Critical
CVE-2022-24439
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Low
ghsa-ggrh-grj3-vfvw
Package discontinued because Bitly lowered the free quota
High
CVE-2022-46147
XBlock vulnerable to Cross-Site Scripting (XSS)
Critical
CVE-2022-45907
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
Low
CVE-2022-41954
Temporary File Information Disclosure vulnerability in MPXJ
Critical
CVE-2022-2650
wger vulnerable to brute force attempts
High
CVE-2022-41131
OS Command Injection in Apache Airflow
Medium
CVE-2022-40954
OS Command Injection in Apache Airflow
Critical
CVE-2022-38649
OS Command Injection in Apache Airflow
Critical
CVE-2022-40189
OS Command Injection in Apache Airflow
High
CVE-2022-43685
CKAN through 2.9.6 account takeovers by unauthenticated users when an existing user id is sent via an HTTP POST request. This allows a user to take over an existing account including superuser account
Medium
CVE-2022-41880
Tensorflow vulnerable to Out-of-Bounds Read
Low
ghsa-cqvq-fvhr-v6hc
`CHECK` failure in `SobolSample` via missing validation
Low
ghsa-xf83-q765-xm6m
`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode
Medium
CVE-2022-41911
Invalid char to bool conversion when printing a tensor
Medium
CVE-2022-41910
Heap overflow in `QuantizeAndDequantizeV2`
Medium
CVE-2022-41909
Segfault in `CompositeTensorVariantToComponents`
Medium
CVE-2022-41908
`CHECK` fail via inputs in `PyFunc`
Medium
CVE-2022-41907
Overflow in `ResizeNearestNeighborGrad`
High
CVE-2022-41902
Out of bounds write in grappler in Tensorflow
Medium
CVE-2022-41901
`CHECK_EQ` fail via input in `SparseMatrixNNZ`
High
CVE-2022-41900
FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess
Medium
CVE-2022-41899
`CHECK` fail via inputs in `SdcaOptimizer`
Medium
CVE-2022-41898
`CHECK` fail via inputs in `SparseFillEmptyRowsGrad`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.