Incorrect signature verification on gzip-compressed install images

The coreos-installer is a program to fetch a disk image and stream it to a target disk. During the installation process the installation image gpg signatures are verified. The signature verification can be bypassed for gzip-compressed images due to a flaw in gzip coreos-installer wrapper. When th...

There is no Support For The Trading of Cryptopunks

Lines of code Vulnerability details Impact Cryptopunks are at the core of the NFT ecosystem. As one of the first NFTs, it embodies the culture of NFT marketplaces. By not supporting the trading of cryptopunks, Foundation is at a severe disadvantage when compared to other marketplaces. Cryptopunks...

PT-2022-7630 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.17.0-rc1-00233-g9a20c48d1ed2 Description: The issue is related to the riscv component of the Linux kernel, where the trace hardirqs on,off functions require the caller to set up the frame pointer properly. If...

CVE-2021-25082: Improper Limitation of a Pathname to a Restricted Directory

The Popup Builder WordPress plugin before 4.0.7 does not validate and sanitise the sgpbtype parameter before using it in a require statement, leading to a Local File Inclusion issue. Furthermore, since the beginning of the string can be controlled, the issue can lead to RCE vulnerability via...

[SECURITY] Fedora 35 Update: rlwrap-0.45.2-1.fc35

rlwrap is a 'readline wrapper' that uses the GNU readline library to allow the editing of keyboard input for any other command. Input history is remembered across invocations, separately for each command; history completion and search work as in bash and completion word lists can be specified on...

[SECURITY] Fedora 34 Update: rlwrap-0.45.2-1.fc34

rlwrap is a 'readline wrapper' that uses the GNU readline library to allow the editing of keyboard input for any other command. Input history is remembered across invocations, separately for each command; history completion and search work as in bash and completion word lists can be specified on...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23579 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23579 Source advisory: OSV:GHSA-5F2R-QP73-37MR...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23578 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23578 Source advisory: GHSA-8R7C-3CM2-3H8F...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23577 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23577 Source advisory: OSV:GHSA-8CXV-76P7-JXWR...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23577 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23577 Source advisory: GHSA-8CXV-76P7-JXWR...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-21725 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-21725 Source advisory: GHSA-V3F7-J968-4H5F...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-21725 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-21725 Source advisory: OSV:GHSA-V3F7-J968-4H5F...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23584 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23584 Source advisory: GHSA-24X4-6QMH-88QG...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23564 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23564 Source advisory: OSV:GHSA-8RCJ-C8PJ-V3M3...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23564 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23564 Source advisory: GHSA-8RCJ-C8PJ-V3M3...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23563 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23563 Source advisory: OSV:GHSA-WC4G-R73W-X8MM...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23563 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23563 Source advisory: GHSA-WC4G-R73W-X8MM...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23557 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23557 Source advisory: OSV:GHSA-GF2J-F278-XH4V...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-23557 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-23557 Source advisory: GHSA-GF2J-F278-XH4V...

tfhub-styletransfer-wrapper (>=1.0.5, <=1.1.1), tpu-tf2 (1.0.0) potentially affected by CVE-2022-21736 via tensorflow-gpu (2.7.0)

tensorflow-gpu PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - tfhub-styletransfer-wrapper =1.0.5, =1.1.1 - tpu-tf2 1.0.0 Source cves: CVE-2022-21736 Source advisory: GHSA-PFJJ-M3JJ-9JC9...