Browse CVEs

CRITICAL 9.1 CVE-2022-41902 TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs … Tensorflow 2.8.4 / 2.9.3+ Fix from $2,3002022-12-06 CRITICAL 9.1 CVE-2022-41910 TensorFlow is an open source platform for machine learning. The function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs … Tensorflow 2.8.4 / 2.9.3+ Fix from $2,3002022-12-06 MEDIUM 5.5 CVE-2022-42779 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Android No fix yet Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-42780 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Android No fix yet Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-42781 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Android Mitigation only Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-42773 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Android No fix yet Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-42774 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Android No fix yet Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-42761 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Android No fix yet Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-42762 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Android Mitigation only Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-42759 In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services. Android No fix yet Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-39130 In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel. Android Mitigation only Fix from $1,6002022-12-06 MEDIUM 6.5 CVE-2022-35260 curl can be told to parse a `.netrc` file for credentials. If that file endsin a line with 4095 consecutive non-white space letters and no newline, c… Curl 7.86.0 / 8.2.12+ Fix from $1,6002022-12-05 CRITICAL 9.8 CVE-2022-45315 Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows authenticated att… Routeros 7.6+ Fix from $2,3002022-12-05 HIGH 8.8 CVE-2022-45313 Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulnerability allows attackers to e… Routeros 7.5+ Fix from $1,9502022-12-05 MEDIUM 5.4 CVE-2022-46149 Cap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as we… Capnp 0.7.1 / 0.9.2+ Fix from $1,6002022-11-30 MEDIUM 6.5 CVE-2022-4144 An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not check the size of the structu… Fedora after 7.1.0 Fix from $1,6002022-11-29 CRITICAL 9.1 CVE-2022-45909 drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request. Drachtio Server 0.8.19+ Fix from $2,3002022-11-26 HIGH 7.8 CVE-2022-31617 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities ca… Gpu Display Driver 11.8 / 13.3+ Fix from $1,9502022-11-19 HIGH 7.1 CVE-2022-31616 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user … Gpu Display Driver 11.8 / 13.3+ Fix from $1,9502022-11-19 HIGH 7.1 CVE-2022-31612 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user … Gpu Display Driver 11.8 / 13.3+ Fix from $1,9502022-11-19 CRITICAL 9.8 CVE-2022-41900 TensorFlow is an open source platform for machine learning. The security vulnerability results in FractionalMax(AVG)Pool with illegal pooling_ratio. … Tensorflow 2.8.4 / 2.9.3+ Fix from $2,3002022-11-18 HIGH 7.5 CVE-2022-41897 TensorFlow is an open source platform for machine learning. If `FractionMaxPoolGrad` is given outsize inputs `row_pooling_sequence` and `col_pooling_… Tensorflow 2.8.4 / 2.9.3+ Fix from $1,9502022-11-18 HIGH 7.5 CVE-2022-41895 TensorFlow is an open source platform for machine learning. If `MirrorPadGrad` is given outsize input `paddings`, TensorFlow will give a heap OOB err… Tensorflow 2.8.4 / 2.9.3+ Fix from $1,9502022-11-18 CRITICAL 9.1 CVE-2022-41880 TensorFlow is an open source platform for machine learning. When the `BaseCandidateSamplerOp` function receives a value in `true_classes` larger than… Tensorflow 2.8.4 / 2.9.3+ Fix from $2,3002022-11-18 HIGH 7.5 CVE-2022-41883 TensorFlow is an open source platform for machine learning. When ops that have specified input sizes receive a differing number of inputs, the execut… Tensorflow Patch available Fix from $1,9502022-11-18 MEDIUM 5.7 CVE-2022-39316 FreeRDP is a free remote desktop protocol library and clients. In affected versions there is an out of bound read in ZGFX decoder component of FreeRD… Fedora 2.9.0+ Fix from $1,6002022-11-16 HIGH 7.8 CVE-2022-3737 In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validation of in… Automationworx Software Suite Mitigation only Fix from $1,9502022-11-15 HIGH 7.5 CVE-2022-33236 Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Sn… Ar8035 Firmware Mitigation only Fix from $1,9502022-11-15 HIGH 7.5 CVE-2022-33237 Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivit… Aqt1000 Firmware Mitigation only Fix from $1,9502022-11-15 MEDIUM 5.5 CVE-2022-25676 Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snap… Aqt1000 Firmware Mitigation only Fix from $1,6002022-11-15