Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict `unhandl…

▾ Sunlitnextjs · nextjsEPSS 1.2%via OSV

CVE-2022-34668Critical· 9.8PoC

4y ago

NVFLARE unsafe deserialization due to Pickle

▾ Abyssalnvflare · nvflareEPSS 11%via OSV

CVE-2022-36055Medium· 6.5

4y ago

Helm Vulnerable to denial of service through string value parsing

▾ Sunlithelm · helm.sh/helm/v3EPSS 1.0%via OSV

Tagged “osv”

TensorFlow vulnerable to `CHECK` fail in `tf.linalg.matrix_rank`

TensorFlow vulnerable to `CHECK` fail in `TensorListFromTensor`

TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel`

TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVars`

TensorFlow vulnerable to `CHECK` fail in `QuantizeAndDequantizeV3`

TensorFlow vulnerable to `CHECK` fail in `LRNGrad`

TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation

TensorFlow vulnerable to `CHECK` failures in `FractionalAvgPoolGrad`

TensorFlow vulnerable to null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef`

TensorFlow vulnerable to null-dereference in `mlir::tfg::TFOp::nameAttr`

TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions

TensorFlow vulnerable to segfault in `QuantizedMatMul`

TensorFlow vulnerable to segfault in `QuantizedAvgPool`

TensorFlow vulnerable to segfault in `QuantizedBiasAdd`

TensorFlow vulnerable to segfault in `SparseBincount`

TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`

TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad`

KubeVirt vulnerable to arbitrary file read on host

Failure to strip relative path components in net/url

MEI2Volpiano is vulnerable to XML External Entity (XXE), leading to a Denial of Service (DoS)

golang.org/x/net/http2 Denial of Service vulnerability

Barbican authorization flaw before v14.0.0

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.

Unbounded recursion in JSON parsing in k8s.io/apimachinery

sosreport Exposure of Sensitive Information vulnerability

openstack-barbican Denial of Service vulnerability

Pinniped Supervisor Insufficient Session Expiration vulnerability

Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affecte…

NVFLARE unsafe deserialization due to Pickle

Helm Vulnerable to denial of service through string value parsing