High
CVE-2021-24866
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2021-24939
LoginWP < 3.0.0.5 - Reflected Cross-Site Scripting via rul_login_url, rul_logout_url Parameter
Medium
CVE-2021-24924
Email Log <= 2.4.7 - Reflected Cross-Site Scripting
High
CVE-2021-24914
Tawk.To Live Chat <= 0.5.4 - Missing Authorization to Visitor Monitoring & Chat Removal
Critical
CVE-2021-24931
Secure Copy Content Protection and Content Locking <= 2.8.1 - Unauthenticated SQL Injection
Medium
CVE-2021-36857
Testimonial Builder <= 1.6.1 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2021-41228
Code injection in `saved_model_cli`
Medium
CVE-2021-41227
Arbitrary memory read in `ImmutableConst`
Medium
CVE-2021-41225
A use of uninitialized value vulnerability in Tensorflow
Medium
CVE-2021-41222
Segfault due to negative splits in `SplitV`
High
CVE-2021-41221
Access to invalid memory during shape inference in `Cudnn*` ops
High
CVE-2021-41220
Use after free / memory leak in `CollectiveReduceV2`
Medium
CVE-2021-41216
Heap buffer overflow in `Transpose`
Medium
CVE-2021-41213
Deadlock in mutually recursive `tf.function` objects
Medium
CVE-2021-41218
Integer division by 0 in `tf.raw_ops.AllToAll`
Medium
CVE-2021-41209
FPE in convolutions with zero size filters
Critical
CVE-2021-41208
Incomplete validation in boosted trees code
Medium
CVE-2021-41207
FPE in `ParallelConcat`
High
CVE-2021-41206
Incomplete validation of shapes in multiple TF ops
Medium
CVE-2021-41202
Overflow/crash in `tf.range`
Medium
CVE-2021-41226
Heap OOB in `SparseBinCount`
Medium
CVE-2021-41224
`SparseFillEmptyRows` heap OOB
Medium
CVE-2021-41223
Heap OOB in `FusedBatchNorm` kernels
High
CVE-2021-41219
Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.