Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CVE-2022-35973
    Fix available
    Packages

    Summary

    Segfault in `QuantizedMatMul` in TensorFlow

    Published
    16 Sept 2022
    GHSA-xhmf-mmv2-4hhx
    Fix available
    Packages

    github.com/pandatix/go-cvss

    Summary

    Go-CVSS has Out-of-bounds Read vulnerability in ParseVector function

    Published
    16 Sept 2022
    CVE-2022-37258
    No fix available
    Packages

    Summary

    Published
    16 Sept 2022
    GHSA-f4w6-h4f5-wx45
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK` failure in tf.reshape via overflows

    Published
    16 Sept 2022
    CVE-2022-37251
    No fix available
    Packages

    Summary

    Published
    16 Sept 2022
    GHSA-97p7-w86h-vcf9
    Fix available
    Packages

    tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

    Summary

    TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation

    Published
    16 Sept 2022
    CVE-2022-35971
    Fix available
    Packages

    Summary

    `CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35969
    Fix available
    Packages

    Summary

    `CHECK` fail in `Conv2DBackpropInput` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35970
    Fix available
    Packages

    Summary

    Segfault in `QuantizedInstanceNorm` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35968
    Fix available
    Packages

    Summary

    `CHECK` fail in `AvgPoolGrad` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35966
    Fix available
    Packages

    Summary

    Segfault in `QuantizedAvgPool` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35967
    Fix available
    Packages

    Summary

    Segfault in `QuantizedAdd` in TensorFlow

    Published
    16 Sept 2022
    GHSA-x996-7qh9-7ff7
    No fix available
    Packages

    indy-node

    Summary

    Hyperledger indy-node vulnerable to denial of service

    Published
    16 Sept 2022
    CVE-2022-37247
    Fix available
    Packages

    Summary

    Published
    16 Sept 2022
    GHSA-xx9w-464f-7h6f
    Fix available
    Packages

    github.com/goharbor/harbor, github.com/goharbor/harbor, github.com/goharbor/harbor

    Summary

    Harbor fails to validate the user permissions when updating a robot account

    Published
    16 Sept 2022
    CVE-2022-35964
    Fix available
    Packages

    Summary

    Segfault in `BlockLSTMGradV2` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35965
    Fix available
    Packages

    Summary

    Segfault in `LowerBound` and `UpperBound` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-40755
    No fix available
    Packages

    Summary

    Published
    16 Sept 2022
    CVE-2022-38611
    No fix available
    Packages

    Summary

    Published
    16 Sept 2022
    CVE-2020-25491
    No fix available
    Packages

    Summary

    Published
    16 Sept 2022
    CVE-2022-35963
    Fix available
    Packages

    Summary

    `CHECK` failures in `FractionalAvgPoolGrad` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35960
    Fix available
    Packages

    Summary

    `CHECK` failure in `TensorListReserve` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35959
    Fix available
    Packages

    Summary

    `CHECK` failures in `AvgPool3DGrad` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35952
    Fix available
    Packages

    Summary

    `CHECK` failures in `UnbatchGradOp` in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35940
    Fix available
    Packages

    Summary

    Int overflow in `RaggedRangeOp` in Tensoflow

    Published
    16 Sept 2022
    CVE-2022-35941
    Fix available
    Packages

    Summary

    `CHECK` failure in `AvgPoolOp` in Tensorflow

    Published
    16 Sept 2022
    CVE-2022-35937
    Fix available
    Packages

    Summary

    OOB read in `Gather_nd` op in TensorFlow Lite

    Published
    16 Sept 2022
    CVE-2022-35939
    Fix available
    Packages

    Summary

    Out of bounds write in `scatter_nd` op in TensorFlow Lite

    Published
    16 Sept 2022
    MGASA-2022-0338
    Fix available
    Packages

    mediawiki

    Summary

    Updated mediawiki packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0337
    Fix available
    Packages

    libtiff

    Summary

    Updated libtiff packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0336
    Fix available
    Packages

    wireshark

    Summary

    Updated wireshark packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0335
    Fix available
    Packages

    libtar

    Summary

    Updated libtar packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0334
    Fix available
    Packages

    ostree

    Summary

    Updated ostree packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0333
    Fix available
    Packages

    curl

    Summary

    Updated curl packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0332
    Fix available
    Packages

    SDL12

    Summary

    Updated SDL12 packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0331
    Fix available
    Packages

    python-lxml

    Summary

    Updated python-lxml packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0330
    Fix available
    Packages

    gimp

    Summary

    Updated gimp packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0329
    Fix available
    Packages

    schroot

    Summary

    Updated schroot packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0328
    Fix available
    Packages

    zlib

    Summary

    Updated zlib packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0327
    Fix available
    Packages

    dpkg

    Summary

    Updated dpkg packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0326
    Fix available
    Packages

    sdl2

    Summary

    Updated sdl2 packages fix security vulnerability

    Published
    16 Sept 2022
    MGASA-2022-0325
    Fix available
    Packages

    freecad

    Summary

    Updated freecad packages fix security vulnerability

    Published
    16 Sept 2022
    GHSA-8c6p-v837-77f6
    Fix available
    Packages

    github.com/goharbor/harbor, github.com/goharbor/harbor, github.com/goharbor/harbor

    Summary

    Harbor fails to validate the user permissions when updating tag immutability policies

    Published
    16 Sept 2022
    GHSA-jf8p-3vjh-pq94
    Fix available
    Packages

    github.com/goharbor/harbor, github.com/goharbor/harbor, github.com/goharbor/harbor

    Summary

    Harbor fails to validate the user permissions when viewing Webhook policies

    Published
    16 Sept 2022
    CVE-2022-35935
    Fix available
    Packages

    Summary

    `CHECK` failure in `SobolSample` via missing validation in TensorFlow

    Published
    16 Sept 2022
    CVE-2022-35938
    Fix available
    Packages

    Summary

    OOB read in `Gather_nd` op in TensorFlow Lite Micro

    Published
    16 Sept 2022
    CVE-2022-35934
    Fix available
    Packages

    Summary

    `CHECK` failure in tf.reshape in Tensorflow

    Published
    16 Sept 2022
    GHSA-3637-v6vq-xqqw
    Fix available
    Packages

    github.com/goharbor/harbor, github.com/goharbor/harbor, github.com/goharbor/harbor

    Summary

    Harbor fails to validate the user permissions when updating tag retention policies

    Published
    16 Sept 2022
    GHSA-28m8-9j7v-x499
    Fix available
    Packages

    tauri

    Summary

    Tauri's readDir Endpoint Scope can be Bypassed With Symbolic Links

    Published
    16 Sept 2022
    GHSA-9xgj-fcgf-x6mw
    Fix available
    Packages

    poetry

    Summary

    Poetry Argument Injection can lead to Local Code Execution

    Published
    16 Sept 2022