# Vulnerabilities published in 2021


- [CVE-2021-29529](https://insights.sbomify.com/CVE-2021-29529/): Heap buffer overflow caused by rounding (low 2.5)
- [CVE-2021-29528](https://insights.sbomify.com/CVE-2021-29528/): Division by 0 in `QuantizedMul` (low 2.5)
- [CVE-2021-29527](https://insights.sbomify.com/CVE-2021-29527/): Division by 0 in `QuantizedConv2D` (low 2.5)
- [CVE-2021-29526](https://insights.sbomify.com/CVE-2021-29526/): Division by 0 in `Conv2D` (low 2.5)
- [CVE-2021-29525](https://insights.sbomify.com/CVE-2021-29525/): Division by 0 in `Conv2DBackpropInput` (low 2.5)
- [CVE-2021-29524](https://insights.sbomify.com/CVE-2021-29524/): Division by 0 in `Conv2DBackpropFilter` (low 2.5)
- [CVE-2021-29523](https://insights.sbomify.com/CVE-2021-29523/): CHECK-fail in AddManySparseToTensorsMap (low 2.5)
- [CVE-2021-29522](https://insights.sbomify.com/CVE-2021-29522/): Division by 0 in `Conv3DBackprop*` (low 2.5)
- [CVE-2021-29521](https://insights.sbomify.com/CVE-2021-29521/): Segfault in SparseCountSparseOutput (low 2.5)
- [CVE-2021-29520](https://insights.sbomify.com/CVE-2021-29520/): Heap buffer overflow in `Conv3DBackprop*` (low 2.5)
- [CVE-2021-29519](https://insights.sbomify.com/CVE-2021-29519/): CHECK-fail in SparseCross due to type confusion (low 2.5)
- [CVE-2021-29518](https://insights.sbomify.com/CVE-2021-29518/): Session operations in eager mode lead to null pointer dereferences (low 2.5)
- [CVE-2021-29517](https://insights.sbomify.com/CVE-2021-29517/): Division by zero in `Conv3D` (low 2.5)
- [CVE-2021-29516](https://insights.sbomify.com/CVE-2021-29516/): Null pointer dereference via invalid Ragged Tensors (low 2.5)
- [CVE-2021-29515](https://insights.sbomify.com/CVE-2021-29515/): Reference binding to null pointer in `MatrixDiag*` ops (low 2.5)
- [CVE-2021-29514](https://insights.sbomify.com/CVE-2021-29514/): Heap out of bounds write in `RaggedBinCount` (low 2.5)
- [CVE-2021-29513](https://insights.sbomify.com/CVE-2021-29513/): Type confusion during tensor casts lead to dereferencing null pointers (low 2.5)
- [CVE-2021-29512](https://insights.sbomify.com/CVE-2021-29512/): Heap buffer overflow in `RaggedBinCount` (low 2.5)
- [CVE-2021-29511](https://insights.sbomify.com/CVE-2021-29511/): Memory over-allocation in evm crate (medium 6.5)
- [CVE-2021-29510](https://insights.sbomify.com/CVE-2021-29510/): Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic (low 3.3)
- [CVE-2021-29509](https://insights.sbomify.com/CVE-2021-29509/): Keepalive Connections Causing Denial Of Service in puma (high 7.5)
- [CVE-2021-29508](https://insights.sbomify.com/CVE-2021-29508/): Insecure deserialization in Wire (critical 9.1)
- [CVE-2021-29507](https://insights.sbomify.com/CVE-2021-29507/): dlt-daemon could crash if there is special character in dlt.conf (medium 5.7)
- [CVE-2021-29506](https://insights.sbomify.com/CVE-2021-29506/): Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service. (medium 6.5)
- [CVE-2021-29505](https://insights.sbomify.com/CVE-2021-29505/): XStream is vulnerable to a Remote Command Execution attack (high 7.5)
- [CVE-2021-29504](https://insights.sbomify.com/CVE-2021-29504/): Improper Certificate Validation in WP-CLI framework (critical 9.1)
- [CVE-2021-29503](https://insights.sbomify.com/CVE-2021-29503/): Improper Neutralization of Script-Related HTML Tags in Notes (high 8.1)
- [CVE-2021-29502](https://insights.sbomify.com/CVE-2021-29502/): Remote code execution in the WarnSystem module of Laggrons-Dumb-Cogs (high 7.3)
- [CVE-2021-29501](https://insights.sbomify.com/CVE-2021-29501/): Remote code execution in ticketer (high 8.1)
- [CVE-2021-29500](https://insights.sbomify.com/CVE-2021-29500/): Missing validation of JWT signature (high 7.5)
- [CVE-2021-29499](https://insights.sbomify.com/CVE-2021-29499/): Predictable SIF UUID Identifiers (high 7.5)
- [CVE-2021-29495](https://insights.sbomify.com/CVE-2021-29495/): Nim stdlib httpClient does not validate peer certificates by default (medium 5.9)
- [CVE-2021-29493](https://insights.sbomify.com/CVE-2021-29493/): Kennnyshiwa-cogs vulnerable to Remote Code Execution in Tickets Module (medium 6.5)
- [CVE-2021-29492](https://insights.sbomify.com/CVE-2021-29492/): Bypass of path matching rules using escaped slash characters (high 8.1)
- [CVE-2021-29490](https://insights.sbomify.com/CVE-2021-29490/): Unauthenticated GET requests through Remote Image endpoints (medium 5.8)
- [CVE-2021-29489](https://insights.sbomify.com/CVE-2021-29489/): Options structure open to XSS if passed unfiltered (high 7.6)
- [CVE-2021-29488](https://insights.sbomify.com/CVE-2021-29488/): Creation of files outside the Download Folder through malicious PAR2 files (medium 4.3)
- [CVE-2021-29487](https://insights.sbomify.com/CVE-2021-29487/): Authentication bypass in Octobercms (high 7.4)
- [CVE-2021-29486](https://insights.sbomify.com/CVE-2021-29486/): cumulative-distribution-function Infinite Loop vulnerability (high 7.5)
- [CVE-2021-29485](https://insights.sbomify.com/CVE-2021-29485/): Remote Code Execution Vulnerability in Session Storage (critical 9.9)
- [CVE-2021-29484](https://insights.sbomify.com/CVE-2021-29484/): DOM XSS in Theme Preview (medium 6.8)
- [CVE-2021-29483](https://insights.sbomify.com/CVE-2021-29483/): wikiconfig API leaked private config variables set through ManageWiki (critical 9.4)
- [CVE-2021-29482](https://insights.sbomify.com/CVE-2021-29482/): denial of service in github.com/ulikunitz/xz (high 7.5)
- [CVE-2021-29481](https://insights.sbomify.com/CVE-2021-29481/): Client side sessions should not allow unencrypted storage (medium 6.5)
- [CVE-2021-29480](https://insights.sbomify.com/CVE-2021-29480/): Default client side session signing key is highly predictable (medium 4.4)
- [CVE-2021-29479](https://insights.sbomify.com/CVE-2021-29479/): Cached redirect poisoning via X-Forwarded-Host header (high 7.0)
- [CVE-2021-29478](https://insights.sbomify.com/CVE-2021-29478/): Vulnerability in the COPY command for large intsets (high 7.5)
- [CVE-2021-29477](https://insights.sbomify.com/CVE-2021-29477/): Vulnerability in the STRALGO LCS command (high 7.5)
- [CVE-2021-29476](https://insights.sbomify.com/CVE-2021-29476/): Insecure Deserialization of untrusted data in rmccue/requests (critical 9.8)
- [CVE-2021-29475](https://insights.sbomify.com/CVE-2021-29475/): PDF export allows arbitrary file reads (critical 10.0)
- [CVE-2021-29474](https://insights.sbomify.com/CVE-2021-29474/): Relative Path Traversal Attack on note creation (medium 4.7)
- [CVE-2021-29473](https://insights.sbomify.com/CVE-2021-29473/): Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata (low 2.5)
- [CVE-2021-29472](https://insights.sbomify.com/CVE-2021-29472/): Composer's missing argument delimiter can lead to code execution via VCS repository URLs or source download URLs on systems with Mercurial (high 8.8)
- [CVE-2021-29471](https://insights.sbomify.com/CVE-2021-29471/): Denial of service in Matrix Synapse (low 3.7)
- [CVE-2021-29470](https://insights.sbomify.com/CVE-2021-29470/): Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (medium 4.7)
- [CVE-2021-29469](https://insights.sbomify.com/CVE-2021-29469/): Potential exponential regex in monitor mode (medium 5.3)
- [CVE-2021-29468](https://insights.sbomify.com/CVE-2021-29468/): Arbitrary code execution when checking out an attacker-controlled Git branch (high 8.8)
- [CVE-2021-29467](https://insights.sbomify.com/CVE-2021-29467/): Self-XSS (medium 6.1)
- [CVE-2021-29466](https://insights.sbomify.com/CVE-2021-29466/): Path Traversal at Discord-Recon .recon Command Path (medium 6.5)
- [CVE-2021-29465](https://insights.sbomify.com/CVE-2021-29465/): Remote file overwrite on discord-recon can result in DoS and Remote Code Execution (high 8.3)
- [CVE-2021-29464](https://insights.sbomify.com/CVE-2021-29464/): Heap buffer overflow in Exiv2::Jp2Image::encodeJp2Header (low 3.3)
- [CVE-2021-29463](https://insights.sbomify.com/CVE-2021-29463/): Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata (low 3.3)
- [CVE-2021-29462](https://insights.sbomify.com/CVE-2021-29462/): DNS rebinding in pupnp (high 7.6)
- [CVE-2021-29461](https://insights.sbomify.com/CVE-2021-29461/): LFI and possible code execution on discord-recon using tools arguments (high 8.1)
- [CVE-2021-29460](https://insights.sbomify.com/CVE-2021-29460/): Cross-site scripting (XSS) from unsanitized uploaded SVG files (high 7.6)
- [CVE-2021-29459](https://insights.sbomify.com/CVE-2021-29459/): XSS Cross Site Scripting (critical 9.6)
- [CVE-2021-29458](https://insights.sbomify.com/CVE-2021-29458/): Out-of-bounds read in Exiv2::Internal::CrwMap::encode (medium 5.5)
- [CVE-2021-29457](https://insights.sbomify.com/CVE-2021-29457/): Heap buffer overflow in Exiv2::Jp2Image::doWriteMetadata (high 7.8)
- [CVE-2021-29456](https://insights.sbomify.com/CVE-2021-29456/): Authelia allows open redirects on the logout endpoint (medium 5.7)
- [CVE-2021-29455](https://insights.sbomify.com/CVE-2021-29455/): Missing validation of JWT signature in `grassrootza/grassroot-platform` (high 7.5)
- [CVE-2021-29454](https://insights.sbomify.com/CVE-2021-29454/): Sandbox Escape by math function in smarty (high 8.1)
- [CVE-2021-29453](https://insights.sbomify.com/CVE-2021-29453/): Denial of service through memory exhaustion (medium 5.7)
- [CVE-2021-29452](https://insights.sbomify.com/CVE-2021-29452/): Any logged in user could edit any other logged in user. (high 8.1)
- [CVE-2021-29451](https://insights.sbomify.com/CVE-2021-29451/): Missing validation of JWT signature in `ManyDesigns/Portofino` (critical 9.1)
- [CVE-2021-29450](https://insights.sbomify.com/CVE-2021-29450/): WordPress Authenticated disclosure of password-protected posts and pages (medium 6.5)
- [CVE-2021-29449](https://insights.sbomify.com/CVE-2021-29449/): Multiple Privilege Escalation Vulnerabilities Pihole (medium 6.3)
- [CVE-2021-29448](https://insights.sbomify.com/CVE-2021-29448/): Stored DOM XSS in Pi-hole Admin Web Interface (high 7.6)
- [CVE-2021-29447](https://insights.sbomify.com/CVE-2021-29447/): WordPress Authenticated XXE attack when installation is running PHP 8 (high 7.1)
- [CVE-2021-29446](https://insights.sbomify.com/CVE-2021-29446/): Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime (medium 5.9)
- [CVE-2021-29445](https://insights.sbomify.com/CVE-2021-29445/): Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime (medium 5.9)
- [CVE-2021-29444](https://insights.sbomify.com/CVE-2021-29444/): Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime (medium 5.9)
- [CVE-2021-29443](https://insights.sbomify.com/CVE-2021-29443/): Padding Oracle Attack due to Observable Timing Discrepancy in jose (medium 5.9)
- [CVE-2021-29442](https://insights.sbomify.com/CVE-2021-29442/): Authentication bypass (high 8.6)
- [CVE-2021-29441](https://insights.sbomify.com/CVE-2021-29441/): Authentication bypass (high 8.6)
- [CVE-2021-29440](https://insights.sbomify.com/CVE-2021-29440/): Twig allowing dangerous PHP functions by default (high 8.4)
- [CVE-2021-29439](https://insights.sbomify.com/CVE-2021-29439/): Plugins can be installed with minimal admin privileges (high 7.2)
- [CVE-2021-29438](https://insights.sbomify.com/CVE-2021-29438/): Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs (medium 4.6)
- [CVE-2021-29437](https://insights.sbomify.com/CVE-2021-29437/): Account compromise by man-in-the-middle attack (high 8.0)
- [CVE-2021-29436](https://insights.sbomify.com/CVE-2021-29436/): Cross site request forgery vulnerability (medium 5.4)
- [CVE-2021-29435](https://insights.sbomify.com/CVE-2021-29435/): Cross-Site Request Forgery (CSRF) in trestle-auth (high 8.1)
- [CVE-2021-29434](https://insights.sbomify.com/CVE-2021-29434/): Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields (medium 6.1)
- [CVE-2021-29433](https://insights.sbomify.com/CVE-2021-29433/): Denial of service (via resource exhaustion) due to improper input validation (medium 4.3)
- [CVE-2021-29432](https://insights.sbomify.com/CVE-2021-29432/): Malicious users could control the content of invitation emails (medium 5.3)
- [CVE-2021-29431](https://insights.sbomify.com/CVE-2021-29431/): SSRF in Sydent due to missing validation of hostnames (high 7.7)
- [CVE-2021-29430](https://insights.sbomify.com/CVE-2021-29430/): Denial of service attack via memory exhaustion (high 7.5)
- [CVE-2021-29429](https://insights.sbomify.com/CVE-2021-29429/): Information disclosure through temporary directory permissions (medium 4.0)
- [CVE-2021-29428](https://insights.sbomify.com/CVE-2021-29428/): Local privilege escalation through system temporary directory (high 8.8)
- [CVE-2021-29427](https://insights.sbomify.com/CVE-2021-29427/): Repository content filters do not work in Settings pluginManagement (high 8.0)
- [CVE-2021-29425](https://insights.sbomify.com/CVE-2021-29425/): Possible limited path traversal vulnerabily in Apache Commons IO (medium 6.5)
- [CVE-2021-29424](https://insights.sbomify.com/CVE-2021-29424/): Security feature bypass in fedoraproject:fedora (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/178/