2022

fleet is an open source device management, built on osquery. Versions prior to 4.9.1 expose a limited ability to spoof S

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are

Tensorflow is an Open Source Machine Learning Framework. The `simplifyBroadcast` function in the MLIR-TFRT infrastructur

Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow can t

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `S

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `S

Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorFlow can produce a memory leak i

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `S

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `S

Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a den

Tensorflow is an Open Source Machine Learning Framework. During shape inference, TensorFlow can allocate a large vector

Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a den

Tensorflow is an Open Source Machine Learning Framework. If a graph node is invalid, TensorFlow can leak memory in the i

Tensorflow is an Open Source Machine Learning Framework. The implementation of `GetInitOp` is vulnerable to a crash caus

Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateOutputSiz

Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateTensorSiz

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorFlow can fail to specialize a ty

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a nul

Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial of service via assertion failure

Tensorflow is an Open Source Machine Learning Framework. When decoding a resource handle tensor from protobuf, a TensorF

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would trigger a divis

VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text wit

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by au

A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in

Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9.

The Embed Swagger WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping/sanitiza

The Fotobook WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping and the use o

An improper input validation vulnerability in go-attestation before 0.3.3 allows local users to provide a maliciously-fo

A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory lo

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.

XWiki is a generic wiki platform offering runtime services for applications built on top of it. When using default XWiki

An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and d

A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Rel

In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. T

An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at

A local unquoted search path security vulnerability has been identified in HPE Agentless Management Service for Windows

An out-of-bounds write vulnerability exists in the URL_decode functionality of Sealevel Systems, Inc. SeaConnect 370W v1

An information disclosure vulnerability exists in the Web Server functionality of Sealevel Systems, Inc. SeaConnect 370W

AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypt

options.c in atftp before 0.7.5 reads past the end of an array, and consequently discloses server-side /etc/group data t

Open Redirect vulnerability exists in SeedDMS 6.0.15 in out.Login.php, which llows remote malicious users to redirect us

A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which

A Buffer Overflow vulnerablity exists in VirusTotal YARA git commit: 605b2edf07ed8eb9a2c61ba22eb2e7c362f47ba7 via yr_set

Directory traversal in /northstar/Common/NorthFileManager/fileManagerObjects.jsp Northstar Technologies Inc NorthStar Cl

Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Management 6.3 all

A Cross Site Scripting (XSS) vulnerability exists in Codex before 1.4.0 via Notebook/Page name field, which allows malic

In Zammad 5.0.2, agents can configure "out of office" periods and substitute persons. If the substitute persons didn't h