# Vulnerabilities published in 2021


- [CVE-2021-37704](https://insights.sbomify.com/CVE-2021-37704/): Exposed phpinfo() in PhpFastCache (medium 5.4)
- [CVE-2021-37703](https://insights.sbomify.com/CVE-2021-37703/): Information exposure in Discourse (medium 4.3)
- [CVE-2021-37702](https://insights.sbomify.com/CVE-2021-37702/): Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore (high 8.0)
- [CVE-2021-37701](https://insights.sbomify.com/CVE-2021-37701/): Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links (high 8.2)
- [CVE-2021-37700](https://insights.sbomify.com/CVE-2021-37700/): Clipboard-based DOM-XSS (medium 6.5)
- [CVE-2021-3770](https://insights.sbomify.com/CVE-2021-3770/): Heap-based Buffer Overflow in vim/vim (high 8.6)
- [CVE-2021-37699](https://insights.sbomify.com/CVE-2021-37699/): Open Redirect in Next.js versions below 11.1.0 (medium 6.9)
- [CVE-2021-37698](https://insights.sbomify.com/CVE-2021-37698/): Missing TLS service certificate validation in GelfWriter, ElasticsearchWriter, InfluxdbWriter and Influxdb2Writer (high 7.5)
- [CVE-2021-37697](https://insights.sbomify.com/CVE-2021-37697/): Sensitive information leak in Welcome of tmerc-cogs (high 7.1)
- [CVE-2021-37696](https://insights.sbomify.com/CVE-2021-37696/): Sensitive information leak in MassDM of tmerc-cogs (high 7.1)
- [CVE-2021-37695](https://insights.sbomify.com/CVE-2021-37695/): Execution of JavaScript code using malformed HTML in ckeditor (high 7.3)
- [CVE-2021-37694](https://insights.sbomify.com/CVE-2021-37694/): Code injection issue for java-spring-cloud-stream-template (high 8.7)
- [CVE-2021-37693](https://insights.sbomify.com/CVE-2021-37693/): Re-use of email tokens in Discourse (medium 5.3)
- [CVE-2021-37692](https://insights.sbomify.com/CVE-2021-37692/): Segfault on strings tensors with mistmatched dimensions in TensorFlow (medium 5.5)
- [CVE-2021-37691](https://insights.sbomify.com/CVE-2021-37691/): Division by zero in LSH in TensorFlow Lite (medium 5.5)
- [CVE-2021-37690](https://insights.sbomify.com/CVE-2021-37690/): Use after free and segfault in shape inference functions in TensorFlow (medium 6.6)
- [CVE-2021-3769](https://insights.sbomify.com/CVE-2021-3769/): OS Command Injection in ohmyzsh/ohmyzsh (high 7.5)
- [CVE-2021-37689](https://insights.sbomify.com/CVE-2021-37689/): Null pointer dereference in TensorFlow Lite MLIR optimizations (high 7.8)
- [CVE-2021-37688](https://insights.sbomify.com/CVE-2021-37688/): Null pointer dereference in TensorFlow Lite (high 7.8)
- [CVE-2021-37687](https://insights.sbomify.com/CVE-2021-37687/): Heap OOB in TensorFlow Lite's `Gather*` implementations (medium 5.5)
- [CVE-2021-37686](https://insights.sbomify.com/CVE-2021-37686/): Infinite loop in TensorFlow Lite (medium 5.5)
- [CVE-2021-37685](https://insights.sbomify.com/CVE-2021-37685/): Heap OOB in TensorFlow Lite (medium 5.5)
- [CVE-2021-37684](https://insights.sbomify.com/CVE-2021-37684/): Division by zero in TensorFlow Lite pooling operations (medium 5.5)
- [CVE-2021-37683](https://insights.sbomify.com/CVE-2021-37683/): Division by zero in TensorFlow Lite division operations (medium 5.5)
- [CVE-2021-37682](https://insights.sbomify.com/CVE-2021-37682/): Use of unitialized value in TensorFlow Lite (medium 4.4)
- [CVE-2021-37681](https://insights.sbomify.com/CVE-2021-37681/): Null pointer exception in TensorFlow Lite (high 7.8)
- [CVE-2021-37680](https://insights.sbomify.com/CVE-2021-37680/): Division by zero in TFLite in TensorFlow (medium 5.5)
- [CVE-2021-3768](https://insights.sbomify.com/CVE-2021-3768/): Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack (medium 5.4)
- [CVE-2021-37679](https://insights.sbomify.com/CVE-2021-37679/): Heap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow (high 7.1)
- [CVE-2021-37678](https://insights.sbomify.com/CVE-2021-37678/): Arbitrary code execution due to YAML deserialization (critical 9.3)
- [CVE-2021-37677](https://insights.sbomify.com/CVE-2021-37677/): Missing validation in shape inference for `Dequantize` in TensorFlow (medium 5.5)
- [CVE-2021-37676](https://insights.sbomify.com/CVE-2021-37676/): Reference binding to nullptr in shape inference in TensorFlow (high 7.8)
- [CVE-2021-37675](https://insights.sbomify.com/CVE-2021-37675/): Division by 0 in most convolution operators in TensorFlow (medium 5.5)
- [CVE-2021-37674](https://insights.sbomify.com/CVE-2021-37674/): Incomplete validation in `MaxPoolGrad` in TensorFlow (medium 5.5)
- [CVE-2021-37673](https://insights.sbomify.com/CVE-2021-37673/): `CHECK`-fail in `MapStage` in TensorFlow (medium 5.5)
- [CVE-2021-37672](https://insights.sbomify.com/CVE-2021-37672/): Heap OOB in `SdcaOptimizerV2` in TensorFlow (medium 5.5)
- [CVE-2021-37671](https://insights.sbomify.com/CVE-2021-37671/): Reference binding to nullptr in map operations in TensorFlow (high 7.8)
- [CVE-2021-37670](https://insights.sbomify.com/CVE-2021-37670/): Heap OOB in `UpperBound` and `LowerBound` in TensorFlow (medium 5.5)
- [CVE-2021-3767](https://insights.sbomify.com/CVE-2021-3767/): Cross-site Scripting (XSS) - Stored in bookstackapp/bookstack (medium 5.4)
- [CVE-2021-37669](https://insights.sbomify.com/CVE-2021-37669/): Crash in NMS ops caused by integer conversion to unsigned in TensorFlow (medium 5.5)
- [CVE-2021-37668](https://insights.sbomify.com/CVE-2021-37668/): Division by zero in TensorFlow Lite `tf.raw_ops.UnravelIndex` (medium 5.5)
- [CVE-2021-37667](https://insights.sbomify.com/CVE-2021-37667/): Reference binding to nullptr in unicode encoding in TensorFlow (high 7.8)
- [CVE-2021-37666](https://insights.sbomify.com/CVE-2021-37666/): Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow (high 7.8)
- [CVE-2021-37665](https://insights.sbomify.com/CVE-2021-37665/): Incomplete validation in MKL requantization in TensorFlow (high 7.8)
- [CVE-2021-37664](https://insights.sbomify.com/CVE-2021-37664/): Heap OOB in boosted trees in TensorFlow (high 7.3)
- [CVE-2021-37663](https://insights.sbomify.com/CVE-2021-37663/): Incomplete validation in `QuantizeV2` in TensorFlow (high 7.8)
- [CVE-2021-37662](https://insights.sbomify.com/CVE-2021-37662/): Reference binding to nullptr in boosted trees in TensorFlow (high 7.1)
- [CVE-2021-37661](https://insights.sbomify.com/CVE-2021-37661/): Crash caused by integer conversion to unsigned in TensorFlow (medium 5.5)
- [CVE-2021-37660](https://insights.sbomify.com/CVE-2021-37660/): Division by 0 in inplace operations in TensorFlow (medium 5.5)
- [CVE-2021-3766](https://insights.sbomify.com/CVE-2021-3766/): Prototype Pollution in vincit/objection.js (high 7.5)
- [CVE-2021-37659](https://insights.sbomify.com/CVE-2021-37659/): Out of bounds read via null pointer dereference in TensorFlow (high 7.3)
- [CVE-2021-37658](https://insights.sbomify.com/CVE-2021-37658/): Reference binding to nullptr in `MatrixSetDiagV*` ops in TensorFlow (high 7.1)
- [CVE-2021-37657](https://insights.sbomify.com/CVE-2021-37657/): Reference binding to nullptr in `MatrixDiagV*` ops in TensorFlow (high 7.1)
- [CVE-2021-37656](https://insights.sbomify.com/CVE-2021-37656/): Reference binding to nullptr in `RaggedTensorToSparse` in TensorFlow (high 7.1)
- [CVE-2021-37655](https://insights.sbomify.com/CVE-2021-37655/): Heap OOB in `ResourceScatterUpdate` in TensorFlow (high 7.3)
- [CVE-2021-37654](https://insights.sbomify.com/CVE-2021-37654/): Heap OOB and CHECK fail in `ResourceGather` in TensorFlow (high 7.3)
- [CVE-2021-37653](https://insights.sbomify.com/CVE-2021-37653/): Division by 0 in `ResourceGather` in TensorFlow (medium 5.5)
- [CVE-2021-37652](https://insights.sbomify.com/CVE-2021-37652/): Use after free in boosted trees creation in TensorFlow (high 7.8)
- [CVE-2021-37651](https://insights.sbomify.com/CVE-2021-37651/): Heap buffer overflow in `FractionalAvgPoolGrad` in TensorFlow (high 7.1)
- [CVE-2021-37650](https://insights.sbomify.com/CVE-2021-37650/): Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlow (high 7.8)
- [CVE-2021-3765](https://insights.sbomify.com/CVE-2021-3765/): Inefficient Regular Expression Complexity in validatorjs/validator.js (medium 5.3)
- [CVE-2021-37649](https://insights.sbomify.com/CVE-2021-37649/): Null pointer dereference in `UncompressElement` in TensorFlow (high 7.7)
- [CVE-2021-37648](https://insights.sbomify.com/CVE-2021-37648/): Incorrect validation of `SaveV2` inputs in TensorFlow (high 7.8)
- [CVE-2021-37647](https://insights.sbomify.com/CVE-2021-37647/): Null pointer dereference in `SparseTensorSliceDataset` in TensorFlow (high 7.7)
- [CVE-2021-37646](https://insights.sbomify.com/CVE-2021-37646/): Bad alloc in `StringNGrams` caused by integer conversion in TensorFlow (medium 5.5)
- [CVE-2021-37645](https://insights.sbomify.com/CVE-2021-37645/): Integer overflow due to conversion to unsigned in TensorFlow (medium 5.5)
- [CVE-2021-37644](https://insights.sbomify.com/CVE-2021-37644/): `std::abort` raised from `TensorListReserve` in TensorFlow (medium 5.5)
- [CVE-2021-37643](https://insights.sbomify.com/CVE-2021-37643/): Null pointer dereference in `MatrixDiagPartOp` in TensorFlow (high 7.7)
- [CVE-2021-37642](https://insights.sbomify.com/CVE-2021-37642/): Division by 0 in `ResourceScatterDiv` in TensorFlow (medium 5.5)
- [CVE-2021-37641](https://insights.sbomify.com/CVE-2021-37641/): Heap OOB in `RaggedGather` in TensorFlow (high 7.3)
- [CVE-2021-37640](https://insights.sbomify.com/CVE-2021-37640/): Integer division by 0 in sparse reshaping in TensorFlow (medium 5.5)
- [CVE-2021-3764](https://insights.sbomify.com/CVE-2021-3764/): Denial of service in Linux Kernel (medium 5.5)
- [CVE-2021-37639](https://insights.sbomify.com/CVE-2021-37639/): Null pointer dereference and heap OOB read in TensorFlow (high 8.4)
- [CVE-2021-37638](https://insights.sbomify.com/CVE-2021-37638/): Null pointer dereference in `RaggedTensorToTensor` in TensorFlow (high 7.7)
- [CVE-2021-37637](https://insights.sbomify.com/CVE-2021-37637/): Null pointer dereference in `CompressElement` in TensorFlow (high 7.7)
- [CVE-2021-37636](https://insights.sbomify.com/CVE-2021-37636/): Floating point exception in `SparseDenseCwiseDiv` in TensorFlow (medium 5.5)
- [CVE-2021-37635](https://insights.sbomify.com/CVE-2021-37635/): Heap out of bounds access in sparse reduction operations in TensorFlow (high 7.3)
- [CVE-2021-37634](https://insights.sbomify.com/CVE-2021-37634/): LeafKit allows XSS with untrusted user input (high 7.4)
- [CVE-2021-37633](https://insights.sbomify.com/CVE-2021-37633/): XSS via d-popover and d-html-popover attribute (high 7.4)
- [CVE-2021-37632](https://insights.sbomify.com/CVE-2021-37632/): Deserialization of Untrusted Data in com.supermartijn642.configlib.ConfigSyncPacket (high 8.1)
- [CVE-2021-37631](https://insights.sbomify.com/CVE-2021-37631/): Circle can be accessed by non-Circle members in Nextcloud Deck (medium 6.5)
- [CVE-2021-37630](https://insights.sbomify.com/CVE-2021-37630/): Secret Circle can be joined without approval in Nextcloud Circles (medium 6.5)
- [CVE-2021-3763](https://insights.sbomify.com/CVE-2021-3763/): Missing authorization in AMQ Broker (medium 4.3)
- [CVE-2021-37629](https://insights.sbomify.com/CVE-2021-37629/): Lack of ratelimit on Richdocuments OCS endpoint in nextcloud (medium 5.3)
- [CVE-2021-37628](https://insights.sbomify.com/CVE-2021-37628/): File Drop can be bypassed using Richdocuments app in nextcloud (high 7.5)
- [CVE-2021-37627](https://insights.sbomify.com/CVE-2021-37627/): Privilege escalation via form generator (high 8.0)
- [CVE-2021-37626](https://insights.sbomify.com/CVE-2021-37626/): PHP file inclusion via insert tags (high 7.2)
- [CVE-2021-37625](https://insights.sbomify.com/CVE-2021-37625/): Incorrect Check of Function Return Value in Skytable (high 7.5)
- [CVE-2021-37624](https://insights.sbomify.com/CVE-2021-37624/): FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing (high 7.5)
- [CVE-2021-37623](https://insights.sbomify.com/CVE-2021-37623/): Denial of service due to infinite loop in JpegBase::printStructure (#2) (medium 5.5)
- [CVE-2021-37622](https://insights.sbomify.com/CVE-2021-37622/): Denial of service due to infinite loop in JpegBase::printStructure (#1) (medium 5.5)
- [CVE-2021-37621](https://insights.sbomify.com/CVE-2021-37621/): Denial of service due to infinite loop in Image::printIFDStructure (medium 5.5)
- [CVE-2021-37620](https://insights.sbomify.com/CVE-2021-37620/): Out-of-bounds read in XmpTextValue::read() (medium 4.7)
- [CVE-2021-3762](https://insights.sbomify.com/CVE-2021-3762/): Path traversal in claircore (critical 9.8)
- [CVE-2021-37619](https://insights.sbomify.com/CVE-2021-37619/): Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (medium 4.7)
- [CVE-2021-37618](https://insights.sbomify.com/CVE-2021-37618/): Out-of-bounds read in Exiv2::Jp2Image::printStructure (medium 4.7)
- [CVE-2021-37617](https://insights.sbomify.com/CVE-2021-37617/): Untrusted Search Path in Nextcloud Desktop Client (high 7.3)
- [CVE-2021-37616](https://insights.sbomify.com/CVE-2021-37616/): Null pointer dereference in Exiv2::Internal::resolveLens0x8ff (medium 5.5)
- [CVE-2021-37615](https://insights.sbomify.com/CVE-2021-37615/): Null pointer dereference in Exiv2::Internal::resolveLens0x319 (medium 4.7)
- [CVE-2021-37614](https://insights.sbomify.com/CVE-2021-37614/): SQL injection in progress:moveit transfer (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/119/