Browse CVEs

MEDIUM 6.5 CVE-2020-21835 A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337. Libredwg Patch available Fix from $1,6002021-05-17 MEDIUM 6.5 CVE-2020-21815 A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (appli… Libredwg Patch available Fix from $1,6002021-05-17 MEDIUM 6.5 CVE-2020-21817 A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (applic… Libredwg Patch available Fix from $1,6002021-05-17 HIGH 7.8 CVE-2021-29616 TensorFlow is an end-to-end open source platform for machine learning. The implementation of TrySimplify(https://github.com/tensorflow/tensorflow/blo… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 MEDIUM 5.9 CVE-2021-3537 A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL der… Jboss Core Services 2.9.11+ Fix from $1,6002021-05-14 HIGH 7.8 CVE-2021-29592 TensorFlow is an end-to-end open source platform for machine learning. The fix for CVE-2020-15209(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29609 TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `SparseAdd` results in allowing attackers to exploit … Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29574 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.MaxPool3DGradGrad` exhibits undefined behavi… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29583 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.FusedBatchNorm` is vulnerable to a heap buff… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 MEDIUM 5.5 CVE-2021-29564 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference in the implementation of `t… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29565 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference in the implementation of `t… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 HIGH 7.8 CVE-2021-29568 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger undefined behavior by binding to null pointer in `tf.r… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 MEDIUM 5.5 CVE-2021-29572 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.SdcaOptimizer` triggers undefined behavior d… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 MEDIUM 5.5 CVE-2021-29541 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a dereference of a null pointer in `tf.raw_ops.StringN… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 HIGH 7.8 CVE-2021-29513 TensorFlow is an end-to-end open source platform for machine learning. Calling TF operations with tensors of non-numeric types when the operations ex… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29515 TensorFlow is an end-to-end open source platform for machine learning. The implementation of `MatrixDiag*` operations(https://github.com/tensorflow/t… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 MEDIUM 5.5 CVE-2021-29516 TensorFlow is an end-to-end open source platform for machine learning. Calling `tf.raw_ops.RaggedTensorToVariant` with arguments specifying an invali… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,6002021-05-14 HIGH 7.8 CVE-2021-29518 TensorFlow is an end-to-end open source platform for machine learning. In eager mode (default in TF 2.0 and later), session operations are invalid. H… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 HIGH 7.8 CVE-2021-29530 TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a null pointer dereference by providing an invalid `pe… Tensorflow 2.1.4 / 2.2.3+ Fix from $1,9502021-05-14 MEDIUM 5.5 CVE-2020-27830 A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio_synth without checking wheth… Linux Kernel 5.9.14+ Fix from $1,6002021-05-13 HIGH 7.5 CVE-2021-25693 An attacker may cause a Denial of Service (DoS) in multiple versions of Teradici PCoIP Agent via a null pointer dereference. Pcoip Agent 20.10.6 / 21.01.5+ Fix from $1,9502021-05-13 HIGH 7.5 CVE-2021-32611 A NULL pointer dereference vulnerability exists in eXcall_api.c in Antisip eXosip2 through 5.2.0 when handling certain 3xx redirect responses. Exosip2 after 5.2.0 Fix from $1,9502021-05-12 HIGH 7.5 CVE-2021-25845 Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial… Vport 06ec 2v26m Firmware Mitigation only Fix from $1,9502021-05-10 MEDIUM 5.5 CVE-2020-11254 Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdrag… Pm6150a Patch available Fix from $1,6002021-05-07 HIGH 7.5 CVE-2020-11273 Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when histogram bi… Csrb31024 Firmware Mitigation only Fix from $1,9502021-05-07 HIGH 7.5 CVE-2021-29241 CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS). Control For Beaglebone Sl 3.5.16.0 / 3.5.16.70+ Fix from $1,9502021-05-03 HIGH 7.5 CVE-2020-7731 This affects all versions <0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malforme… Gosaml2 Patch available Fix from $1,9502021-04-30 MEDIUM 5.5 CVE-2021-30218 samurai 1.2 has a NULL pointer dereference in writefile() in util.c via a crafted build file. Samurai Patch available Fix from $1,6002021-04-29 MEDIUM 5.5 CVE-2021-30219 samurai 1.2 has a NULL pointer dereference in printstatus() function in build.c via a crafted build file. Samurai Patch available Fix from $1,6002021-04-29 HIGH 7.5 CVE-2021-31826 Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploita… Service Provider 3.2.2+ Fix from $1,9502021-04-27