Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,334
Reset filtersIncomplete validation in boosted trees code
FPE in `ParallelConcat`
Incomplete validation of shapes in multiple TF ops
Heap OOB in `SparseBinCount`
`SparseFillEmptyRows` heap OOB
Heap OOB in `FusedBatchNorm` kernels
Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
Null pointer exception when `Exit` node is not preceded by `Enter` op
Null pointer exception in `DeserializeSparse`
Reference binding to `nullptr` in `tf.ragged.cross`
Heap OOB read in `tf.ragged.cross`
Heap OOB in shape inference for `QuantizeV2`
Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops
Missing validation during checkpoint loading
Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`
Incomplete validation in `tf.summary.create_file_writer`
Overflow/crash in `tf.image.resize` when size is large
Overflow/crash in `tf.tile` when tiling tensor is large
Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes
Crash in `tf.math.segment_*` operations
Cross-site scripting vulnerability in TinyMCE plugins
Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui
Maliciously Crafted Model Archive Can Lead To Arbitrary File Write
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.