CVEs published in February 2022
2,617 vulnerabilities, 311 critical, 18 exploited.
- bildsben itunesrpc-remasteredOS command injection in iTunesRPC-Remastered8.1 High
- google tensorflowOut of bounds write in TFLite8.8 High
- google tensorflowDivision by zero in TFLite6.5 Medium
- google tensorflowInteger overflow in TFLite array creation7.6 High
- google tensorflowNull-dereference in Tensorflow6.5 Medium
- google tensorflowReachable Assertion in Tensorflow6.5 Medium
- google tensorflow`CHECK`-failures in Tensorflow6.5 Medium
- google tensorflowInteger overflow in Tensorflow7.6 High
- google tensorflowInsecure temporary file in Tensorflow7.1 High
- google tensorflowInteger overflow in TFLite8.8 High
- google tensorflowRead and Write outside of bounds in TFLite8.8 High
- google tensorflowOut of bounds read and write in Tensorflow8.8 High
- google tensorflowReachable Assertion in Tensorflow6.5 Medium
- google tensorflowOut of bounds write in Tensorflow8.8 High
- google tensorflowNull-dereference in Tensorflow6.5 Medium
- google tensorflowMemory leak in Tensorflow4.3 Medium
- google tensorflowCrash when type cannot be specialized in Tensorflow6.5 Medium
- google tensorflowUninitialized variable access in Tensorflow7.6 High
- google tensorflowMemory leak in decoding PNG images in Tensorflow4.3 Medium
- google tensorflow`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow6.5 Medium
- google tensorflowAbort caused by allocating a vector that is too large in Tensorflow6.5 Medium
- google tensorflow`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow6.5 Medium
- google tensorflowInteger overflow in Tensorflow6.5 Medium
- google tensorflowInteger overflow in Tensorflow6.5 Medium
- google tensorflow`CHECK`-fails due to attempting to build a reference tensor in Tensorflow6.5 Medium
- google tensorflowNull pointer dereference in Grappler's `IsConstant` in Tensorflow6.5 Medium
- google tensorflowMultiple `CHECK`-fails in `function.cc` in Tensorflow6.5 Medium
- google tensorflow`CHECK`-failures in binary ops in Tensorflow6.5 Medium
- google tensorflow`CHECK`-failures in `TensorByteSize` in Tensorflow6.5 Medium
- google tensorflowUse after free in `DecodePng` in Tensorflow7.6 High
- google tensorflowOut of bounds read in Tensorflow8.1 High
- google tensorflowInteger overflow in Tensorflow8.8 High
- google tensorflowNull pointer dereference in TensorFlow5.3 Medium
- google tensorflowOut of bounds read in Tensorflow8.8 High
- google tensorflowCrash due to erroneous `StatusOr` in Tensorflow5.9 Medium
- google tensorflowStack overflow in Tensorflow7.5 High
- google tensorflowSegfault in `simplifyBroadcast` in Tensorflow5.9 Medium
- fleetdm fleetLimited ability to spoof SAML authentication with missing audience verification5.3 Medium
- jsdecena jsdecena/laracom, laracom project laracom +1 moreUnrestricted Upload of File with Dangerous Type in jsdecena/laracom8.1 High
- wire wire-webappExpired Ephemeral Messages not reliably removed in wire-webapp4.4 Medium
- xwiki, xwiki xwiki-platform +1 moreXSS by SVG upload in xwiki-platform5.4 Medium
- schneider-electric ecostruxure power monitoring expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...5.4 Medium
- schneider-electric ecostruxure power monitoring expertA CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated...8.8 High
- schneider-electric ecostruxure power monitoring expertA CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the...6.5 Medium
- schneider-electric easergy p3 firmwareA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a...8.8 High
- schneider-electric modicon m340 bmxp341000 firmware, modicon m340 bmxp342000 firmware, modicon m340 bmxp3420102 firmware +3 more +5 moreA CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of...7.5 High
- schneider-electric 140cpu65 firmware, 140noc78000 firmware, 140noe77111 firmware +7 more +9 moreA CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that...8.8 High
- schneider-electric easergy p5 firmwareA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a...8.8 High
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information...7.5 High
- acronis cyber protect home office, true image 2021, true image +2 moreLocal privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service7.3 High
- Show moreLoading…