| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-23586 | 4.0 | Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a denial of service by altering a `SavedModel` such that assertions in `function.cc` would be falsified and crash the Python interpreter. The fix will be included in | 2022-02-10 17:33:00 | 2022-02-04 23:15:00 |
| CVE-2022-23585 | 4.0 | Tensorflow is an Open Source Machine Learning Framework. When decoding PNG images TensorFlow can produce a memory leak if the image is invalid. After calling `png::CommonInitDecode(..., &decode)`, the `decode` value contains allocated buffers which c | 2022-02-10 17:32:00 | 2022-02-04 23:15:00 |
| CVE-2022-23584 | 4.0 | Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a use after free behavior when decoding PNG images. After `png::CommonFreeDecode(&decode)` gets called, the values of `decode.width` and `decode.height` are in an uns | 2022-02-10 17:23:00 | 2022-02-04 23:15:00 |
| CVE-2021-35479 | 3.5 | Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log function through the affected pp parameter. This affects users who open a crafted link or third-party web page. | 2022-02-10 17:06:00 | 2021-07-30 14:15:00 |
| CVE-2021-38148 | 7.5 | Obsidian before 0.12.12 does not require user confirmation for non-http/https URLs. | 2022-02-10 17:05:00 | 2021-08-07 03:15:00 |
| CVE-2021-35478 | 3.5 | Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page. | 2022-02-10 17:05:00 | 2021-07-30 14:15:00 |
| CVE-2009-1270 | 7.8 | libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service (infinite loop) via a crafted TAR file that causes (1) clamd and (2) clamscan to hang. | 2022-02-10 16:25:00 | 2009-04-08 16:30:00 |
| CVE-2009-3856 | 4.3 | Cross-site scripting (XSS) vulnerability in the default URI in news/ in Twilight CMS before 4.1 allows remote attackers to inject arbitrary web script or HTML via the calendar parameter. NOTE: some of these details are obtained from third party info | 2022-02-10 16:21:00 | 2009-11-04 17:30:00 |
| CVE-2022-22833 | 5.0 | An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request. | 2022-02-10 16:19:00 | 2022-02-06 22:15:00 |
| CVE-2022-23571 | 4.0 | Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments, if the tensors have an invalid `dtype | 2022-02-10 16:08:00 | 2022-02-04 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: