Most recent entries from all

bdu:2022-06724

BREW-numpy-CVE-2021-34141

Affected: Homebrew: numpy

An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."

certfr-2022-avi-767 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2022-avi-767

cnvd-2021-101680

EUVD-2026-28658

fkie_cve-2021-34141

GHSA-fpfv-jqm9-f5jm — Incorrect Comparison in NumPy

Affected: PyPI: numpy

Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.

gsd-2021-34141

msrc_CVE-2021-34141 — An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly…

msrc_CVE-2021-34141

OESA-2022-1522 — numpy security update

Affected: openEuler:20.03-LTS-SP1: numpy, openEuler:20.03-LTS-SP2: numpy, openEuler:20.03-LTS-SP3: numpy

A fast multidimensional array facility for Python. Security Fix(es): Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks by repetitively creating sort arrays.(CVE-2021-41495) An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely harmless."(CVE-2021-34141)

PYSEC-2021-855

Affected: PyPI: numpy

Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.

UBUNTU-CVE-2021-34141

Affected: Ubuntu:20.04:LTS: numpy, Ubuntu:22.04:LTS: numpy

WID-SEC-W-2022-0302 — Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administrator…

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.