Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2022-35966Medium· 5.9TensorFlow vulnerable to segfault in `QuantizedAvgPool`
TensorFlow vulnerable to segfault in `QuantizedAvgPool`
CVE-2022-35972Medium· 5.9TensorFlow vulnerable to segfault in `QuantizedBiasAdd`
TensorFlow vulnerable to segfault in `QuantizedBiasAdd`
CVE-2022-35982Medium· 5.9TensorFlow vulnerable to segfault in `SparseBincount`
TensorFlow vulnerable to segfault in `SparseBincount`
CVE-2022-35999Medium· 5.9TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`
TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`
CVE-2022-35968Medium· 5.9TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad`
TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad`
GHSA-qv98-3369-g364HighKubeVirt vulnerable to arbitrary file read on host
KubeVirt vulnerable to arbitrary file read on host
CVE-2022-32190NoneFailure to strip relative path components in net/url
Failure to strip relative path components in net/url
CVE-2022-38638Critical· 9.1Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.
Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.
CVE-2022-37189High· 7.5MEI2Volpiano is vulnerable to XML External Entity (XXE), leading to a Denial of Service (DoS)
MEI2Volpiano is vulnerable to XML External Entity (XXE), leading to a Denial of Service (DoS)
CVE-2022-36086High· 8.4Multiple vulnerabilities resulting in out-of-bounds writes
Multiple vulnerabilities resulting in out-of-bounds writes
CVE-2022-27664High· 7.5golang.org/x/net/http2 Denial of Service vulnerability
golang.org/x/net/http2 Denial of Service vulnerability
CVE-2022-23451High· 8.1Barbican authorization flaw before v14.0.0
Barbican authorization flaw before v14.0.0
CVE-2022-38369High· 8.8Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
GO-2022-0965NoneUnbounded recursion in JSON parsing in k8s.io/apimachinery
Unbounded recursion in JSON parsing in k8s.io/apimachinery
CVE-2022-2806Medium· 5.5sosreport Exposure of Sensitive Information vulnerability
sosreport Exposure of Sensitive Information vulnerability
CVE-2022-23452Medium· 4.9openstack-barbican Denial of Service vulnerability
openstack-barbican Denial of Service vulnerability
CVE-2022-31677Medium· 4.9Pinniped Supervisor Insufficient Session Expiration vulnerability
Pinniped Supervisor Insufficient Session Expiration vulnerability
CVE-2022-36046Medium· 5.3Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affecte…
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict `unhandl…
CVE-2022-34668Critical· 9.8PoCNVFLARE unsafe deserialization due to Pickle
NVFLARE unsafe deserialization due to Pickle
CVE-2022-36055Medium· 6.5Helm Vulnerable to denial of service through string value parsing
Helm Vulnerable to denial of service through string value parsing
CVE-2022-3064High· 7.5go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents (CVE-2022-3064)
A flaw was found in go-yaml. This issue causes the consumption of excessive amounts of CPU or memory when attempting to parse a large or maliciously crafted YAML document.
CVE-2021-3563Critical· 9.1Openstack Keystone Incorrect Authorization vulnerability
Openstack Keystone Incorrect Authorization vulnerability
CVE-2022-36633High· 8.8PoCImproper token validation leading to code execution in Teleport
Improper token validation leading to code execution in Teleport
CVE-2022-25304High· 7.5Uncontrolled Resource Consumption in asyncua and opcua
Uncontrolled Resource Consumption in asyncua and opcua
CVE-2022-1930Medium· 5.9Regular expression denial of service in eth-account
Regular expression denial of service in eth-account
CVE-2022-38362High· 8.8Remote code execution in Apache Airflow Docker's Provider
Remote code execution in Apache Airflow Docker's Provider
CVE-2022-2822Low· 3.7OctoPrint does not have rate limiting on the login page
OctoPrint does not have rate limiting on the login page
CVE-2022-35930High· 7.1PolicyController before 0.2.1 may bypass attestation verification
PolicyController before 0.2.1 may bypass attestation verification
CVE-2021-32862Medium· 5.4nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
CVE-2022-35920High· 8.3sanic vulnerable to Path Traversal when using `app.static` if using encoded `%2F` URLs
sanic vulnerable to Path Traversal when using `app.static` if using encoded `%2F` URLs