Advisory Catalog

pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)

pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

Python Charmers Future denial of service vulnerability

rdiffweb vulnerable to Cross-Site Request Forgery

OpenStack Kolla sudo privilege escalation vulnerability

UBI Reader vulnerable to Path Traversal

A vulnerability classified as problematic was found in pacparser up to 1.3.x. Affected by this vulnerability is the function pacparser_find_proxy of the file src/pacparser.c. The manipulation of the argument url leads to buffer overflow. Attacking locally is a requirement. Upgrading to version 1.4.0

pgadmin4 vulnerable to Code Injection

Certifi removing TrustCor root certificate

Passeo uses insecure random number generator

GuardDog vulnerable to arbitrary file write when scanning a specially-crafted PyPI package

XBlock vulnerable to Cross-Site Scripting (XSS)

OS Command Injection in Apache Airflow

CKAN contains Improper Authentication leading to account takeover

Invalid char to bool conversion when printing a tensor

Segfault in `CompositeTensorVariantToComponents`

`CHECK` fail via inputs in `PyFunc`

Overflow in `ResizeNearestNeighborGrad`

`CHECK_EQ` fail via input in `SparseMatrixNNZ`

`CHECK` fail via inputs in `SdcaOptimizer`

`CHECK` fail via inputs in `SparseFillEmptyRowsGrad`

`FractionalMaxPoolGrad` Heap out of bounds read

`tf.raw_ops.Mfcc` crashes

`MirrorPadGrad` heap out of bounds read

Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite

`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`

Segfault in `tf.raw_ops.TensorListConcat`

`CHECK` fail in `BCast` overflow

Segfault via invalid attributes in `pywrap_tfe_src.cc`

FPE in `tf.image.generate_bounding_box_proposals`

Overflow in `tf.keras.losses.poisson`

Overflow in `ImageProjectiveTransformV2`

Overflow in `FusedResizeAndPadConv2D`

Seg fault in `ndarray_tensor_bridge` due to zero and large inputs

Out of bounds segmentation fault due to unequal op inputs in Tensorflow

LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind

Apache Airflow subject to Exposure of Sensitive Information

Apache Airflow vulnerable to OS Command Injection via example DAGs

Pillow vulnerable to Data Amplification attack.

Pillow subject to DoS via SAMPLESPERPIXEL tag

Cross Site Scripting vulnerability in wsgidav when directory browsing is enabled

snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

cleo is vulnerable to Regular Expression Denial of Service (ReDoS)

pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack

wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() at /bits/stl_vector.h.

Keylime: unhandled exceptions could lead to invalid attestation states

Ansible leaks password to logs

Execution with Unnecessary Privileges in JupyterApp

Apache IoTDB subject to ReDOS with Java 8