Low
CVE-2021-29516
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,330
Reset filters
Low
CVE-2021-29515
Reference binding to null pointer in `MatrixDiag*` ops
Low
CVE-2021-29514
Heap out of bounds write in `RaggedBinCount`
Low
CVE-2021-29513
Type confusion during tensor casts lead to dereferencing null pointers
Low
CVE-2021-29554
Division by 0 in `DenseCountSparseOutput`
Low
CVE-2021-29512
Heap buffer overflow in `RaggedBinCount`
Medium
CVE-2021-29510
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Medium
CVE-2021-29471
Denial of service attack via push rule patterns in matrix-synapse
Medium
CVE-2021-21419
Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet
High
ghsa-qrmm-w4v4-q7f8
Unauthorized access through URL manipulation
Medium
CVE-2021-28359
Cross-site Scripting in Apache Airflow
High
CVE-2020-13952
In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated
High
CVE-2021-20228
Ansible Exposes Sensitive Information
Medium
ghsa-jgpv-4h4c-xhw3
Uncontrolled Resource Consumption in pillow
High
CVE-2021-29434
Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
Low
ghsa-375m-5fvv-xq23
VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption
Medium
CVE-2021-29432
Malicious users could abuse Sydent to control the content of invitation emails
Medium
CVE-2021-29431
SSRF in Sydent due to missing validation of hostnames
High
CVE-2021-29430
Sydent vulnerable to denial of service attack via memory exhaustion
Medium
CVE-2021-29433
Sydent DoS (via resource exhaustion) due to improper input validation
High
CVE-2021-30459
SQL Injection via in django-debug-toolbar
Medium
ghsa-63rq-p8fp-524q
Potential API key leak
High
CVE-2021-21392
Open redirect via transitional IPv6 addresses on dual-stack networks
Medium
CVE-2021-21394
Denial of service (via resource exhaustion) due to improper input validation on third-party identifier endpoints
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.