Alta
CVE-2022-23472
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 6.856
Restablecer filtros
Crítica
CVE-2022-24439
All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone
Baja
ghsa-ggrh-grj3-vfvw
Package discontinued because Bitly lowered the free quota
Alta
CVE-2022-46147
XBlock vulnerable to Cross-Site Scripting (XSS)
Crítica
CVE-2022-45907
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
Baja
CVE-2022-41954
Temporary File Information Disclosure vulnerability in MPXJ
Crítica
CVE-2022-2650
wger vulnerable to brute force attempts
Alta
CVE-2022-41131
OS Command Injection in Apache Airflow
Media
CVE-2022-40954
OS Command Injection in Apache Airflow
Crítica
CVE-2022-38649
OS Command Injection in Apache Airflow
Crítica
CVE-2022-40189
OS Command Injection in Apache Airflow
Alta
CVE-2022-43685
CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser account
Media
CVE-2022-41880
Tensorflow vulnerable to Out-of-Bounds Read
Baja
ghsa-cqvq-fvhr-v6hc
`CHECK` failure in `SobolSample` via missing validation
Baja
ghsa-xf83-q765-xm6m
`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode
Media
CVE-2022-41911
Invalid char to bool conversion when printing a tensor
Media
CVE-2022-41910
Heap overflow in `QuantizeAndDequantizeV2`
Media
CVE-2022-41909
Segfault in `CompositeTensorVariantToComponents`
Media
CVE-2022-41908
`CHECK` fail via inputs in `PyFunc`
Media
CVE-2022-41907
Overflow in `ResizeNearestNeighborGrad`
Alta
CVE-2022-41902
Out of bounds write in grappler in Tensorflow
Media
CVE-2022-41901
`CHECK_EQ` fail via input in `SparseMatrixNNZ`
Alta
CVE-2022-41900
FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess
Media
CVE-2022-41899
`CHECK` fail via inputs in `SdcaOptimizer`
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.