CVEs published in May 2021
2,381 vulnerabilities, 217 critical, 19 exploited.
- google tensorflowHeap OOB read in `tf.raw_ops.Dequantize`2.5 Low
- google tensorflowHeap buffer overflow and undefined behavior in `FusedBatchNorm`2.5 Low
- google tensorflowCHECK-fail due to integer overflow2.5 Low
- google tensorflowDivision by 0 in `Conv2DBackpropInput`2.5 Low
- google tensorflowDivision by 0 in `Conv2D`2.5 Low
- google tensorflowDivision by 0 in `QuantizedConv2D`2.5 Low
- google tensorflowDivision by 0 in `QuantizedMul`2.5 Low
- google tensorflowHeap buffer overflow caused by rounding2.5 Low
- google tensorflowInvalid validation in `SparseMatrixSparseCholesky`2.5 Low
- google tensorflowCHECK-fail in tf.raw_ops.EncodePng2.5 Low
- google tensorflowHeap out of bounds read in `RaggedCross`2.5 Low
- google tensorflowCHECK-fail in DrawBoundingBoxes2.5 Low
- google tensorflowCHECK-fail in SparseConcat2.5 Low
- google tensorflowHeap buffer overflow in `QuantizedMul`2.5 Low
- google tensorflowHeap buffer overflow in `QuantizedReshape`2.5 Low
- google tensorflowHeap buffer overflow in `QuantizedResizeBilinear`2.5 Low
- google tensorflowDivision by zero in `Conv2DBackpropFilter`2.5 Low
- google tensorflowSegfault in tf.raw_ops.ImmutableConst2.5 Low
- google tensorflowHeap buffer overflow in `Conv2DBackpropFilter`2.5 Low
- google tensorflowNull pointer dereference in `StringNGrams`2.5 Low
- google tensorflowHeap buffer overflow in `StringNGrams`2.5 Low
- google tensorflowCHECK-fail in `CTCGreedyDecoder`2.5 Low
- google tensorflowCHECK-fail in `QuantizeAndDequantizeV4Grad`2.5 Low
- google tensorflowHeap buffer overflow in `SparseTensorToCSRSparseMatrix`2.5 Low
- google tensorflowDivision by 0 in `QuantizedBiasAdd`2.5 Low
- google tensorflowHeap out of bounds in `QuantizedBatchNormWithGlobalNormalization`2.5 Low
- google tensorflowDivision by 0 in `QuantizedBatchNormWithGlobalNormalization`2.5 Low
- google tensorflowDivision by 0 in `QuantizedAdd`2.5 Low
- google tensorflowDivision by 0 in `FractionalAvgPool`2.5 Low
- google tensorflowOOB read in `MatrixTriangularSolve`2.5 Low
- google tensorflowCHECK-failure in `UnsortedSegmentJoin`2.5 Low
- google tensorflowHeap OOB in `QuantizeAndDequantizeV3`2.5 Low
- google tensorflowDivision by 0 in `DenseCountSparseOutput`2.5 Low
- google tensorflowHeap buffer overflow in `RaggedBinCount`2.5 Low
- express-handlebars, express handlebars project handlebars +1 moreFile disclosure in Express Handlebars8.6 High
- haml-coffee project haml-coffeeRemote code execution and Reflected cross site scripting in haml-coffee7.7 High
- express handlebars project handlebars, tryghost express-hbs +1 moreFile disclosure in express-hbs5.4 Medium
- protonmail, protonmail webclient +1 moreRegular expression Denial of Service in ProtonMail6.5 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a...4.6 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a...5.9 Medium
- ibm qradar user behavior analytics, qradar siem +1 moreIBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due...3.7 Low
- ibm qradar user behavior analytics, qradar siem +1 moreIBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain...5.3 Medium
- ibm qradar user behavior analytics, qradar siem +1 moreIBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting....6.1 Medium
- ibm qradar user behavior analytics, qradar siem +1 moreIBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally...4.0 Medium
- ibm planning analytics localIBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to...3.7 Low
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a...2.4 Low
drbd-utilsopenSUSESecurity update for drbd-utilsNo score- yfcmfYFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php.9.8 Critical
- yfcmfIn YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.4.8 Medium
- deep-override project deep-overridePrototype Pollution in deep-override9.8 Critical
- Show moreLoading…