High
CVE-2021-37639
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,334
Reset filters
High
CVE-2021-37638
Null pointer dereference in `RaggedTensorToTensor`
High
CVE-2021-37637
Null pointer dereference in `CompressElement`
Medium
CVE-2021-37660
Division by 0 in inplace operations
Medium
CVE-2021-37653
Division by 0 in `ResourceGather`
Medium
CVE-2021-37642
Division by 0 in `ResourceScatterDiv`
Medium
CVE-2021-37640
Integer division by 0 in sparse reshaping
Medium
CVE-2021-37636
Floating point exception in `SparseDenseCwiseDiv`
Medium
CVE-2021-32797
JupyterLab: XSS due to lack of sanitization of the action attribute of an html <form>
High
CVE-2021-32798
Special Element Injection in notebook
High
CVE-2021-38305
Command injection in Yamale
High
CVE-2021-32806
URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
High
CVE-2021-33503
Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
High
CVE-2021-32633
Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that are available for direct use. By default
Medium
CVE-2021-33026
Deserialization of Untrusted Data in Flask-Caching
Medium
CVE-2021-32681
Cross-site Scripting in wagtail
Medium
CVE-2021-23393
Open redirect in Flask-Unchained
High
CVE-2021-32674
Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TA
High
CVE-2021-32677
Cross-Site Request Forgery (CSRF) in FastAPI
Medium
CVE-2021-33203
Path Traversal in Django
Medium
CVE-2021-32670
Reflected cross-site scripting issue in Datasette
Medium
ghsa-89v2-g37m-g3ff
Improper Verification of Cryptographic Signature in aws-encryption-sdk-cli
Medium
ghsa-x5h4-9gqw-942j
Improper Verification of Cryptographic Signature in aws-encryption-sdk
High
CVE-2021-33038
Exposure of sensitive information to an unauthorized actor in HyperKitty
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.