GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab versions 1.6.50 to 2.11.0, which ste...

PT-2023-16180 · Gitlab · Gitlab Dast Api Scanner

Name of the Vulnerable Software and Affected Versions: GitLab DAST API scanner versions 1.6.50 through 2.11.0 Description: An issue has been discovered in the GitLab DAST API scanner where Authorization headers were leaked in vulnerability report evidence. Recommendations: For GitLab DAST API...

GHSA-F637-VH3R-VFH2 TensorFlow has Floating Point Exception in AudioSpectrogram

Impact version:2.11.0 //core/ops/audioops.cc:70 Status SpectrogramShapeFnInferenceContext c ShapeHandle input; TFRETURNIFERRORc-WithRankc-input0, 2, &input; int32t windowsize; TFRETURNIFERRORc-GetAttr"windowsize", &windowsize; int32t stride; TFRETURNIFERRORc-GetAttr"stride", &stride; .....1...

SUSE CVE-2022-41902

TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We hav...

SUSE CVE-2022-41910

TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We hav...

CVE-2022-41890 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41890 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41880 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41880 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41895 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41895 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41911 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41911 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41884 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41884 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41901 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41901 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41886 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41886 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41908 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41908 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41900 affecting package tensorflow for versions less than 2.11.0-1

CVE-2022-41900 affecting package tensorflow for versions less than 2.11.0-1. An upgraded version of the package is available that resolves this issue...

Google TensorFlow buffer overflow vulnerability (CNVD-2023-03935)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in versions prior to Google TensorFlow 2.11.0, which can be exploited by attackers to cause out-of-bounds memory reads or crashes...

CVE-2022-41910

TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We hav...

Out-of-bounds

TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We hav...

Out-of-bounds

TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We hav...

CVE-2022-41910 Heap out of bounds read in `QuantizeAndDequantizeV2` in Tensorflow

TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We hav...

CVE-2022-41902 Out of bounds write in grappler in Tensorflow

TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered. We hav...