# Vulnerabilities published in 2021 - [CVE-2021-39975](https://insights.sbomify.com/CVE-2021-39975/): Other in HarmonyOS (high 7.5) - [CVE-2021-39974](https://insights.sbomify.com/CVE-2021-39974/): Memory corruption in EMUI (high 7.5) - [CVE-2021-39973](https://insights.sbomify.com/CVE-2021-39973/): Null dereference in EMUI (high 7.5) - [CVE-2021-39972](https://insights.sbomify.com/CVE-2021-39972/): Information disclosure in HarmonyOS (high 7.5) - [CVE-2021-39971](https://insights.sbomify.com/CVE-2021-39971/): Other in HarmonyOS (high 7.5) - [CVE-2021-39970](https://insights.sbomify.com/CVE-2021-39970/): Path traversal in HarmonyOS (high 7.5) - [CVE-2021-3997](https://insights.sbomify.com/CVE-2021-3997/): Denial of service in systemd (medium 5.5) - [CVE-2021-39969](https://insights.sbomify.com/CVE-2021-39969/): Missing authorization in EMUI (high 7.5) - [CVE-2021-39968](https://insights.sbomify.com/CVE-2021-39968/): Business logic in HarmonyOS (high 7.5) - [CVE-2021-39967](https://insights.sbomify.com/CVE-2021-39967/): Misconfiguration in EMUI (high 7.5) - [CVE-2021-39966](https://insights.sbomify.com/CVE-2021-39966/): Information disclosure in EMUI (high 7.5) - [CVE-2021-3996](https://insights.sbomify.com/CVE-2021-3996/): Business logic in util-linux (medium 5.5) - [CVE-2021-3995](https://insights.sbomify.com/CVE-2021-3995/): Business logic in util-linux (medium 5.5) - [CVE-2021-39947](https://insights.sbomify.com/CVE-2021-39947/): Information disclosure in GitLab Runner (medium 5.3) - [CVE-2021-39946](https://insights.sbomify.com/CVE-2021-39946/): Cross-site scripting in GitLab (high 8.7) - [CVE-2021-39945](https://insights.sbomify.com/CVE-2021-39945/): Missing authorization in GitLab (low 2.7) - [CVE-2021-39944](https://insights.sbomify.com/CVE-2021-39944/): Privilege escalation in GitLab (high 7.1) - [CVE-2021-39943](https://insights.sbomify.com/CVE-2021-39943/): Missing authorization in GitLab (medium 4.3) - [CVE-2021-39942](https://insights.sbomify.com/CVE-2021-39942/): Denial of service in GitLab (medium 4.3) - [CVE-2021-39941](https://insights.sbomify.com/CVE-2021-39941/): Information disclosure in GitLab (low 3.7) - [CVE-2021-39940](https://insights.sbomify.com/CVE-2021-39940/): Denial of service in GitLab (medium 4.3) - [CVE-2021-3994](https://insights.sbomify.com/CVE-2021-3994/): Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk (high 8.8) - [CVE-2021-39939](https://insights.sbomify.com/CVE-2021-39939/): Denial of service in GitLab Runner (medium 6.5) - [CVE-2021-39938](https://insights.sbomify.com/CVE-2021-39938/): Denial of service in GitLab (low 3.1) - [CVE-2021-39937](https://insights.sbomify.com/CVE-2021-39937/): Privilege escalation in GitLab (medium 5.9) - [CVE-2021-39936](https://insights.sbomify.com/CVE-2021-39936/): Missing authorization in GitLab (low 3.5) - [CVE-2021-39935](https://insights.sbomify.com/CVE-2021-39935/): GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) (medium 6.8, exploited in the wild) - [CVE-2021-39934](https://insights.sbomify.com/CVE-2021-39934/): Missing authorization in GitLab (medium 4.3) - [CVE-2021-39933](https://insights.sbomify.com/CVE-2021-39933/): Denial of service in GitLab (medium 4.3) - [CVE-2021-39932](https://insights.sbomify.com/CVE-2021-39932/): Denial of service in GitLab (medium 4.3) - [CVE-2021-39931](https://insights.sbomify.com/CVE-2021-39931/): Business logic in GitLab (low 3.1) - [CVE-2021-39930](https://insights.sbomify.com/CVE-2021-39930/): Missing authorization in GitLab (medium 4.3) - [CVE-2021-3993](https://insights.sbomify.com/CVE-2021-3993/): Cross-Site Request Forgery (CSRF) in star7th/showdoc (medium 4.3) - [CVE-2021-39929](https://insights.sbomify.com/CVE-2021-39929/): Denial of service in Wireshark (high 7.5) - [CVE-2021-39928](https://insights.sbomify.com/CVE-2021-39928/): Null dereference in Wireshark (high 7.5) - [CVE-2021-39927](https://insights.sbomify.com/CVE-2021-39927/): Server-side request forgery in GitLab (low 3.5) - [CVE-2021-39926](https://insights.sbomify.com/CVE-2021-39926/): Memory corruption in Wireshark (high 7.5) - [CVE-2021-39925](https://insights.sbomify.com/CVE-2021-39925/): Memory corruption in Wireshark (high 7.5) - [CVE-2021-39924](https://insights.sbomify.com/CVE-2021-39924/): Denial of service in Wireshark (high 7.5) - [CVE-2021-39923](https://insights.sbomify.com/CVE-2021-39923/): Denial of service in Wireshark (high 7.5) - [CVE-2021-39922](https://insights.sbomify.com/CVE-2021-39922/): Memory corruption in Wireshark (high 7.5) - [CVE-2021-39921](https://insights.sbomify.com/CVE-2021-39921/): Null dereference in Wireshark (high 7.5) - [CVE-2021-39920](https://insights.sbomify.com/CVE-2021-39920/): Null dereference in Wireshark (high 7.5) - [CVE-2021-3992](https://insights.sbomify.com/CVE-2021-3992/): Improper Access Control in kevinpapst/kimai2 (medium 6.5) - [CVE-2021-39919](https://insights.sbomify.com/CVE-2021-39919/): Information disclosure in GitLab (medium 4.4) - [CVE-2021-39918](https://insights.sbomify.com/CVE-2021-39918/): Missing authorization in GitLab (low 3.1) - [CVE-2021-39917](https://insights.sbomify.com/CVE-2021-39917/): Denial of service in GitLab (medium 4.3) - [CVE-2021-39916](https://insights.sbomify.com/CVE-2021-39916/): Missing authorization in GitLab (medium 4.3) - [CVE-2021-39915](https://insights.sbomify.com/CVE-2021-39915/): Missing authorization in GitLab (medium 5.3) - [CVE-2021-39914](https://insights.sbomify.com/CVE-2021-39914/): Denial of service in GitLab (low 3.1) - [CVE-2021-39913](https://insights.sbomify.com/CVE-2021-39913/): Information disclosure in GitLab (medium 4.4) - [CVE-2021-39912](https://insights.sbomify.com/CVE-2021-39912/): Denial of service in GitLab (medium 5.3) - [CVE-2021-39911](https://insights.sbomify.com/CVE-2021-39911/): Information disclosure in GitLab (low 1.7) - [CVE-2021-39910](https://insights.sbomify.com/CVE-2021-39910/): Cross-site scripting in GitLab (low 2.6) - [CVE-2021-3991](https://insights.sbomify.com/CVE-2021-3991/): Improper Authorization in dolibarr/dolibarr (medium 4.3) - [CVE-2021-39909](https://insights.sbomify.com/CVE-2021-39909/): Security feature bypass in GitLab (medium 5.3) - [CVE-2021-39908](https://insights.sbomify.com/CVE-2021-39908/): Code injection in GitLab (medium 6.5) - [CVE-2021-39907](https://insights.sbomify.com/CVE-2021-39907/): Denial of service in GitLab (medium 5.3) - [CVE-2021-39906](https://insights.sbomify.com/CVE-2021-39906/): Cross-site scripting in GitLab (high 8.7) - [CVE-2021-39905](https://insights.sbomify.com/CVE-2021-39905/): Information disclosure in GitLab (medium 4.3) - [CVE-2021-39904](https://insights.sbomify.com/CVE-2021-39904/): Missing authorization in GitLab (medium 4.3) - [CVE-2021-39903](https://insights.sbomify.com/CVE-2021-39903/): Missing authorization in GitLab (medium 6.5) - [CVE-2021-39902](https://insights.sbomify.com/CVE-2021-39902/): Missing authorization in GitLab (medium 4.3) - [CVE-2021-39901](https://insights.sbomify.com/CVE-2021-39901/): Information disclosure in GitLab (low 2.7) - [CVE-2021-39900](https://insights.sbomify.com/CVE-2021-39900/): Information disclosure in GitLab (low 2.0) - [CVE-2021-3990](https://insights.sbomify.com/CVE-2021-3990/): Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc (medium 6.5) - [CVE-2021-39899](https://insights.sbomify.com/CVE-2021-39899/): Auth bypass in GitLab (low 2.9) - [CVE-2021-39898](https://insights.sbomify.com/CVE-2021-39898/): Information disclosure in GitLab (low 3.7) - [CVE-2021-39897](https://insights.sbomify.com/CVE-2021-39897/): Missing authorization in GitLab (low 2.6) - [CVE-2021-39896](https://insights.sbomify.com/CVE-2021-39896/): Business logic in GitLab (low 3.8) - [CVE-2021-39895](https://insights.sbomify.com/CVE-2021-39895/): Business logic in GitLab (medium 6.0) - [CVE-2021-39894](https://insights.sbomify.com/CVE-2021-39894/): Server-side request forgery in GitLab (medium 5.4) - [CVE-2021-39893](https://insights.sbomify.com/CVE-2021-39893/): Missing authorization in GitLab (medium 5.3) - [CVE-2021-39892](https://insights.sbomify.com/CVE-2021-39892/): Missing authorization in GitLab (medium 4.3) - [CVE-2021-39891](https://insights.sbomify.com/CVE-2021-39891/): Information disclosure in GitLab (medium 5.9) - [CVE-2021-39890](https://insights.sbomify.com/CVE-2021-39890/): Auth bypass in GitLab (low 3.1) - [CVE-2021-3989](https://insights.sbomify.com/CVE-2021-3989/): Open Redirect in star7th/showdoc (medium 6.5) - [CVE-2021-39889](https://insights.sbomify.com/CVE-2021-39889/): Information disclosure in GitLab (medium 4.3) - [CVE-2021-39888](https://insights.sbomify.com/CVE-2021-39888/): Information disclosure in GitLab (medium 4.3) - [CVE-2021-39887](https://insights.sbomify.com/CVE-2021-39887/): Cross-site scripting in GitLab (high 7.3) - [CVE-2021-39886](https://insights.sbomify.com/CVE-2021-39886/): Missing authorization in GitLab (low 2.6) - [CVE-2021-39885](https://insights.sbomify.com/CVE-2021-39885/): Cross-site scripting in GitLab (high 8.7) - [CVE-2021-39884](https://insights.sbomify.com/CVE-2021-39884/): Information disclosure in GitLab (medium 4.3) - [CVE-2021-39883](https://insights.sbomify.com/CVE-2021-39883/): Missing authorization in GitLab (medium 4.3) - [CVE-2021-39882](https://insights.sbomify.com/CVE-2021-39882/): Information disclosure in GitLab (medium 5.3) - [CVE-2021-39881](https://insights.sbomify.com/CVE-2021-39881/): Other in GitLab (low 3.5) - [CVE-2021-39880](https://insights.sbomify.com/CVE-2021-39880/): apollo_upload_server has Denial of Service vulnerability (medium 6.5) - [CVE-2021-3988](https://insights.sbomify.com/CVE-2021-3988/): Cross-site Scripting (XSS) in janeczku/calibre-web (medium 5.7) - [CVE-2021-39879](https://insights.sbomify.com/CVE-2021-39879/): Auth bypass in GitLab (low 2.2) - [CVE-2021-39878](https://insights.sbomify.com/CVE-2021-39878/): Cross-site scripting in GitLab (medium 5.8) - [CVE-2021-39877](https://insights.sbomify.com/CVE-2021-39877/): Denial of service in GitLab (high 7.7) - [CVE-2021-39876](https://insights.sbomify.com/CVE-2021-39876/): Information disclosure in GitLab (medium 4.3) - [CVE-2021-39875](https://insights.sbomify.com/CVE-2021-39875/): Information disclosure in GitLab (medium 5.3) - [CVE-2021-39874](https://insights.sbomify.com/CVE-2021-39874/): Security feature bypass in GitLab (medium 4.3) - [CVE-2021-39873](https://insights.sbomify.com/CVE-2021-39873/): Other in GitLab (medium 4.3) - [CVE-2021-39872](https://insights.sbomify.com/CVE-2021-39872/): Auth bypass in GitLab (medium 6.5) - [CVE-2021-39871](https://insights.sbomify.com/CVE-2021-39871/): Security feature bypass in GitLab (medium 4.3) - [CVE-2021-39870](https://insights.sbomify.com/CVE-2021-39870/): Security feature bypass in GitLab (medium 4.3) - [CVE-2021-3987](https://insights.sbomify.com/CVE-2021-3987/): Improper Access Control in janeczku/calibre-web (medium 5.4) - [CVE-2021-39869](https://insights.sbomify.com/CVE-2021-39869/): Information disclosure in GitLab (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/101/