# Vulnerabilities published in 2021


- [CVE-2021-41246](https://insights.sbomify.com/CVE-2021-41246/): Session fixation in express-openid-connect (medium 4.6)
- [CVE-2021-41245](https://insights.sbomify.com/CVE-2021-41245/): Possible Cross-Site Request Forgery in Combodo iTop (medium 6.5)
- [CVE-2021-41244](https://insights.sbomify.com/CVE-2021-41244/): Cross organization admin control in Grafana (critical 9.1)
- [CVE-2021-41243](https://insights.sbomify.com/CVE-2021-41243/): OS Command Injection Vulnerability and Potential Zip Slip Vulnerability (critical 9.1)
- [CVE-2021-41242](https://insights.sbomify.com/CVE-2021-41242/): Path Traversal in some REST methods leading to file upload to arbitrary places (high 8.1)
- [CVE-2021-41241](https://insights.sbomify.com/CVE-2021-41241/): Advanced permissions is not respected for subfolders in Nextcloud server (medium 4.3)
- [CVE-2021-4124](https://insights.sbomify.com/CVE-2021-4124/): Cross-site Scripting (XSS) - Stored in meetecho/janus-gateway (high 8.1)
- [CVE-2021-41239](https://insights.sbomify.com/CVE-2021-41239/): User enumeration setting not respected in Nextcloud server (medium 5.3)
- [CVE-2021-41238](https://insights.sbomify.com/CVE-2021-41238/): Missing Authorization with Default Settings in Dashboard UI (high 8.6)
- [CVE-2021-41236](https://insights.sbomify.com/CVE-2021-41236/): XSS vulnerability in oro/platform (medium 6.9)
- [CVE-2021-41233](https://insights.sbomify.com/CVE-2021-41233/): Missing authorization in Nextcloud text (medium 6.5)
- [CVE-2021-41232](https://insights.sbomify.com/CVE-2021-41232/): Improper Neutralization of Special Elements used in an LDAP Query (high 8.1)
- [CVE-2021-41231](https://insights.sbomify.com/CVE-2021-41231/): OpenMage LTS DataFlow upload remote code execution vulnerability (high 7.2)
- [CVE-2021-41230](https://insights.sbomify.com/CVE-2021-41230/): OIDC claims not updated from Identity Provider in Pomerium (medium 5.3)
- [CVE-2021-4123](https://insights.sbomify.com/CVE-2021-4123/): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat (medium 6.5)
- [CVE-2021-41229](https://insights.sbomify.com/CVE-2021-41229/): Memory leak in BlueZ (medium 4.3)
- [CVE-2021-41228](https://insights.sbomify.com/CVE-2021-41228/): Code injection in `saved_model_cli` (high 7.5)
- [CVE-2021-41227](https://insights.sbomify.com/CVE-2021-41227/): Arbitrary memory read in `ImmutableConst` (medium 6.6)
- [CVE-2021-41226](https://insights.sbomify.com/CVE-2021-41226/): Heap OOB read in `SparseBinCount` (high 7.1)
- [CVE-2021-41225](https://insights.sbomify.com/CVE-2021-41225/): A use of uninitialized value vulnerability in Tensorflow (medium 5.5)
- [CVE-2021-41224](https://insights.sbomify.com/CVE-2021-41224/): `SparseFillEmptyRows` heap OOB read (high 7.1)
- [CVE-2021-41223](https://insights.sbomify.com/CVE-2021-41223/): Heap OOB read in `FusedBatchNorm` kernels (high 7.1)
- [CVE-2021-41222](https://insights.sbomify.com/CVE-2021-41222/): Segfault due to negative splits in `SplitV` (medium 5.5)
- [CVE-2021-41221](https://insights.sbomify.com/CVE-2021-41221/): Access to invalid memory during shape inference in `Cudnn*` ops (high 7.8)
- [CVE-2021-41220](https://insights.sbomify.com/CVE-2021-41220/): Use after free in `CollectiveReduceV2` (high 7.8)
- [CVE-2021-4122](https://insights.sbomify.com/CVE-2021-4122/): Security feature bypass in cryptsetup (medium 4.3)
- [CVE-2021-41219](https://insights.sbomify.com/CVE-2021-41219/): Undefined behavior via `nullptr` reference binding in sparse matrix multiplication (high 7.8)
- [CVE-2021-41218](https://insights.sbomify.com/CVE-2021-41218/): Integer division by 0 in `tf.raw_ops.AllToAll` (medium 5.5)
- [CVE-2021-41217](https://insights.sbomify.com/CVE-2021-41217/): Null pointer exception when `Exit` node is not preceded by `Enter` op (medium 5.5)
- [CVE-2021-41216](https://insights.sbomify.com/CVE-2021-41216/): Heap buffer overflow in `Transpose` (medium 5.5)
- [CVE-2021-41215](https://insights.sbomify.com/CVE-2021-41215/): Null pointer exception in `DeserializeSparse` (medium 5.5)
- [CVE-2021-41214](https://insights.sbomify.com/CVE-2021-41214/): Reference binding to `nullptr` in `tf.ragged.cross` (high 7.8)
- [CVE-2021-41213](https://insights.sbomify.com/CVE-2021-41213/): Deadlock in mutually recursive `tf.function` objects (medium 5.5)
- [CVE-2021-41212](https://insights.sbomify.com/CVE-2021-41212/): Heap OOB read in `tf.ragged.cross` (high 7.1)
- [CVE-2021-41211](https://insights.sbomify.com/CVE-2021-41211/): Heap OOB read in shape inference for `QuantizeV2` (high 7.1)
- [CVE-2021-41210](https://insights.sbomify.com/CVE-2021-41210/): Heap OOB read in `tf.raw_ops.SparseCountSparseOutput` (high 7.1)
- [CVE-2021-4121](https://insights.sbomify.com/CVE-2021-4121/): Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm (medium 6.4)
- [CVE-2021-41209](https://insights.sbomify.com/CVE-2021-41209/): FPE in convolutions with zero size filters (medium 5.5)
- [CVE-2021-41208](https://insights.sbomify.com/CVE-2021-41208/): Incomplete validation in boosted trees code (high 8.8)
- [CVE-2021-41207](https://insights.sbomify.com/CVE-2021-41207/): Division by zero in `ParallelConcat` (medium 5.5)
- [CVE-2021-41206](https://insights.sbomify.com/CVE-2021-41206/): Incomplete validation of shapes in multiple TF ops (high 7.0)
- [CVE-2021-41205](https://insights.sbomify.com/CVE-2021-41205/): Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops (high 7.1)
- [CVE-2021-41204](https://insights.sbomify.com/CVE-2021-41204/): Segfault while copying constant resource tensor (medium 5.5)
- [CVE-2021-41203](https://insights.sbomify.com/CVE-2021-41203/): Missing validation during checkpoint loading (high 7.8)
- [CVE-2021-41202](https://insights.sbomify.com/CVE-2021-41202/): Overflow/crash in `tf.range` (medium 5.5)
- [CVE-2021-41201](https://insights.sbomify.com/CVE-2021-41201/): Unitialized access in `EinsumHelper::ParseEquation` (high 7.8)
- [CVE-2021-41200](https://insights.sbomify.com/CVE-2021-41200/): Incomplete validation in `tf.summary.create_file_writer` (medium 5.5)
- [CVE-2021-4120](https://insights.sbomify.com/CVE-2021-4120/): snapd could be made to bypass intended access restrictions through snap content interfaces and layout paths (high 8.2)
- [CVE-2021-41199](https://insights.sbomify.com/CVE-2021-41199/): Overflow/crash in `tf.image.resize` when size is large (medium 5.5)
- [CVE-2021-41198](https://insights.sbomify.com/CVE-2021-41198/): Overflow/crash in `tf.tile` when tiling tensor is large (medium 5.5)
- [CVE-2021-41197](https://insights.sbomify.com/CVE-2021-41197/): Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes (medium 5.5)
- [CVE-2021-41196](https://insights.sbomify.com/CVE-2021-41196/): Crash in `max_pool3d` when size argument is 0 or negative (medium 5.5)
- [CVE-2021-41195](https://insights.sbomify.com/CVE-2021-41195/): Crash in `tf.math.segment_*` operations (medium 5.5)
- [CVE-2021-41194](https://insights.sbomify.com/CVE-2021-41194/): Improper Access Control in jupyterhub-firstuseauthenticator (critical 9.1)
- [CVE-2021-41193](https://insights.sbomify.com/CVE-2021-41193/): Use of Externally-Controlled Format String in wire-avs (critical 9.8)
- [CVE-2021-41192](https://insights.sbomify.com/CVE-2021-41192/): Insecure default configuration (high 8.1)
- [CVE-2021-41191](https://insights.sbomify.com/CVE-2021-41191/): API giving out files without key (high 7.5)
- [CVE-2021-41190](https://insights.sbomify.com/CVE-2021-41190/): Clarify Content-Type handling in OCI spec (low 3.0)
- [CVE-2021-4119](https://insights.sbomify.com/CVE-2021-4119/): Improper Access Control in bookstackapp/bookstack (medium 5.3)
- [CVE-2021-41189](https://insights.sbomify.com/CVE-2021-41189/): Communities and collections administrators can escalate their privilege up to system administrator (high 7.2)
- [CVE-2021-41188](https://insights.sbomify.com/CVE-2021-41188/): Authenticated Stored XSS in Administration (medium 5.7)
- [CVE-2021-41187](https://insights.sbomify.com/CVE-2021-41187/): SQL Injection in DHIS2 Tracker API (high 8.1)
- [CVE-2021-41186](https://insights.sbomify.com/CVE-2021-41186/): ReDoS vulnerability in parser_apache2 (medium 5.9)
- [CVE-2021-41185](https://insights.sbomify.com/CVE-2021-41185/): Download file outside intended directory (high 8.8)
- [CVE-2021-41184](https://insights.sbomify.com/CVE-2021-41184/): XSS in the `of` option of the `.position()` util (medium 6.5)
- [CVE-2021-41183](https://insights.sbomify.com/CVE-2021-41183/): XSS in `*Text` options of the Datepicker widget (medium 6.5)
- [CVE-2021-41182](https://insights.sbomify.com/CVE-2021-41182/): XSS in the `altField` option of the Datepicker widget (medium 6.5)
- [CVE-2021-41181](https://insights.sbomify.com/CVE-2021-41181/): Nextcloud Talk app exposes chat messages on lockscreen (low 2.4)
- [CVE-2021-41180](https://insights.sbomify.com/CVE-2021-41180/): Geolocation preview links can be set to arbitrary links in nextcloud talk (medium 4.7)
- [CVE-2021-4118](https://insights.sbomify.com/CVE-2021-4118/): Deserialization of Untrusted Data in pytorchlightning/pytorch-lightning (high 7.8)
- [CVE-2021-41179](https://insights.sbomify.com/CVE-2021-41179/): Two-Factor Authentication not enforced for pages marked as public (medium 6.5)
- [CVE-2021-41178](https://insights.sbomify.com/CVE-2021-41178/): File Traversal affecting SVG files on Nextcloud Server (high 8.8)
- [CVE-2021-41177](https://insights.sbomify.com/CVE-2021-41177/): Rate-limits not working on instances without configured memory cache backend (high 8.1)
- [CVE-2021-41176](https://insights.sbomify.com/CVE-2021-41176/): logout CSRF in Pterodactyl Panel (medium 4.3)
- [CVE-2021-41175](https://insights.sbomify.com/CVE-2021-41175/): Stored XSS in Client Groups Management (Authenticated) (high 7.3)
- [CVE-2021-41174](https://insights.sbomify.com/CVE-2021-41174/): XSS vulnerability allowing arbitrary JavaScript execution (medium 6.9)
- [CVE-2021-41173](https://insights.sbomify.com/CVE-2021-41173/): DoS via maliciously crafted p2p message (medium 5.7)
- [CVE-2021-41172](https://insights.sbomify.com/CVE-2021-41172/): Self-XSS in AS_Redis (medium 6.4)
- [CVE-2021-41171](https://insights.sbomify.com/CVE-2021-41171/): Bypass bruteforce protection on login form in elabftw (medium 5.9)
- [CVE-2021-41170](https://insights.sbomify.com/CVE-2021-41170/): Evaluation of closures can lead to execution of methods & functions in current program scope (critical 9.8)
- [CVE-2021-4117](https://insights.sbomify.com/CVE-2021-4117/): Business Logic Errors in yetiforcecompany/yetiforcecrm (high 7.7)
- [CVE-2021-41169](https://insights.sbomify.com/CVE-2021-41169/): Improper Neutralization HTML tags in sulu/sulu (medium 6.2)
- [CVE-2021-41168](https://insights.sbomify.com/CVE-2021-41168/): Hash-Collision Denial-of-Service Vulnerability in snudown (medium 6.5)
- [CVE-2021-41167](https://insights.sbomify.com/CVE-2021-41167/): Unlimited requests in modern-async (high 7.5)
- [CVE-2021-41166](https://insights.sbomify.com/CVE-2021-41166/): Permission bypass in Nextcloud Android App (medium 4.3)
- [CVE-2021-41165](https://insights.sbomify.com/CVE-2021-41165/): HTML comments vulnerability allowing to execute JavaScript code (high 8.2)
- [CVE-2021-41164](https://insights.sbomify.com/CVE-2021-41164/): Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML (high 8.2)
- [CVE-2021-41163](https://insights.sbomify.com/CVE-2021-41163/): RCE via malicious SNS subscription payload (critical 10.0)
- [CVE-2021-41162](https://insights.sbomify.com/CVE-2021-41162/): Cross-site Scripting in Combodo iTop (critical 9.3)
- [CVE-2021-41161](https://insights.sbomify.com/CVE-2021-41161/): XSS in csvimport in 3.0.0-beta versions (critical 9.3)
- [CVE-2021-41160](https://insights.sbomify.com/CVE-2021-41160/): Improper region checks in FreeRDP allow out of bound write to memory (medium 5.3)
- [CVE-2021-4116](https://insights.sbomify.com/CVE-2021-4116/): Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm (medium 6.6)
- [CVE-2021-41159](https://insights.sbomify.com/CVE-2021-41159/): Improper client input validation for FreeRDP gateway connections allows to overwrite memory (medium 5.8)
- [CVE-2021-41158](https://insights.sbomify.com/CVE-2021-41158/): FreeSWITCH vulnerable to SIP digest leak for configured gateways (medium 5.8)
- [CVE-2021-41157](https://insights.sbomify.com/CVE-2021-41157/): FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default (medium 5.3)
- [CVE-2021-41156](https://insights.sbomify.com/CVE-2021-41156/): Reflected XSS vulnerability (medium 6.8)
- [CVE-2021-41155](https://insights.sbomify.com/CVE-2021-41155/): SQL injection in CVS revisions browser (high 8.8)
- [CVE-2021-41154](https://insights.sbomify.com/CVE-2021-41154/): SQL injection in the "SVN core" commits browser (high 8.8)
- [CVE-2021-41153](https://insights.sbomify.com/CVE-2021-41153/): Specification non-compliance in JUMPI (high 8.7)
- [CVE-2021-41152](https://insights.sbomify.com/CVE-2021-41152/): Path Traversal in Folder Component Leading to Local File Inclusion (high 7.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/91/