The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge…

▾ Abyssalextended_keccak_code_package_project · extended_keccak_code_packageEPSS 7.4%via NVD

CVE-2022-41547High· 7.5

4y ago

MobSF allows attackers to read arbitrary files via a crafted HTTP request

▾ Twilightmobsf · mobsfEPSS 1.5%via OSV

CVE-2022-42906High· 7.8

4y ago

Powerline Gitstatus vulnerable to arbitrary code execution

▾ Twilightpowerline-gitstatus · powerline-gitstatusEPSS 0.48%via OSV

CVE-2020-26269Critical· 9.1

4y ago

TensorFlow vulnerable to heap out of bounds read in filesystem glob matching

▾ Midnighttensorflow · tensorflowEPSS 0.70%via OSV

CVE-2021-23385Medium· 6.1

4y ago

Flask-Security vulnerable to Open Redirect

▾ Sunlitflask-security · flask-securityEPSS 1.2%via OSV

CVE-2022-39254High· 8.6

4y ago

When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

▾ Twilightmatrix-nio · matrix-nioEPSS 0.68%via OSV

CVE-2022-3355Medium· 5.4

4y ago

Inventree vulnerable to Stored Cross-site Scripting

▾ Sunlitinventree · inventreeEPSS 0.87%via OSV

CVE-2022-3290High· 7.5

4y ago

rdiffweb's unlimited username field length can lead to DoS

▾ Twilightrdiffweb · rdiffwebEPSS 0.89%via OSV

Tagged “pip”

`CHECK_EQ` fail via input in `SparseMatrixNNZ`

Heap overflow in `QuantizeAndDequantizeV2`

`FractionalMaxPoolGrad` Heap out of bounds read

Out of bounds write in grappler in Tensorflow

Overflow in `tf.keras.losses.poisson`

Overflow in `FusedResizeAndPadConv2D`

FPE in `tf.image.generate_bounding_box_proposals`

`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`

Segfault in `tf.raw_ops.TensorListConcat`

Overflow in `ImageProjectiveTransformV2`

Overflow in `ResizeNearestNeighborGrad`

`CHECK` fail via inputs in `SdcaOptimizer`

pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

Lin CMS vulnerable to Improper Authentication

snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

cleo is vulnerable to Regular Expression Denial of Service (ReDoS)

Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack

acryl-datahub missing JWT signature check

OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions

Ansible leaks password to logs

Twisted vulnerable to NameVirtualHost Host header injection

Plaintext storage of tokens in pulp_ansible

The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties

MobSF allows attackers to read arbitrary files via a crafted HTTP request

Powerline Gitstatus vulnerable to arbitrary code execution

TensorFlow vulnerable to heap out of bounds read in filesystem glob matching

Flask-Security vulnerable to Open Redirect

When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

Inventree vulnerable to Stored Cross-site Scripting

rdiffweb's unlimited username field length can lead to DoS