749 matches found
CVE-2020-26268
In affected versions of TensorFlow the tf.rawops.ImmutableConst operation returns a constant tensor created from a memory mapped file which is assumed immutable. However, if the type of the tensor is not an integral type, the operation crashes the Python interpreter as it tries to write to the...
Write to immutable memory region in TensorFlow
Impact The tf.rawops.ImmutableConst operation returns a constant tensor created from a memory mapped file which is assumed immutable. However, if the type of the tensor is not an integral type, the operation crashes the Python interpreter as it tries to write to the memory area: python import...
GHSA-HHVC-G5HV-48C6 Write to immutable memory region in TensorFlow
Impact The tf.rawops.ImmutableConst operation returns a constant tensor created from a memory mapped file which is assumed immutable. However, if the type of the tensor is not an integral type, the operation crashes the Python interpreter as it tries to write to the memory area: python import...
[SECURITY] Fedora 32 Update: python-canonicaljson-1.4.0-1.fc32
Features: Encodes objects and arrays as RFC 7159 JSON. Sorts object keys so that you get the same result each time. Has no inignificant whitespace to make the output as small as possible. Escapes only the characters that must be escaped, U+0000 to U+0019 / U+0022 / U+0056, to keep the output as...
[SECURITY] Fedora 33 Update: python-canonicaljson-1.4.0-1.fc33
Features: Encodes objects and arrays as RFC 7159 JSON. Sorts object keys so that you get the same result each time. Has no inignificant whitespace to make the output as small as possible. Escapes only the characters that must be escaped, U+0000 to U+0019 / U+0022 / U+0056, to keep the output as...
PT-2020-16391 · Google · Tensorflow
Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 1.15.5 TensorFlow versions prior to 2.0.4 TensorFlow versions prior to 2.1.3 TensorFlow versions prior to 2.2.2 TensorFlow versions prior to 2.3.2 TensorFlow versions prior to 2.4.0 Description: The tf.raw...
RUSTSEC-2020-0073 Mutable reference with immutable provenance
A mutable reference to a struct was constructed by dereferencing a pointer obtained from slice::asptr. Instead, slice::asmutptr should have been called on the mutable slice argument. The former performs an implicit reborrow as an immutable shared reference which does not allow writing through the...
app-state (>=0.3.0, <=2.0.1), grasshopper-framework (0.0.0-alpha.5) +3 more potentially affected by unknown CVE via get-setter (0.0.0)
get-setter NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on get-setter and may be impacted: - app-state =0.3.0, =0.0.0, =0.0.1 - immutable-model-object 0.0.0 - model-object 0.0.0 Source cves: unknown CVE Source advisory:...
app-state (>=0.3.0, <=2.0.1), grasshopper-framework (0.0.0-alpha.5) +3 more potentially affected by unknown CVE via get-setter (0.0.0)
get-setter NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on get-setter and may be impacted: - app-state =0.3.0, =0.0.0, =0.0.1 - immutable-model-object 0.0.0 - model-object 0.0.0 Source cves: unknown CVE Source advisory:...
[SECURITY] Fedora 31 Update: snapd-2.45.2-1.fc31
Snappy is a modern, cross-distribution, transactional package manager designed for working with self-contained, immutable packages...
[SECURITY] Fedora 32 Update: snapd-2.45.2-1.fc32
Snappy is a modern, cross-distribution, transactional package manager designed for working with self-contained, immutable packages...
Fedora: Security Advisory for snapd (FEDORA-2020-7685deba9b)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Argo License Issue Vulnerability (CNVD-2020-27455)
Argo is an open source container native workflow engine. Argo suffers from an authorization problem vulnerability that stems from the use of immutable authentication tokens in the web interface authentication system. An attacker could exploit this vulnerability to gain unauthorized access to...
CVE-2020-8826
As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration—there was no refresh or forced re-authentication...
CVE-2020-8826
As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration—there was no refresh or forced re-authentication...
Authentication flaw
As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration—there was no refresh or forced re-authentication...
CVE-2020-8826
CVE-2020-8826 relates to the Argo CD web interface authentication, where as of v1.5.0, issued authentication tokens were immutable and did not expire. This creates a potential session-related risk (e.g., token reuse) if a token is compromised, since tokens cannot be refreshed or forcefully re-aut...
CVE-2020-8826: Session Fixation
As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration—there was no refresh or forced re-authentication...