2021 CVE Vulnerabilities

23,481 CVEs published in 2021.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2021-29530HIGH7.8TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereferenc...
CVE-2021-29529HIGH7.8TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a heap buffer overflow in...
CVE-2021-29525HIGH7.8TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a division by 0 in `tf.ra...
CVE-2021-29520HIGH7.8TensorFlow is an end-to-end open source platform for machine learning. Missing validation between arguments to `tf.raw_o...
CVE-2021-29518HIGH7.8TensorFlow is an end-to-end open source platform for machine learning. In eager mode (default in TF 2.0 and later), sess...
CVE-2021-29515HIGH7.8TensorFlow is an end-to-end open source platform for machine learning. The implementation of `MatrixDiag*` operations(ht...
CVE-2021-29514HIGH7.8TensorFlow is an end-to-end open source platform for machine learning. If the `splits` argument of `RaggedBincount` does...
CVE-2021-29513HIGH7.8TensorFlow is an end-to-end open source platform for machine learning. Calling TF operations with tensors of non-numeric...
CVE-2021-32820HIGH8.6Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine conf...
CVE-2021-32819HIGH8.8Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pur...
CVE-2021-29512HIGH7.8TensorFlow is an end-to-end open source platform for machine learning. If the `splits` argument of `RaggedBincount` does...
CVE-2021-32816HIGH7.5ProtonMail Web Client is the official AngularJS web client for the ProtonMail secure email service. ProtonMail Web Clien...
CVE-2021-20393HIGH7.5IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information whe...
CVE-2021-24280HIGH8.8In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could...
CVE-2021-24278HIGH7.5In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce ...
CVE-2021-24195HIGH8.8Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login as User or Customer ...
CVE-2021-24194HIGH8.8Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login Protection - Limit F...
CVE-2021-24193HIGH8.8Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Visitor Traffic Real Time ...
CVE-2021-24192HIGH8.8Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Tree Sitemap WordPress plu...
CVE-2021-24191HIGH8.8Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Maintenance Mode & Site...
CVE-2021-24190HIGH8.8Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WooCommerce Conditional Ma...
CVE-2021-24189HIGH8.8Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Captchinoo, Google recaptc...
CVE-2021-24188HIGH8.8Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Content Copy Protection...
CVE-2021-30183HIGH7.5Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when runni...
CVE-2021-32051HIGH7.5Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id par...

Check if your code is affected by 2021 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now