Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
•added 2021/05/27 7:15 p.m.•10 views

PYSEC-2021-105

A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal value as the template caching action for the same file since no re-evaluation happens. The highest threat from this vulnerability would be that all passwords a...

5.5CVSS6.7AI score0.00439EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2021/05/27 11:15 a.m.•11 views

PYSEC-2021-887

GattLib 0.3-rc1 has a stack-based buffer over-read in getdevicepathfrommac in dbus/gattlib.c...

9.8CVSS7.3AI score0.01501EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/21 10:15 p.m.•10 views

PYSEC-2021-79

Zope Products.CMFCore before 2.5.1 and Products.PluggableAuthService before 2.6.2, as used in Plone through 5.2.4 and other products, allow Reflected XSS...

6.1CVSS7AI score0.00743EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-731

TensorFlow is an end-to-end open source platform for machine learning. The TFLite code for allocating TFLiteIntArrays is vulnerable to an integer overflow issuehttps://github.com/tensorflow/tensorflow/blob/4ceffae632721e52bf3501b736e4fe9d1221cdfa/tensorflow/lite/c/common.cL24-L27. An attacker can...

7.1CVSS7.4AI score0.0022EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-172

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a heap buffer overflow in QuantizedMul by passing in invalid thresholds for the quantization. This is because the...

7.8CVSS7.4AI score0.00211EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-182

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in converting sparse tensors to CSR Sparse matrices. This is because the...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-644

TensorFlow is an end-to-end open source platform for machine learning. In eager mode default in TF 2.0 and later, session operations are invalid. However, users could still call the raw ops associated with them and trigger a null pointer dereference. The...

7.8CVSS6.8AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-693

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.SparseDenseCwiseMul, an attacker can trigger denial of service via CHECK-fails or accesses to outside the bounds of heap allocated data. Since the...

5.5CVSS7AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-184

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a segfault and denial of service via accessing data outside of bounds in tf.rawops.QuantizedBatchNormWithGlobalNormalization. This is because the...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-669

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.CTCGreedyDecoder. This is because the...

5.5CVSS6.8AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-221

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in caused by an integer overflow in constructing a new tensor shape. This is because the...

5.5CVSS7.2AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-483

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.FusedBatchNorm. This is because the...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-454

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in tf.rawops.Conv2D. This is because the implementationhttps://github.com/tensorflow/tensorflow/blob/988087bd83f144af14087fe4fecee2d250d93737/tensorflow/core/kernels/convops.ccL261-L263...

5.5CVSS7AI score0.00198EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-678

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by controlling the values of numsegments tensor argument for UnsortedSegmentJoin. This is because the...

5.5CVSS6.8AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-157

TensorFlow is an end-to-end open source platform for machine learning. Missing validation between arguments to tf.rawops.Conv3DBackprop operations can result in heap buffer overflows. This is because the...

7.8CVSS7.2AI score0.00224EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-689

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a CHECK-failure coming from the implementation of tf.rawops.RFFT. Eigen code operating on an empty matrix can trigger on an assertion and will cause program termination...

5.5CVSS7.1AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-675

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a runtime division by zero error and denial of service in tf.rawops.QuantizedBatchNormWithGlobalNormalization. This is because the...

5.5CVSS6.8AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-171

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.SparseConcat. This is because the...

5.5CVSS6.8AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-194

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in tf.rawops.SparseMatMul. The division by 0 occurs deep in Eigen code because the b tensor is empty. The fix will be included in TensorFlow 2.5.0. We will also...

5.5CVSS7.1AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-728

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the DepthwiseConv TFLite operator is vulnerable to a division by zero...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-696

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPoolGradWithArgmax can cause reads outside of bounds of heap allocated data if attacker supplies specially crafted inputs. The...

7.1CVSS7AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-220

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.FusedBatchNorm is vulnerable to a heap buffer overflow. If the tensors are empty, the same implementation can trigger undefined behavior by dereferencing null pointers. The...

7.8CVSS7.3AI score0.00211EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-226

TensorFlow is an end-to-end open source platform for machine learning. The reference implementation of the GatherNd TFLite operator is vulnerable to a division by zero...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-443

TensorFlow is an end-to-end open source platform for machine learning. The implementation of MatrixDiag operationshttps://github.com/tensorflow/tensorflow/blob/4c4f420e68f1cfaf8f4b6e8e3eb857e9e4c3ff33/tensorflow/core/kernels/linalg/matrixdiagop.ccL195-L197 does not validate that the tensor...

7.8CVSS7AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-495

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.SparseDenseCwiseMul, an attacker can trigger denial of service via CHECK-fails or accesses to outside the bounds of heap allocated data. Since the...

5.5CVSS7AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-739

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in tf.rawops.CTCLoss allows an attacker to trigger an OOB read from heap. The fix will be included in TensorFlow 2.5.0. We will also cherrypick these commits on TensorFlow 2.4.2, TensorFlow 2.3.3,...

7.1CVSS6.9AI score0.0024EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-707

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.CTCBeamSearchDecoder, an attacker can trigger denial of service via segmentation faults. The...

5.5CVSS6.7AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-672

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger an integer division by zero undefined behavior in tf.rawops.QuantizedBiasAdd. This is because the implementation of the Eigen...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-230

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the BatchToSpaceNd TFLite operator is vulnerable to a division by zero...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-727

TensorFlow is an end-to-end open source platform for machine learning. The TFLite implementation of concatenation is vulnerable to an integer overflow issuehttps://github.com/tensorflow/tensorflow/blob/7b7352a724b690b11bfaae2cd54bc3907daf6285/tensorflow/lite/kernels/concatenation.ccL70-L76. An...

7.1CVSS7.2AI score0.00192EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-232

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the DepthToSpace TFLite operator is vulnerable to a division by zero...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-204

TensorFlow is an end-to-end open source platform for machine learning. Due to lack of validation in tf.rawops.SparseDenseCwiseMul, an attacker can trigger denial of service via CHECK-fails or accesses to outside the bounds of heap allocated data. Since the...

5.5CVSS7AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-541

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in tf.rawops.CTCLoss allows an attacker to trigger an OOB read from heap. The fix will be included in TensorFlow 2.5.0. We will also cherrypick these commits on TensorFlow 2.4.2, TensorFlow 2.3.3,...

7.1CVSS6.9AI score0.0024EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-705

TensorFlow is an end-to-end open source platform for machine learning. The implementation of tf.rawops.MaxPoolGrad is vulnerable to a heap buffer overflow. The...

7.8CVSS7.3AI score0.00214EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-185

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a runtime division by zero error and denial of service in tf.rawops.QuantizedBatchNormWithGlobalNormalization. This is because the...

5.5CVSS6.8AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-647

TensorFlow is an end-to-end open source platform for machine learning. Specifying a negative dense shape in tf.rawops.SparseCountSparseOutput results in a segmentation fault being thrown out from the standard library as std::vector invariants are broken. This is because the...

5.5CVSS6.9AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-525

TensorFlow is an end-to-end open source platform for machine learning. The implementation of the SpaceToBatchNd TFLite operator is vulnerable to a division by zero error. An attacker can craft a model such that one dimension of the block input is 0. Hence, the corresponding value in blockshape is...

7.8CVSS6.9AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-531

TensorFlow is an end-to-end open source platform for machine learning. A specially crafted TFLite model could trigger an OOB write on heap in the TFLite implementation of...

7.8CVSS7.2AI score0.00201EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-490

TensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service by exploiting a CHECK-failure coming from the implementation of tf.rawops.IRFFT. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2,...

5.5CVSS6.8AI score0.00189EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-742

TensorFlow is an end-to-end open source platform for machine learning. The implementation of TrySimplifyhttps://github.com/tensorflow/tensorflow/blob/c22d88d6ff33031aa113e48aa3fc9aa74ed79595/tensorflow/core/grappler/optimizers/arithmeticoptimizer.ccL390-L401 has undefined behavior due to...

7.8CVSS6.9AI score0.00206EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-732

TensorFlow is an end-to-end open source platform for machine learning. A specially crafted TFLite model could trigger an OOB read on heap in the TFLite implementation of...

7.8CVSS6.8AI score0.00215EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 8:15 p.m.•10 views

PYSEC-2021-188

TensorFlow is an end-to-end open source platform for machine learning. The implementation of MatrixTriangularSolvehttps://github.com/tensorflow/tensorflow/blob/8cae746d8449c7dda5298327353d68613f16e798/tensorflow/core/kernels/linalg/matrixtriangularsolveopimpl.hL160-L240 fails to terminate kernel...

5.5CVSS7AI score0.00217EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/05/14 7:15 p.m.•10 views

PYSEC-2021-440

TensorFlow is an end-to-end open source platform for machine learning. If the splits argument of RaggedBincount does not specify a valid SparseTensorhttps://www.tensorflow.org/apidocs/python/tf/sparse/SparseTensor, then an attacker can trigger a heap buffer overflow. This will cause a read from...

7.8CVSS7.4AI score0.00211EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/04/06 7:15 p.m.•10 views

PYSEC-2021-111

projen is a project generation tool that synthesizes project configuration files such as package.json, tsconfig.json, .gitignore, GitHub Workflows, eslint, jest, and more, from a well-typed definition written in JavaScript. Users of projen's NodeProject project type including any project type...

8.1CVSS7.4AI score0.01381EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2021/04/01 10:15 p.m.•10 views

PYSEC-2021-11

django-registration is a user registration package for Django. The django-registration package provides tools for implementing user-account registration flows in the Django web framework. In django-registration prior to 3.1.2, the base user-account registration view did not properly apply filters...

3.7CVSS6.6AI score0.0041EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2021/04/01 6:15 p.m.•10 views

PYSEC-2021-107

A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the nolog feature. An...

5.5CVSS6.4AI score0.00333EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
•added 2021/03/23 4:15 p.m.•10 views

PYSEC-2021-31

OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups they are in, and these are available on the main webclient pages. This represents an information...

6.5CVSS6.6AI score0.01457EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
•added 2021/03/21 5:15 a.m.•10 views

PYSEC-2021-19

An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safeattrsonly and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run...

6.1CVSS6.4AI score0.04002EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
•added 2021/03/19 4:15 a.m.•10 views

PYSEC-2021-39

An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c...

7.5CVSS7AI score0.01601EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/03/10 10:15 p.m.•10 views

PYSEC-2021-60

Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerability data, then generate Jira Tasks and sub-tasks based on the vulnerabilities' current state. It published in pypi as "tenable-jira-cloud". In tenable-jira-cloud before version 1.1.21, it is possible to run...

8.6CVSS7.2AI score0.00452EPSS
SaveExploits0References4Affected Software1
Total number of security vulnerabilities5000