Tagged “pip”
CVEs tagged pip, newest first.
5541 CVEsRSS
CVE-2023-25662High· 7.5TensorFlow vulnerable to integer overflow in EditDistance
TensorFlow vulnerable to integer overflow in EditDistance
CVE-2023-25676High· 7.5TensorFlow has null dereference on ParallelConcat with XLA
TensorFlow has null dereference on ParallelConcat with XLA
CVE-2023-25664High· 7.5TensorFlow has Heap-buffer-overflow in AvgPoolGrad
TensorFlow has Heap-buffer-overflow in AvgPoolGrad
CVE-2023-25658High· 7.5TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
CVE-2023-25663High· 7.5TensorFlow has Null Pointer Error in TensorArrayConcatV2
TensorFlow has Null Pointer Error in TensorArrayConcatV2
CVE-2023-25673High· 7.5TensorFlow has Floating Point Exception in TensorListSplit with XLA
TensorFlow has Floating Point Exception in TensorListSplit with XLA
CVE-2023-27579High· 7.5TensorFlow has Floating Point Exception in TFLite in conv kernel
TensorFlow has Floating Point Exception in TFLite in conv kernel
CVE-2023-25665High· 7.5TensorFlow has Null Pointer Error in SparseSparseMaximum
TensorFlow has Null Pointer Error in SparseSparseMaximum
CVE-2023-25670High· 7.5TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
CVE-2022-3146Medium· 5.5tripleo-ansible may disclose important configuration details from an OpenStack deployment
tripleo-ansible may disclose important configuration details from an OpenStack deployment
CVE-2022-3101Medium· 5.5tripleo-ansible may disclose important configuration details from an OpenStack deployment
tripleo-ansible may disclose important configuration details from an OpenStack deployment
CVE-2023-28117High· 7.6Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
CVE-2023-27586Critical· 9.9CairoSVG improperly processes SVG files loaded from external resources
CairoSVG improperly processes SVG files loaded from external resources
CVE-2017-20182Medium· 6.1Cross-site Scripting in django-ajax-utilities
Cross-site Scripting in django-ajax-utilities
CVE-2022-3277Medium· 6.5openstack-neutron uncontrolled resource consumption flaw
openstack-neutron uncontrolled resource consumption flaw
CVE-2023-27522High· 7.5httpd: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522)
An HTTP Response Smuggling vulnerability was found in the Apache HTTP Server via mod_proxy_uwsgi. This security issue occurs when special characters in the origin response header can truncate or split the response forwarded to the client.
CVE-2023-22432Medium· 6.1PoCOpen redirect in web2py
Open redirect in web2py
CVE-2023-26051Medium· 6.5Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
CVE-2023-26052Low· 3.7Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions
Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions
CVE-2023-22738Medium· 6.5vantage6 vulnerable to Improper Preservation of Permissions
vantage6 vulnerable to Improper Preservation of Permissions
CVE-2023-23929High· 8.8vantage6 refresh tokens do not expire
vantage6 refresh tokens do not expire
CVE-2022-39228Medium· 6.5vantage6 vulnerable to Observable Response Discrepancy
vantage6 vulnerable to Observable Response Discrepancy
CVE-2023-25696Critical· 9.8Apache Airflow Hive Provider Improper Input Validation vulnerability
Apache Airflow Hive Provider Improper Input Validation vulnerability
CVE-2023-25693Critical· 9.8Apache Airflow Sqoop Provider Improper Input Validation vulnerability
Apache Airflow Sqoop Provider Improper Input Validation vulnerability
CVE-2023-25691Critical· 9.8Apache Airflow Google Provider Improper Input Validation vulnerability
Apache Airflow Google Provider Improper Input Validation vulnerability
CVE-2023-25956High· 7.5Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information
Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information
CVE-2023-25692High· 7.5Apache Airflow Google Provider Improper Input Validation vulnerability
Apache Airflow Google Provider Improper Input Validation vulnerability
CVE-2023-25823Medium· 5.4Update share links to use FRP instead of SSH tunneling
Update share links to use FRP instead of SSH tunneling
CVE-2023-0860High· 7.5PoCImproper Restriction of Excessive Authentication Attempts in modoboa
Improper Restriction of Excessive Authentication Attempts in modoboa
CVE-2023-25577High· 7.5High resource usage when parsing multipart form data with many fields
High resource usage when parsing multipart form data with many fields