CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- google tensorflow`CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs` in TensorFlow5.9 Medium
- google tensorflowNull-dereference in `mlir::tfg::TFOp::nameAttr` in TensorFlow5.9 Medium
- google tensorflowInteger overflow in math ops in TensorFlow5.9 Medium
- google tensorflowAssertion fail on MLIR empty edge names in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `DenseBincount` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `QuantizeAndDequantizeV3` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `FractionalMaxPoolGrad` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `RaggedTensorToVariant` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel` in TensorFlow5.9 Medium
- google tensorflowSegfault in `QuantizedRelu` and `QuantizedRelu6`5.9 Medium
- google tensorflowSegfault TFLite converter on per-channel quantized transposed convolutions in TensorFlow5.9 Medium
- google tensorflowSegfault in `QuantizeDownAndShrinkRange` in TensorFlow5.9 Medium
- google tensorflowSegfault in `QuantizedBiasAdd` in TensorFlow5.9 Medium
- google tensorflowSegfault in `QuantizedMatMul` in TensorFlow5.9 Medium
- stealjs stealsteal vulnerable to Prototype Pollution9.8 Critical
- craftcms craft cmsCraft CMS vulnerable to Cross-site Scripting via entry revisions and drafts5.4 Medium
- google tensorflow`CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `Conv2DBackpropInput` in TensorFlow5.9 Medium
- google tensorflowSegfault in `QuantizedInstanceNorm` in TensorFlow5.9 Medium
- tesla, tesla model 3 firmware +1 moreTesla Model 3 V11.0(2022.4.5.1 6b701552d7a6) Tesla mobile app v4.23 is vulnerable to...5.3 Medium
- google tensorflow`CHECK` fail in `AvgPoolGrad` in TensorFlow5.9 Medium
- google tensorflowSegfault in `QuantizedAvgPool` in TensorFlow5.9 Medium
- google tensorflowSegfault in `QuantizedAdd` in TensorFlow5.9 Medium
- testlinkTestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via ...5.4 Medium
- craftcms craft cmsCraft CMS vulnerable to stored Cross-site Scripting via /admin/settings/fields page5.4 Medium
- harborHarbor fails to validate the user permissions when updating a robot account6.4 Medium
- google tensorflowSegfault in `BlockLSTMGradV2` in TensorFlow5.9 Medium
- google tensorflowSegfault in `LowerBound` and `UpperBound` in TensorFlow5.9 Medium
- sucuri security, sucuri inc. security (wordpress plugin) +1 moreWordPress Sucuri Security plugin <= 1.8.33 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- honeywell softmasterHoneywell SoftMaster Incorrect Permission Assignment for Critical Resource6.2 Medium
- honeywell softmasterHoneywell SoftMaster Uncontrolled Search Path Element8.8 High
- jasper project jasperJasPer 3.0.6 allows denial of service via a reachable assertion in the function inttobits in...5.5 Medium
- visam vbaseWhen logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static...7.5 High
- zoom on-premise meeting connector mmrZoom On-Premise Deployments: Improper Access Control8.2 High
- google tensorflow`CHECK` failures in `FractionalAvgPoolGrad` in TensorFlow5.9 Medium
- google tensorflow`CHECK` failure in `TensorListReserve` in TensorFlow5.9 Medium
- google tensorflow`CHECK` failures in `AvgPool3DGrad` in TensorFlow5.9 Medium
- google tensorflow`CHECK` failures in `UnbatchGradOp` in TensorFlow5.9 Medium
- google tensorflowInt overflow in `RaggedRangeOp` in Tensoflow5.9 Medium
- google tensorflow`CHECK` failure in `AvgPoolOp` in Tensorflow5.9 Medium
- google tensorflowOOB read in `Gather_nd` op in TensorFlow Lite7.0 High
- google tensorflowOut of bounds write in `scatter_nd` op in TensorFlow Lite7.0 High
wiresharkMageiaUpdated wireshark packages fix security vulnerabilityNo score- harborHarbor fails to validate the user permissions when updating tag immutability policies6.4 Medium
- 6kare emakin6Kare Emakin 5.0.341.0 is affected by Cross Site Scripting (XSS) via the /rpc/membership...6.1 Medium
- harborHarbor fails to validate user permissions while Viewing, updating and deleting Webhook policies7.7 High
- google tensorflow`CHECK` failure in `SobolSample` via missing validation in TensorFlow5.9 Medium
- google tensorflowOOB read in `Gather_nd` op in TensorFlow Lite Micro7.0 High
- google tensorflow`CHECK` failure in tf.reshape in Tensorflow5.9 Medium
- harborHarbor fails to validate the user permissions when updating tag retention policies7.7 High
- Show moreLoading…