTU-CVE-2021-36083

KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat::loadTileRLE...

5.5CVSS6.2AI score0.00946EPSS
SaveExploits1References5
OSV
OSV
•added 2021/06/02 5:15 p.m.•2 views

DEBIAN-CVE-2020-22051

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filterframe function in vftile.c...

6.5CVSS6.8AI score0.01041EPSS
SaveExploits1References1
OSV
OSV
•added 2021/06/02 5:15 p.m.•9 views

UBUNTU-CVE-2020-22051

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filterframe function in vftile.c...

6.5CVSS5.8AI score0.01041EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2021/06/02 12:00 a.m.•18 views

FFmpeg 资源管理错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which originates from a memory leak in the filterframe function in vftile.c. The vulnerability is caused by a memory leak in vftile.c. No details of the vulnerability...

6.5CVSS5.5AI score0.01041EPSS
SaveExploits1References3
Rows per page
Query Builder