Lucene search
+L

119 matches found

OSV
OSV
•added 2022/02/09 11:33 p.m.•13 views

GHSA-FPCP-9H7M-FFPX Null pointer dereference in TensorFlow

Impact When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference: cc string allowedgpus = flr-configproto-gpuoptions.visibledevicelist; In the default scenario, all devices are allowed, so flr-configproto is nullptr. Patches We have patch...

6CVSS6.6AI score0.00781EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2022/02/09 11:33 p.m.•45 views

Null pointer dereference in TensorFlow

Impact When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference: cc string allowedgpus = flr-configproto-gpuoptions.visibledevicelist; In the default scenario, all devices are allowed, so flr-configproto is nullptr. Patches We have patch...

6.5CVSS1.9AI score0.00781EPSS
SaveExploits1References7Affected Software3
CNVD
CNVD
•added 2022/02/09 12:00 a.m.•34 views

Google Tensorflow code issue vulnerability (CNVD-2022-09867)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a code issue vulnerability that stems from TensorFlow triggering null pointer dereferences if default settings are used when building the XLA compilation cache. No...

6.5CVSS6.6AI score0.00781EPSS
SaveExploits1References1
Veracode
Veracode
•added 2022/02/08 5:58 a.m.•29 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. When the default settings are used, an attacker can cause the application to crash due to a null pointer dereference in the BuildXlaCompilationCache in xla platform info.cc...

6.5CVSS3.7AI score0.00781EPSS
SaveExploits1References7Affected Software3
NVD
NVD
•added 2022/02/04 11:15 p.m.•21 views

CVE-2022-23595

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

6.5CVSS0.00781EPSS
SaveExploits1References3
Prion
Prion
•added 2022/02/04 11:15 p.m.•20 views

Null pointer dereference

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

4CVSS6.6AI score0.00781EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2022/02/04 11:15 p.m.•12 views

PYSEC-2022-103

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

6.5CVSS6.9AI score0.00781EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/02/04 11:15 p.m.•28 views

PYSEC-2022-103

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

6.5CVSS2.7AI score0.00781EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2022/02/04 10:32 p.m.•7 views

CVE-2022-23595 Null pointer dereference in TensorFlow

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

5.3CVSS6.5AI score0.00781EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/02/04 10:32 p.m.•28 views

CVE-2022-23595 Null pointer dereference in TensorFlow

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

5.3CVSS6.7AI score0.00781EPSS
SaveExploits1References3
CVE
CVE
•added 2022/02/04 10:32 p.m.•144 views

CVE-2022-23595

TensorFlow (CVE-2022-23595) is a vulnerability caused by a null pointer dereference when building the XLA compilation cache under default settings, where flr->config_proto may be nullptr. The issue affects TensorFlow releases up to 2.8.0, with cherry-picks planned for 2.7.1, 2.6.3, and 2.5.3. ...

6.5CVSS6AI score0.00781EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2022/02/04 10:32 p.m.•19 views

CVE-2022-23595

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

6.5CVSS7AI score0.00781EPSS
SaveExploits1
Mend
Mend
•added 2022/02/04 10:32 p.m.•2 views

CVE-2022-23595

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so "flr-configproto" is "nullptr". The fix will be included in TensorFlo...

6.5CVSS0.00781EPSS
SaveExploits1References9
OSV
OSV
•added 2022/02/04 10:32 p.m.•39 views

CVE-2022-23595 Null pointer dereference in TensorFlow

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

5.3CVSS6.4AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/04 12:00 a.m.•4 views

CVE-2022-23595: NULL Pointer Dereference

Tensorflow is an Open Source Machine Learning Framework. When building an XLA compilation cache, if default settings are used, TensorFlow triggers a null pointer dereference. In the default scenario, all devices are allowed, so flr-configproto is nullptr. The fix will be included in TensorFlow...

6.5CVSS6.4AI score0.00781EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/06/23 1:15 p.m.•9 views

CVE-2021-28977

Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip files,...

4.8CVSS5.2AI score0.00506EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/06/23 12:44 p.m.•29 views

CVE-2021-28977

Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip files,...

6.1AI score0.00506EPSS
SaveExploits0References1
Mend
Mend
•added 2021/06/23 12:44 p.m.•3 views

CVE-2021-28977

Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip files,...

4.8CVSS0.00506EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/23 12:00 a.m.•8 views

CVE-2021-28977: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in GetSimpleCMS 3.3.16 in admin/upload.php by adding comments or jpg and other file header information to the content of xla, pages, and gzip files,...

4.8CVSS5.8AI score0.00506EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/23 12:00 a.m.•18 views

GetSimpleCMS 跨站脚本漏洞

GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/upload.php in GetSimple CMS version 3.3.16. The vulnerability can be exploited to conduct cross-site scripting attacks by adding comments to the...

4.8CVSS5.1AI score0.00506EPSS
SaveExploits0References1
Rows per page
Query Builder