Vulnerabilities published in 2021
27,247 vulnerabilities were published in 2021: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 178 of 273.
- CVE-2021-29529 Heap buffer overflow caused by rounding
- CVE-2021-29528 Division by 0 in `QuantizedMul`
- CVE-2021-29527 Division by 0 in `QuantizedConv2D`
- CVE-2021-29526 Division by 0 in `Conv2D`
- CVE-2021-29525 Division by 0 in `Conv2DBackpropInput`
- CVE-2021-29524 Division by 0 in `Conv2DBackpropFilter`
- CVE-2021-29523 CHECK-fail in AddManySparseToTensorsMap
- CVE-2021-29522 Division by 0 in `Conv3DBackprop*`
- CVE-2021-29521 Segfault in SparseCountSparseOutput
- CVE-2021-29520 Heap buffer overflow in `Conv3DBackprop*`
- CVE-2021-29519 CHECK-fail in SparseCross due to type confusion
- CVE-2021-29518 Session operations in eager mode lead to null pointer dereferences
- CVE-2021-29517 Division by zero in `Conv3D`
- CVE-2021-29516 Null pointer dereference via invalid Ragged Tensors
- CVE-2021-29515 Reference binding to null pointer in `MatrixDiag*` ops
- CVE-2021-29514 Heap out of bounds write in `RaggedBinCount`
- CVE-2021-29513 Type confusion during tensor casts lead to dereferencing null pointers
- CVE-2021-29512 Heap buffer overflow in `RaggedBinCount`
- CVE-2021-29511 Memory over-allocation in evm crate
- CVE-2021-29510 Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
- CVE-2021-29509 Keepalive Connections Causing Denial Of Service in puma
- CVE-2021-29508 Insecure deserialization in Wire
- CVE-2021-29507 dlt-daemon could crash if there is special character in dlt.conf
- CVE-2021-29506 Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service.
- CVE-2021-29505 XStream is vulnerable to a Remote Command Execution attack
- CVE-2021-29504 Improper Certificate Validation in WP-CLI framework
- CVE-2021-29503 Improper Neutralization of Script-Related HTML Tags in Notes
- CVE-2021-29502 Remote code execution in the WarnSystem module of Laggrons-Dumb-Cogs
- CVE-2021-29501 Remote code execution in ticketer
- CVE-2021-29500 Missing validation of JWT signature
- CVE-2021-29499 Predictable SIF UUID Identifiers
- CVE-2021-29495 Nim stdlib httpClient does not validate peer certificates by default
- CVE-2021-29493 Kennnyshiwa-cogs vulnerable to Remote Code Execution in Tickets Module
- CVE-2021-29492 Bypass of path matching rules using escaped slash characters
- CVE-2021-29490 Unauthenticated GET requests through Remote Image endpoints
- CVE-2021-29489 Options structure open to XSS if passed unfiltered
- CVE-2021-29488 Creation of files outside the Download Folder through malicious PAR2 files
- CVE-2021-29487 Authentication bypass in Octobercms
- CVE-2021-29486 cumulative-distribution-function Infinite Loop vulnerability
- CVE-2021-29485 Remote Code Execution Vulnerability in Session Storage
- CVE-2021-29484 DOM XSS in Theme Preview
- CVE-2021-29483 wikiconfig API leaked private config variables set through ManageWiki
- CVE-2021-29482 denial of service in github.com/ulikunitz/xz
- CVE-2021-29481 Client side sessions should not allow unencrypted storage
- CVE-2021-29480 Default client side session signing key is highly predictable
- CVE-2021-29479 Cached redirect poisoning via X-Forwarded-Host header
- CVE-2021-29478 Vulnerability in the COPY command for large intsets
- CVE-2021-29477 Vulnerability in the STRALGO LCS command
- CVE-2021-29476 Insecure Deserialization of untrusted data in rmccue/requests
- CVE-2021-29475 PDF export allows arbitrary file reads
- CVE-2021-29474 Relative Path Traversal Attack on note creation
- CVE-2021-29473 Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
- CVE-2021-29472 Composer's missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial
- CVE-2021-29471 Denial of service in Matrix Synapse
- CVE-2021-29470 Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
- CVE-2021-29469 Potential exponential regex in monitor mode
- CVE-2021-29468 Arbitrary code execution when checking out an attacker-controlled Git branch
- CVE-2021-29467 Self-XSS
- CVE-2021-29466 Path Traversal at Discord-Recon .recon Command Path
- CVE-2021-29465 Remote file overwrite on discord-recon can result in DoS and Remote Code Execution
- CVE-2021-29464 Heap buffer overflow in Exiv2::Jp2Image::encodeJp2Header
- CVE-2021-29463 Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata
- CVE-2021-29462 DNS rebinding in pupnp
- CVE-2021-29461 LFI and possible code execution on discord-recon using tools arguments
- CVE-2021-29460 Cross-site scripting (XSS) from unsanitized uploaded SVG files
- CVE-2021-29459 XSS Cross Site Scripting
- CVE-2021-29458 Out-of-bounds read in Exiv2::Internal::CrwMap::encode
- CVE-2021-29457 Heap buffer overflow in Exiv2::Jp2Image::doWriteMetadata
- CVE-2021-29456 Authelia allows open redirects on the logout endpoint
- CVE-2021-29455 Missing validation of JWT signature in `grassrootza/grassroot-platform`
- CVE-2021-29454 Sandbox Escape by math function in smarty
- CVE-2021-29453 Denial of service through memory exhaustion
- CVE-2021-29452 Any logged in user could edit any other logged in user.
- CVE-2021-29451 Missing validation of JWT signature in `ManyDesigns/Portofino`
- CVE-2021-29450 WordPress Authenticated disclosure of password-protected posts and pages
- CVE-2021-29449 Multiple Privilege Escalation Vulnerabilities Pihole
- CVE-2021-29448 Stored DOM XSS in Pi-hole Admin Web Interface
- CVE-2021-29447 WordPress Authenticated XXE attack when installation is running PHP 8
- CVE-2021-29446 Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime
- CVE-2021-29445 Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime
- CVE-2021-29444 Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime
- CVE-2021-29443 Padding Oracle Attack due to Observable Timing Discrepancy in jose
- CVE-2021-29442 Authentication bypass
- CVE-2021-29441 Authentication bypass
- CVE-2021-29440 Twig allowing dangerous PHP functions by default
- CVE-2021-29439 Plugins can be installed with minimal admin privileges
- CVE-2021-29438 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs
- CVE-2021-29437 Account compromise by man-in-the-middle attack
- CVE-2021-29436 Cross site request forgery vulnerability
- CVE-2021-29435 Cross-Site Request Forgery (CSRF) in trestle-auth
- CVE-2021-29434 Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
- CVE-2021-29433 Denial of service (via resource exhaustion) due to improper input validation
- CVE-2021-29432 Malicious users could control the content of invitation emails
- CVE-2021-29431 SSRF in Sydent due to missing validation of hostnames
- CVE-2021-29430 Denial of service attack via memory exhaustion
- CVE-2021-29429 Information disclosure through temporary directory permissions
- CVE-2021-29428 Local privilege escalation through system temporary directory
- CVE-2021-29427 Repository content filters do not work in Settings pluginManagement
- CVE-2021-29425 Possible limited path traversal vulnerabily in Apache Commons IO
- CVE-2021-29424 Security feature bypass in fedoraproject:fedora