Lucene search
+L

9743 matches found

CNVD
CNVD
•added 2022/05/24 12:00 a.m.•26 views

Google TensorFlow integer overflow vulnerability (CNVD-2022-44166)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to integer overflow in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which originates from tf.rawops. SpaceToBatchND has an integer overflow problem. An attacker could use this...

5.5CVSS6AI score0.00335EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/05/24 12:00 a.m.•23 views

Google TensorFlow buffer overflow vulnerability (CNVD-2022-44163)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. Google TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2 and 2.6.4 are vulnerable to buffer errors, which originate from tf.rawops. EditDistance has incomplete validation for implementations. An attacker...

7.1CVSS5.7AI score0.00381EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/05/24 12:00 a.m.•23 views

Google TensorFlow code issue vulnerability (CNVD-2022-44164)

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to a code issue in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which stems from tf.rawops. SparseTensorDenseAdd has incomplete validation for the input parameters. No detailed...

5.5CVSS3.6AI score0.00341EPSS
SaveExploits1References1
Veracode
Veracode
•added 2022/05/23 11:39 a.m.•38 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. Lack of proper validation of input arguments to tf.rawops.QuantizeAndDequantizeV4Grad leads to CHECK-failure, causing an applicaiton crash...

5.5CVSS3.3AI score0.00343EPSS
SaveExploits1References7Affected Software3
Veracode
Veracode
•added 2022/05/23 11:15 a.m.•29 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. Failure to check the input to tf.rawops.SparseTensorDenseAdd causes a nullptr during kernel execution , triggering a denial of service attack...

5.5CVSS4.1AI score0.00341EPSS
SaveExploits1References7Affected Software3
Veracode
Veracode
•added 2022/05/23 9:58 a.m.•45 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. Failure to check the input to tf.rawops.LSTMBlockCell to validate ranks of any of the API call arguments causes a CHECK-failure , triggering a denial of service attack...

5.5CVSS3.7AI score0.0032EPSS
SaveExploits1References7Affected Software3
Veracode
Veracode
•added 2022/05/23 9:38 a.m.•25 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker is able to send malicious input to tf.rawops.TensorSummaryV2, causing a CHECK-failure...

5.5CVSS4.2AI score0.0032EPSS
SaveExploits1References7Affected Software3
Veracode
Veracode
•added 2022/05/23 8:57 a.m.•26 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because it does not prevent an attacker to send the values array containing Not a Number NaN elements to tf.histogramfixedwidth, causing an application crash...

5.5CVSS3.5AI score0.00316EPSS
SaveExploits1References9Affected Software3
Veracode
Veracode
•added 2022/05/23 7:22 a.m.•31 views

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. The vulnerability exists because the tf.rawops.DeleteSessionTensor in sessionops.cc does not properly validate the input arguments, allowing an attacker to crash the application through the CHECK failure...

5.5CVSS5.7AI score0.00328EPSS
SaveExploits1References16Affected Software3
Veracode
Veracode
•added 2022/05/23 7:21 a.m.•35 views

Incorrect Logic

tensorflow is using incorrect logic. Comparison of sizet and int values is not done correctly which results in incorrect macros for writing assertions such as CHECKLT, CHECKGT, etc...

5.5CVSS2.6AI score0.00389EPSS
SaveExploits1References9Affected Software3
CNVD
CNVD
•added 2022/05/23 12:00 a.m.•39 views

Google TensorFlow Code Injection Vulnerability

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A code injection vulnerability exists in TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, with no detailed vulnerability details provided at this time...

7.8CVSS7.4AI score0.0054EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/05/23 12:00 a.m.•26 views

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44209)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Google TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, which stems from the presence of a non-numeric...

5.5CVSS6.8AI score0.00316EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/05/23 12:00 a.m.•88 views

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44174)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which stems from the fact that tf.rawops.SparseTensorToCSRSparseMatrix does not ful...

5.5CVSS6.9AI score0.0032EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/05/23 12:00 a.m.•55 views

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44176)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Google TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, which stems from the fact that tf.rawops.StagePee...

5.5CVSS6.8AI score0.0032EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/05/23 12:00 a.m.•40 views

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44177)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Google TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, which stems from the fact that...

5.5CVSS6.8AI score0.0032EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/05/23 12:00 a.m.•25 views

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44208)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Google TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, which stems from a vulnerability that can be...

5.5CVSS6.9AI score0.00319EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/05/23 12:00 a.m.•40 views

Google TensorFlow suffers from an unspecified vulnerability (CNVD-2022-44210)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Google TensorFlow version 2.8.0, which stems from the TensorKey hash function using the very poorly implemented constant hash function AllocatedBytes for total...

5.5CVSS7AI score0.00227EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/05/23 12:00 a.m.•38 views

Google TensorFlow suffers from an unspecified vulnerability (CNVD-2022-44211)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A security vulnerability exists in Google TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, which stems from incorrect logic when comparing sizet when writi...

5.5CVSS6.9AI score0.00389EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/05/23 12:00 a.m.•23 views

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44175)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in TensorFlow versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which stems from the fact that tf.rawops.UnsortedSegmentJoin does not fully validat...

5.5CVSS6.9AI score0.0032EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/05/23 12:00 a.m.•59 views

Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-44179)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Google TensorFlow versions prior to 2.9.0, prior to 2.8.1, prior to 2.7.2, and prior to 2.6.4, which stems from the lack of input validation in...

5.5CVSS6.8AI score0.00313EPSS
SaveExploits1References1
Rows per page
Query Builder