CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2022-21737

Tensorflow is an Open Source Machine Learning Framework. The implementation of `*Bincount` operations allows malicious users to cause denial of service by passing in arguments which would trigger a `C ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：19 | 回复：0
CVE-2022-21738

Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` can be made to crash a TensorFlow process by an integer overflow whose result is then used in a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：20 | 回复：0
CVE-2022-21739

Tensorflow is an Open Source Machine Learning Framework. The implementation of `QuantizedMaxPool` has an undefined behavior where user controlled inputs can trigger a reference binding to null pointer ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：22 | 回复：0
CVE-2022-21740

Tensorflow is an Open Source Machine Learning Framework. The implementation of `SparseCountSparseOutput` is vulnerable to a heap overflow. The fix will be included in TensorFlow 2.8.0. We will also ch ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：19 | 回复：0
CVE-2022-21741

Tensorflow is an Open Source Machine Learning Framework. ### Impact An attacker can craft a TFLite model that would trigger a division by zero in the implementation of depthwise convolutions. The para ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：26 | 回复：0
CVE-2022-24307

Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (JSON-LD signing has been supported since version 1.6.0.)……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：28 | 回复：0
CVE-2021-45268

** DISPUTED ** A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (RCE) on the Hosting Webserver via uploading a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：28 | 回复：0
CVE-2021-44246

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain a stack overflow in the function setNoticeCfg. This vulnerabili ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：34 | 回复：0
CVE-2021-44247

Totolink devices A3100R v4.1.2cu.5050_B20200504, A830R v5.9c.4729_B20191112, and A720R v4.1.5cu.470_B20200911 were discovered to contain command injection vulnerability in the function setNoticeCfg. T ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：38 | 回复：0
CVE-2021-44880

D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_882 DIR_882_FW1.30B06_Hotfix_02 were discovered to contain a command injection vulnerability in the system function. This vulnerability allow ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：43 | 回复：0
CVE-2021-44881

D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary command ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：38 | 回复：0
CVE-2021-44882

D-Link device DIR_878_FW1.30B08_Hotfix_02 was discovered to contain a command injection vulnerability in the twsystem function. This vulnerability allows attackers to execute arbitrary commands via a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：49 | 回复：0
CVE-2021-45733

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function NTPSyncWithHost. This vulnerability allows attackers to execute arbitrary commands vi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：90 | 回复：0
CVE-2021-45734

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via the url ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：82 | 回复：0
CVE-2021-45735

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to use the HTTP protocol for authentication into the admin interface, allowing attackers to intercept user credentials via packet capture software ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：156 | 回复：0
CVE-2021-45736

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the eip, ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：90 | 回复：0
CVE-2021-45737

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the Host paramet ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：62 | 回复：0
CVE-2021-45738

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：49 | 回复：0
CVE-2021-45739

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the Form_Login function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the flag paramet ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：72 | 回复：0
CVE-2021-45740

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a stack overflow in the setWiFiWpsStart function. This vulnerability allows attackers to cause a Denial of Service (DoS) via the pin par ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：35 | 回复：0
CVE-2021-45741

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a stack overflow in the function setIpv6Cfg. This vulnerability allows attackers to cause a Denial of Service (DoS) via the relay6to4 p ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：30 | 回复：0
CVE-2021-45742

TOTOLINK A720R v4.1.5cu.470_B20200911 was discovered to contain a command injection vulnerability in the Main function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_ ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：23 | 回复：0
CVE-2021-45986

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：28 | 回复：0
CVE-2021-45987

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function formSetNetCheckTools. This vulnerability allows attackers to execute arbitrary ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：28 | 回复：0
CVE-2021-45988

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddDnsForward. This vulnerability allows attackers to cause a Denial of Service (DoS) via t ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：25 | 回复：0
CVE-2021-45989

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function guestWifiRuleRefresh. This vulnerability allows attackers to cause a Denial of Service (DoS) vi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：25 | 回复：0
CVE-2021-45990

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a command injection vulnerability in the function uploadPicture. This vulnerability allows attackers to execute arbitrary comman ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：26 | 回复：0
CVE-2021-45991

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formAddVpnUsers. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：29 | 回复：0
CVE-2021-45992

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetQvlanList. This vulnerability allows attackers to cause a Denial of Service (DoS) via th ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：33 | 回复：0
CVE-2021-45993

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formIPMacBindModify. This vulnerability allows attackers to cause a Denial of Service (DoS) via ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：38 | 回复：0
CVE-2021-45994

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：30 | 回复：0
CVE-2021-45995

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetStaticRoute. This vulnerability allows attackers to cause a Denial of Service (DoS) via ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：39 | 回复：0
CVE-2021-45996

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service (DoS) via ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：31 | 回复：0
CVE-2021-45997

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetPortMapping. This vulnerability allows attackers to cause a Denial of Service (DoS) via ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：35 | 回复：0
CVE-2021-45998

D-Link device DIR_882 DIR_882_FW1.30B06_Hotfix_02 was discovered to contain a command injection vulnerability in the LocalIPAddress parameter. This vulnerability allows attackers to execute arbitrary ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：32 | 回复：0
CVE-2021-46226

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function wget_test.asp. This vulnerability allows attackers to execute arbitrary commands via ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：49 | 回复：0
CVE-2021-46227

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function proxy_client.asp. This vulnerability allows attackers to execute arbitrary commands ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：29 | 回复：0
CVE-2021-46228

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function httpd_debug.asp. This vulnerability allows attackers to execute arbitrary commands v ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：29 | 回复：0
CVE-2021-46229

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function usb_paswd.asp. This vulnerability allows attackers to execute arbitrary commands via ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：30 | 回复：0
CVE-2021-46230

D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a command injection vulnerability in the function upgrade_filter. This vulnerability allows attackers to execute arbitrary commands vi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:26 | 阅读：26 | 回复：0