Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 282 of 437.
- CVE-2022-36017 Segfault in `Requantize` in TensorFlow
- CVE-2022-36016 `CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs` in TensorFlow
- CVE-2022-36015 Integer overflow in math ops in TensorFlow
- CVE-2022-36014 Null-dereference in `mlir::tfg::TFOp::nameAttr` in TensorFlow
- CVE-2022-36013 Null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef` in TensorFlow
- CVE-2022-36012 Assertion fail on MLIR empty edge names in TensorFlow
- CVE-2022-36011 Null dereference on MLIR on empty function attributes in TensorFlow
- CVE-2022-36010 Arbitrary code execution via function parsing in react-editable-json-tree
- CVE-2022-3601 Image Hover Effects Css3 <= 4.5 - Admin+ Stored XSS
- CVE-2022-36009 Incorrect parsing of access level in gomatrixserverlib and dendrite
- CVE-2022-36008 Message length overflow in frontier
- CVE-2022-36007 Partial Path Traversal in com.github.jlangch:venice
- CVE-2022-36006 Authenticated remote code execution due to insecure deserialization (GHSL-2022-063)
- CVE-2022-36005 `CHECK` fail in `FakeQuantWithMinMaxVarsGradient` in TensorFlow
- CVE-2022-36004 `CHECK` fail in `tf.random.gamma` in TensorFlow
- CVE-2022-36003 `CHECK` fail in `RandomPoissonV2` in TensorFlow
- CVE-2022-36002 `CHECK` fail in `Unbatch` in TensorFlow
- CVE-2022-36001 `CHECK` fail in `DrawBoundingBoxes` in TensorFlow
- CVE-2022-36000 Null dereference on MLIR on empty function attributes in TensorFlow
- CVE-2022-3600 Easy Digital Downloads < 3.1.0.2 - Unauthenticated CSV Injection
- CVE-2022-35999 `CHECK` fail in `Conv2DBackpropInput` in TensorFlow
- CVE-2022-35998 `CHECK` fail in `EmptyTensorList` in TensorFlow
- CVE-2022-35997 `CHECK` fail in `tf.sparse.cross` in TensorFlow
- CVE-2022-35996 Floating point exception in `Conv2D` in TensorFlow
- CVE-2022-35995 `CHECK` fail in `AudioSummaryV2` in TensorFlow
- CVE-2022-35994 `CHECK` fail in `CollectiveGather` in TensorFlow
- CVE-2022-35993 `CHECK` fail in `SetSize` in TensorFlow
- CVE-2022-35992 `CHECK` fail in `TensorListFromTensor` in TensorFlow
- CVE-2022-35991 `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in TensorFlow
- CVE-2022-35990 `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient` in TensorFlow
- CVE-2022-3599 Memory corruption in libtiff
- CVE-2022-35989 `CHECK` fail in `MaxPool` in TensorFlow
- CVE-2022-35988 `CHECK` fail in `tf.linalg.matrix_rank` in TensorFlow
- CVE-2022-35987 `CHECK` fail in `DenseBincount` in TensorFlow
- CVE-2022-35986 Segfault in `RaggedBincount` in TensorFlow
- CVE-2022-35985 `CHECK` fail in `LRNGrad` in TensorFlow
- CVE-2022-35984 `CHECK` fail in `ParameterizedTruncatedNormal` in TensorFlow
- CVE-2022-35983 `CHECK` fail in `Save` and `SaveSlices` in TensorFlow
- CVE-2022-35982 Segfault in `SparseBincount` in TensorFlow
- CVE-2022-35981 `CHECK` fail in `FractionalMaxPoolGrad` in TensorFlow
- CVE-2022-35980 OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information
- CVE-2022-3598 Memory corruption in libtiff
- CVE-2022-35979 Segfault in `QuantizedRelu` and `QuantizedRelu6`
- CVE-2022-35978 Lua sandbox escape from mod in Minetest
- CVE-2022-35977 Integer overflow in certain command arguments can drive Redis to OOM panic
- CVE-2022-35976 Improper KubeConfig handling allows arbitrary code execution
- CVE-2022-35975 Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode
- CVE-2022-35974 Segfault in `QuantizeDownAndShrinkRange` in TensorFlow
- CVE-2022-35973 Segfault in `QuantizedMatMul` in TensorFlow
- CVE-2022-35972 Segfault in `QuantizedBiasAdd` in TensorFlow
- CVE-2022-35971 `CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow
- CVE-2022-35970 Segfault in `QuantizedInstanceNorm` in TensorFlow
- CVE-2022-3597 Memory corruption in libtiff
- CVE-2022-35969 `CHECK` fail in `Conv2DBackpropInput` in TensorFlow
- CVE-2022-35968 `CHECK` fail in `AvgPoolGrad` in TensorFlow
- CVE-2022-35967 Segfault in `QuantizedAdd` in TensorFlow
- CVE-2022-35966 Segfault in `QuantizedAvgPool` in TensorFlow
- CVE-2022-35965 Segfault in `LowerBound` and `UpperBound` in TensorFlow
- CVE-2022-35964 Segfault in `BlockLSTMGradV2` in TensorFlow
- CVE-2022-35963 `CHECK` failures in `FractionalAvgPoolGrad` in TensorFlow
- CVE-2022-35962 Crafted link in Zulip message can cause disclosure of credentials
- CVE-2022-35961 ECDSA signature malleability in OpenZeppelin Contracts
- CVE-2022-35960 `CHECK` failure in `TensorListReserve` in TensorFlow
- CVE-2022-3596 Instack-undercloud: rsync leaks information to undercloud
- CVE-2022-35959 `CHECK` failures in `AvgPool3DGrad` in TensorFlow
- CVE-2022-35957 Authentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin
- CVE-2022-35956 update_by_case before 0.1.3 vulnerable to sql injection
- CVE-2022-35954 Delimiter injection vulnerability in @actions/core exportVariable
- CVE-2022-35953 URL Redirection to Untrusted Site ('Open Redirect') in bookwyrm
- CVE-2022-35952 `CHECK` failures in `UnbatchGradOp` in TensorFlow
- CVE-2022-35951 Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow
- CVE-2022-35950 OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item
- CVE-2022-3595 Linux Kernel CIFS sess.c sess_free_buffer double free
- CVE-2022-35949 `undici.request` vulnerable to SSRF using absolute URL on `pathname`
- CVE-2022-35948 CRLF Injection in Nodejs ‘undici’ via Content-Type
- CVE-2022-35947 SQL injection in GLPI
- CVE-2022-35946 SQL injection through plugin controller in GLPI
- CVE-2022-35945 Cross site scripting (XSS) via registration API in GLPI
- CVE-2022-35944 October CMS Safe Mode bypass leads to authenticated RCE (Remote Code Execution)
- CVE-2022-35943 SameSite may allow cross-site request forgery (CSRF) protection to be bypassed
- CVE-2022-35942 loopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` Filter
- CVE-2022-35941 `CHECK` failure in `AvgPoolOp` in Tensorflow
- CVE-2022-35940 Int overflow in `RaggedRangeOp` in Tensoflow
- CVE-2022-3594 Linux Kernel BPF r8152.c intr_callback logging of excessive data
- CVE-2022-35939 Out of bounds write in `scatter_nd` op in TensorFlow Lite
- CVE-2022-35938 OOB read in `Gather_nd` op in TensorFlow Lite Micro
- CVE-2022-35937 OOB read in `Gather_nd` op in TensorFlow Lite
- CVE-2022-35936 Ethermint DoS through Unintended Contract Selfdestruct
- CVE-2022-35935 `CHECK` failure in `SobolSample` via missing validation in TensorFlow
- CVE-2022-35934 `CHECK` failure in tf.reshape in Tensorflow
- CVE-2022-35933 PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)
- CVE-2022-35932 Missing rate limit when trying to join a password protected Nextcloud Talk conversation
- CVE-2022-35931 Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator
- CVE-2022-35930 Ability to bypass attestation verification in sigstore PolicyController
- CVE-2022-35929 False positive signature verification in cosign
- CVE-2022-35928 AES Crypt for Linux Password Security Vulnerability
- CVE-2022-35927 Unverified DIO prefix info lengths in RPL-Classic in Contiki-NG
- CVE-2022-35926 Out-of-bounds read in IPv6 neighbor solicitation in Contiki-NG
- CVE-2022-35925 Missing rate limit in Authentication in bookwyrm
- CVE-2022-35924 Verification requests (magic link) sent to unwanted emails