Tagged “pip”
CVEs tagged pip, newest first.
5542 CVEsRSS
CVE-2020-26268Medium· 4.4Write to immutable memory region in TensorFlow
Write to immutable memory region in TensorFlow
CVE-2020-26267Medium· 4.4Lack of validation in data format attributes in TensorFlow
Lack of validation in data format attributes in TensorFlow
CVE-2020-26266Medium· 4.4Uninitialized memory access in TensorFlow
Uninitialized memory access in TensorFlow
CVE-2020-26271Medium· 4.4Heap out of bounds access in MakeEdge in TensorFlow
Heap out of bounds access in MakeEdge in TensorFlow
CVE-2020-26270Medium· 4.4CHECK-fail in LSTM with zero-length input in TensorFlow
CHECK-fail in LSTM with zero-length input in TensorFlow
CVE-2020-26257Medium· 6.5Denial of service attack via incorrect parameters in Matrix Synapse
Denial of service attack via incorrect parameters in Matrix Synapse
CVE-2020-26261High· 7.9user-readable api tokens in systemd units for JupyterHub
user-readable api tokens in systemd units for JupyterHub
CVE-2020-26249High· 7.7Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability
Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability
CVE-2020-26244Medium· 6.8Multiple cryptographic issues in Python oic
Multiple cryptographic issues in Python oic
CVE-2020-29128Critical· 9.8XXE in petl
XXE in petl
CVE-2020-26250Medium· 6.3Base class whitelist configuration ignored in OAuthenticator
Base class whitelist configuration ignored in OAuthenticator
CVE-2020-26243High· 7.5Memory leak in Nanopb
Memory leak in Nanopb
CVE-2020-26232Medium· 4.1Open redirect in Jupyter Server
Open redirect in Jupyter Server
CVE-2020-26890High· 7.5Denial of service attack due to invalid JSON
Denial of service attack due to invalid JSON
CVE-2020-26215Medium· 4.4Open redirect in Jupyter Notebook
Open redirect in Jupyter Notebook
CVE-2020-15266Low· 3.7Float cast overflow undefined behavior
Float cast overflow undefined behavior
CVE-2020-15265Medium· 5.9Segfault in `tf.quantization.quantize_and_dequantize`
Segfault in `tf.quantization.quantize_and_dequantize`
CVE-2020-25074High· 8.8MoinMoin vulnerable to remote code execution via cache action
MoinMoin vulnerable to remote code execution via cache action
CVE-2020-15275High· 8.7malicious SVG attachment causing stored XSS vulnerability
malicious SVG attachment causing stored XSS vulnerability
CVE-2020-26214Critical· 9.1PoCLDAP authentication bypass with empty password
LDAP authentication bypass with empty password
CVE-2020-15278High· 7.7Unauthorized privilege escalation in Mod module
Unauthorized privilege escalation in Mod module
CVE-2020-15271Critical· 9.3Markdown-supplied Shell Command Execution
Markdown-supplied Shell Command Execution
CVE-2020-26891Medium· 6.1Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint
Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint
CVE-2020-15239Low· 3.5Directory Traversal vulnerability in GET/PUT allows attackers to Disclose Information or Write Files via a crafted GET/PUT request
Directory Traversal vulnerability in GET/PUT allows attackers to Disclose Information or Write Files via a crafted GET/PUT request
CVE-2020-15225High· 7.5Potential DoS with NumberFilter conversion to integer values.
Potential DoS with NumberFilter conversion to integer values.
CVE-2020-15207High· 8.7Segfault and data corruption in tensorflow-lite
Segfault and data corruption in tensorflow-lite
CVE-2020-15198Medium· 5.4Heap buffer overflow in Tensorflow
Heap buffer overflow in Tensorflow
CVE-2020-15203High· 7.5Denial of Service in Tensorflow
Denial of Service in Tensorflow
CVE-2020-15210Medium· 6.5Segmentation fault in tensorflow-lite
Segmentation fault in tensorflow-lite
CVE-2020-15200Medium· 5.9Segfault in Tensorflow
Segfault in Tensorflow