Use-after-free

Torch is vulnerable to a use-after-free vulnerability. The vulnerability is due to missing validation checks in the run function within interpreter.cpp, which can potentially lead to a Denial of Service DoS...

21cmpsdenoiser (>=1.0.0 <=1.0.2), 2404-segmentation-pipeline (>=0.1.0 <=1.0.0) +24678 more potentially affected by CVE-2024-31583 via torch (>=1.0.0 <=2.1.2)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.10.5, =0.10.13 and more Source cves: CVE-2024-31583 Source advisory: OSV:GHSA-PG7H-5QX3-WJR3...

21cmpsdenoiser (>=1.0.0 <=1.0.2), 2404-segmentation-pipeline (>=0.1.0 <=1.0.0) +24678 more potentially affected by CVE-2024-31580 via torch (>=1.0.0 <=2.1.2)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.10.5, =0.10.13 and more Source cves: CVE-2024-31580 Source advisory: OSV:GHSA-5PCM-HX3Q-HM94...

PYSEC-2024-251

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...

21cmpsdenoiser (>=1.0.0 <=1.0.2), 2404-segmentation-pipeline (>=0.1.0 <=1.0.0) +24678 more potentially affected by CVE-2024-31583 via torch (>=1.0.0 <=2.1.2)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.10.5, =0.10.13 and more Source cves: CVE-2024-31583 Source advisory: OSV:PYSEC-2024-251...

21cmpsdenoiser (>=1.0.0 <=1.0.2), 2404-segmentation-pipeline (>=0.1.0 <=1.0.0) +24678 more potentially affected by CVE-2024-31580 via torch (>=1.0.0 <=2.1.2)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.10.5, =0.10.13 and more Source cves: CVE-2024-31580 Source advisory: OSV:PYSEC-2024-252...

DEBIAN-CVE-2024-31583

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...

Information leakage vulnerability in Jaeger Reports of Beijing Guo Torch Information Technology Co.

Beijing Guo Torch Information Technology Co., Ltd. is an information technology company engaged in computer software research and development, application and service, providing all-round support for large and medium-sized application system engineering. An information leakage vulnerability exist...

SUSE CVE-2011-1290

Integer overflow in WebKit, as used on the Research In Motion RIM BlackBerry Torch 9800 with firmware 6.0.0.246, in Google Chrome before 10.0.648.133, and in Apple Safari before 5.0.5, allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style handling," nodesets,...

Arbitrary Code Execution

torch is vulnerable to arbitrary code execution. The vulnerability is due to improper validation of input during eval in annotations.py which allows an attacker to take over an existing account and execute malicious code into the system...

3d-rcnet (>=0.1.0 <=0.2.3), 4996 (>=0.1.0 <=0.1.1) +602 more potentially affected by CVE-2022-45907 via torch (>=1.0.0 <=1.13.0)

torch PYPI version =1.0.0, =0.1.0, =0.1.0, =0.3.6, =0.4.0, =0.0.1, =1.0.0, =0.0.1, =0.7.0, =0.1.0, =0.0.9, =1.0.0, =1.1.0 and more Source cves: CVE-2022-45907 Source advisory: OSV:GHSA-47FC-VMWQ-366V...

3d-rcnet (>=0.1.0 <=0.2.3), 4996 (>=0.1.0 <=0.1.1) +602 more potentially affected by CVE-2022-45907 via torch (>=1.0.0 <=1.13.0)

torch PYPI version =1.0.0, =0.1.0, =0.1.0, =0.3.6, =0.4.0, =0.0.1, =1.0.0, =0.0.1, =0.7.0, =0.1.0, =0.0.9, =1.0.0, =1.1.0 and more Source cves: CVE-2022-45907 Source advisory: OSV:PYSEC-2022-43015...

SQL Injection Vulnerability in Jeecg Boot of Beijing Guo Torch Information Technology Co.

Jeecg Boot is a low-code BPM-based platform. A SQL injection vulnerability exists in Jeecg Boot, which can be exploited by an attacker to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

SQL Injection Vulnerability in Enterprise Torch China's Website Building System (CNVD-2021-22995)

Founded in 2005, Enterprise Torch China is an early technology innovation company providing Internet application services for enterprise informationization construction. A SQL injection vulnerability exists in Enterprise Torch China's website builder system, which can be exploited by attackers to...

Arbitrary File Read Vulnerability in Jeewx-Boot Free WeChat Butler Platform of Beijing National Torch Information Technology Co.

JeewxBoot is a free JAVA WeChat Butler platform that supports WeChat public numbers, small programs, WeChat third-party platforms, sweepstakes and more. Beijing Guo Torch Information Technology Co., Ltd Jeewx-Boot Free WeChat Butler Platform has an arbitrary file read vulnerability that can be...

Beijing Guo Torch Information Technology Co. jeecg-boot suffers from SQL injection vulnerability (CNVD-2020-59430)

JeecgBoot is a low-code BPM-based platform. A SQL injection vulnerability exists in Beijing Guo Torch Information Technology Co. jeecg-boot, which can be exploited by an attacker to obtain sensitive information from a database...

Unauthorized Access Vulnerability in JeewxBoot of Beijing National Torch Information Technology Co.

JeewxBoot is a SpringBoot-based open source WeChat housekeeper system , using SpringBoot2.1.3 Mybatis + Velocity framework technology. Beijing State Torch Information Technology Co. JeewxBoot has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive informati...

Unauthorized Access Vulnerability in JeewxBoot of Beijing National Torch Information Technology Co.

JeewxBoot is a SpringBoot-based open source WeChat housekeeper system , using SpringBoot2.1.3 Mybatis + Velocity framework technology. Beijing State Torch Information Technology Co. JeewxBoot has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive informati...

SQL Injection Vulnerability in cp***_sh***.php of Website Building System of Shanghai Enterprise Torch Enterprise Development Co.

Shanghai Enterprise Torch Enterprise Development Co., Ltd. is a technologically innovative company that provides high-quality Internet application services for enterprise informatization construction. Shanghai Enterprise Torch Enterprise Development Co., Ltd. website building system cpsh.php SQL...