High
CVE-2021-37647
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,828
Reset filters
High
CVE-2021-37643
Null pointer dereference in `MatrixDiagPartOp`
High
CVE-2021-37639
Null pointer dereference and heap OOB read in operations restoring tensors
High
CVE-2021-37638
Null pointer dereference in `RaggedTensorToTensor`
High
CVE-2021-37637
Null pointer dereference in `CompressElement`
Medium
CVE-2021-37660
Division by 0 in inplace operations
Medium
CVE-2021-37653
Division by 0 in `ResourceGather`
Medium
CVE-2021-37642
Division by 0 in `ResourceScatterDiv`
Medium
CVE-2021-37640
Integer division by 0 in sparse reshaping
Medium
CVE-2021-37636
Floating point exception in `SparseDenseCwiseDiv`
Medium
CVE-2021-32797
JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>
High
CVE-2021-32798
Special Element Injection in notebook
High
CVE-2021-38305
Command injection in Yamale
Medium
CVE-2021-32807
The module `AccessControl` defines security policies for Python code used in restricted code within Zope applications. Restricted code is any code that resides in Zope's object database, such as the c
High
CVE-2021-32811
Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope
High
ghsa-7f92-rr6w-cq64
Storage corruption due to variables overwritten by re-entrancy locks
High
CVE-2021-32806
URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
Medium
CVE-2021-23418
XML External Entity Reference in Glances
High
CVE-2021-31292
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.
High
CVE-2019-25050
netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and
Critical
CVE-2021-34552
Buffer Overflow in Pillow
High
CVE-2021-32559
Integer overflow in pywin32
Medium
CVE-2021-23401
Open Redirect in Flask-User
Critical
CVE-2021-35042
SQL Injection in Django
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.