# CVEs published 2022-02-03

45 CVEs were published on February 3, 2022: 0 critical, 6 high. Days are UTC.

- [CVE-2021-45268](https://cve.now/CVE-2021-45268.md): A Cross Site Request Forgery (CSRF) vulnerability exists in Backdrop CMS 1.20, which allows Remote Attackers to gain Remote Code Execution ( (no CVSS)
- [CVE-2022-24307](https://cve.now/CVE-2022-24307.md): Mastodon before 3.3.2 and 3.4.x before 3.4.6 has incorrect access control because it does not compact incoming signed JSON-LD activities. (no CVSS)
- [CVE-2022-21740](https://cve.now/CVE-2022-21740.md): Heap overflow in Tensorflow (CVSS 7.6, tensorflow · tensorflow-cpu +1)
- [CVE-2022-21741](https://cve.now/CVE-2022-21741.md): Division by zero in TFLite (CVSS 6.5, tensorflow-gpu · tensorflow +1)
- [CVE-2022-21737](https://cve.now/CVE-2022-21737.md): Assertion failure based denial of service in Tensorflow (CVSS 6.5, tensorflow · tensorflow-cpu +1)
- [CVE-2021-44866](https://cve.now/CVE-2021-44866.md): An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. (no CVSS)
- [CVE-2022-21738](https://cve.now/CVE-2022-21738.md): Integer overflow leading to crash in Tensorflow (CVSS 6.5, tensorflow · tensorflow-gpu +1)
- [CVE-2022-21739](https://cve.now/CVE-2022-21739.md): Null pointer dereference in TensorFlow (CVSS 6.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-21734](https://cve.now/CVE-2022-21734.md): \`CHECK\`-failures in Tensorflow (CVSS 6.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-21735](https://cve.now/CVE-2022-21735.md): Division by zero in Tensorflow (CVSS 6.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-23569](https://cve.now/CVE-2022-23569.md): \`CHECK\`-fails when building invalid tensor shapes in Tensorflow (CVSS 6.5, tensorflow-cpu · tensorflow-gpu +1)
- [CVE-2022-21729](https://cve.now/CVE-2022-21729.md): Overflow and uncaught divide by zero in Tensorflow (CVSS 6.5, tensorflow-cpu · tensorflow-gpu +1)
- [CVE-2022-21725](https://cve.now/CVE-2022-21725.md): Division by zero in Tensorflow (CVSS 6.5, tensorflow · tensorflow-gpu +1)
- [CVE-2022-21736](https://cve.now/CVE-2022-21736.md): Undefined behavior in Tensorflow (CVSS 7.6, tensorflow · tensorflow-gpu +1)
- [CVE-2022-23567](https://cve.now/CVE-2022-23567.md): Integer overflows in Tensorflow (CVSS 6.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-23568](https://cve.now/CVE-2022-23568.md): Integer overflows in Tensorflow (CVSS 6.5, tensorflow-cpu · tensorflow-gpu +1)
- [CVE-2022-21731](https://cve.now/CVE-2022-21731.md): Type confusion leading to segfault in Tensorflow (CVSS 6.5, tensorflow-gpu · tensorflow +1)
- [CVE-2022-21733](https://cve.now/CVE-2022-21733.md): Memory exhaustion in Tensorflow (CVSS 4.3, tensorflow · tensorflow-cpu +1)
- [CVE-2022-21732](https://cve.now/CVE-2022-21732.md): Memory exhaustion in Tensorflow (CVSS 4.3, tensorflow · tensorflow-cpu +1)
- [CVE-2022-21727](https://cve.now/CVE-2022-21727.md): Integer overflow in Tensorflow (CVSS 7.6, tensorflow-gpu · tensorflow-cpu +1)
- [CVE-2022-21726](https://cve.now/CVE-2022-21726.md): Out of bounds read in Tensorflow (CVSS 8.1, tensorflow · tensorflow-cpu +1)
- [CVE-2022-21728](https://cve.now/CVE-2022-21728.md): Out of bounds read in Tensorflow (CVSS 8.1, tensorflow · tensorflow-cpu +1)
- [CVE-2022-21730](https://cve.now/CVE-2022-21730.md): Out of bounds read in Tensorflow (CVSS 8.1, tensorflow-cpu · tensorflow +1)
- [CVE-2022-24121](https://cve.now/CVE-2022-24121.md): SQL Injection vulnerability discovered in Unified Office Total Connect Now that would allow an attacker to extract sensitive information thr (no CVSS)
- [CVE-2022-23873](https://cve.now/CVE-2022-23873.md): Victor CMS v1.0 was discovered to contain a SQL injection vulnerability that allows attackers to inject arbitrary commands via 'user\_firstna (no CVSS)
- [CVE-2022-23357](https://cve.now/CVE-2022-23357.md): mozilo2.0 was discovered to be vulnerable to directory traversal attacks via the parameter curent\_dir. (no CVSS)
- [CVE-2022-23871](https://cve.now/CVE-2022-23871.md): Multiple cross-site scripting (XSS) vulnerabilities in the component outcomes\_addProcess.php of Gibbon CMS v22.0.01 allow attackers to execu (no CVSS)
- [CVE-2022-24031](https://cve.now/CVE-2022-24031.md): An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. (no CVSS)
- [CVE-2021-33625](https://cve.now/CVE-2021-33625.md): An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. (no CVSS)
- [CVE-2021-43323](https://cve.now/CVE-2021-43323.md): An issue was discovered in UsbCoreDxe in Insyde InsydeH2O with kernel 5.5 before 05.51.45, 5.4 before 05.43.45, 5.3 before 05.35.45, 5.2 bef (no CVSS)
- [CVE-2021-42113](https://cve.now/CVE-2021-42113.md): An issue was discovered in StorageSecurityCommandDxe in Insyde InsydeH2O with Kernel 5.1 before 05.14.28, Kernel 5.2 before 05.24.28, and Ke (no CVSS)
- [CVE-2021-41838](https://cve.now/CVE-2021-41838.md): An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. (no CVSS)
- [CVE-2021-42554](https://cve.now/CVE-2021-42554.md): An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel (no CVSS)
- [CVE-2021-41839](https://cve.now/CVE-2021-41839.md): An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. (no CVSS)
- [CVE-2021-33627](https://cve.now/CVE-2021-33627.md): An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 b (no CVSS)
- [CVE-2021-42060](https://cve.now/CVE-2021-42060.md): An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel (no CVSS)
- [CVE-2021-41837](https://cve.now/CVE-2021-41837.md): An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. (no CVSS)
- [CVE-2021-41840](https://cve.now/CVE-2021-41840.md): An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. (no CVSS)
- [CVE-2022-24030](https://cve.now/CVE-2022-24030.md): An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. (no CVSS)
- [CVE-2021-42059](https://cve.now/CVE-2021-42059.md): An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 b (no CVSS)
- [CVE-2021-43615](https://cve.now/CVE-2021-43615.md): An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 before 05.35.23, 5.4 be (no CVSS)
- [CVE-2021-41841](https://cve.now/CVE-2021-41841.md): An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. (no CVSS)
- [CVE-2020-5953](https://cve.now/CVE-2020-5953.md): A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that derefere (no CVSS)
- [CVE-2022-22818](https://cve.now/CVE-2022-22818.md): The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current conte (no CVSS, django)
- [CVE-2022-23833](https://cve.now/CVE-2022-23833.md): An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. (no CVSS, django)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.