Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 119 of 273.
- CVE-2021-37704 Exposed phpinfo() in PhpFastCache
- CVE-2021-37703 Information exposure in Discourse
- CVE-2021-37702 Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore
- CVE-2021-37701 Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
- CVE-2021-37700 Clipboard-based DOM-XSS
- CVE-2021-3770 Heap-based Buffer Overflow in vim/vim
- CVE-2021-37699 Open Redirect in Next.js versions below 11.1.0
- CVE-2021-37698 Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer
- CVE-2021-37697 Sensitive information leak in Welcome of tmerc-cogs
- CVE-2021-37696 Sensitive information leak in MassDM of tmerc-cogs
- CVE-2021-37695 Execution of JavaScript code using malformed HTML in ckeditor
- CVE-2021-37694 Code injection issue for java-spring-cloud-stream-template
- CVE-2021-37693 Re-use of email tokens in Discourse
- CVE-2021-37692 Segfault on strings tensors with mistmatched dimensions in TensorFlow
- CVE-2021-37691 Division by zero in LSH in TensorFlow Lite
- CVE-2021-37690 Use after free and segfault in shape inference functions in TensorFlow
- CVE-2021-3769 OS Command Injection in ohmyzsh/ohmyzsh
- CVE-2021-37689 Null pointer dereference in TensorFlow Lite MLIR optimizations
- CVE-2021-37688 Null pointer dereference in TensorFlow Lite
- CVE-2021-37687 Heap OOB in TensorFlow Lite's `Gather*` implementations
- CVE-2021-37686 Infinite loop in TensorFlow Lite
- CVE-2021-37685 Heap OOB in TensorFlow Lite
- CVE-2021-37684 Division by zero in TensorFlow Lite pooling operations
- CVE-2021-37683 Division by zero in TensorFlow Lite division operations
- CVE-2021-37682 Use of unitialized value in TensorFlow Lite
- CVE-2021-37681 Null pointer exception in TensorFlow Lite
- CVE-2021-37680 Division by zero in TFLite in TensorFlow
- CVE-2021-3768 Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack
- CVE-2021-37679 Heap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow
- CVE-2021-37678 Arbitrary code execution due to YAML deserialization
- CVE-2021-37677 Missing validation in shape inference for `Dequantize` in TensorFlow
- CVE-2021-37676 Reference binding to nullptr in shape inference in TensorFlow
- CVE-2021-37675 Division by 0 in most convolution operators in TensorFlow
- CVE-2021-37674 Incomplete validation in `MaxPoolGrad` in TensorFlow
- CVE-2021-37673 `CHECK`-fail in `MapStage` in TensorFlow
- CVE-2021-37672 Heap OOB in `SdcaOptimizerV2` in TensorFlow
- CVE-2021-37671 Reference binding to nullptr in map operations in TensorFlow
- CVE-2021-37670 Heap OOB in `UpperBound` and `LowerBound` in TensorFlow
- CVE-2021-3767 Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack
- CVE-2021-37669 Crash in NMS ops caused by integer conversion to unsigned in TensorFlow
- CVE-2021-37668 Division by zero in TensorFlow Lite `tf.raw_ops.UnravelIndex`
- CVE-2021-37667 Reference binding to nullptr in unicode encoding in TensorFlow
- CVE-2021-37666 Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow
- CVE-2021-37665 Incomplete validation in MKL requantization in TensorFlow
- CVE-2021-37664 Heap OOB in boosted trees in TensorFlow
- CVE-2021-37663 Incomplete validation in `QuantizeV2` in TensorFlow
- CVE-2021-37662 Reference binding to nullptr in boosted trees in TensorFlow
- CVE-2021-37661 Crash caused by integer conversion to unsigned in TensorFlow
- CVE-2021-37660 Division by 0 in inplace operations in TensorFlow
- CVE-2021-3766 Prototype Pollution in vincit/objection.js
- CVE-2021-37659 Out of bounds read via null pointer dereference in TensorFlow
- CVE-2021-37658 Reference binding to nullptr in `MatrixSetDiagV*` ops in TensorFlow
- CVE-2021-37657 Reference binding to nullptr in `MatrixDiagV*` ops in TensorFlow
- CVE-2021-37656 Reference binding to nullptr in `RaggedTensorToSparse` in TensorFlow
- CVE-2021-37655 Heap OOB in `ResourceScatterUpdate` in TensorFlow
- CVE-2021-37654 Heap OOB and CHECK fail in `ResourceGather` in TensorFlow
- CVE-2021-37653 Division by 0 in `ResourceGather` in TensorFlow
- CVE-2021-37652 Use after free in boosted trees creation in TensorFlow
- CVE-2021-37651 Heap buffer overflow in `FractionalAvgPoolGrad` in TensorFlow
- CVE-2021-37650 Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlow
- CVE-2021-3765 Inefficient Regular Expression Complexity in validatorjs/validator.js
- CVE-2021-37649 Null pointer dereference in `UncompressElement` in TensorFlow
- CVE-2021-37648 Incorrect validation of `SaveV2` inputs in TensorFlow
- CVE-2021-37647 Null pointer dereference in `SparseTensorSliceDataset` in TensorFlow
- CVE-2021-37646 Bad alloc in `StringNGrams` caused by integer conversion in TensorFlow
- CVE-2021-37645 Integer overflow due to conversion to unsigned in TensorFlow
- CVE-2021-37644 `std::abort` raised from `TensorListReserve` in TensorFlow
- CVE-2021-37643 Null pointer dereference in `MatrixDiagPartOp` in TensorFlow
- CVE-2021-37642 Division by 0 in `ResourceScatterDiv` in TensorFlow
- CVE-2021-37641 Heap OOB in `RaggedGather` in TensorFlow
- CVE-2021-37640 Integer division by 0 in sparse reshaping in TensorFlow
- CVE-2021-3764 Denial of service in Linux Kernel
- CVE-2021-37639 Null pointer dereference and heap OOB read in TensorFlow
- CVE-2021-37638 Null pointer dereference in `RaggedTensorToTensor` in TensorFlow
- CVE-2021-37637 Null pointer dereference in `CompressElement` in TensorFlow
- CVE-2021-37636 Floating point exception in `SparseDenseCwiseDiv` in TensorFlow
- CVE-2021-37635 Heap out of bounds access in sparse reduction operations in TensorFlow
- CVE-2021-37634 LeafKit allows XSS with untrusted user input
- CVE-2021-37633 XSS via d-popover and d-html-popover attribute
- CVE-2021-37632 Deserialization of Untrusted Data in com.supermartijn642.configlib.ConfigSyncPacket
- CVE-2021-37631 Circle can be accessed by non-Circle members in Nextcloud Deck
- CVE-2021-37630 Secret Circle can be joined without approval in Nextcloud Circles
- CVE-2021-3763 Missing authorization in AMQ Broker
- CVE-2021-37629 Lack of ratelimit on Richdocuments OCS endpoint in nextcloud
- CVE-2021-37628 File Drop can be bypassed using Richdocuments app in nextcloud
- CVE-2021-37627 Privilege escalation via form generator
- CVE-2021-37626 PHP file inclusion via insert tags
- CVE-2021-37625 Incorrect Check of Function Return Value in Skytable
- CVE-2021-37624 FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing
- CVE-2021-37623 Denial of service due to infinite loop in JpegBase::printStructure (#2)
- CVE-2021-37622 Denial of service due to infinite loop in JpegBase::printStructure (#1)
- CVE-2021-37621 Denial of service due to infinite loop in Image::printIFDStructure
- CVE-2021-37620 Out-of-bounds read in XmpTextValue::read()
- CVE-2021-3762 Path traversal in claircore
- CVE-2021-37619 Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
- CVE-2021-37618 Out-of-bounds read in Exiv2::Jp2Image::printStructure
- CVE-2021-37617 Untrusted Search Path in Nextcloud Desktop Client
- CVE-2021-37616 Null pointer dereference in Exiv2::Internal::resolveLens0x8ff
- CVE-2021-37615 Null pointer dereference in Exiv2::Internal::resolveLens0x319
- CVE-2021-37614 SQL injection in progress:moveit transfer