Medium
CVE-2021-41198
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,829
Reset filters
Medium
CVE-2021-41197
Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes
Medium
CVE-2021-41196
Crash in `max_pool3d` when size argument is 0 or negative
Medium
CVE-2021-41195
Crash in `tf.math.segment_*` operations
Medium
CVE-2021-41247
incomplete JupyterHub logout with simultaneous JupyterLab sessions
High
CVE-2020-10378
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
Medium
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
High
CVE-2020-26705
The parseXML function in Easy-XML 0.5.0 was discovered to have a XML External Entity (XXE) vulnerability which allows for an attacker to expose sensitive data or perform a denial of service (DOS) via
Critical
CVE-2021-41194
Improper Access Control in jupyterhub-firstuseauthenticator
Critical
CVE-2021-41078
Nameko Arbitrary code execution due to YAML deserialization
Critical
CVE-2021-42343
An issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client (which defaults
High
ghsa-v988-828w-xvf2
Authentication Bypass Using an Alternate Path or Channel and Authentication Bypass by Primary Weakness in rucio-webui
High
CVE-2021-41127
Maliciously Crafted Model Archive Can Lead To Arbitrary File Write
High
CVE-2021-41146
Arbitrary command execution on Windows via qutebrowserurl: URL handler
High
CVE-2021-42771
Directory Traversal in Babel
Medium
CVE-2021-41131
Client metadata path-traversal
High
CVE-2021-42576
Policies not properly enforced in bluemonday
Critical
CVE-2021-41132
Inconsistent input sanitisation leads to XSS vectors
High
CVE-2021-40978
The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in h
Medium
CVE-2021-42134
Cross-site Scripting in django-unicorn
Medium
CVE-2021-42053
Cross-site scripting in Unicorn framework
Medium
CVE-2021-41125
Scrapy HTTP authentication credentials potentially leaked to target websites
High
CVE-2021-41121
Memory corruption when returning a literal struct with a private call inside of it
Medium
CVE-2021-28125
Open Redirect in Apache Superset
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.