| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-0381 | 4.3 | The Embed Swagger WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping/sanitization and validation via the url parameter found in the ~/swagger-iframe.php file which allows attackers to inject arbitrary web sc | 2022-02-10 06:48:00 | 2022-02-04 23:15:00 |
| CVE-2022-0380 | 4.3 | The Fotobook WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping and the use of $_SERVER['PHP_SELF'] found in the ~/options-fotobook.php file which allows attackers to inject arbitrary web scripts onto the pa | 2022-02-10 06:47:00 | 2022-02-04 23:15:00 |
| CVE-2022-23592 | 5.5 | Tensorflow is an Open Source Machine Learning Framework. TensorFlow's type inference can cause a heap out of bounds read as the bounds checking is done in a `DCHECK` (which is a no-op during production). An attacker can control the `input_idx` variab | 2022-02-10 02:18:00 | 2022-02-04 23:15:00 |
| CVE-2022-23595 | 4.0 | Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so `flr->config_proto` is | 2022-02-10 02:10:00 | 2022-02-04 23:15:00 |
| CVE-2022-23593 | 5.0 | Tensorflow is an Open Source Machine Learning Framework. The `simplifyBroadcast` function in the MLIR-TFRT infrastructure in TensorFlow is vulnerable to a segfault (hence, denial of service), if called with scalar shapes. If all shapes are scalar, th | 2022-02-10 02:00:00 | 2022-02-04 23:15:00 |
| CVE-2022-23581 | 5.0 | Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `IsSimplifiableReshape` would trigger `CHECK` failures. The fix will be includ | 2022-02-10 01:34:00 | 2022-02-04 23:15:00 |
| CVE-2022-23579 | 5.0 | Tensorflow is an Open Source Machine Learning Framework. The Grappler optimizer in TensorFlow can be used to cause a denial of service by altering a `SavedModel` such that `SafeToRemoveIdentity` would trigger `CHECK` failures. The fix will be include | 2022-02-10 01:28:00 | 2022-02-04 23:15:00 |
| CVE-2021-43841 | 3.5 | XWiki is a generic wiki platform offering runtime services for applications built on top of it. When using default XWiki configuration, it's possible for an attacker to upload an SVG containing a script executed when executing the download action on | 2022-02-10 01:26:00 | 2022-02-04 23:15:00 |
| CVE-2021-33833 | 7.5 | ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGTH (for A or AAAA). | 2022-02-09 21:20:00 | 2021-06-09 18:15:00 |
| CVE-2021-23157 | 6.8 | WECON LeviStudioU Versions 2019-09-21 and prior are vulnerable to a heap-based buffer overflow, which may allow an attacker to remotely execute code. | 2022-02-09 20:50:00 | 2022-01-14 20:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici: