Lucene search
+L

302 matches found

CNNVD
CNNVD
added 2022/05/04 12:00 a.m.11 views

libwav 安全漏洞

libwav is a simple wav library written in pure C. It can be used to create a wav file that can be used to write a wav file. A security vulnerability exists in libwav version 2017-04-20 and earlier versions, which stems from a use of uninitialized variables vulnerability in the function...

7.5CVSS7.3AI score0.01208EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/11/09 12:00 a.m.107 views

Google TensorFlow has an unspecified vulnerability (CNVD-2021-92554)

A security vulnerability in Google TensorFlow, an end-to-end open source platform for machine learning from Google, stems from the use of uninitialized variables in the Grappler optimizer. If the trainnodes vector obtained from the saved optimization model does not contain Dequeue nodes, then...

7.8CVSS2.8AI score0.00196EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/11/05 12:00 a.m.18 views

Google TensorFlow 安全漏洞

A security vulnerability in Google TensorFlow, an end-to-end open source platform for machine learning from Google, stems from the use of uninitialized variables in the Grappler optimizer. If the trainnodes vector obtained from the saved optimization model does not contain Dequeue nodes, then...

7.8CVSS5.5AI score0.00196EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/07/21 12:00 a.m.7 views

Arch Linux 安全漏洞

Arch Linux is an application system from Arch Open Source. A lightweight and flexible Linux® distribution that tries to keep it simple. A security vulnerability exists in Arch Linux that stems from the use of uninitialized variables when processing TELNET requests and parsing NEWENV, which can be...

5.3CVSS6.3AI score0.04929EPSS
SaveExploits1References61
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:00 a.m.14 views

The vulnerability of the ParseWave64HeaderConfig function in the wave64.c component of the WavPack audio codec, related to the use of previously uninitialized variables, allows a hacker to cause a service failure.

The vulnerability of the ParseWave64HeaderConfig function in the wave64.c component of the WavPack audio codec is related to the use of previously uninitialized variables. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a malicious .wav file...

6.5CVSS6.4AI score0.01503EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:00 a.m.13 views

The vulnerability of the ParseCaffHeaderConfig function in the caff.c component of the WavPack audio codec allows a hacker to cause a service failure. This vulnerability stems from the use of uninitialized variables, which can be exploited by attackers.

The vulnerability of the ParseCaffHeaderConfig function in the caff.c component of the WavPack audio codec is related to the use of previously uninitialized variables. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a malicious .wav file...

7.1CVSS6.1AI score0.01456EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/02 12:00 a.m.14 views

The vulnerability of the ReadMATImageV4 function in the coders/mat.c component of the console-based ImageMagick graphics editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadMATImageV4 function in the ImageMagick console graphics editor’s coders/mat.c component is related to the use of previously uninitialized variables. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cau...

9.8CVSS7.1AI score0.03394EPSS
SaveExploits1References11Affected Software3
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.32 views

SUSE: Security Advisory (SUSE-SU-2019:3184-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.1AI score0.02785EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/30 9:15 p.m.27 views

Format string

An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolvedids and resolvedsizes are intentionally uninitialized in the vmlinux BPF Type Format BTF, which can cause a system crash upon an unexpected access attempt in mapcreate in...

4.9CVSS5AI score0.00284EPSS
SaveExploits0References5Affected Software2
CNVD
CNVD
added 2020/11/23 12:00 a.m.76 views

libvips Information Disclosure Vulnerability

libvips is a demand-driven multi-threaded image processing library. libvips versions prior to 8.8.2 are vulnerable to an information disclosure. The vulnerability stems from imvips2dz in /libvips/libvips/deprecated/imvips2dz.c in libvips having uninitialized variables. An attacker could use this...

5.3CVSS3.7AI score0.02004EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2020/11/20 12:00 a.m.16 views

libvips 安全漏洞

libvips is a demand-driven multi-threaded image processing library. libvips versions prior to 8.8.2 are vulnerable to an information disclosure. The vulnerability stems from imvips2dz in /libvips/libvips/deprecated/imvips2dz.c in libvips having uninitialized variables. An attacker could use this...

5.3CVSS6.8AI score0.02004EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2019/12/06 12:00 a.m.44 views

SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2019:3184-1)

This update for ffmpeg fixes the following issues : Security issues fixed : CVE-2019-17542: Fixed a heap-buffer overflow in vqadecodechunk due to an out-of-array access bsc1154064. CVE-2019-12730: Fixed an uninitialized use of variables due to an improper check bsc1137526. CVE-2019-9718: Fixed a...

9.8CVSS6.5AI score0.02785EPSS
SaveExploits0References13
CNVD
CNVD
added 2019/10/30 12:00 a.m.10 views

OpenAFS Information Disclosure Vulnerability (CNVD-2019-43376)

OpenAFS is a set of open source distributed file system , allowing systems to share files and resources through the local area and wide area network . OpenAFS is vulnerable to an information disclosure vulnerability under certain error conditions. The vulnerability arises from uninitialized RPC...

5.9CVSS6AI score0.01207EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.13 views

The vulnerability of the libavformat library in the Ffmpeg multimedia environment allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the libavformat library in the Ffmpeg multimedia environment is related to the lack of checking the return value of the sscanf function. This can lead to the use of uninitialized variables. Exploiting this vulnerability could allow a malicious actor to compromise data...

10CVSS5.5AI score0.02785EPSS
SaveExploits0References6Affected Software7
OSV
OSV
added 2019/08/15 5:15 p.m.15 views

CVE-2019-13220

Use of uninitialized stack variables in the startdecoder function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file...

7.1CVSS7AI score
SaveExploits0References4
Cvelist
Cvelist
added 2019/08/15 12:00 a.m.28 views

CVE-2019-13220

Use of uninitialized stack variables in the startdecoder function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file...

7.5AI score0.00985EPSS
SaveExploits0References4
OSV
OSV
added 2019/07/08 6:15 p.m.11 views

UBUNTU-CVE-2019-2118

In various functions of Parcel.cpp, there are uninitialized or partially initialized stack variables. These could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8...

5.5CVSS5.9AI score0.00192EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2019/06/19 12:00 a.m.31 views

FFmpeg < 3.2.14 Use Of Uninitialized Variables

FFmpeg does not check for sscanf failure and consequently allows use of uninitialized variables. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public...

9.8CVSS9.6AI score0.02785EPSS
SaveExploits0References1
OSV
OSV
added 2019/06/04 2:29 p.m.26 views

CVE-2019-12730

aareadheader in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables...

9.8CVSS9.4AI score
SaveExploits0References9
NVD
NVD
added 2019/06/04 2:29 p.m.27 views

CVE-2019-12730

aareadheader in libavformat/aadec.c in FFmpeg before 3.2.14 and 4.x before 4.1.4 does not check for sscanf failure and consequently allows use of uninitialized variables...

9.8CVSS9.5AI score0.02785EPSS
SaveExploits0References9
Rows per page
Query Builder