Skip to content
OpenAdvisories

Archive

10 December 2020

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.1

    Heap out of bounds read in filesystem glob matching in TensorFlow

    In TensorFlow release candidate versions 2.4.0rc*, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories. There are multiple invariants and preconditions that…

  • Critical 9.0

    Cross-site Scripting Vulnerability in Commenting Function of Adobe Experience Manager (AEM)

    AEM's Cloud Service offering, as well as version 6.5.6.0 (and below), are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be ex…