Lucene search
+L

7587 matches found

PyPA
PyPA
•added 2021/08/12 9:15 p.m.•16 views

PYSEC-2021-267

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.QuantizeAndDequantizeV4Grad is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on thi...

5.5CVSS7.2AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•11 views

PYSEC-2021-268

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•11 views

PYSEC-2021-757

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•13 views

PYSEC-2021-772

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a denial of service in boostedtreescreatequantilestreamresource by using negative arguments. The implementation does not validate that numstreams only contains non-negative numbers. I...

5.5CVSS6.8AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•12 views

PYSEC-2021-575

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can generate undefined behavior via a reference binding to nullptr in BoostedTreesCalculateBestGainsPerFeature and similar attack can occur in BoostedTreesCalculateBestFeatureSplitV2. The...

7.8CVSS6.9AI score0.00189EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•10 views

PYSEC-2021-762

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation for tf.rawops.FractionalAvgPoolGrad can be tricked into accessing data outside of bounds of heap allocated buffers. The implementation does not validate that the input tensor is non-empt...

7.8CVSS7.4AI score0.00174EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•11 views

PYSEC-2021-558

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.QuantizeAndDequantizeV4Grad is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on thi...

5.5CVSS7.2AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•10 views

PYSEC-2021-570

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type tf.rawops.MatrixDiagV. The implementation has incomplete validation that the value of k is a valid...

7.8CVSS7.1AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•14 views

PYSEC-2021-767

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in tf.rawops.RaggedTensorToSparse. The implementation has an incomplete validation of the splits values: it does not check...

7.8CVSS6.9AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•15 views

PYSEC-2021-574

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a denial of service in boostedtreescreatequantilestreamresource by using negative arguments. The implementation does not validate that numstreams only contains non-negative numbers. I...

5.5CVSS6.8AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•10 views

PYSEC-2021-756

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.QuantizeAndDequantizeV4Grad is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on thi...

5.5CVSS7.2AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 9:15 p.m.•12 views

PYSEC-2021-571

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all operations of type tf.rawops.MatrixSetDiagV. The implementation has incomplete validation that the value of k is a...

7.8CVSS7.1AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•13 views

PYSEC-2021-556

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS7.2AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•10 views

PYSEC-2021-260

TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for rowpartitiontypes of tf.rawops.RaggedTensorToTensor API results in a null pointer dereference and undefined behavior. The implementation accesses the first element of a user supplied list of values...

7.8CVSS6.9AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•13 views

PYSEC-2021-261

TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...

8.4CVSS6.9AI score0.00173EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•11 views

PYSEC-2021-271

TensorFlow is an end-to-end open source platform for machine learning. The code for tf.rawops.UncompressElement can be made to trigger a null pointer dereference. The implementation obtains a pointer to a CompressedElement from a Variant tensor and then proceeds to dereference it for decompressin...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•10 views

PYSEC-2021-749

TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for rowpartitiontypes of tf.rawops.RaggedTensorToTensor API results in a null pointer dereference and undefined behavior. The implementation accesses the first element of a user supplied list of values...

7.8CVSS6.9AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•11 views

PYSEC-2021-550

TensorFlow is an end-to-end open source platform for machine learning. It is possible to trigger a null pointer dereference in TensorFlow by passing an invalid input to tf.rawops.CompressElement. The implementation was accessing the size of a buffer obtained from the return of a separate function...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•10 views

PYSEC-2021-748

TensorFlow is an end-to-end open source platform for machine learning. It is possible to trigger a null pointer dereference in TensorFlow by passing an invalid input to tf.rawops.CompressElement. The implementation was accessing the size of a buffer obtained from the return of a separate function...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•11 views

PYSEC-2021-265

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS7.2AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•13 views

PYSEC-2021-552

TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...

8.4CVSS6.9AI score0.00173EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•12 views

PYSEC-2021-560

TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, tf.rawops.SparseTensorSliceDataset implementation can be made to dereference a null pointer. The implementation has some argument validation but fails...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•12 views

PYSEC-2021-259

TensorFlow is an end-to-end open source platform for machine learning. It is possible to trigger a null pointer dereference in TensorFlow by passing an invalid input to tf.rawops.CompressElement. The implementation was accessing the size of a buffer obtained from the return of a separate function...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•11 views

PYSEC-2021-562

TensorFlow is an end-to-end open source platform for machine learning. The code for tf.rawops.UncompressElement can be made to trigger a null pointer dereference. The implementation obtains a pointer to a CompressedElement from a Variant tensor and then proceeds to dereference it for decompressin...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•13 views

PYSEC-2021-754

TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to tf.rawops.MatrixDiagPartOp, then the code triggers a null pointer dereference if input is empty or produces invalid behavior, ignoring all values after the first. The...

7.7CVSS7.2AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•12 views

PYSEC-2021-758

TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, tf.rawops.SparseTensorSliceDataset implementation can be made to dereference a null pointer. The implementation has some argument validation but fails...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•11 views

PYSEC-2021-551

TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for rowpartitiontypes of tf.rawops.RaggedTensorToTensor API results in a null pointer dereference and undefined behavior. The implementation accesses the first element of a user supplied list of values...

7.8CVSS6.9AI score0.00167EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•13 views

PYSEC-2021-750

TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap allocated data by...

8.4CVSS6.9AI score0.00173EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•10 views

PYSEC-2021-760

TensorFlow is an end-to-end open source platform for machine learning. The code for tf.rawops.UncompressElement can be made to trigger a null pointer dereference. The implementation obtains a pointer to a CompressedElement from a Variant tensor and then proceeds to dereference it for decompressin...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 7:15 p.m.•13 views

PYSEC-2021-269

TensorFlow is an end-to-end open source platform for machine learning. When a user does not supply arguments that determine a valid sparse tensor, tf.rawops.SparseTensorSliceDataset implementation can be made to dereference a null pointer. The implementation has some argument validation but fails...

7.7CVSS7.1AI score0.0016EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•11 views

PYSEC-2021-771

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0. The implementation has a logic error: it should skip processing i...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•15 views

PYSEC-2021-264

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.ResourceScatterDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•10 views

PYSEC-2021-553

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseReshape can be made to trigger an integral division by 0 exception. The implementation calls the reshaping functor whenever there is at least an index in the input but...

5.5CVSS7.1AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•13 views

PYSEC-2021-275

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a floating point exception in tf.rawops.ResourceGather. The implementation computes the value of a value, batchsize, and then divides by it without checking that this...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•12 views

PYSEC-2021-549

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseDenseCwiseDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•14 views

PYSEC-2021-262

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseReshape can be made to trigger an integral division by 0 exception. The implementation calls the reshaping functor whenever there is at least an index in the input but...

5.5CVSS7.1AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•17 views

PYSEC-2021-555

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.ResourceScatterDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•10 views

PYSEC-2021-747

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseDenseCwiseDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•14 views

PYSEC-2021-764

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a floating point exception in tf.rawops.ResourceGather. The implementation computes the value of a value, batchsize, and then divides by it without checking that this...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•10 views

PYSEC-2021-258

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseDenseCwiseDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•14 views

PYSEC-2021-566

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a floating point exception in tf.rawops.ResourceGather. The implementation computes the value of a value, batchsize, and then divides by it without checking that this...

5.5CVSS7AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•15 views

PYSEC-2021-753

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.ResourceScatterDiv is vulnerable to a division by 0 error. The implementation uses a common class for all binary operations but fails to treat the division by 0 case...

5.5CVSS7AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•13 views

PYSEC-2021-751

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.SparseReshape can be made to trigger an integral division by 0 exception. The implementation calls the reshaping functor whenever there is at least an index in the input but...

5.5CVSS7.1AI score0.00152EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•14 views

PYSEC-2021-282

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0. The implementation has a logic error: it should skip processing i...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/12 6:15 p.m.•10 views

PYSEC-2021-573

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0. The implementation has a logic error: it should skip processing i...

5.5CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/09 9:15 p.m.•17 views

PYSEC-2021-119

23andMe Yamale before 3.0.8 allows remote attackers to execute arbitrary code via a crafted schema file. The schema parser uses eval as part of its processing, and tries to protect from malicious expressions by limiting the builtins that are passed to the eval. When processing the schema, each li...

9.3CVSS8AI score0.0249EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2021/08/09 9:15 p.m.•21 views

PYSEC-2021-118

The Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim...

10CVSS7.2AI score0.02106EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/08/09 9:15 p.m.•9 views

PYSEC-2021-130

JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn’t sanitize the action attribute of html . Using this it is possible to trigger the form...

9.6CVSS7.8AI score0.0266EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/08/02 10:15 p.m.•13 views

PYSEC-2021-370

Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope deployment, run Zope 4 below version 4.6.3 or Zope 5 below version 5.3, and have the optional...

7.5CVSS8.1AI score0.02296EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2021/08/02 10:15 p.m.•10 views

PYSEC-2021-368

Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope deployment, run Zope 4 below version 4.6.3 or Zope 5 below version 5.3, and have the optional...

7.5CVSS8.1AI score0.02296EPSS
SaveExploits0References2Affected Software1
Total number of security vulnerabilities7587