CVEs published in August 2021
2,473 vulnerabilities, 226 critical, 21 exploited.
- google tensorflowHeap OOB in TensorFlow Lite's `Gather*` implementations5.5 Medium
- google tensorflowHeap OOB in TensorFlow Lite5.5 Medium
- pluxmlPluXML 5.8.7 allows core/admin/profil.php stored XSS via the Information field.4.8 Medium
- pluxmlPluXML 5.8.7 allows Article Editing stored XSS via Headline or Content.4.8 Medium
- google tensorflowNull pointer exception in TensorFlow Lite7.8 High
- google tensorflowNull pointer dereference in TensorFlow Lite MLIR optimizations7.8 High
- google tensorflowNull pointer dereference in TensorFlow Lite7.8 High
- virtual robots.txt project robots.txtVirtual Robots.txt before 1.10 does not block HTML tags in the robots.txt field.9.8 Critical
- j2eefastJ2eeFAST 2.2.1 allows remote attackers to perform SQL injection via the (1) compId parameter to...9.8 Critical
- google tensorflowInfinite loop in TensorFlow Lite5.5 Medium
- pearadmin thinkPear Admin Think through 2.1.2 has an arbitrary file upload vulnerability that allows attackers...9.8 Critical
- google tensorflowDivision by zero in TFLite in TensorFlow5.5 Medium
- google tensorflowDivision by 0 in most convolution operators in TensorFlow5.5 Medium
- google tensorflowReference binding to nullptr in shape inference in TensorFlow7.8 High
- google tensorflowReference binding to nullptr in map operations in TensorFlow7.8 High
- google tensorflowReference binding to nullptr in `RaggedTensorToVariant` in TensorFlow7.8 High
- google tensorflowReference binding to nullptr in unicode encoding in TensorFlow7.8 High
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2....9.8 Critical
- quectel eg25-g firmwareQuectel EG25-G devices through 202006130814 allow executing arbitrary code remotely by using an...9.8 Critical
- kitesky kitecmsA directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary...6.5 Medium
- google tensorflowIncorrect validation of `SaveV2` inputs in TensorFlow7.8 High
- google tensorflowUse after free in boosted trees creation in TensorFlow7.8 High
- amazon cloudfrontAmazon AWS CloudFront TLSv1.2_2019 allows TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and...9.8 Critical
- google tensorflowBad alloc in `StringNGrams` caused by integer conversion in TensorFlow5.5 Medium
- domainmodA cross site scripting (XSS) vulnerability in the /segments/edit.php component of Domainmod 4.13...5.4 Medium
- domainmodA cross-site request forgery (CSRF) in /admin/maintenance/ of Domainmod 4.13 allows attackers to...4.3 Medium
- domainmodA cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of...5.4 Medium
- google tensorflowCrash caused by integer conversion to unsigned in TensorFlow5.5 Medium
- google tensorflowInteger overflow due to conversion to unsigned in TensorFlow5.5 Medium
- google tensorflowHeap buffer overflow in `FractionalAvgPoolGrad` in TensorFlow7.1 High
- google tensorflowSegfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlow7.8 High
- google tensorflowReference binding to nullptr in boosted trees in TensorFlow7.1 High
- linphone belle-sipBelledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an...7.5 High
- google tensorflowReference binding to nullptr in `RaggedTensorToSparse` in TensorFlow7.1 High
- google tensorflowReference binding to nullptr in `MatrixDiagV*` ops in TensorFlow7.1 High
- google tensorflowReference binding to nullptr in `MatrixSetDiagV*` ops in TensorFlow7.1 High
- expressionengineIn Expression Engine before 6.0.3, addonIcon in Addons/file/mod.file.php relies on the untrusted...9.8 Critical
- github paste-markdownClipboard-based DOM-XSS6.5 Medium
- nuance winscribe dictationThe exporter/Login.aspx login form in the Exporter in Nuance Winscribe Dictation 4.1.0.99 is...9.8 Critical
- google tensorflow`std::abort` raised from `TensorListReserve` in TensorFlow5.5 Medium
- google tensorflowHeap OOB and CHECK fail in `ResourceGather` in TensorFlow7.3 High
- google tensorflowHeap OOB in `RaggedGather` in TensorFlow7.3 High
- google tensorflowHeap out of bounds access in sparse reduction operations in TensorFlow7.3 High
- google tensorflowHeap OOB in boosted trees in TensorFlow7.3 High
- google tensorflowOut of bounds read via null pointer dereference in TensorFlow7.3 High
- google tensorflowHeap OOB in `ResourceScatterUpdate` in TensorFlow7.3 High
- sitecoreSitecore through 10.1, when Update Center is enabled, allows remote authenticated users to upload...8.8 High
- phpfastcacheExposed phpinfo() in PhpFastCache5.4 Medium
- aikcmsCross Site Request Forgery (CSRF) vulnerability in AikCms 2.0.0 in video_list.php, which can let...3.5 Low
- aikcmsCross Site Request Forgery (CSRF) vulnerability exists in v2.0.0 in video_list.php, which can let...2.4 Low
- Show moreLoading…