Tagged “pip”
CVEs tagged pip, newest first.
4668 CVEsRSS
CVE-2022-29210Medium· 5.5Heap buffer overflow due to incorrect hash function in TensorFlow
Heap buffer overflow due to incorrect hash function in TensorFlow
CVE-2022-29194Medium· 5.5Missing validation causes denial of service via `DeleteSessionTensor`
Missing validation causes denial of service via `DeleteSessionTensor`
CVE-2022-29195Medium· 5.5Missing validation causes denial of service via `StagePeek`
Missing validation causes denial of service via `StagePeek`
CVE-2022-29192Medium· 5.5Missing validation crashes `QuantizeAndDequantizeV4Grad`
Missing validation crashes `QuantizeAndDequantizeV4Grad`
CVE-2022-29191Medium· 5.5Missing validation causes denial of service via `GetSessionTensor`
Missing validation causes denial of service via `GetSessionTensor`
CVE-2019-13594High· 8.8Mirumee Saleor CSRF Protection Disabled
Mirumee Saleor CSRF Protection Disabled
CVE-2022-29209Medium· 5.5Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
CVE-2022-29202Medium· 5.5Denial of service in `tf.ragged.constant` due to lack of validation
Denial of service in `tf.ragged.constant` due to lack of validation
CVE-2019-6446Critical· 9.8PoCNumpy Deserialization of Untrusted Data
Numpy Deserialization of Untrusted Data
CVE-2020-35459High· 7.8ClusterLabs crmsh vulnerable to shell code injection
ClusterLabs crmsh vulnerable to shell code injection
CVE-2022-29212Medium· 5.5Core dump when loading TFLite models with quantization in TensorFlow
Core dump when loading TFLite models with quantization in TensorFlow
CVE-2022-29216High· 7.8Code injection in `saved_model_cli` in TensorFlow
Code injection in `saved_model_cli` in TensorFlow
CVE-2022-29207Medium· 5.5Undefined behavior when users supply invalid resource handles
Undefined behavior when users supply invalid resource handles
CVE-2022-29196Medium· 5.5Missing validation causes denial of service via `Conv3DBackpropFilterV2`
Missing validation causes denial of service via `Conv3DBackpropFilterV2`
CVE-2019-10047Medium· 5.4PyDio Stored XSS Vulnerability
PyDio Stored XSS Vulnerability
CVE-2022-29213Medium· 5.5Incomplete validation in signal ops leads to crashes in TensorFlow
Incomplete validation in signal ops leads to crashes in TensorFlow
CVE-2022-29205Medium· 5.5Segfault due to missing support for quantized types
Segfault due to missing support for quantized types
CVE-2021-38155High· 7.5OpenStack Keystone allows information disclosure during account locking
OpenStack Keystone allows information disclosure during account locking
CVE-2022-29200Medium· 5.5Missing validation causes denial of service via `LSTMBlockCell`
Missing validation causes denial of service via `LSTMBlockCell`
CVE-2022-29208High· 7.1Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow
CVE-2022-29193Medium· 5.5Missing validation causes `TensorSummaryV2` to crash
Missing validation causes `TensorSummaryV2` to crash
CVE-2015-9543Low· 3.3OpenStack Nova can leak consoleauth token into log files
OpenStack Nova can leak consoleauth token into log files
CVE-2014-3840MediumPoCMayan EDMS multiple cross-site scripting (XSS) vulnerabilities
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities
CVE-2012-3542High· 7.5OpenStack Keystone Allows Remote User Account Creation
OpenStack Keystone Allows Remote User Account Creation
CVE-2015-7315Medium· 5.9Plone unauthorized member addition vulnerability
Plone unauthorized member addition vulnerability
CVE-2012-0878Medium· 6.5Paste Script has improper group memberships permissions
Paste Script has improper group memberships permissions
CVE-2017-12791Critical· 9.8SaltStack Salt Directory traversal vulnerability in minion id validation
SaltStack Salt Directory traversal vulnerability in minion id validation
CVE-2014-1604LowRPLY Predictable Tmpfile Names Allows Cache Spoofing
RPLY Predictable Tmpfile Names Allows Cache Spoofing
CVE-2011-2185MediumFabric vulnerable to symlink attack on tmp files
Fabric vulnerable to symlink attack on tmp files
CVE-2013-1665MediumXML External Entity (XXE) in Django
XML External Entity (XXE) in Django