2022

In Apache ActiveMQ Artemis prior to 2.20.0 or 2.19.1, an attacker could partially disrupt availability (DoS) through unc

A security out-of-bounds read information disclosure vulnerability in Trend Micro Worry-Free Business Security Server co

Twig is an open source template language for PHP. When in a sandbox mode, the `arrow` parameter of the `sort` filter mus

iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered

iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered

Wire webapp is a web client for the wire messaging protocol. In versions prior to 2022-01-27-production.0 expired epheme

fleet is an open source device management, built on osquery. Versions prior to 4.9.1 expose a limited ability to spoof S

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are

Tensorflow is an Open Source Machine Learning Framework. The TFG dialect of TensorFlow (MLIR) makes several assumptions

Tensorflow is an Open Source Machine Learning Framework. The `simplifyBroadcast` function in the MLIR-TFRT infrastructur

Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read

Tensorflow is an Open Source Machine Learning Framework. The `GraphDef` format in TensorFlow does not allow self recursi

Tensorflow is an Open Source Machine Learning Framework. A `GraphDef` from a TensorFlow `SavedModel` can be maliciously

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow can t

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `S

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vu

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `S

Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorFlow can produce a memory leak i

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a use after free behavior when decod

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `S

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `S

Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a den

Tensorflow is an Open Source Machine Learning Framework. During shape inference, TensorFlow can allocate a large vector

Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a den

Tensorflow is an Open Source Machine Learning Framework. If a graph node is invalid, TensorFlow can leak memory in the i

Tensorflow is an Open Source Machine Learning Framework. The implementation of `GetInitOp` is vulnerable to a crash caus

Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateOutputSiz

Tensorflow is an Open Source Machine Learning Framework. The implementation of `OpLevelCostEstimator::CalculateTensorSiz

Tensorflow is an Open Source Machine Learning Framework. There is a typo in TensorFlow's `SpecializeType` which results

Tensorflow is an Open Source Machine Learning Framework. The implementation of `AssignOp` can result in copying uninitia

Tensorflow is an Open Source Machine Learning Framework. Under certain scenarios, TensorFlow can fail to specialize a ty

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, TensorFlow might do a nul

Tensorflow is an Open Source Machine Learning Framework. TensorFlow is vulnerable to a heap OOB write in `Grappler`. The

Tensorflow is an Open Source Machine Learning Framework. An attacker can trigger denial of service via assertion failure

Tensorflow is an Open Source Machine Learning Framework. When decoding a resource handle tensor from protobuf, a TensorF

Tensorflow is an Open Source Machine Learning Framework. In multiple places, TensorFlow uses `tempfile.mktemp` to create

Tensorflow is an Open Source Machine Learning Framework. The implementation of `Range` suffers from integer overflows. T

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause a write o

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would allow limited r

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an intege

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an intege

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would trigger a divis

Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().

The affected product has a hardcoded private key available inside the project folder, which may allow an attacker to ach

VMware Cloud Foundation contains an information disclosure vulnerability due to logging of credentials in plain-text wit

A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that

A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, chan

A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by au

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing