CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41908)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41908 advisory. - TensorFlow is an open source platform for machine learning. An input token that is not a UTF-8 bytestrin...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41886)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41886 advisory. - TensorFlow is an open source platform for machine learning. When tf.rawops.ImageProjectiveTransformV2 is...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41899)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41899 advisory. - TensorFlow is an open source platform for machine learning. Inputs densefeatures or examplestatedata not...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41901)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41901 advisory. - TensorFlow is an open source platform for machine learning. An input sparsematrix that is not a matrix...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-1055)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-1055 advisory. - A use-after-free exists in the Linux Kernel in tcnewtfilter that could allow a local attacker to gain privile...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41895)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41895 advisory. - TensorFlow is an open source platform for machine learning. If MirrorPadGrad is given outsize input...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41893)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41893 advisory. - TensorFlow is an open source platform for machine learning. If tf.rawops.TensorListResize is given a...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41884)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41884 advisory. - TensorFlow is an open source platform for machine learning. If a numpy array is created with a shape suc...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41896)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41896 advisory. - TensorFlow is an open source platform for machine learning. If ThreadUnsafeUnigramCandidateSampler is...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41889)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41889 advisory. - TensorFlow is an open source platform for machine learning. If a list of quantized tensors is assigned t...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41907)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41907 advisory. - TensorFlow is an open source platform for machine learning. When tf.rawops.ResizeNearestNeighborGrad is...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41888)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41888 advisory. - TensorFlow is an open source platform for machine learning. When running on GPU,...

Potential front-running attacks in buy function

Lines of code Vulnerability details Impact The buy function generates new trays and stores them in the tiles mapping based on the value of lastHash. Since the value of lastHash is publicly accessible and can be predicted, an attacker could potentially front-run other users to mint specific trays...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41894)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41894 advisory. - TensorFlow is an open source platform for machine learning. The reference kernel of the CONV3DTRANSPOSE...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41890)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41890 advisory. - TensorFlow is an open source platform for machine learning. If BCast::ToShape is given input larger than...

CBL Mariner 2.0 Security Update: tensorflow (CVE-2022-41900)

The version of tensorflow installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-41900 advisory. - TensorFlow is an open source platform for machine learning. The security vulnerability results in...

CVE-2023-28109 Play With Docker vulnerable to Authorization Bypass Through User-Controlled Key

Play With Docker is a browser-based Docker playground. Versions 0.0.2 and prior are vulnerable to domain hijacking. Because CORS configuration was not correct, an attacker could use play-with-docker.com as an example and set the origin header in an http request as evil-play-with-docker.com. The...

CVE-2023-28109 Play With Docker vulnerable to Authorization Bypass Through User-Controlled Key

Play With Docker is a browser-based Docker playground. Versions 0.0.2 and prior are vulnerable to domain hijacking. Because CORS configuration was not correct, an attacker could use play-with-docker.com as an example and set the origin header in an http request as evil-play-with-docker.com. The...

CVE-2023-26912

Cross site scripting XSS vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button...

DEBIAN-CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...