# Vulnerabilities published in 2021


- [CVE-2021-39868](https://insights.sbomify.com/CVE-2021-39868/): Business logic in GitLab (medium 4.3)
- [CVE-2021-39867](https://insights.sbomify.com/CVE-2021-39867/): Server-side request forgery in GitLab (medium 6.5)
- [CVE-2021-39866](https://insights.sbomify.com/CVE-2021-39866/): Business logic in GitLab (medium 5.4)
- [CVE-2021-39865](https://insights.sbomify.com/CVE-2021-39865/): Adobe FrameMaker TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-39864](https://insights.sbomify.com/CVE-2021-39864/): Adobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart Addition (medium 6.5)
- [CVE-2021-39863](https://insights.sbomify.com/CVE-2021-39863/): Adobe Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-39862](https://insights.sbomify.com/CVE-2021-39862/): Adobe FrameMaker PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-39861](https://insights.sbomify.com/CVE-2021-39861/): Adobe Acrobat Reader DC Catalog Plugin Out-of-Bounds Read Bug (medium 5.5)
- [CVE-2021-39860](https://insights.sbomify.com/CVE-2021-39860/): Adobe Acrobat Reader DC Search Plugin Null Pointer Dereference (medium 5.5)
- [CVE-2021-3986](https://insights.sbomify.com/CVE-2021-3986/): Information Disclosure in janeczku/calibre-web (medium 4.3)
- [CVE-2021-39859](https://insights.sbomify.com/CVE-2021-39859/): Use After Free Adobe Acrobat Pro DC [HB-21-0339] (medium 5.5)
- [CVE-2021-39858](https://insights.sbomify.com/CVE-2021-39858/): Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-39857](https://insights.sbomify.com/CVE-2021-39857/): Adobe Acrobat Reader DC Information Disclosure via ActiveX LoadFile (medium 4.3)
- [CVE-2021-39856](https://insights.sbomify.com/CVE-2021-39856/): Adobe Acrobat Reader DC NTLMv2 SSO Information Disclosure via LoadFile (medium 6.5)
- [CVE-2021-39855](https://insights.sbomify.com/CVE-2021-39855/): Adobe Acrobat Reader DC NTLMv2 SSO Information Disclosure via src Parameter (medium 6.5)
- [CVE-2021-39854](https://insights.sbomify.com/CVE-2021-39854/): Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service (medium 5.5)
- [CVE-2021-39853](https://insights.sbomify.com/CVE-2021-39853/): Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service (medium 5.5)
- [CVE-2021-39852](https://insights.sbomify.com/CVE-2021-39852/): Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service (medium 5.5)
- [CVE-2021-39851](https://insights.sbomify.com/CVE-2021-39851/): Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service (medium 5.5)
- [CVE-2021-39850](https://insights.sbomify.com/CVE-2021-39850/): Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service (medium 5.5)
- [CVE-2021-3985](https://insights.sbomify.com/CVE-2021-3985/): Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2 (high 8.0)
- [CVE-2021-39849](https://insights.sbomify.com/CVE-2021-39849/): Adobe Acrobat Reader DC Null Pointer Dereference Could Lead To Application Denial-of-Service (medium 5.5)
- [CVE-2021-39847](https://insights.sbomify.com/CVE-2021-39847/): XMP Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-39846](https://insights.sbomify.com/CVE-2021-39846/): Adobe Acrobat Reader /Parent Property Recursive Stack Overflow (medium 6.1)
- [CVE-2021-39845](https://insights.sbomify.com/CVE-2021-39845/): Adobe Acrobat Reader Page Tree Node Recursive Stack Overflow (medium 6.1)
- [CVE-2021-39844](https://insights.sbomify.com/CVE-2021-39844/): Adobe Acrobat Reader CalRGB Out-of-Bounds Read Vulnerability (low 3.3)
- [CVE-2021-39843](https://insights.sbomify.com/CVE-2021-39843/): Adobe Acrobat Reader XObject Out-of-Bound Write Vulnerability (high 7.8)
- [CVE-2021-39842](https://insights.sbomify.com/CVE-2021-39842/): Adobe Acrobat Reader DC messageHandler.OnMessage Use-After-Free Vulnerability (high 7.8)
- [CVE-2021-39841](https://insights.sbomify.com/CVE-2021-39841/): Adobe Acrobat Pro DC DocMedia Type Confusion Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-39840](https://insights.sbomify.com/CVE-2021-39840/): Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-3984](https://insights.sbomify.com/CVE-2021-3984/): Heap-based Buffer Overflow in vim/vim (high 7.3)
- [CVE-2021-39839](https://insights.sbomify.com/CVE-2021-39839/): Adobe Acrobat Reader DC AcroForm getItemAt Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-39838](https://insights.sbomify.com/CVE-2021-39838/): Adobe Acrobat Reader DC AcroForm buttonGetCaption Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-39837](https://insights.sbomify.com/CVE-2021-39837/): Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-39836](https://insights.sbomify.com/CVE-2021-39836/): Adobe Acrobat Reader DC AcroForm buttonGetIcon Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-39835](https://insights.sbomify.com/CVE-2021-39835/): Adobe FrameMaker PDF File Parsing Use-After-Free Information Disclosure Vulnerability (medium 4.3)
- [CVE-2021-39834](https://insights.sbomify.com/CVE-2021-39834/): Adobe FrameMaker TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-39833](https://insights.sbomify.com/CVE-2021-39833/): Adobe FrameMaker TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-39832](https://insights.sbomify.com/CVE-2021-39832/): Adobe FrameMaker PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-39831](https://insights.sbomify.com/CVE-2021-39831/): Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-39830](https://insights.sbomify.com/CVE-2021-39830/): Adobe FrameMaker PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-3983](https://insights.sbomify.com/CVE-2021-3983/): Cross-site Scripting (XSS) - Stored in kevinpapst/kimai2 (medium 6.3)
- [CVE-2021-39829](https://insights.sbomify.com/CVE-2021-39829/): Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-39828](https://insights.sbomify.com/CVE-2021-39828/): Adobe Digital Editions Installer flaw leads to Local Privilege Escalation (medium 5.8)
- [CVE-2021-39827](https://insights.sbomify.com/CVE-2021-39827/): Adobe Digital Editions Installer flaw leads to Arbitrary File System Write (medium 6.5)
- [CVE-2021-39826](https://insights.sbomify.com/CVE-2021-39826/): Adobe Digital Editions Command Execution Vulnerability (high 8.6)
- [CVE-2021-39825](https://insights.sbomify.com/CVE-2021-39825/): Adobe Photoshop Elements Edit 2021 TTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-39824](https://insights.sbomify.com/CVE-2021-39824/): Adobe Premiere Elements png Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-39823](https://insights.sbomify.com/CVE-2021-39823/): svg-native-viewer Heap Buffer overflow Vulnerability (high 7.8)
- [CVE-2021-39822](https://insights.sbomify.com/CVE-2021-39822/): Adobe InDesign BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-39821](https://insights.sbomify.com/CVE-2021-39821/): Adobe InDesign TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-39820](https://insights.sbomify.com/CVE-2021-39820/): Adobe InDesign Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-3982](https://insights.sbomify.com/CVE-2021-3982/): Privilege escalation in gnome-shell (medium 5.5)
- [CVE-2021-39819](https://insights.sbomify.com/CVE-2021-39819/): Adobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-39818](https://insights.sbomify.com/CVE-2021-39818/): Adobe InCopy Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-39817](https://insights.sbomify.com/CVE-2021-39817/): Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-39816](https://insights.sbomify.com/CVE-2021-39816/): Adobe Bridge Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-39815](https://insights.sbomify.com/CVE-2021-39815/): Use after free in Android (critical 9.8)
- [CVE-2021-39814](https://insights.sbomify.com/CVE-2021-39814/): Memory corruption in Android (medium 6.7)
- [CVE-2021-39812](https://insights.sbomify.com/CVE-2021-39812/): Use after free in Android (high 7.8)
- [CVE-2021-39810](https://insights.sbomify.com/CVE-2021-39810/): Missing authorization in Android (high 7.8)
- [CVE-2021-3981](https://insights.sbomify.com/CVE-2021-3981/): Misconfiguration in grub2 (low 3.3)
- [CVE-2021-39809](https://insights.sbomify.com/CVE-2021-39809/): Memory corruption in Android (high 7.5)
- [CVE-2021-39808](https://insights.sbomify.com/CVE-2021-39808/): Missing authorization in Android (high 7.8)
- [CVE-2021-39807](https://insights.sbomify.com/CVE-2021-39807/): Missing authorization in Android (high 7.8)
- [CVE-2021-39806](https://insights.sbomify.com/CVE-2021-39806/): Memory corruption in Android (high 7.8)
- [CVE-2021-39805](https://insights.sbomify.com/CVE-2021-39805/): Memory corruption in Android (medium 6.5)
- [CVE-2021-39804](https://insights.sbomify.com/CVE-2021-39804/): Null dereference in Android (medium 6.5)
- [CVE-2021-39803](https://insights.sbomify.com/CVE-2021-39803/): Use after free in Android (medium 6.5)
- [CVE-2021-39802](https://insights.sbomify.com/CVE-2021-39802/): Privilege escalation in Android (high 7.8)
- [CVE-2021-39801](https://insights.sbomify.com/CVE-2021-39801/): Use after free in Android (high 7.8)
- [CVE-2021-39800](https://insights.sbomify.com/CVE-2021-39800/): Use after free in Android (medium 5.5)
- [CVE-2021-3980](https://insights.sbomify.com/CVE-2021-3980/): Exposure of Private Personal Information to an Unauthorized Actor in elgg/elgg (medium 5.3)
- [CVE-2021-39799](https://insights.sbomify.com/CVE-2021-39799/): Privilege escalation in Android (high 7.8)
- [CVE-2021-39798](https://insights.sbomify.com/CVE-2021-39798/): Memory corruption in Android (high 7.8)
- [CVE-2021-39797](https://insights.sbomify.com/CVE-2021-39797/): Privilege escalation in Android (high 7.8)
- [CVE-2021-39796](https://insights.sbomify.com/CVE-2021-39796/): Security feature bypass in Android (high 7.3)
- [CVE-2021-39794](https://insights.sbomify.com/CVE-2021-39794/): Missing authorization in Android (high 7.8)
- [CVE-2021-39793](https://insights.sbomify.com/CVE-2021-39793/): Google Pixel Out-of-Bounds Write (high 7.8, exploited in the wild)
- [CVE-2021-39792](https://insights.sbomify.com/CVE-2021-39792/): Use after free in Android (medium 4.1)
- [CVE-2021-39791](https://insights.sbomify.com/CVE-2021-39791/): Information disclosure in Android (medium 5.5)
- [CVE-2021-39790](https://insights.sbomify.com/CVE-2021-39790/): Missing authorization in Android (high 7.8)
- [CVE-2021-3979](https://insights.sbomify.com/CVE-2021-3979/): Weak cryptography in ceph (medium 6.5)
- [CVE-2021-39789](https://insights.sbomify.com/CVE-2021-39789/): Missing authorization in Android (high 7.8)
- [CVE-2021-39788](https://insights.sbomify.com/CVE-2021-39788/): Information disclosure in Android (medium 5.5)
- [CVE-2021-39787](https://insights.sbomify.com/CVE-2021-39787/): Privilege escalation in Android (high 7.8)
- [CVE-2021-39786](https://insights.sbomify.com/CVE-2021-39786/): Memory corruption in Android (medium 6.7)
- [CVE-2021-39784](https://insights.sbomify.com/CVE-2021-39784/): Missing authorization in Android (high 7.8)
- [CVE-2021-39783](https://insights.sbomify.com/CVE-2021-39783/): Missing authorization in Android (high 7.8)
- [CVE-2021-39782](https://insights.sbomify.com/CVE-2021-39782/): Missing authorization in Android (high 7.8)
- [CVE-2021-39781](https://insights.sbomify.com/CVE-2021-39781/): Missing authorization in Android (high 7.8)
- [CVE-2021-39780](https://insights.sbomify.com/CVE-2021-39780/): Missing authorization in Android (high 7.8)
- [CVE-2021-3978](https://insights.sbomify.com/CVE-2021-3978/): Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki (high 7.5)
- [CVE-2021-39779](https://insights.sbomify.com/CVE-2021-39779/): Missing authorization in Android (medium 5.5)
- [CVE-2021-39778](https://insights.sbomify.com/CVE-2021-39778/): Information disclosure in Android (medium 5.5)
- [CVE-2021-39777](https://insights.sbomify.com/CVE-2021-39777/): Information disclosure in Android (medium 5.5)
- [CVE-2021-39776](https://insights.sbomify.com/CVE-2021-39776/): Use after free in Android (high 7.8)
- [CVE-2021-39775](https://insights.sbomify.com/CVE-2021-39775/): Information disclosure in Android (medium 5.5)
- [CVE-2021-39774](https://insights.sbomify.com/CVE-2021-39774/): Memory corruption in Android (medium 5.5)
- [CVE-2021-39773](https://insights.sbomify.com/CVE-2021-39773/): Information disclosure in Android (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/102/