CVEs published May 14, 2021
170 CVEs were published on May 14, 2021: 2 critical, 6 high.
- Published
- 170
- Critical
- 2
- High
- 6
- Medium
- 14
- Low
- 100
- Unrated
- 48
- Now in CISA KEV
- 0
- Fix available
- 133
Most affected products
- tensorflow · tensorflow-cpu +1
- 74
- tensorflow · tensorflow-gpu +1
- 34
- Query Solutions Redirection for Contact Form
- 5
- IBM QRadar SIEM
- 4
- IBM Cloud Pak for Security
- 3
- 101
- 1
- Apache Traffic Server
- 1
- Car Seller - Auto Classifieds Script
- 1
- deep-override
- 1
- express-handlebars
- 1
Critical 2
- CVE-2021-25941Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may ledeep-override
- CVE-2021-25943Prototype pollution vulnerability in '101' versions 1.0.0 through 1.6.3 allows an attacker to cause a denial of service and may lead to remo101
High 6
- CVE-2021-29591Stack overflow due to looping TFLite subgraphtensorflow · tensorflow-cpu +1
- CVE-2021-29605Integer overflow in TFLite memory allocationtensorflow · tensorflow-cpu +1
- CVE-2021-29606Heap OOB read in TFLitetensorflow · tensorflow-cpu +1
- CVE-2021-29614Interpreter crash from `tf.io.decode_raw`tensorflow · tensorflow-cpu +1
- CVE-2021-32818Remote code execution and Reflected cross site scripting in haml-coffeenetzpirat haml-coffee · haml-coffee
- CVE-2021-32819Remote code execution in squirrellysquirrellyjs squirrelly · squirrelly
Medium, low and unrated 162
- CVE-2020-16632A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via
- CVE-2021-32073DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remo
- CVE-2019-25044The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and
- CVE-2021-33033The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting f
- CVE-2021-33034In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409.
- CVE-2021-22866UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resourcesGitHub Enterprise Server
- CVE-2021-27737Apache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin.Apache Traffic Server
- CVE-2021-32054Firely/Incendi Spark before 1.5.5-r4 lacks Content-Disposition headers in certain situations, which may cause crafted files to be delivered
- CVE-2020-24119A heap buffer overflow read was discovered in upx 4.0.0, because the check in p_lx_elf.cpp is not perfect.
- CVE-2020-27833A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafopenshift/oc
- CVE-2021-3402An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker tolibyara
- CVE-2021-3537A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing alibxml2 · nokogiri
- CVE-2021-29513Type confusion during tensor casts lead to dereferencing null pointerstensorflow · tensorflow-gpu +1
- CVE-2021-29514Heap out of bounds write in `RaggedBinCount`tensorflow · tensorflow-gpu +1
- CVE-2021-29515Reference binding to null pointer in `MatrixDiag*` opstensorflow · tensorflow-gpu +1
- CVE-2021-29516Null pointer dereference via invalid Ragged Tensorstensorflow · tensorflow-cpu +1
- CVE-2021-29517Division by zero in `Conv3D`tensorflow · tensorflow-cpu +1
- CVE-2021-29518Session operations in eager mode lead to null pointer dereferencestensorflow · tensorflow-cpu +1
- CVE-2021-29519CHECK-fail in SparseCross due to type confusiontensorflow · tensorflow-cpu +1
- CVE-2021-29520Heap buffer overflow in `Conv3DBackprop*`tensorflow · tensorflow-cpu +1
- CVE-2021-29521Segfault in SparseCountSparseOutputtensorflow · tensorflow-gpu +1
- CVE-2021-29522Division by 0 in `Conv3DBackprop*`tensorflow · tensorflow-cpu +1
- CVE-2021-29523CHECK-fail in AddManySparseToTensorsMaptensorflow · tensorflow-cpu +1
- CVE-2021-29524Division by 0 in `Conv2DBackpropFilter`tensorflow · tensorflow-cpu +1
- CVE-2021-29585Division by zero in padding computation in TFLitetensorflow · tensorflow-cpu +1
- CVE-2021-29586Division by zero in optimized pooling implementations in TFLitetensorflow · tensorflow-cpu +1
- CVE-2020-17891TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbit
- CVE-2021-29615Stack overflow in `ParseAttrValue` with nested tensorstensorflow · tensorflow-cpu +1
- CVE-2021-29616Null dereference in Grappler's `TrySimplify`tensorflow · tensorflow-gpu +1
- CVE-2021-29617Crash in `tf.strings.substr` due to `CHECK`-failtensorflow · tensorflow-cpu +1
- CVE-2021-29618Crash in `tf.transpose` with complex inputstensorflow · tensorflow-cpu +1
- CVE-2021-29619Segfault in `tf.raw_ops.SparseCountSparseOutput`tensorflow · tensorflow-cpu +1
- CVE-2021-29587Division by zero in TFLite's implementation of `SpaceToDepth`tensorflow · tensorflow-cpu +1
- CVE-2021-29588Division by zero in TFLite's implementation of `TransposeConv`tensorflow · tensorflow-cpu +1
- CVE-2021-29589Division by zero in TFLite's implementation of `GatherNd`tensorflow · tensorflow-cpu +1
- CVE-2021-29590Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`tensorflow · tensorflow-cpu +1
- CVE-2021-29592Null pointer dereference in TFLite's `Reshape` operatortensorflow · tensorflow-cpu +1
- CVE-2021-29593Division by zero in TFLite's implementation of `BatchToSpaceNd`tensorflow · tensorflow-cpu +1
- CVE-2021-29594Division by zero in TFLite's convolution codetensorflow · tensorflow-gpu +1
- CVE-2021-29595Division by zero in TFLite's implementation of `DepthToSpace`tensorflow · tensorflow-cpu +1
- CVE-2021-29596Division by zero in TFLite's implementation of `EmbeddingLookup`tensorflow · tensorflow-cpu +1
- CVE-2021-29597Division by zero in TFLite's implementation of `SpaceToBatchNd`tensorflow · tensorflow-gpu +1
- CVE-2021-29598Division by zero in TFLite's implementation of `SVDF`tensorflow · tensorflow-cpu +1
- CVE-2021-29599Division by zero in TFLite's implementation of `Split`tensorflow · tensorflow-gpu +1
- CVE-2021-29600Division by zero in TFLite's implementation of `OneHot`tensorflow · tensorflow-gpu +1
- CVE-2021-29601Integer overflow in TFLite concatentationtensorflow · tensorflow-gpu +1
- CVE-2021-29602Division by zero in TFLite's implementation of `DepthwiseConv`tensorflow · tensorflow-gpu +1
- CVE-2021-29603Heap OOB write in TFLitetensorflow · tensorflow-gpu +1
- CVE-2021-29604Division by zero in TFLite's implementation of hashtable lookuptensorflow · tensorflow-cpu +1
- CVE-2021-29607Incomplete validation in `SparseSparseMinimum`tensorflow · tensorflow-cpu +1
- CVE-2021-29608Heap OOB and null pointer dereference in `RaggedTensorToTensor`tensorflow · tensorflow-gpu +1
- CVE-2021-29609Incomplete validation in `SparseAdd`tensorflow · tensorflow-cpu +1
- CVE-2021-29610Invalid validation in `QuantizeAndDequantizeV2`tensorflow · tensorflow-cpu +1
- CVE-2021-29611Incomplete validation in `SparseReshape`tensorflow · tensorflow-gpu +1
- CVE-2021-29612Heap buffer overflow in `BandedTriangularSolve`tensorflow · tensorflow-cpu +1
- CVE-2021-29613Incomplete validation in `tf.raw_ops.CTCLoss`tensorflow · tensorflow-cpu +1
- CVE-2021-29555Division by 0 in `FusedBatchNorm`tensorflow · tensorflow-cpu +1
- CVE-2021-29556Division by 0 in `Reverse`tensorflow · tensorflow-gpu +1
- CVE-2021-29557Division by 0 in `SparseMatMul`tensorflow · tensorflow-gpu +1
- CVE-2021-29558Heap buffer overflow in `SparseSplit`tensorflow · tensorflow-cpu +1
- CVE-2021-29559Heap OOB access in unicode opstensorflow · tensorflow-gpu +1
- CVE-2021-29560Heap buffer overflow in `RaggedTensorToTensor`tensorflow · tensorflow-cpu +1
- CVE-2021-29561CHECK-fail in `LoadAndRemapMatrix`tensorflow · tensorflow-gpu +1
- CVE-2021-29562CHECK-fail in `tf.raw_ops.IRFFT`tensorflow · tensorflow-gpu +1
- CVE-2021-29563CHECK-fail in `tf.raw_ops.RFFT`tensorflow · tensorflow-cpu +1
- CVE-2021-29564Null pointer dereference in `EditDistance`tensorflow · tensorflow-cpu +1
- CVE-2021-29565Null pointer dereference in `SparseFillEmptyRows`tensorflow · tensorflow-gpu +1
- CVE-2021-29566Heap OOB access in `Dilation2DBackpropInput`tensorflow · tensorflow-gpu +1
- CVE-2021-29567Lack of validation in `SparseDenseCwiseMul`tensorflow · tensorflow-cpu +1
- CVE-2021-29568Reference binding to null in `ParameterizedTruncatedNormal`tensorflow · tensorflow-gpu +1
- CVE-2021-29569Heap out of bounds read in `RequantizationRange`tensorflow · tensorflow-gpu +1
- CVE-2021-29570Heap out of bounds read in `MaxPoolGradWithArgmax`tensorflow · tensorflow-cpu +1
- CVE-2021-29571Memory corruption in `DrawBoundingBoxesV2`tensorflow · tensorflow-cpu +1
- CVE-2021-29572Reference binding to nullptr in `SdcaOptimizer`tensorflow · tensorflow-cpu +1
- CVE-2021-29573Division by 0 in `MaxPoolGradWithArgmax`tensorflow · tensorflow-cpu +1
- CVE-2021-29574Undefined behavior in `MaxPool3DGradGrad`tensorflow · tensorflow-cpu +1
- CVE-2021-29575Overflow/denial of service in `tf.raw_ops.ReverseSequence`tensorflow · tensorflow-cpu +1
- CVE-2021-29576Heap buffer overflow in `MaxPool3DGradGrad`tensorflow · tensorflow-cpu +1
- CVE-2021-29577Heap buffer overflow in `AvgPool3DGrad`tensorflow · tensorflow-cpu +1
- CVE-2021-29578Heap buffer overflow in `FractionalAvgPoolGrad`tensorflow · tensorflow-cpu +1
- CVE-2021-29579Heap buffer overflow in `MaxPoolGrad`tensorflow · tensorflow-gpu +1
- CVE-2021-29580Undefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad`tensorflow · tensorflow-cpu +1
- CVE-2021-29581Segfault in `CTCBeamSearchDecoder`tensorflow · tensorflow-cpu +1
- CVE-2021-29582Heap OOB read in `tf.raw_ops.Dequantize`tensorflow · tensorflow-cpu +1
- CVE-2021-29583Heap buffer overflow and undefined behavior in `FusedBatchNorm`tensorflow · tensorflow-cpu +1
- CVE-2021-29584CHECK-fail due to integer overflowtensorflow · tensorflow-cpu +1
- CVE-2021-29525Division by 0 in `Conv2DBackpropInput`tensorflow · tensorflow-gpu +1
- CVE-2021-29526Division by 0 in `Conv2D`tensorflow · tensorflow-cpu +1
- CVE-2021-29527Division by 0 in `QuantizedConv2D`tensorflow · tensorflow-cpu +1
- CVE-2021-29528Division by 0 in `QuantizedMul`tensorflow · tensorflow-gpu +1
- CVE-2021-29529Heap buffer overflow caused by roundingtensorflow · tensorflow-cpu +1
- CVE-2021-29530Invalid validation in `SparseMatrixSparseCholesky`tensorflow · tensorflow-cpu +1
- CVE-2021-29531CHECK-fail in tf.raw_ops.EncodePngtensorflow · tensorflow-cpu +1
- CVE-2021-29532Heap out of bounds read in `RaggedCross`tensorflow · tensorflow-cpu +1
- CVE-2021-29533CHECK-fail in DrawBoundingBoxestensorflow · tensorflow-gpu +1
- CVE-2021-29534CHECK-fail in SparseConcattensorflow · tensorflow-cpu +1
- CVE-2021-29535Heap buffer overflow in `QuantizedMul`tensorflow · tensorflow-cpu +1
- CVE-2021-29536Heap buffer overflow in `QuantizedReshape`tensorflow · tensorflow-cpu +1
- CVE-2021-29537Heap buffer overflow in `QuantizedResizeBilinear`tensorflow · tensorflow-gpu +1
- CVE-2021-29538Division by zero in `Conv2DBackpropFilter`tensorflow · tensorflow-gpu +1
- CVE-2021-29539Segfault in tf.raw_ops.ImmutableConsttensorflow · tensorflow-cpu +1
- CVE-2021-29540Heap buffer overflow in `Conv2DBackpropFilter`tensorflow · tensorflow-cpu +1
- CVE-2021-29541Null pointer dereference in `StringNGrams`tensorflow · tensorflow-gpu +1
- CVE-2021-29542Heap buffer overflow in `StringNGrams`tensorflow · tensorflow-gpu +1
- CVE-2021-29543CHECK-fail in `CTCGreedyDecoder`tensorflow · tensorflow-cpu +1
- CVE-2021-29544CHECK-fail in `QuantizeAndDequantizeV4Grad`tensorflow · tensorflow-cpu +1
- CVE-2021-29545Heap buffer overflow in `SparseTensorToCSRSparseMatrix`tensorflow · tensorflow-cpu +1
- CVE-2021-29546Division by 0 in `QuantizedBiasAdd`tensorflow · tensorflow-gpu +1
- CVE-2021-29547Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization`tensorflow · tensorflow-cpu +1
- CVE-2021-29548Division by 0 in `QuantizedBatchNormWithGlobalNormalization`tensorflow · tensorflow-cpu +1
- CVE-2021-29549Division by 0 in `QuantizedAdd`tensorflow · tensorflow-gpu +1
- CVE-2021-29550Division by 0 in `FractionalAvgPool`tensorflow · tensorflow-cpu +1
- CVE-2021-29551OOB read in `MatrixTriangularSolve`tensorflow · tensorflow-gpu +1
- CVE-2021-29552CHECK-failure in `UnsortedSegmentJoin`tensorflow · tensorflow-cpu +1
- CVE-2021-29553Heap OOB in `QuantizeAndDequantizeV3`tensorflow · tensorflow-cpu +1
- CVE-2021-29554Division by 0 in `DenseCountSparseOutput`tensorflow · tensorflow-cpu +1
- CVE-2021-29512Heap buffer overflow in `RaggedBinCount`tensorflow · tensorflow-cpu +1
- CVE-2021-32820File disclosure in Express Handlebarsexpress-handlebars
- CVE-2021-32817File disclosure in express-hbsTryGhost express-hbs · express-hbs
- CVE-2021-32816Regular expression Denial of Service in ProtonMailProtonMail WebClient
- CVE-2021-20565IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence oIBM Cloud Pak for Security
- CVE-2021-20564IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a remote attacker to obtain sensitive informatIBM Cloud Pak for Security
- CVE-2021-20429IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy.IBM QRadar SIEM
- CVE-2021-20393IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technicIBM QRadar SIEM
- CVE-2021-20392IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting.IBM QRadar SIEM
- CVE-2021-20391IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the systemIBM QRadar SIEM
- CVE-2020-4985IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameters in a query.IBM Planning Analytics Local
- CVE-2020-4811IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious dIBM Cloud Pak for Security
- CVE-2020-23691YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php.
- CVE-2020-23689In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.
- CVE-2020-18167Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the "Homepage Intr
- CVE-2020-18166Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a ".jpg.php" extension
- CVE-2021-32613In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.radare2
- CVE-2020-27185Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices.NPort IA5000A Series with Moxa Service enabled
- CVE-2020-27184The NPort IA5000A Series devices use Telnet as one of the network device management services.NPort IA5000A Series with Telnet enabled
- CVE-2021-24286Redirect 404 to Parent < 1.3.1 - Reflected Cross-Site Scripting (XSS)Moove Agency Redirect 404 to parent
- CVE-2021-24287Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)Moove Agency Select All Categories and Taxonomies, Change C…
- CVE-2021-24291Photo Gallery < 1.5.69 - Multiple Reflected Cross-Site Scripting (XSS)Photo Gallery Team Photo Gallery by 10Web – Mobile-Friendly…
- CVE-2021-24278Redirection for Contact Form 7 < 2.3.4 - Unauthenticated Arbitrary Nonce GenerationQuery Solutions Redirection for Contact Form
- CVE-2021-24279Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Plugin InstallationQuery Solutions Redirection for Contact Form
- CVE-2021-24280Redirection for Contact Form 7 < 2.3.4 - Authenticated PHP Object InjectionQuery Solutions Redirection for Contact Form
- CVE-2021-24281Redirection for Contact Form 7 < 2.3.4 - Authenticated Arbitrary Post DeletionQuery Solutions Redirection for Contact Form
- CVE-2021-24282Redirection for Contact Form 7 < 2.3.4 - Unprotected AJAX ActionsQuery Solutions Redirection for Contact Form
- CVE-2021-24283Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS)PickPlugins Accordion
- CVE-2021-24284Kaswara Modern VC Addons <= 3.0.1 - Unauthenticated Arbitrary File UploadSayenThemes Kaswara Modern VC Addons
- CVE-2021-24285Car Seller - Auto Classifieds Script <= 2.1.0 - Unauthenticated SQL InjectionCar Seller - Auto Classifieds Script
- CVE-2021-24189Captchinoo, Google recaptcha for admin login page < 2.4 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy Captchinoo, Google recaptcha for admin login page
- CVE-2021-24190WooCommerce Conditional Marketing Mailer < 1.5.2 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy WooCommerce Conditional Marketing Mailer
- CVE-2021-24191WP Maintenance Mode & Site Under Construction < 1.8.2 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy WP Maintenance Mode & Site Under Construction
- CVE-2021-24192Tree Sitemap < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy Tree Sitemap
- CVE-2021-24193Visitor Traffic Real Time Statistics < 2.12 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy Visitor Traffic Real Time Statistics
- CVE-2021-24194Login Protection - Limit Failed Login Attempts < 2.9 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy Login Protection – Limit Failed Login Attempts
- CVE-2021-24195Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy Login as User or Customer
- CVE-2021-24277RSS for Yandex Turbo < 1.30 - Authenticated Stored Cross-Site Scripting (XSS)Flector RSS for Yandex Turbo
- CVE-2021-24188WP Content Copy Protection & No Right Click < 3.1.5 - Arbitrary Plugin Installation/Activation via Low Privilege Userwp-buy WP Content Copy Protection & No Right Click
- CVE-2020-27150In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of all users on the syNPort IA5000A Series
- CVE-2020-27149By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests NPort IA5000A Series with web console enabled
- CVE-2020-27020Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to Kaspersky Password Manager for Windows, Kaspersky Password…
- CVE-2021-30183Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export
- CVE-2021-31922An HTTP Request Smuggling vulnerability in Pulse Secure Virtual Traffic Manager before 21.1 could allow an attacker to smuggle an HTTP reque
- CVE-2021-32051Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter.
- CVE-2020-27769In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.ImageMagick