2022

Adobe Bridge version 12.0.2 (and earlier) and 11.1.3 (and earlier) are affected by a Use After Free vulnerability that c

The Gettext override translations WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which

The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege user

The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation

The Scroll To Top WordPress plugin before 1.4.1 does not escape some of its settings, which could allow high privilege u

The Float to Top Button WordPress plugin through 2.3.6 does not escape some of its settings, which could allow high priv

The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could a

The WordPress Ping Optimizer WordPress plugin before 2.35.1.3.0 does not have CSRF check in place when updating its sett

The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a websit

A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to e

An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields.

An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize.

The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper inp

drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel me

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5.

The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks. This might allow an

Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.9.0.

Improper Authentication in GitHub repository snipe/snipe-it prior to 6.0.10.

some-natalie/ghas-to-csv (GitHub Advanced Security to CSV) is a GitHub action which scrapes the GitHub Advanced Security

Nextcloud Talk is an open source chat, video & audio calls client for the Nextcloud platform. In affected versions an at

TensorFlow is an open source platform for machine learning. When converting transposed convolutions using per-channel we

TensorFlow is an open source platform for machine learning. If `Requantize` is given `input_min`, `input_max`, `requeste

TensorFlow is an open source platform for machine learning. When `tensorflow::full_type::SubstituteFromAttrs` receives a

TensorFlow is an open source platform for machine learning. When `RangeSize` receives values that do not fit into an `in

TensorFlow is an open source platform for machine learning. When `mlir::tfg::TFOp::nameAttr` receives null type list att

TensorFlow is an open source platform for machine learning. When `mlir::tfg::GraphDefImporter::ConvertNodeDef` tries to

TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is giv

TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is giv

TensorFlow is an open source platform for machine learning. When `tf.quantization.fake_quant_with_min_max_vars_gradient`

TensorFlow is an open source platform for machine learning. When `tf.random.gamma` receives large input shape and rates,

TensorFlow is an open source platform for machine learning. When `RandomPoissonV2` receives large input shape and rates,

TensorFlow is an open source platform for machine learning. When `Unbatch` receives a nonscalar input `id`, it gives a `

TensorFlow is an open source platform for machine learning. When `DrawBoundingBoxes` receives an input `boxes` that is n

TensorFlow is an open source platform for machine learning. When `mlir::tfg::ConvertGenericFunctionToFunctionDef` is giv

TensorFlow is an open source platform for machine learning. When `Conv2DBackpropInput` receives empty `out_backprop` inp

TensorFlow is an open source platform for machine learning. If `EmptyTensorList` receives an input `element_shape` with

TensorFlow is an open source platform for machine learning. If `tf.sparse.cross` receives an input `separator` that is n

TensorFlow is an open source platform for machine learning. If `Conv2D` is given empty `input` and the `filter` and `pad

TensorFlow is an open source platform for machine learning. When `AudioSummaryV2` receives an input `sample_rate` with m

TensorFlow is an open source platform for machine learning. When `CollectiveGather` receives an scalar input `input`, it

TensorFlow is an open source platform for machine learning. When `SetSize` receives an input `set_shape` that is not a 1

TensorFlow is an open source platform for machine learning. When `TensorListFromTensor` receives an `element_shape` of a

TensorFlow is an open source platform for machine learning. When `TensorListScatter` and `TensorListScatterV2` receive a

JasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in libjasper/base/jas_image.c.

Tesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to Authentication Bypass by spoofing.

Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts.

Craft CMS 4.2.0.1 is vulnerable to stored a cross-site scripting (XSS) via /admin/settings/fields page.

TensorFlow is an open source platform for machine learning. If `QuantizeAndDequantizeV3` is given a nonscalar `num_bits`

TensorFlow is an open source platform for machine learning. If `FakeQuantWithMinMaxVarsPerChannel` is given `min` or `ma

TensorFlow is an open source platform for machine learning. If `RaggedTensorToVariant` is given a `rt_nested_splits` lis