Directus 资源管理错误漏洞

Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A security vulnerability exists in the Directus API version v.2.2.0. A remote attacker could exploit this vulnerability to cause a denial of service via a large number of HTTP requests to the system...

CVE-2022-47190

Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root...

SUSE CVE-2022-44368

NASM v2.16 was discovered to contain a null pointer deference in the NASM component...

ABB AC500 V2 代码问题漏洞

ABB ABB AC500 V2 is a PLC from ABB Switzerland. for simple control tasks and complex automation solutions. A security vulnerability exists in ABB AC500 V2 versions prior to 2.0.0 through 2.8.6 that stems from incorrect input validation...

Generex UPS CS141 代码问题漏洞

The Generex UPS CS141 is a microcomputer from the German company Generex. A security vulnerability exists in the Generex UPS CS141 prior to version 2.06, which stems from a vulnerability that allows an attacker to upload a firmware file containing a webshell...

SUSE CVE-2023-25809

runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes /sys/fs/cgroup writable in following conditons: 1. when runc is executed inside the user namespace, and the config.json does not specify the cgroup...

AZL-25935 CVE-2022-44369 affecting package nasm 2.16-1

NASM 2.16 development is vulnerable to 476: Null Pointer Dereference via output/outaout.c...

DEBIAN-CVE-2022-44370

NASM v2.16 was discovered to contain a heap buffer overflow in the component quoteforpmake asm/nasm.c:856...

undertow: Server identity in https connection is not checked by the undertow client

A flaw was found in undertow. The undertow client is not checking the server identity the server certificate presents in HTTPS connections. This is a compulsory step that should at least be performed by default in HTTPS and in http/2...

CVE-2023-27167

Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?searchmonth=1...

NASM 代码问题漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in NASM v2.16, which stems from the presence of a null pointer dereference...

NASM 代码问题漏洞

Nasm is an open source programming tool software by The Nasm Development Team team. A security vulnerability exists in NASM v2.16, which stems from a null pointer dereference issue in output/outaout.c. The vulnerability is caused by a null pointer dereference issue...

PT-2023-14456 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: NASM version 2.16 Description: A null pointer dereference was discovered in the NASM component. Recommendations: For NASM version 2.16, at the moment, there is no information about a newer version that contains a fix for this issue...

Suprema BioStar 2 SQL注入漏洞

Suprema BioStar 2 is a web-based biometric security smart lock platform from Suprema Korea. A security vulnerability exists in Suprema BioStar 2 version v2.8.16. An attacker can exploit the vulnerability to perform SQL injection via the values parameter at /users/absence?searchmonth=1...

PT-2023-14457 · Nasm +1 · Nasm +1

Name of the Vulnerable Software and Affected Versions: NASM version 2.16 development Description: The issue is related to a Null Pointer Dereference via the output/outaout.c file. Recommendations: For NASM version 2.16 development, at the moment, there is no information about a newer version that...

SUSE CVE-2023-27579

TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater filterinputchannel of less than 1 gives a FPE. This issue has been patched in version 2.12. TensorFlow will also cherrypick the fix commit on TensorFlow 2.11.1...

WordPress Plugin Woocommerce Vietnam Checkout 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerability...

Double Free

Overview Affected versions of this package are vulnerable to Double Free. The nnops.fractionalavgpoolv2 and nnops.fractionalmaxpoolv2 functions require the first and fourth elements of their parameter poolingratio to be equal to 1.0, as pooling on batch and channel dimensions is not supported. Po...

AZL-31210 CVE-2023-25672 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. The function tf.rawops.LookupTableImportV2 cannot handle scalars in the values parameter and gives an NPE. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...

AZL-31207 CVE-2023-25669 affecting package tensorflow for versions less than 2.11.1-1

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for tf.rawops.AvgPoolGrad, it can give a floating point exception. A fix is included in TensorFlow version 2.12.0 and version 2.11.1...