55 matches found
CVE-2024-54122
Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-54122
Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-54122
CVE-2024-54122 describes a concurrent variable access vulnerability in the Huawei HarmonyOS ability module. The combined documents indicate local attack vector with impact on availability; CVSS analyses show a mix of factors with a notable availability impact in the NVD entry (base score 4.7) and...
CVE-2024-54122
Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-54122
Concurrent variable access vulnerability in the ability module Impact: Successful exploitation of this vulnerability may affect availability...
PT-2024-36054 · Unknown · Ability Module
Name of the Vulnerable Software and Affected Versions: Ability module affected versions not specified Description: The issue concerns a concurrent variable access vulnerability in the ability module. Successful exploitation of this vulnerability may affect availability. Recommendations: At the...
SiYuan has an SSTI via /api/template/renderSprig
Summary Siyuan's /api/template/renderSprig endpoint is vulnerable to Server-Side Template Injection SSTI through the Sprig template engine. Although the engine has limitations, it allows attackers to access environment variables Impact Information leakage...
The vulnerability of the atob method in the universal monitoring system Zabbix allows attackers to compromise the integrity of the protected information.
The vulnerability of the atob method in the Zabbix universal monitoring system is related to access to a critical private variable through a publicly accessible method. Exploiting this vulnerability allows an attacker to compromise the integrity of the protected information...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of an uninitialized variable access problem...
DEBIAN-CVE-2023-52893
In the Linux kernel, the following vulnerability has been resolved: gsmi: fix null-deref in gsmigetvariable We can get EFI variables without fetching the attribute, so we must allow for that in gsmi. commit 859748255b43 "efi: pstore: Omit efivars caching EFI varstore access layer" added a new...
Multiple vulnerabilities in Sharp and Toshiba Tec MFPs
Overview Sharp and Toshiba Tec MFPs multifunction printers contain multiple vulnerabilities listed below. Stack-based Buffer Overflow CWE-121 - CVE-2024-28038 Incorrect Permission Assignment for Critical Resource CWE-732 - CVE-2024-28955 Cleartext Storage of Sensitive Information CWE-312 -...
BIT-TENSORFLOW-2021-41201 Unitialized access in `EinsumHelper::ParseEquation`
TensorFlow is an open source platform for machine learning. In affeced versions during execution, EinsumHelper::ParseEquation is supposed to set the flags in inputhasellipsis vector and outputhasellipsis boolean to indicate whether there is ellipsis in the corresponding inputs and output. However...
Improper Authorization
gitlab is vulnerable to Improper Authorization. The vulnerabiltiy allows an attacker to extract the value of an unprotected variable they know the name of in public projects or private projects they're a member of...
PT-2022-37330 · Pypi · Spam
Name of the Vulnerable Software and Affected Versions: spam affected versions not specified Description: The issue involves a compromise of a user account through a phishing attack, leading to the creation of a malicious release of the spam project on PyPI. This malicious release contains code th...
GHSA-Q85F-69Q7-55H2 Uninitialized variable access in Tensorflow
Impact The implementation of AssignOp can result in copying unitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of allocations, but does not check that the right hand...
Google TensorFlow Buffer Overflow Vulnerability (CNVD-2022-09872)
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause uninitialized variable access...
CVE-2021-41201
TensorFlow is an open source platform for machine learning. In affeced versions during execution, EinsumHelper::ParseEquation is supposed to set the flags in inputhasellipsis vector and outputhasellipsis boolean to indicate whether there is ellipsis in the corresponding inputs and output. However...
PYSEC-2021-611
TensorFlow is an open source platform for machine learning. In affeced versions during execution, EinsumHelper::ParseEquation is supposed to set the flags in inputhasellipsis vector and outputhasellipsis boolean to indicate whether there is ellipsis in the corresponding inputs and output. However...
Stack overflow
TensorFlow is an open source platform for machine learning. In affeced versions during execution, EinsumHelper::ParseEquation is supposed to set the flags in inputhasellipsis vector and outputhasellipsis boolean to indicate whether there is ellipsis in the corresponding inputs and output. However...
Google TensorFlow 缓冲区错误漏洞
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause uninitialized variable access...