60 matches found
CVE-2024-31580
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/varargfunctions.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2024-31583
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...
CVE-2024-31583
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...
CVE-2024-31583
The machine learning framework PyTorch (versions prior to v2.2.0 ) is vulnerable to a use-after-free flaw in the torch/csrc/jit/mobile/interpreter.cpp component. An attacker could exploit this by persuading a victim to open specially crafted content, potentially leading to arbitrary code executio...
CVE-2024-31583
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...
CVE-2024-31583
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp...
CVE-2023-45909
zzzcms v2.2.0 was discovered to contain an open redirect vulnerability...
Open redirect
zzzcms v2.2.0 was discovered to contain an open redirect vulnerability...
CVE-2023-45909
CVE-2023-45909 pertains to zzzcms v2.2.0, where an open redirect vulnerability has been identified. Multiple connected documents confirm the affected software and describe the vulnerability as an open redirect, stemming from zzzcms v2.2.0. There is no explicit remediation or patched version detai...
CVE-2023-45909
zzzcms v2.2.0 was discovered to contain an open redirect vulnerability...
CVE-2023-44974
An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...
Privilege escalation
An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-44973
An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-44974
An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-39023
CVE-2023-39023 affects University Compass versions 2.2.0 and earlier. The vulnerability is a code injection in the component org.compass.core.executor.DefaultExecutorManager.configure, exploitable via passing an unchecked argument. The issue is documented across multiple sources, and connected do...
EQ Enterprise management system v2.2.0 - SQL Injection
Exploit Title: EQ Enterprise management system v2.2.0 - SQL Injection Date: 2022.12.7 Exploit Author: TLF Vendor Homepage: https://www.yiquantech.com/pc/about.html Software Link漏洞影响应用下载链接:...
CVE-2023-27087: Improper Handling of Insufficient Permissions or Privileges
Permissions vulnerabiltiy found in Xuxueli xxl-job v2.2.0, v 2.3.0 and v.2.3.1 allows attacker to obtain sensitive information via the pageList parameter...
Sql injection
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter...
PT-2022-4038 · Jenkins · Jenkins Repository Connector Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Repository Connector Plugin versions 2.2.0 and earlier Description: The issue is related to insufficient authorization procedures in the Jenkins Repository Connector Plugin, allowing remote attackers with Overall/Read permission to...
Properties-Reader before v2.2.0 vulnerable to prototype pollution
Properties-Reader prior to version 2.2.0 is vulnerable to prototype pollution. Version 2.2.0 contains a patch for this issue...