CVEs published February 3, 2022
45 CVEs were published on February 3, 2022: 0 critical, 6 high.
- Published
- 45
- Critical
- 0
- High
- 6
- Medium
- 14
- Low
- 0
- Unrated
- 25
- Now in CISA KEV
- 0
- Fix available
- 22
Most affected products
- tensorflow · tensorflow-cpu +1
- 10
- tensorflow · tensorflow-gpu +1
- 3
- tensorflow-cpu · tensorflow-gpu +1
- 3
- django
- 2
- tensorflow-gpu · tensorflow +1
- 2
- tensorflow-cpu · tensorflow +1
- 1
- tensorflow-gpu · tensorflow-cpu +1
- 1
High 6
- CVE-2022-21740Heap overflow in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-21736Undefined behavior in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-21727Integer overflow in Tensorflowtensorflow-gpu · tensorflow-cpu +1
- CVE-2022-21726Out of bounds read in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-21728Out of bounds read in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-21730Out of bounds read in Tensorflowtensorflow-cpu · tensorflow +1
Medium, low and unrated 39
- CVE-2021-45268A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution (
- CVE-2022-24307Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities.
- CVE-2022-21741Division by zero in TFLitetensorflow-gpu · tensorflow +1
- CVE-2022-21737Assertion failure based denial of service in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2021-44866An issue was discovered in Online-Movie-Ticket-Booking-System 1.0.
- CVE-2022-21738Integer overflow leading to crash in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-21739Null pointer dereference in TensorFlowtensorflow · tensorflow-cpu +1
- CVE-2022-21734`CHECK`-failures in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-21735Division by zero in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23569`CHECK`-fails when building invalid tensor shapes in Tensorflowtensorflow-cpu · tensorflow-gpu +1
- CVE-2022-21729Overflow and uncaught divide by zero in Tensorflowtensorflow-cpu · tensorflow-gpu +1
- CVE-2022-21725Division by zero in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-23567Integer overflows in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-23568Integer overflows in Tensorflowtensorflow-cpu · tensorflow-gpu +1
- CVE-2022-21731Type confusion leading to segfault in Tensorflowtensorflow-gpu · tensorflow +1
- CVE-2022-21733Memory exhaustion in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-21732Memory exhaustion in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-24121SQL Injection vulnerability discovered in Unified Office Total Connect Now that would allow an attacker to extract sensitive information thr
- CVE-2022-23873Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'user_firstna
- CVE-2022-23357mozilo2.0 was discovered to be vulnerable to directory traversal attacks via the parameter curent_dir.
- CVE-2022-23871Multiple cross-site scripting (XSS) vulnerabilities in the component outcomes_addProcess.php of Gibbon CMS v22.0.01 allow attackers to execu
- CVE-2022-24031An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5.
- CVE-2021-33625An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword.
- CVE-2021-43323An issue was discovered in UsbCoreDxe in Insyde InsydeH2O with kernel 5.5 before 05.51.45, 5.4 before 05.43.45, 5.3 before 05.35.45, 5.2 bef
- CVE-2021-42113An issue was discovered in StorageSecurityCommandDxe in Insyde InsydeH2O with Kernel 5.1 before 05.14.28, Kernel 5.2 before 05.24.28, and Ke
- CVE-2021-41838An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O.
- CVE-2021-42554An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel
- CVE-2021-41839An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O.
- CVE-2021-33627An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 b
- CVE-2021-42060An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel
- CVE-2021-41837An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O.
- CVE-2021-41840An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O.
- CVE-2022-24030An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5.
- CVE-2021-42059An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 b
- CVE-2021-43615An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 before 05.35.23, 5.4 be
- CVE-2021-41841An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O.
- CVE-2020-5953A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that derefere
- CVE-2022-22818The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current contedjango
- CVE-2022-23833An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2.django