Palantir Foundry Issues 日志信息泄露漏洞

Palantir is a data platform from Palantir, Inc. that reimagines how people use data by removing the barriers between back-end data management and front-end data analysis. A log message disclosure vulnerability exists in Palantir Foundry Issues service versions 2.244.0 through 2.249.0, which could...

appyter (>=0.18.3 <=0.18.11), chronix2grid (>=0.1.0rc1 <=1.0.2) +22 more potentially affected by CVE-2022-24757 via jupyter-server (>=0.0.5 <=1.13.5)

jupyter-server PYPI version =0.0.5, =0.18.3, =0.1.0rc1, =0.0.1.dev7, =3.0.0b2, =2.0.0b1, =0.1.0, =0.18.0, =0.2.0, =0.0.18, =0.2.1, =0.0.2, =0.1.0, =4.3.2 and more Source cves: CVE-2022-24757 Source advisory: OSV:PYSEC-2022-179...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4847 more potentially affected by CVE-2022-21727 via tensorflow (>=1.0.1 <=2.5.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-21727 Source advisory: OSV:GHSA-C6FH-56W7-FVJW...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4847 more potentially affected by CVE-2022-23581 via tensorflow (>=1.0.1 <=2.5.2)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2022-23581 Source advisory: OSV:GHSA-FQ86-3F29-PX2C...

a62-emotion (>=0.10.12 <=0.11.4), agent-atm (>=0.1.0 <=0.1.1) +102 more potentially affected by CVE-2022-23587 via tensorflow-cpu (>=1.15.0 <=2.4.4)

tensorflow-cpu PYPI version =1.15.0, =0.10.12, =0.1.0, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.1.0.dev1, =0.1.0.dev202107081840 and more Source cves: CVE-2022-23587 Source advisory: OSV:PYSEC-2022-96...

CVE-2022-21243

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows low privileged attacker with...

@2109-t5/server (>=1.0.0 <=1.0.9), @agentscript-ai/linear (>=0.1.0 <=0.9.0) +339 more potentially affected by CVE-2021-23509 via json-ptr (>=0.1.1 <=2.2.0)

json-ptr NPM version =0.1.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =0.0.1, =0.15.0, =2.0.0-pr.1, =0.0.1-alpha.1, =5.4.3 - @cdxoo/pojo-utils =0.1.0 - @chix/chit =0.5.2 and more Source cves: CVE-2021-23509 Source advisory: OSV:GHSA-8GWJ-8HXC-285W...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4817 more potentially affected by CVE-2021-41195 via tensorflow (>=1.0.1 <=2.4.3)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =2.0.0, =1.0.0, =0.0.1, =0.0.7 and more Source cves: CVE-2021-41195 Source advisory: OSV:PYSEC-2021-842...

2vyper (=0.3.0), async-web3 (>=0.1.0 <=0.3.1) +11 more potentially affected by CVE-2021-41122 via vyper (>=0.1.0b12 <=0.2.8)

vyper PYPI version =0.1.0b12, =0.1.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0, =1.4.0, =0.2.1, =0.1.3, =2.0.24, =0.1.2b2, =0.1.0, =0.2.4 Source cves: CVE-2021-41122 Source advisory: OSV:PYSEC-2021-366...

arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +164 more potentially affected by CVE-2021-37639 via tensorflow-gpu (>=1.10.1 <=2.3.2)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.9.2, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - cctv-analysis =0.0.2 - chatbot-nlu =1.0.0 - classitransformers =0.0.1 and more Source cves: CVE-2021-37639 Source advisory: OSV:GHSA-GH6X-4WHR-2QV4...

aisdc (=1.0.1), an-website (>=22.5.13 <=23.3.6) +72 more potentially affected by CVE-2021-29063 via mpmath (>=0.19.0 <=1.2.1)

mpmath PYPI version =0.19.0, =22.5.13, =3.1.5, =1.0.0, =3.0.0, =3.0.0, =1.1.9, =0.0.1a1.dev5, =0.0.36, =0.0.3, =1.0.0, =1.0.6 and more Source cves: CVE-2021-29063 Source advisory: OSV:PYSEC-2021-427...

arekit (>=0.21.0 <=0.22.1), arenets (>=0.23.0 <=0.23.1) +161 more potentially affected by CVE-2021-29586 via tensorflow-gpu (>=1.10.1 <=2.1.1)

tensorflow-gpu PYPI version =1.10.1, =0.21.0, =0.23.0, =0.9.2, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =1.0.0, =1.0.3 - cctv-analysis =0.0.2 - chatbot-nlu =1.0.0 - classitransformers =0.0.1 and more Source cves: CVE-2021-29586 Source advisory: OSV:GHSA-26J7-6W8W-7922...

accuinsight (>=1.0.62 <=3.0.0rc2), adapt-diagnostics (>=1.2.0 <=1.6.0) +110 more potentially affected by CVE-2021-29563 via tensorflow (>=2.3.0 <=2.3.2)

tensorflow PYPI version =2.3.0, =1.0.62, =1.2.0, =0.1.0, =0.0.1a0, =0.0.1, =1.0.0rc1, =20210206.0.0, =0.1.0.dev1, =0.2.4, =1.0.1.0, =1.0.3 - cardec-cite =1.1.0 and more Source cves: CVE-2021-29563 Source advisory: OSV:PYSEC-2021-200...

125softnlp (=0.0.1), a2 (>=0.10.11 <=0.10.13) +4695 more potentially affected by CVE-2021-29547 via tensorflow (>=1.0.1 <=2.2.0)

tensorflow PYPI version =1.0.1, =0.10.11, =0.1.0, =0.0.0, =0.6.0, =0.1.6, =1.0.0, =0.0.1, =0.2.0, =0.6.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2021-29547 Source advisory: OSV:PYSEC-2021-184...

0.8.18-p11 (=0.8.18-p12), 0hub (=1.0.0-beta.2) +1457 more potentially affected by CVE-2020-7760 via codemirror (>=2.33.0 <=5.58.1)

codemirror NPM version =2.33.0, =4.13.7-rc4, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.19.1-rc.2, =0.19.1-rc.3, =0.1.1, =0.0.1, =0.1.0, =0.1.0, =1.0.2 and more Source cves: CVE-2020-7760 Source advisory: OSV:GHSA-4GW3-8F77-F72C...

OESA-2021-1120 openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. It encrypts all traffic to eliminate eavesdropping, connection hijacking, and other attacks. In addition, OpenSSH provides a large suite of secure tunneling capabilities, several authentication methods, and...

com.github.igorperikov:hollow-maven-plugin (>=0.1.1 <=1.0.1), com.netflix.hollow:hollow-diff-ui (>=2.0.0 <=6.1.0) +8 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (>=2.0.0 <=6.1.0)

com.netflix.hollow:hollow MAVEN version =2.0.0, =0.1.1, =2.0.0, =2.5.0, =2.0.0, =4.3.0, =2.16.0, =2.5.0, =2.0.0, =0.1.0, =0.1.0, =2.0.0 Source cves: CVE-2021-28099 Source advisory: OSV:GHSA-9295-MHF3-V33M...

@0soft/zero-material-ui (>=0.0.1 <=0.0.25), @0xgg/echomd (>=1.0.0 <=1.0.4) +423 more potentially affected by CVE-2021-23353 via jspdf (>=1.0.272 <=2.3.0)

jspdf NPM version =1.0.272, =0.0.1, =1.0.0, =0.1.0, =0.0.1, =0.0.0-nightly-2020982921, =0.0.0-nightly-20215272227, =0.0.0-nightly-2021533445, =0.0.0-nightly-2021242250, =0.0.0-nightly-20214822614, =0.0.0-nightly-2020972106, =0.0.0-nightly-20213723126, =0.0.0-nightly-20214822614,...

UBUNTU-CVE-2020-1899

The unserialize function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arbitrary memory addresses to be accessed as if they were static StringData objects. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56....

Accfly Wireless Security IR Camera System 720P Software 缓冲区错误漏洞

Accfly Wireless Security IR Camera System 720P Software is an application from Accfly USA for controlling this camera. A buffer overflow vulnerability exists in Accfly Wireless Security IR Camera System 720P Software versions v3.10.73 through v4.15.77, which stems from an unauthenticated...