漏洞 - 第543页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2020-22224

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionPreview function.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：11 | 回复：0
CVE漏洞

CVE-2020-22223

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoad function.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：9 | 回复：0
CVE漏洞

CVE-2020-22222

Stivasoft (Phpjabbers) Fundraising Script v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the pjActionLoadCss function.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-41218

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `AllToAll` can be made to execute a division by 0. This occurs whenever the `split_count` ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-41209

TensorFlow is an open source platform for machine learning. In affected versions the implementations for convolution operators trigger a division by 0 if passed empty filter tensor arguments. The fix ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-41208

TensorFlow is an open source platform for machine learning. In affected versions the code for boosted trees in TensorFlow is still missing validation. As a result, attackers can trigger denial of serv ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-41207

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `ParallelConcat` misses some input validation and can produce a division by 0. The fix will be in ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：5 | 回复：0
CVE漏洞

CVE-2021-41206

TensorFlow is an open source platform for machine learning. In affected versions several TensorFlow operations are missing validation for the shapes of the tensor arguments involved in the call. Depen ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：6 | 回复：0
CVE漏洞

CVE-2021-41202

TensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the `tf.range` kernel, there is a conditional statement of type `int64 ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-42359

WP DSGVO Tools (GDPR) = 3.1.23 had an AJAX action, ‘admin-dismiss-unsubscribe‘, which lacked a capability check and a nonce check and was available to unauthenticated users, and did not check the po ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：7 | 回复：0
CVE漏洞

CVE-2021-41226

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseBinCount` is vulnerable to a heap OOB access. This is because of missing validation betwee ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-41224

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `SparseFillEmptyRows` can be made to trigger a heap OOB access. This occurs whenever the size of ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-41223

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `FusedBatchNorm` kernels is vulnerable to a heap OOB access. The fix will be included in TensorFl ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-41219

TensorFlow is an open source platform for machine learning. In affected versions the code for sparse matrix multiplication is vulnerable to undefined behavior via binding a reference to `nullptr`. Thi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：23 | 回复：0
CVE漏洞

CVE-2021-41217

TensorFlow is an open source platform for machine learning. In affected versions the process of building the control flow graph for a TensorFlow model is vulnerable to a null pointer exception when no ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-41215

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `DeserializeSparse` can trigger a null pointer dereference. This is because the shape infe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-41214

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `tf.ragged.cross` has an undefined behavior due to binding a reference to `nullptr`. The f ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：16 | 回复：0
CVE漏洞

CVE-2021-41212

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `tf.ragged.cross` can trigger a read outside of bounds of heap allocated array. The fix wi ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：25 | 回复：0
CVE漏洞

CVE-2021-41211

TensorFlow is an open source platform for machine learning. In affected versions the shape inference code for `QuantizeV2` can trigger a read outside of bounds of heap allocated array. This occurs whe ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：17 | 回复：0
CVE漏洞

CVE-2021-41205

TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for the `QuantizeAndDequantizeV*` operations can trigger a read outside of bounds of heap ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-41204

TensorFlow is an open source platform for machine learning. In affected versions during TensorFlow's Grappler optimizer phase, constant folding might attempt to deep copy a resource tensor. This r ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-41203

TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and `CHECK`-fail crashes if they can change sa ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：12 | 回复：0
CVE漏洞

CVE-2021-3774

Meross Smart Wi-Fi 2 Way Wall Switch (MSS550X), on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remo ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：15 | 回复：0
CVE漏洞

CVE-2021-41210

TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for `SparseCountSparseOutput` can trigger a read outside of bounds of heap allocated arra ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：21 | 回复：0
CVE漏洞

CVE-2021-41201

TensorFlow is an open source platform for machine learning. In affeced versions during execution, `EinsumHelper::ParseEquation()` is supposed to set the flags in `input_has_ellipsis` vector and `*outp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-41200

TensorFlow is an open source platform for machine learning. In affected versions if `tf.summary.create_file_writer` is called with non-scalar arguments code crashes due to a `CHECK`-fail. The fix will ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：13 | 回复：0
CVE漏洞

CVE-2021-41199

TensorFlow is an open source platform for machine learning. In affected versions if `tf.image.resize` is called with a large input argument then the TensorFlow process will crash due to a `CHECK`-fail ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：29 | 回复：0
CVE漏洞

CVE-2021-41198

TensorFlow is an open source platform for machine learning. In affected versions if `tf.tile` is called with a large input argument then the TensorFlow process will crash due to a `CHECK`-failure caus ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：34 | 回复：0
CVE漏洞

CVE-2021-41197

TensorFlow is an open source platform for machine learning. In affected versions TensorFlow allows tensor to have a large number of dimensions and each dimension can be as large as desired. However, t ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：20 | 回复：0
CVE漏洞

CVE-2021-41196

TensorFlow is an open source platform for machine learning. In affected versions the Keras pooling layers can trigger a segfault if the size of the pool is 0 or if a dimension is negative. This is due ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：26 | 回复：0
CVE漏洞

CVE-2021-41195

TensorFlow is an open source platform for machine learning. In affected versions the implementation of `tf.math.segment_*` operations results in a `CHECK`-fail related abort (and denial of service) if ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-43406

An issue was discovered in FusionPBX before 4.5.30. The fax_post_size may have risky characters (it is not constrained to preset values).……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：19 | 回复：0
CVE漏洞

CVE-2021-43405

An issue was discovered in FusionPBX before 4.5.30. The fax_extension may have risky characters (it is not constrained to be numeric).……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：22 | 回复：0
CVE漏洞

CVE-2021-43404

An issue was discovered in FusionPBX before 4.5.30. The FAX file name may have risky characters.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：18 | 回复：0
CVE漏洞

CVE-2021-42837

An issue was discovered in Talend Data Catalog before 7.3-20210930. After setting up SAML/OAuth, authentication is not correctly enforced on the native login page. Any valid user from the SAML/OAuth p ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：11 | 回复：0
CVE漏洞

CVE-2021-35368

OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by a Request Body Bypass via a trailing pathname.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：14 | 回复：0
CVE漏洞

CVE-2021-29753

IBM Business Automation Workflow 18. 19, 20, 21, and IBM Business Process Manager 8.5 and d8.6 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to una ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：12 | 回复：0
CVE漏洞

CVE-2020-23567

Irfanview v4.53 allows attackers to to cause a denial of service (DoS) via a crafted JPEG 2000 file. Related to Integer Divide By Zero starting at JPEG2000!ShowPlugInSaveOptions_W+0x00000000000082ea……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：11 | 回复：0
CVE漏洞

CVE-2020-23566

Irfanview v4.53 was discovered to contain an infinity loop via JPEG2000!ShowPlugInSaveOptions_W+0x1ecd8.……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：8 | 回复：0
CVE漏洞

CVE-2020-23565

Irfanview v4.53 allows attackers to execute arbitrary code via a crafted JPEG 2000 file. Related to a Data from Faulting Address controls Branch Selection starting at JPEG2000!ShowPlugInSaveOptions_W+ ...……

作者：菜鸟教程小白 | 时间：2022-2-5 12:31 | 阅读：24 | 回复：0