Critical
CVE-2022-46742
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,359
Reset filters
High
CVE-2022-23472
Passeo uses insecure random number generator
Low
ghsa-ggrh-grj3-vfvw
Package discontinued because Bitly lowered the free quota
High
CVE-2022-41131
OS Command Injection in Apache Airflow
Medium
CVE-2022-40954
OS Command Injection in Apache Airflow
Critical
CVE-2022-38649
OS Command Injection in Apache Airflow
Critical
CVE-2022-40189
OS Command Injection in Apache Airflow
Medium
CVE-2022-41880
Tensorflow vulnerable to Out-of-Bounds Read
Low
ghsa-cqvq-fvhr-v6hc
`CHECK` failure in `SobolSample` via missing validation
Low
ghsa-xf83-q765-xm6m
`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode
Medium
CVE-2022-41908
`CHECK` fail via inputs in `PyFunc`
Medium
CVE-2022-41901
`CHECK_EQ` fail via input in `SparseMatrixNNZ`
Medium
CVE-2022-41899
`CHECK` fail via inputs in `SdcaOptimizer`
Medium
CVE-2022-41898
`CHECK` fail via inputs in `SparseFillEmptyRowsGrad`
Medium
CVE-2022-41897
`FractionalMaxPoolGrad` Heap out of bounds read
Medium
CVE-2022-41896
`tf.raw_ops.Mfcc` crashes
Medium
CVE-2022-41895
`MirrorPadGrad` heap out of bounds read
High
CVE-2022-41894
Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
Medium
CVE-2022-41893
`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
Medium
CVE-2022-41891
Segfault in `tf.raw_ops.TensorListConcat`
Medium
CVE-2022-41890
`CHECK` fail in `BCast` overflow
Medium
CVE-2022-41889
Segfault via invalid attributes in `pywrap_tfe_src.cc`
Medium
CVE-2022-41884
Seg fault in `ndarray_tensor_bridge` due to zero and large inputs
Medium
CVE-2022-45402
In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.