Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 427
Restablecer filtrosTensorFlow vulnerable to `CHECK` failure in tf.reshape via overflows
TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation
TensorFlow vulnerable to `CHECK` fail in `tf.sparse.cross`
TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`
`CHECK` failure in depthwise ops via overflows
Code injection in `saved_model_cli` in TensorFlow
Incomplete validation in signal ops leads to crashes in TensorFlow
Core dump when loading TFLite models with quantization in TensorFlow
Segfault if `tf.histogram_fixed_width` is called with NaN values in TensorFlow
Heap buffer overflow due to incorrect hash function in TensorFlow
Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Undefined behavior when users supply invalid resource handles
Missing validation results in undefined behavior in `SparseTensorDenseAdd
Segfault due to missing support for quantized types
Missing validation causes denial of service via `Conv3DBackpropFilterV2`
Integer overflow in `SpaceToBatchND`
Denial of service in `tf.ragged.constant` due to lack of validation
Missing validation results in undefined behavior in `QuantizedConv2D`
Missing validation causes denial of service via `LSTMBlockCell`
Missing validation causes denial of service via `LoadAndRemapMatrix`
Missing validation causes denial of service via `SparseTensorToCSRSparseMatrix`
Missing validation causes denial of service via `UnsortedSegmentJoin`
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.