Open Source Vulnerabilities

camaleon_cms

Camaleon CMS Stored Cross-site Scripting vulnerability

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento stored cross-site scripting vulnerability

publify_core

Cross site scripting in publify

com.liferay.portal:com.liferay.portal.impl, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.dxp.bom

Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use

apache-superset

Apache Superset Stored XSS on Dashboard markdown

Microsoft.ChakraCore

ChakraCore information disclosure vulnerability

org.mongodb:mongodb-driver, org.mongodb:mongodb-driver, org.mongodb:mongodb-driver-sync, org.mongodb:mongodb-driver-sync, org.mongodb:mongodb-driver-sync, org.mongodb:mongo-java-driver, org.mongodb:mongo-java-driver, org.mongodb:mongodb-driver-legacy, org.mongodb:mongodb-driver-legacy, org.mongodb:mongodb-driver-legacy, org.mongodb:mongodb-driver-legacy, org.mongodb:mongodb-driver-sync, org.mongodb:mongodb-driver-sync, org.mongodb:mongodb-driver-legacy

Improper Certificate Validation in MongoDB

moodle/moodle

Moodle Persistent Cross-site Scripting (XSS)

kibana

Kibana Sensitive Data Disclosure

apache-superset

Apache Superset OS Command Injection

org.keycloak:keycloak-authz-client

Keycloak code execution via UMA policy abuse

magento/project-community-edition, magento/community-edition, magento/community-edition, magento/community-edition, magento/community-edition

Magento stored cross-site scripting vulnerability in the customer address upload feature

org.codehaus.mevenide:netbeans

Improper Certificate Validation in Apache Netbeans

com.liferay.portal:release.portal.bom

Exposure of Resource to Wrong Sphere in Liferay Portal

atlassian-connect-express

Broken Authentication in Atlassian Connect Express

camaleon_cms

Camaleon CMS Insufficient Session Expiration vulnerability

mautic/core

Mautic stored Cross-site Scripting (XSS)

publify_core

Cross site scripting in publify

NuGet.Commands

NuGet Package Manager Tampering Vulnerability

@chainsafe/lodestar

AttesterSlashing number overflow

pyjwt

Key confusion through non-blocklisted public key formats

tensorflow, tensorflow-cpu, tensorflow-gpu, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu

Code injection in `saved_model_cli` in TensorFlow

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Incomplete validation in signal ops leads to crashes in TensorFlow

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Core dump when loading TFLite models with quantization in TensorFlow

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow

tensorflow, tensorflow-cpu, tensorflow-gpu

Heap buffer overflow due to incorrect hash function in TensorFlow

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Type confusion leading to `CHECK`-failure based denial of service in TensorFlow

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Undefined behavior when users supply invalid resource handles

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Missing validation results in undefined behavior in `SparseTensorDenseAdd

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Segfault due to missing support for quantized types

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Missing validation causes denial of service via `Conv3DBackpropFilterV2`

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Integer overflow in `SpaceToBatchND`

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Denial of service in `tf.ragged.constant` due to lack of validation

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Missing validation results in undefined behavior in `QuantizedConv2D`

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Missing validation causes denial of service via `LSTMBlockCell`

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Missing validation causes denial of service via `LoadAndRemapMatrix`

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Missing validation causes denial of service via `UnsortedSegmentJoin`

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Missing validation causes denial of service via `Conv3DBackpropFilterV2`

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Missing validation causes denial of service via `StagePeek`

tensorflow, tensorflow, tensorflow, tensorflow-cpu, tensorflow-cpu, tensorflow-cpu, tensorflow-gpu, tensorflow-gpu, tensorflow-gpu

Missing validation causes denial of service via `DeleteSessionTensor`

stdlib

Denial of service due to unchecked parameters in crypto/dsa