Lucene search
+L

7587 matches found

PyPA
PyPA
added 2021/08/12 9:15 p.m.11 views

PYSEC-2021-281

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all binary cwise operations that don't require broadcasting e.g., gradients of binary cwise operations. The implementatio...

7.8CVSS6.9AI score0.00176EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.9 views

PYSEC-2021-572

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all binary cwise operations that don't require broadcasting e.g., gradients of binary cwise operations. The implementatio...

7.8CVSS6.9AI score0.00176EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.12 views

PYSEC-2021-575

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can generate undefined behavior via a reference binding to nullptr in BoostedTreesCalculateBestGainsPerFeature and similar attack can occur in BoostedTreesCalculateBestFeatureSplitV2. The...

7.8CVSS6.9AI score0.00189EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.16 views

PYSEC-2021-267

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.QuantizeAndDequantizeV4Grad is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on thi...

5.5CVSS7.2AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.11 views

PYSEC-2021-268

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.13 views

PYSEC-2021-772

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a denial of service in boostedtreescreatequantilestreamresource by using negative arguments. The implementation does not validate that numstreams only contains non-negative numbers. I...

5.5CVSS6.8AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.10 views

PYSEC-2021-570

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type tf.rawops.MatrixDiagV. The implementation has incomplete validation that the value of k is a valid...

7.8CVSS7.1AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.11 views

PYSEC-2021-757

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.12 views

PYSEC-2021-571

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type tf.rawops.MatrixSetDiagV. The implementation has incomplete validation that the value of k is a...

7.8CVSS7.1AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.9 views

PYSEC-2021-746

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of sparse reduction operations in TensorFlow can trigger accesses outside of bounds of heap allocated data. The implementation fails to validate that each reduction group does not overfl...

7.3CVSS7.2AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.21 views

PYSEC-2021-567

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a CHECK-fail in debug builds of TensorFlow using tf.rawops.ResourceGather or a read from outside the bounds of heap allocated data in the same API in a release build. Th...

7.3CVSS7.1AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 9:15 p.m.13 views

PYSEC-2021-577

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can read from outside of bounds of heap allocated data by sending specially crafted illegal arguments to BoostedTreesSparseCalculateBestFeatureSplit. The implementation needs to validate that...

7.3CVSS6.9AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.12 views

PYSEC-2021-556

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS7.2AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.11 views

PYSEC-2021-271

TensorFlow is an end-to-end open source platform for machine learning. The code for tf.rawops.UncompressElement can be made to trigger a null pointer dereference. The implementation obtains a pointer to a CompressedElement from a Variant tensor and then proceeds to dereference it for decompressin...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.11 views

PYSEC-2021-550

TensorFlow is an end-to-end open source platform for machine learning. It is possible to trigger a null pointer dereference in TensorFlow by passing an invalid input to tf.rawops.CompressElement. The implementation was accessing the size of a buffer obtained from the return of a separate function...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.13 views

PYSEC-2021-261

TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...

8.4CVSS6.9AI score0.00173EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.10 views

PYSEC-2021-748

TensorFlow is an end-to-end open source platform for machine learning. It is possible to trigger a null pointer dereference in TensorFlow by passing an invalid input to tf.rawops.CompressElement. The implementation was accessing the size of a buffer obtained from the return of a separate function...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.10 views

PYSEC-2021-260

TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for rowpartitiontypes of tf.rawops.RaggedTensorToTensor API results in a null pointer dereference and undefined behavior. The implementation accesses the first element of a user supplied list of values...

7.8CVSS6.9AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.10 views

PYSEC-2021-749

TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for rowpartitiontypes of tf.rawops.RaggedTensorToTensor API results in a null pointer dereference and undefined behavior. The implementation accesses the first element of a user supplied list of values...

7.8CVSS6.9AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.12 views

PYSEC-2021-560

TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, tf.rawops.SparseTensorSliceDataset implementation can be made to dereference a null pointer. The implementation has some argument validation but fails...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.13 views

PYSEC-2021-552

TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...

8.4CVSS6.9AI score0.00173EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.12 views

PYSEC-2021-758

TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, tf.rawops.SparseTensorSliceDataset implementation can be made to dereference a null pointer. The implementation has some argument validation but fails...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.12 views

PYSEC-2021-259

TensorFlow is an end-to-end open source platform for machine learning. It is possible to trigger a null pointer dereference in TensorFlow by passing an invalid input to tf.rawops.CompressElement. The implementation was accessing the size of a buffer obtained from the return of a separate function...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.13 views

PYSEC-2021-754

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS7.2AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.11 views

PYSEC-2021-265

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS7.2AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.11 views

PYSEC-2021-562

TensorFlow is an end-to-end open source platform for machine learning. The code for tf.rawops.UncompressElement can be made to trigger a null pointer dereference. The implementation obtains a pointer to a CompressedElement from a Variant tensor and then proceeds to dereference it for decompressin...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.11 views

PYSEC-2021-551

TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for rowpartitiontypes of tf.rawops.RaggedTensorToTensor API results in a null pointer dereference and undefined behavior. The implementation accesses the first element of a user supplied list of values...

7.8CVSS6.9AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.10 views

PYSEC-2021-760

TensorFlow is an end-to-end open source platform for machine learning. The code for tf.rawops.UncompressElement can be made to trigger a null pointer dereference. The implementation obtains a pointer to a CompressedElement from a Variant tensor and then proceeds to dereference it for decompressin...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.13 views

PYSEC-2021-750

TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...

8.4CVSS6.9AI score0.00173EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 7:15 p.m.13 views

PYSEC-2021-269

TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, tf.rawops.SparseTensorSliceDataset implementation can be made to dereference a null pointer. The implementation has some argument validation but fails...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.11 views

PYSEC-2021-771

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0. The implementation has a logic error: it should skip processing i...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.10 views

PYSEC-2021-553

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseReshape can be made to trigger an integral division by 0 exception. The implementation calls the reshaping functor whenever there is at least an index in the input but...

5.5CVSS7.1AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.15 views

PYSEC-2021-264

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.ResourceScatterDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.12 views

PYSEC-2021-549

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseDenseCwiseDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.14 views

PYSEC-2021-262

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseReshape can be made to trigger an integral division by 0 exception. The implementation calls the reshaping functor whenever there is at least an index in the input but...

5.5CVSS7.1AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.10 views

PYSEC-2021-747

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseDenseCwiseDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.13 views

PYSEC-2021-275

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a floating point exception in tf.rawops.ResourceGather. The implementation computes the value of a value, batchsize, and then divides by it without checking that this...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.14 views

PYSEC-2021-764

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a floating point exception in tf.rawops.ResourceGather. The implementation computes the value of a value, batchsize, and then divides by it without checking that this...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.17 views

PYSEC-2021-555

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.ResourceScatterDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.10 views

PYSEC-2021-573

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0. The implementation has a logic error: it should skip processing i...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.10 views

PYSEC-2021-258

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseDenseCwiseDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.13 views

PYSEC-2021-751

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseReshape can be made to trigger an integral division by 0 exception. The implementation calls the reshaping functor whenever there is at least an index in the input but...

5.5CVSS7.1AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.15 views

PYSEC-2021-753

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.ResourceScatterDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.14 views

PYSEC-2021-566

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a floating point exception in tf.rawops.ResourceGather. The implementation computes the value of a value, batchsize, and then divides by it without checking that this...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 6:15 p.m.14 views

PYSEC-2021-282

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0. The implementation has a logic error: it should skip processing i...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/09 9:15 p.m.17 views

PYSEC-2021-119

23andMe Yamale before 3.0.8 allows remote attackers to execute arbitrary code via a crafted schema file. The schema parser uses eval as part of its processing, and tries to protect from malicious expressions by limiting the builtins that are passed to the eval. When processing the schema, each li...

9.3CVSS8AI score0.0249EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2021/08/09 9:15 p.m.20 views

PYSEC-2021-118

The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim...

10CVSS7.2AI score0.02106EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/08/09 9:15 p.m.9 views

PYSEC-2021-130

JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn’t sanitize the action attribute of html . Using this it is possible to trigger the form...

9.6CVSS7.8AI score0.0266EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2021/08/02 10:15 p.m.13 views

PYSEC-2021-370

Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope deployment, run Zope 4 below version 4.6.3 or Zope 5 below version 5.3, and have the optional...

7.5CVSS8.1AI score0.02296EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/02 10:15 p.m.10 views

PYSEC-2021-368

Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope deployment, run Zope 4 below version 4.6.3 or Zope 5 below version 5.3, and have the optional...

7.5CVSS8.1AI score0.02296EPSS
SaveExploits0References2Affected Software1
Total number of security vulnerabilities7587