Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 220
Restablecer filtrosMissing validation causes `TensorSummaryV2` to crash
simplejson before 2.6.1 vulnerable to array index error
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain se
Use of insecure temporary file in Horovod
Out of bounds write in Tensorflow
Out of bounds write in TFLite
Read and Write outside of bounds in TensorFlow
Integer overflow in TFLite array creation
Division by zero in TFLite
Integer overflow in Tensorflow
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative valu
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks
`CHECK`-failures in Tensorflow
Integer overflows in Tensorflow
Out of bounds read in Tensorflow
Out of bounds read in Tensorflow
NumPy Buffer Overflow (Disputed)
Heap buffer overflow in `Transpose`
Incomplete validation of shapes in multiple TF ops
Reference binding to `nullptr` in `tf.ragged.cross`
Heap OOB read in `tf.ragged.cross`
Heap OOB in shape inference for `QuantizeV2`
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.