Tagged “osv”
CVEs tagged osv, newest first.
7203 CVEsRSS
CVE-2022-29204Medium· 5.5Missing validation causes denial of service via `Conv3DBackpropFilterV2`
Missing validation causes denial of service via `Conv3DBackpropFilterV2`
CVE-2022-29197Medium· 5.5Missing validation causes denial of service via `UnsortedSegmentJoin`
Missing validation causes denial of service via `UnsortedSegmentJoin`
CVE-2022-29210Medium· 5.5Heap buffer overflow due to incorrect hash function in TensorFlow
Heap buffer overflow due to incorrect hash function in TensorFlow
CVE-2022-29194Medium· 5.5Missing validation causes denial of service via `DeleteSessionTensor`
Missing validation causes denial of service via `DeleteSessionTensor`
CVE-2022-29195Medium· 5.5Missing validation causes denial of service via `StagePeek`
Missing validation causes denial of service via `StagePeek`
CVE-2022-29192Medium· 5.5Missing validation crashes `QuantizeAndDequantizeV4Grad`
Missing validation crashes `QuantizeAndDequantizeV4Grad`
CVE-2022-29191Medium· 5.5Missing validation causes denial of service via `GetSessionTensor`
Missing validation causes denial of service via `GetSessionTensor`
CVE-2019-13594High· 8.8Mirumee Saleor CSRF Protection Disabled
Mirumee Saleor CSRF Protection Disabled
CVE-2022-29209Medium· 5.5Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
CVE-2022-29202Medium· 5.5Denial of service in `tf.ragged.constant` due to lack of validation
Denial of service in `tf.ragged.constant` due to lack of validation
CVE-2019-6446Critical· 9.8PoCNumpy Deserialization of Untrusted Data
Numpy Deserialization of Untrusted Data
CVE-2020-35459High· 7.8ClusterLabs crmsh vulnerable to shell code injection
ClusterLabs crmsh vulnerable to shell code injection
CVE-2022-29212Medium· 5.5Core dump when loading TFLite models with quantization in TensorFlow
Core dump when loading TFLite models with quantization in TensorFlow
CVE-2022-29216High· 7.8Code injection in `saved_model_cli` in TensorFlow
Code injection in `saved_model_cli` in TensorFlow
CVE-2022-29207Medium· 5.5Undefined behavior when users supply invalid resource handles
Undefined behavior when users supply invalid resource handles
CVE-2022-29196Medium· 5.5Missing validation causes denial of service via `Conv3DBackpropFilterV2`
Missing validation causes denial of service via `Conv3DBackpropFilterV2`
CVE-2019-10047Medium· 5.4PyDio Stored XSS Vulnerability
PyDio Stored XSS Vulnerability
CVE-2022-29213Medium· 5.5Incomplete validation in signal ops leads to crashes in TensorFlow
Incomplete validation in signal ops leads to crashes in TensorFlow
CVE-2022-29205Medium· 5.5Segfault due to missing support for quantized types
Segfault due to missing support for quantized types
CVE-2021-38155High· 7.5OpenStack Keystone allows information disclosure during account locking
OpenStack Keystone allows information disclosure during account locking
CVE-2022-29200Medium· 5.5Missing validation causes denial of service via `LSTMBlockCell`
Missing validation causes denial of service via `LSTMBlockCell`
CVE-2022-29208High· 7.1Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
CVE-2022-29193Medium· 5.5Missing validation causes `TensorSummaryV2` to crash
Missing validation causes `TensorSummaryV2` to crash
CVE-2015-9543Low· 3.3OpenStack Nova can leak consoleauth token into log files
OpenStack Nova can leak consoleauth token into log files
CVE-2022-24904Medium· 4.3Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server
Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server
CVE-2022-31259Critical· 9.8Access control bypass in beego
Access control bypass in beego
CVE-2022-31100NonePanic due to improper UTF-8 indexing
Panic due to improper UTF-8 indexing
CVE-2022-31099NoneStack overflow during recursive expression parsing
Stack overflow during recursive expression parsing
CVE-2022-30765Critical· 9.8SQL injection in calibreweb
SQL injection in calibreweb
CVE-2014-3840MediumPoCMayan EDMS multiple cross-site scripting (XSS) vulnerabilities
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities