Medium
CVE-2022-41898
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,856
Reset filters
Medium
CVE-2022-41897
`FractionalMaxPoolGrad` Heap out of bounds read
Medium
CVE-2022-41896
`tf.raw_ops.Mfcc` crashes
Medium
CVE-2022-41895
`MirrorPadGrad` heap out of bounds read
High
CVE-2022-41894
Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
Medium
CVE-2022-41893
`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
Medium
CVE-2022-41891
Segfault in `tf.raw_ops.TensorListConcat`
Medium
CVE-2022-41890
`CHECK` fail in `BCast` overflow
Medium
CVE-2022-41889
Segfault via invalid attributes in `pywrap_tfe_src.cc`
Medium
CVE-2022-41888
FPE in `tf.image.generate_bounding_box_proposals`
Medium
CVE-2022-41887
Overflow in `tf.keras.losses.poisson`
Medium
CVE-2022-41886
Overflow in `ImageProjectiveTransformV2`
Medium
CVE-2022-41885
Overflow in `FusedResizeAndPadConv2D`
Medium
CVE-2022-41884
Seg fault in `ndarray_tensor_bridge` due to zero and large inputs
Medium
CVE-2022-41883
Out of bounds segmentation fault due to unequal op inputs in Tensorflow
High
CVE-2022-43171
LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind
Low
CVE-2022-4018
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
High
CVE-2022-3362
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Medium
CVE-2022-45402
In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint.
High
CVE-2022-27949
A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for tasks which were not executed (for example when they were depending on past and prev
High
CVE-2022-40127
A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apach
High
CVE-2022-45199
Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
High
CVE-2022-45198
Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
High
CVE-2022-41905
Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.