Search CVE reports
1131 – 1140 of 51201 results
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, Classify::ReadIntTemplates in src/classify/intproto.cpp reads NumClassPruners, NumClasses, and NumProtoSets from the TESSDATA_INTTEMP component of a crafted...
1 affected package
tesseract
| Package | 22.04 LTS |
|---|---|
| tesseract | Needs evaluation |
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, UNICHARSET::load_via_fgets in src/ccutil/unicharset.cpp trusts the declared unichar count as a loop bound and uses id as an unchecked index into the unichars...
1 affected package
tesseract
| Package | 22.04 LTS |
|---|---|
| tesseract | Needs evaluation |
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, the callback form of GenericVector::read in src/ccutil/genericvector.h reads the independent int32 fields reserved and size_used_ from a .traineddata model...
1 affected package
tesseract
| Package | 22.04 LTS |
|---|---|
| tesseract | Needs evaluation |
Not in release
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a...
1 affected package
golang-mongodb-mongo-driver
| Package | 22.04 LTS |
|---|---|
| golang-mongodb-mongo-driver | Not in release |
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Ruby Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a...
1 affected package
ruby-mongo
| Package | 22.04 LTS |
|---|---|
| ruby-mongo | Needs evaluation |
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a...
1 affected package
pymongo
| Package | 22.04 LTS |
|---|---|
| pymongo | Needs evaluation |
An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl file
1 affected package
puma
| Package | 22.04 LTS |
|---|---|
| puma | Needs evaluation |
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length_ but accepts negative code_ values from a crafted .traineddata recoder component....
1 affected package
tesseract
| Package | 22.04 LTS |
|---|---|
| tesseract | Needs evaluation |
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, prior .traineddata hardening added bounds checks to NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize in src/lstm/networkio.cpp but left...
1 affected package
tesseract
| Package | 22.04 LTS |
|---|---|
| tesseract | Needs evaluation |
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni_ and no_ against the weight-matrix dimensions....
1 affected package
tesseract
| Package | 22.04 LTS |
|---|---|
| tesseract | Needs evaluation |