Lucene search
+L

1790 matches found

attackerkb
attackerkb
•added 2022/04/11 8:15 p.m.•12 views

CVE-2022-20079

In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05857289...

4.4CVSS5.9AI score0.00116EPSS
SaveExploits0References2
OSV
OSV
•added 2022/04/11 8:15 p.m.•9 views

CVE-2022-20079

In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05857289...

4.4CVSS5.9AI score0.00116EPSS
SaveExploits0References1
NVD
NVD
•added 2022/04/11 8:15 p.m.•36 views

CVE-2022-20079

In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05857289...

4.4CVSS0.00116EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/11 8:15 p.m.•26 views

Input validation

In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05857289...

2.1CVSS4.2AI score0.00116EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/04/11 7:38 p.m.•106 views

CVE-2022-20079

The CVE-2022-20079 entry concerns the vow component. Root cause: improper input validation enables a read of uninitialized data, causing local information disclosure with system execution privileges required; user interaction is not required. A patch is listed (ALPS05837742; ALPS05857289). Connec...

4.4CVSS4.2AI score0.00116EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/04/11 7:38 p.m.•46 views

CVE-2022-20079

In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05857289...

4.6AI score0.00116EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/04/11 12:00 a.m.•12 views

MediaTek 芯片输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in the MediaTek chips, which stems from the possibility of reading uninitialized data due to incorrect input validation. This could result in the disclosure of local...

4.4CVSS5.3AI score0.00116EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/04/11 12:00 a.m.•15 views

PT-2022-14324 · Vow · Vow

Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to a possible read of uninitialized data due to improper input validation. This could lead to local information disclosure, with System execution privileges required. No us...

4.4CVSS4.4AI score0.00116EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/11 12:00 a.m.•6 views

CVE-2022-20079: Use of Uninitialized Resource

In vow, there is a possible read of uninitialized data due to a improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05837742; Issue ID: ALPS05857289...

4.4CVSS5.6AI score0.00116EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/01 12:00 a.m.•13 views

PUB-A-197850306

In getsignalpage of signal.c, there is a possible leak of kernel data due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS6AI score0.00496EPSS
SaveExploits1References2
NVD
NVD
•added 2022/02/11 6:15 p.m.•36 views

CVE-2021-39671

In code generated by aidlconstexpressions.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID...

6.5CVSS0.0049EPSS
SaveExploits0References1
OSV
OSV
•added 2022/02/11 6:15 p.m.•11 views

CVE-2021-39671

In code generated by aidlconstexpressions.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID...

6.5CVSS6.8AI score0.0049EPSS
SaveExploits0References1
Prion
Prion
•added 2022/02/11 6:15 p.m.•20 views

Out-of-bounds

In code generated by aidlconstexpressions.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID...

4.3CVSS6.3AI score0.0049EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/02/11 5:40 p.m.•179 views

CVE-2021-39671

CVE-2021-39671 affects Android 12. The flaw is an out-of-bounds read in code generated by aidl_const_expressions.cpp caused by uninitialized data, leading to information disclosure without additional privileges or user interaction. The issue is listed in Android’s February 2022 security bulletins...

6.5CVSS6.2AI score0.0049EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/11 12:00 a.m.•3 views

CVE-2021-39671: Use of Uninitialized Resource

In code generated by aidlconstexpressions.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID...

6.5CVSS6.7AI score0.0049EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/02/09 11:26 p.m.•41 views

Uninitialized variable access in Tensorflow

Impact The implementation of AssignOp can result in copying unitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of allocations, but does not check that the right hand...

8.8CVSS1.1AI score0.00761EPSS
SaveExploits1References7Affected Software3
CNVD
CNVD
•added 2022/02/09 12:00 a.m.•86 views

Google Tensorflow has an unspecified vulnerability (CNVD-2022-09886)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A security vulnerability exists in Google Tensorflow, which stems from an implementation of AssignOp that can lead to copying uninitialized data to a new tensor. No detailed vulnerability details are...

8.8CVSS2.9AI score0.00761EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2022/02/09 12:00 a.m.•36 views

AlmaLinux 8 : libxslt (ALSA-2020:4464)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2020:4464 advisory. - libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -...

9.8CVSS7.6AI score0.0523EPSS
SaveExploits0References3
Veracode
Veracode
•added 2022/02/08 7:30 a.m.•27 views

Denial Of Service (DoS)

Tensorflow is vulnerable to denial of service. The vulnerability exists due to an undefined behavior during the implementation of AssignOp which can result in uninitialized data being copied to a new tensor...

8.8CVSS3.2AI score0.00761EPSS
SaveExploits1References3Affected Software3
NVD
NVD
•added 2022/02/04 11:15 p.m.•40 views

CVE-2022-23573

Tensorflow is an Open Source Machine Learning Framework. The implementation of AssignOp can result in copying uninitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of...

8.8CVSS0.00761EPSS
SaveExploits1References3
Rows per page
Query Builder