| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-37643 | Hig | 0.43 | 7.7 | 0.00 | Aug 12, 2021 | TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to `tf.raw_ops.MatrixDiagPartOp`, then the code triggers a null pointer dereference (if input is empty) or produces invalid behavior, ignoring all values after… | ||
| CVE-2021-37639 | Hig | 0.48 | 8.4 | 0.00 | Aug 12, 2021 | TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap… | ||
| CVE-2021-37638 | Hig | 0.43 | 7.7 | 0.00 | Aug 12, 2021 | TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for `row_partition_types` of `tf.raw_ops.RaggedTensorToTensor` API results in a null pointer dereference and undefined behavior. The [implementation](https://github.com/tensorflow/tens… | ||
| CVE-2021-37637 | Hig | 0.43 | 7.7 | 0.00 | Aug 12, 2021 | TensorFlow is an end-to-end open source platform for machine learning. It is possible to trigger a null pointer dereference in TensorFlow by passing an invalid input to `tf.raw_ops.CompressElement`. The [implementation](https://github.com/tensorflow/tensorflow/blob/47a06f40411a69… | ||
| CVE-2020-18464 | Low | 0.23 | 3.5 | 0.00 | Aug 12, 2021 | Cross Site Request Forgery (CSRF) vulnerability in AikCms 2.0.0 in video_list.php, which can let a malicious user delete movie information. | ||
| CVE-2020-18463 | Low | 0.16 | 2.4 | 0.00 | Aug 12, 2021 | Cross Site Request Forgery (CSRF) vulnerability exists in v2.0.0 in video_list.php, which can let a malicious user delete a video message. | ||
| CVE-2020-18462 | Hig | 0.47 | 7.2 | 0.01 | Aug 12, 2021 | File Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file management office does not verify the uploaded file. | ||
| CVE-2020-18460 | — | Hig | 0.57 | 8.8 | 0.00 | Aug 12, 2021 | Cross Site Request Forgery (CSRF) vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content. | |
| CVE-2020-18458 | Hig | 0.52 | 8.0 | 0.00 | Aug 12, 2021 | Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd. | ||
| CVE-2021-37660 | Med | 0.29 | 5.5 | 0.00 | Aug 12, 2021 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0. The [implementation](https://github.com/tensorfl… | ||
| CVE-2021-37653 | Med | 0.29 | 5.5 | 0.00 | Aug 12, 2021 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a floating point exception in `tf.raw_ops.ResourceGather`. The [implementation](https://github.com/tensorflow/tensorflow/blob/f24faa153ad31a4b51578f8181… | ||
| CVE-2021-37642 | Med | 0.29 | 5.5 | 0.00 | Aug 12, 2021 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.ResourceScatterDiv` is vulnerable to a division by 0 error. The [implementation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e… | ||
| CVE-2021-37640 | Med | 0.29 | 5.5 | 0.00 | Aug 12, 2021 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.SparseReshape` can be made to trigger an integral division by 0 exception. The [implementation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf… | ||
| CVE-2021-37636 | Med | 0.29 | 5.5 | 0.00 | Aug 12, 2021 | TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.SparseDenseCwiseDiv` is vulnerable to a division by 0 error. The [implementation](https://github.com/tensorflow/tensorflow/blob/a1bc56203f21a5a4995311825f… | ||
| CVE-2021-36982 | Hig | 0.53 | 8.1 | 0.02 | Aug 12, 2021 | AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP request. | ||
| CVE-2021-36958 | Hig | 0.53 | 7.8 | 0.31 | Aug 12, 2021 | A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs;… | ||
| CVE-2021-36950 | Med | 0.35 | 5.4 | 0.01 | Aug 12, 2021 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||
| CVE-2021-36949 | Hig | 0.46 | 7.1 | 0.01 | Aug 12, 2021 | Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability | ||
| CVE-2021-36948 | Hig | 0.65 | 7.8 | 0.23 | KEV | Aug 12, 2021 | Windows Update Medic Service Elevation of Privilege Vulnerability | |
| CVE-2021-36947 | Hig | 0.58 | 8.8 | 0.08 | Aug 12, 2021 | Windows Print Spooler Remote Code Execution Vulnerability | ||
| CVE-2021-36946 | Med | 0.35 | 5.4 | 0.01 | Aug 12, 2021 | Microsoft Dynamics Business Central Cross-site Scripting Vulnerability | ||
| CVE-2021-36945 | Hig | 0.48 | 7.3 | 0.02 | Aug 12, 2021 | Windows 10 Update Assistant Elevation of Privilege Vulnerability | ||
| CVE-2021-36943 | Med | 0.26 | 4.0 | 0.01 | Aug 12, 2021 | Azure CycleCloud Elevation of Privilege Vulnerability | ||
| CVE-2021-36942 | Hig | 0.75 | 7.5 | 0.66 | KEV | Aug 12, 2021 | Windows LSA Spoofing Vulnerability | |
| CVE-2021-36941 | Hig | 0.51 | 7.8 | 0.02 | Aug 12, 2021 | Microsoft Word Remote Code Execution Vulnerability | ||
| CVE-2021-36940 | Hig | 0.50 | 7.6 | 0.04 | Aug 12, 2021 | Microsoft SharePoint Server Spoofing Vulnerability | ||
| CVE-2021-36938 | Med | 0.36 | 5.5 | 0.01 | Aug 12, 2021 | Windows Cryptographic Primitives Library Information Disclosure Vulnerability | ||
| CVE-2021-36937 | Hig | 0.51 | 7.8 | 0.02 | Aug 12, 2021 | Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability | ||
| CVE-2021-36936 | Hig | 0.58 | 8.8 | 0.07 | Aug 12, 2021 | Windows Print Spooler Remote Code Execution Vulnerability | ||
| CVE-2021-36933 | Hig | 0.49 | 7.5 | 0.04 | Aug 12, 2021 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | ||
| CVE-2021-36932 | Hig | 0.49 | 7.5 | 0.04 | Aug 12, 2021 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | ||
| CVE-2021-36927 | Hig | 0.51 | 7.8 | 0.01 | Aug 12, 2021 | Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability | ||
| CVE-2021-36926 | Hig | 0.49 | 7.5 | 0.04 | Aug 12, 2021 | Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability | ||
| CVE-2021-36921 | Hig | 0.57 | 8.8 | 0.01 | Aug 12, 2021 | AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request. | ||
| CVE-2021-34537 | Hig | 0.51 | 7.8 | 0.01 | Aug 12, 2021 | Windows Bluetooth Driver Elevation of Privilege Vulnerability | ||
| CVE-2021-34536 | Hig | 0.51 | 7.8 | 0.01 | Aug 12, 2021 | Windows Storage Spaces Controller Elevation of Privilege Vulnerability | ||
| CVE-2021-34535 | Hig | 0.59 | 8.8 | 0.22 | Aug 12, 2021 | Remote Desktop Client Remote Code Execution Vulnerability | ||
| CVE-2021-34534 | Med | 0.44 | 6.8 | 0.02 | Aug 12, 2021 | Windows MSHTML Platform Remote Code Execution Vulnerability | ||
| CVE-2021-34533 | Hig | 0.51 | 7.8 | 0.02 | Aug 12, 2021 | Windows Graphics Component Font Parsing Remote Code Execution Vulnerability | ||
| CVE-2021-34532 | Med | 0.29 | 5.5 | 0.01 | Aug 12, 2021 | ASP.NET Core and Visual Studio Information Disclosure Vulnerability | ||
| CVE-2021-34530 | Hig | 0.51 | 7.8 | 0.02 | Aug 12, 2021 | Windows Graphics Component Remote Code Execution Vulnerability | ||
| CVE-2021-34524 | Hig | 0.53 | 8.1 | 0.04 | Aug 12, 2021 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability | ||
| CVE-2021-34487 | Hig | 0.46 | 7.0 | 0.01 | Aug 12, 2021 | Windows Event Tracing Elevation of Privilege Vulnerability | ||
| CVE-2021-34486 | Hig | 0.63 | 7.8 | 0.09 | KEV | Aug 12, 2021 | Windows Event Tracing Elevation of Privilege Vulnerability | |
| CVE-2021-34485 | Med | 0.33 | 5.0 | 0.02 | Aug 12, 2021 | .NET Core and Visual Studio Information Disclosure Vulnerability | ||
| CVE-2021-34484 | Hig | 0.64 | 7.8 | 0.22 | KEV | Aug 12, 2021 | Windows User Profile Service Elevation of Privilege Vulnerability | |
| CVE-2021-34483 | Hig | 0.51 | 7.8 | 0.01 | Aug 12, 2021 | Windows Print Spooler Elevation of Privilege Vulnerability | ||
| CVE-2021-34480 | Med | 0.47 | 6.8 | 0.34 | Aug 12, 2021 | Scripting Engine Memory Corruption Vulnerability | ||
| CVE-2021-34478 | Hig | 0.55 | 7.8 | 0.52 | Aug 12, 2021 | Microsoft Office Remote Code Execution Vulnerability | ||
| CVE-2021-34471 | Hig | 0.51 | 7.8 | 0.01 | Aug 12, 2021 | Microsoft Defender Elevation of Privilege Vulnerability |
- risk 0.43cvss 7.7epss 0.00
TensorFlow is an end-to-end open source platform for machine learning. If a user does not provide a valid padding value to `tf.raw_ops.MatrixDiagPartOp`, then the code triggers a null pointer dereference (if input is empty) or produces invalid behavior, ignoring all values after…
- risk 0.48cvss 8.4epss 0.00
TensorFlow is an end-to-end open source platform for machine learning. When restoring tensors via raw APIs, if the tensor name is not provided, TensorFlow can be tricked into dereferencing a null pointer. Alternatively, attackers can read memory outside the bounds of heap…
- risk 0.43cvss 7.7epss 0.00
TensorFlow is an end-to-end open source platform for machine learning. Sending invalid argument for `row_partition_types` of `tf.raw_ops.RaggedTensorToTensor` API results in a null pointer dereference and undefined behavior. The [implementation](https://github.com/tensorflow/tens…
- risk 0.43cvss 7.7epss 0.00
TensorFlow is an end-to-end open source platform for machine learning. It is possible to trigger a null pointer dereference in TensorFlow by passing an invalid input to `tf.raw_ops.CompressElement`. The [implementation](https://github.com/tensorflow/tensorflow/blob/47a06f40411a69…
- risk 0.23cvss 3.5epss 0.00
Cross Site Request Forgery (CSRF) vulnerability in AikCms 2.0.0 in video_list.php, which can let a malicious user delete movie information.
- risk 0.16cvss 2.4epss 0.00
Cross Site Request Forgery (CSRF) vulnerability exists in v2.0.0 in video_list.php, which can let a malicious user delete a video message.
- risk 0.47cvss 7.2epss 0.01
File Upload vulnerabilty in AikCms v2.0.0 in poster_edit.php because the background file management office does not verify the uploaded file.
- risk 0.57cvss 8.8epss 0.00
Cross Site Request Forgery (CSRF) vulnerability exists in 711cms v1.0.7 that can add an admin account via admin.php?c=Admin&m=content.
- risk 0.52cvss 8.0epss 0.00
Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.
- risk 0.29cvss 5.5epss 0.00
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause a floating point exception by calling inplace operations with crafted arguments that would result in a division by 0. The [implementation](https://github.com/tensorfl…
- risk 0.29cvss 5.5epss 0.00
TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a floating point exception in `tf.raw_ops.ResourceGather`. The [implementation](https://github.com/tensorflow/tensorflow/blob/f24faa153ad31a4b51578f8181…
- risk 0.29cvss 5.5epss 0.00
TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.ResourceScatterDiv` is vulnerable to a division by 0 error. The [implementation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf5a44103b57b9c2e…
- risk 0.29cvss 5.5epss 0.00
TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.SparseReshape` can be made to trigger an integral division by 0 exception. The [implementation](https://github.com/tensorflow/tensorflow/blob/8d72537c6abf…
- risk 0.29cvss 5.5epss 0.00
TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of `tf.raw_ops.SparseDenseCwiseDiv` is vulnerable to a division by 0 error. The [implementation](https://github.com/tensorflow/tensorflow/blob/a1bc56203f21a5a4995311825f…
- risk 0.53cvss 8.1epss 0.02
AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP request.
- risk 0.53cvss 7.8epss 0.31
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs;…
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- risk 0.46cvss 7.1epss 0.01
Microsoft Azure Active Directory Connect Authentication Bypass Vulnerability
- risk 0.65cvss 7.8epss 0.23
Windows Update Medic Service Elevation of Privilege Vulnerability
- risk 0.58cvss 8.8epss 0.08
Windows Print Spooler Remote Code Execution Vulnerability
- risk 0.35cvss 5.4epss 0.01
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
- risk 0.48cvss 7.3epss 0.02
Windows 10 Update Assistant Elevation of Privilege Vulnerability
- risk 0.26cvss 4.0epss 0.01
Azure CycleCloud Elevation of Privilege Vulnerability
- risk 0.75cvss 7.5epss 0.66
Windows LSA Spoofing Vulnerability
- risk 0.51cvss 7.8epss 0.02
Microsoft Word Remote Code Execution Vulnerability
- risk 0.50cvss 7.6epss 0.04
Microsoft SharePoint Server Spoofing Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Cryptographic Primitives Library Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
- risk 0.58cvss 8.8epss 0.07
Windows Print Spooler Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
- risk 0.57cvss 8.8epss 0.01
AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request.
- risk 0.51cvss 7.8epss 0.01
Windows Bluetooth Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- risk 0.59cvss 8.8epss 0.22
Remote Desktop Client Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.02
Windows MSHTML Platform Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
- risk 0.29cvss 5.5epss 0.01
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.02
Windows Graphics Component Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.04
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows Event Tracing Elevation of Privilege Vulnerability
- risk 0.63cvss 7.8epss 0.09
Windows Event Tracing Elevation of Privilege Vulnerability
- risk 0.33cvss 5.0epss 0.02
.NET Core and Visual Studio Information Disclosure Vulnerability
- risk 0.64cvss 7.8epss 0.22
Windows User Profile Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Print Spooler Elevation of Privilege Vulnerability
- risk 0.47cvss 6.8epss 0.34
Scripting Engine Memory Corruption Vulnerability
- risk 0.55cvss 7.8epss 0.52
Microsoft Office Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Defender Elevation of Privilege Vulnerability