Medium
CVE-2021-4162
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,334
Reset filters
High
CVE-2021-43854
Inefficient Regular Expression Complexity in nltk (word_tokenize, sent_tokenize)
Medium
CVE-2021-34141
Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.
Medium
CVE-2021-33430
NumPy Buffer Overflow (Disputed)
Medium
CVE-2021-43837
vault-cli contains possible RCE when reading user-defined data
Medium
CVE-2021-43818
lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through
High
CVE-2021-41265
Improper Authentication in Flask-AppBuilder
High
CVE-2021-43811
Code injection via unsafe YAML loading
Medium
CVE-2021-44420
Potential bypass of an upstream access control based on URL paths in Django
Medium
CVE-2021-43781
Permissions not properly checked in Invenio-Drafts-Resources
High
CVE-2021-40830
Improper certificate management in AWS IoT Device SDK v2
High
CVE-2021-40831
Improper certificate management in AWS IoT Device SDK v2
Critical
CVE-2021-43775
Arbitrary file reading vulnerability in Aim
High
CVE-2021-41281
Path traversal in Matrix Synapse
Critical
CVE-2021-43572
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Medium
CVE-2021-41134
Stored XSS in Jupyter nbdime
Medium
CVE-2021-41227
Arbitrary memory read in `ImmutableConst`
Medium
CVE-2021-41225
A use of uninitialized value vulnerability in Tensorflow
Medium
CVE-2021-41222
Segfault due to negative splits in `SplitV`
High
CVE-2021-41221
Access to invalid memory during shape inference in `Cudnn*` ops
High
CVE-2021-41220
Use after free / memory leak in `CollectiveReduceV2`
Medium
CVE-2021-41216
Heap buffer overflow in `Transpose`
Medium
CVE-2021-41213
Deadlock in mutually recursive `tf.function` objects
Medium
CVE-2021-41218
Integer division by 0 in `tf.raw_ops.AllToAll`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.