Medium
CVE-2022-41884
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 229
Reset filters
Medium
CVE-2022-35989
TensorFlow vulnerable to `CHECK` fail in `MaxPool`
Medium
CVE-2022-36014
TensorFlow vulnerable to null-dereference in `mlir::tfg::TFOp::nameAttr`
Medium
CVE-2022-36012
TensorFlow vulnerable to assertion fail on MLIR empty edge names
High
CVE-2022-36069
Poetry Argument Injection can lead to Local Code Execution
Medium
CVE-2022-29211
Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
High
CVE-2022-29208
Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Medium
CVE-2022-29205
Segfault due to missing support for quantized types
High
CVE-2020-28975
** DISPUTED ** svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model S
High
CVE-2019-12408
It was discovered that the C++ implementation (which underlies the R, Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null va
Medium
CVE-2022-29193
Missing validation causes `TensorSummaryV2` to crash
Medium
CVE-2014-4616
simplejson before 2.6.1 vulnerable to array index error
High
CVE-2017-12852
The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. An empty list or ndarray will stick into an infinite loop, which can allow attackers to cause a DoS attack.
High
CVE-2010-0667
MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain se
High
CVE-2022-0315
Use of insecure temporary file in Horovod
High
CVE-2022-23566
Out of bounds write in Tensorflow
High
CVE-2022-23561
Out of bounds write in TFLite
High
CVE-2022-23560
Read and Write outside of bounds in TensorFlow
High
CVE-2022-23558
Integer overflow in TFLite array creation
Medium
CVE-2022-23557
Division by zero in TFLite
High
CVE-2022-21727
Integer overflow in Tensorflow
Medium
CVE-2021-41496
Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative valu
High
CVE-2021-41495
Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attacks
High
CVE-2022-21734
`CHECK`-failures in Tensorflow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.