# Vulnerabilities published in 2021


- [CVE-2021-39679](https://insights.sbomify.com/CVE-2021-39679/): Use after free in Android (high 7.0)
- [CVE-2021-39678](https://insights.sbomify.com/CVE-2021-39678/): Security feature bypass in Android (high 7.8)
- [CVE-2021-39677](https://insights.sbomify.com/CVE-2021-39677/): Memory corruption in Android (high 7.5)
- [CVE-2021-39676](https://insights.sbomify.com/CVE-2021-39676/): Deserialization in Android (high 7.8)
- [CVE-2021-39675](https://insights.sbomify.com/CVE-2021-39675/): Memory corruption in Android (critical 9.8)
- [CVE-2021-39674](https://insights.sbomify.com/CVE-2021-39674/): Use after free in Android (high 7.8)
- [CVE-2021-39672](https://insights.sbomify.com/CVE-2021-39672/): Security feature bypass in Android (high 7.8)
- [CVE-2021-39671](https://insights.sbomify.com/CVE-2021-39671/): Information disclosure in Android (medium 6.5)
- [CVE-2021-39670](https://insights.sbomify.com/CVE-2021-39670/): Denial of service in Android (medium 5.5)
- [CVE-2021-3967](https://insights.sbomify.com/CVE-2021-3967/): Improper Access Control in zulip/zulip (medium 4.1)
- [CVE-2021-39669](https://insights.sbomify.com/CVE-2021-39669/): Other in Android (high 7.8)
- [CVE-2021-39668](https://insights.sbomify.com/CVE-2021-39668/): Privilege escalation in Android (high 7.8)
- [CVE-2021-39667](https://insights.sbomify.com/CVE-2021-39667/): Memory corruption in Android (medium 6.5)
- [CVE-2021-39666](https://insights.sbomify.com/CVE-2021-39666/): Memory corruption in Android (medium 5.5)
- [CVE-2021-39665](https://insights.sbomify.com/CVE-2021-39665/): Memory corruption in Android (medium 6.5)
- [CVE-2021-39664](https://insights.sbomify.com/CVE-2021-39664/): Memory corruption in Android (medium 5.5)
- [CVE-2021-39663](https://insights.sbomify.com/CVE-2021-39663/): Privilege escalation in Android (high 7.8)
- [CVE-2021-39662](https://insights.sbomify.com/CVE-2021-39662/): Missing authorization in Android (high 7.8)
- [CVE-2021-39661](https://insights.sbomify.com/CVE-2021-39661/): Memory corruption in Android (high 7.8)
- [CVE-2021-39660](https://insights.sbomify.com/CVE-2021-39660/): Race condition in Android (high 7.0)
- [CVE-2021-3966](https://insights.sbomify.com/CVE-2021-3966/): Usb bluetooth device ACL read cb buffer overflow (critical 9.6)
- [CVE-2021-39659](https://insights.sbomify.com/CVE-2021-39659/): Denial of service in Android (medium 5.5)
- [CVE-2021-39658](https://insights.sbomify.com/CVE-2021-39658/): Missing authorization in Android (critical 9.8)
- [CVE-2021-39657](https://insights.sbomify.com/CVE-2021-39657/): Memory corruption in Android (medium 4.4)
- [CVE-2021-39656](https://insights.sbomify.com/CVE-2021-39656/): Use after free in Android (medium 6.7)
- [CVE-2021-39655](https://insights.sbomify.com/CVE-2021-39655/): Other in Android (critical 9.8)
- [CVE-2021-39653](https://insights.sbomify.com/CVE-2021-39653/): Security feature bypass in Android (high 7.8)
- [CVE-2021-39652](https://insights.sbomify.com/CVE-2021-39652/): Memory corruption in Android (medium 6.7)
- [CVE-2021-39651](https://insights.sbomify.com/CVE-2021-39651/): Missing authorization in Android (high 7.8)
- [CVE-2021-39650](https://insights.sbomify.com/CVE-2021-39650/): Memory corruption in Android (medium 6.7)
- [CVE-2021-3965](https://insights.sbomify.com/CVE-2021-3965/): Missing authorization in HP DesignJet Printer (high 7.5)
- [CVE-2021-39649](https://insights.sbomify.com/CVE-2021-39649/): Use after free in Android (medium 6.7)
- [CVE-2021-39648](https://insights.sbomify.com/CVE-2021-39648/): Race condition in Android (medium 4.1)
- [CVE-2021-39647](https://insights.sbomify.com/CVE-2021-39647/): Race condition in Android (medium 4.4)
- [CVE-2021-39646](https://insights.sbomify.com/CVE-2021-39646/): Other in Android (high 7.5)
- [CVE-2021-39645](https://insights.sbomify.com/CVE-2021-39645/): Other in Android (critical 9.8)
- [CVE-2021-39644](https://insights.sbomify.com/CVE-2021-39644/): Other in Android (critical 9.8)
- [CVE-2021-39643](https://insights.sbomify.com/CVE-2021-39643/): Security feature bypass in Android (medium 6.7)
- [CVE-2021-39642](https://insights.sbomify.com/CVE-2021-39642/): Race condition in Android (medium 6.4)
- [CVE-2021-39641](https://insights.sbomify.com/CVE-2021-39641/): Other in Android (critical 9.8)
- [CVE-2021-39640](https://insights.sbomify.com/CVE-2021-39640/): Race condition in Android (high 7.8)
- [CVE-2021-3964](https://insights.sbomify.com/CVE-2021-3964/): Authorization Bypass Through User-Controlled Key in elgg/elgg (medium 4.3)
- [CVE-2021-39639](https://insights.sbomify.com/CVE-2021-39639/): Missing authorization in Android (medium 6.8)
- [CVE-2021-39638](https://insights.sbomify.com/CVE-2021-39638/): Use after free in Android (medium 6.7)
- [CVE-2021-39637](https://insights.sbomify.com/CVE-2021-39637/): Memory corruption in Android (medium 4.4)
- [CVE-2021-39636](https://insights.sbomify.com/CVE-2021-39636/): Information disclosure in Android (medium 4.4)
- [CVE-2021-39635](https://insights.sbomify.com/CVE-2021-39635/): Missing authorization in Android (critical 9.1)
- [CVE-2021-39634](https://insights.sbomify.com/CVE-2021-39634/): Use after free in Android (high 7.8)
- [CVE-2021-39633](https://insights.sbomify.com/CVE-2021-39633/): Memory corruption in Android (medium 5.5)
- [CVE-2021-39632](https://insights.sbomify.com/CVE-2021-39632/): Memory corruption in Android (high 7.8)
- [CVE-2021-39631](https://insights.sbomify.com/CVE-2021-39631/): Security feature bypass in Android (medium 5.5)
- [CVE-2021-39630](https://insights.sbomify.com/CVE-2021-39630/): Privilege escalation in Android (high 7.8)
- [CVE-2021-3963](https://insights.sbomify.com/CVE-2021-3963/): Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2 (medium 4.3)
- [CVE-2021-39629](https://insights.sbomify.com/CVE-2021-39629/): Use after free in Android (high 7.0)
- [CVE-2021-39628](https://insights.sbomify.com/CVE-2021-39628/): Information disclosure in Android (low 3.3)
- [CVE-2021-39627](https://insights.sbomify.com/CVE-2021-39627/): Privilege escalation in Android (high 7.8)
- [CVE-2021-39626](https://insights.sbomify.com/CVE-2021-39626/): Privilege escalation in Android (high 7.8)
- [CVE-2021-39625](https://insights.sbomify.com/CVE-2021-39625/): Privilege escalation in Android (high 7.3)
- [CVE-2021-39624](https://insights.sbomify.com/CVE-2021-39624/): Denial of service in Android (medium 5.5)
- [CVE-2021-39623](https://insights.sbomify.com/CVE-2021-39623/): Memory corruption in Android (critical 9.8)
- [CVE-2021-39622](https://insights.sbomify.com/CVE-2021-39622/): Missing authorization in Android (high 7.8)
- [CVE-2021-39621](https://insights.sbomify.com/CVE-2021-39621/): Privilege escalation in Android (high 7.8)
- [CVE-2021-39620](https://insights.sbomify.com/CVE-2021-39620/): Use after free in Android (high 7.8)
- [CVE-2021-3962](https://insights.sbomify.com/CVE-2021-3962/): Use after free in ImageMagick (high 7.8)
- [CVE-2021-39619](https://insights.sbomify.com/CVE-2021-39619/): Security feature bypass in Android (high 7.8)
- [CVE-2021-39618](https://insights.sbomify.com/CVE-2021-39618/): Privilege escalation in Android (high 7.8)
- [CVE-2021-39616](https://insights.sbomify.com/CVE-2021-39616/): Other in Android (critical 9.8)
- [CVE-2021-39615](https://insights.sbomify.com/CVE-2021-39615/): Hardcoded credentials in dlink:dsr-500n firmware (critical 9.8)
- [CVE-2021-39614](https://insights.sbomify.com/CVE-2021-39614/): Hardcoded credentials in dlink:dvx-2000ms firmware (critical 9.8)
- [CVE-2021-39613](https://insights.sbomify.com/CVE-2021-39613/): Hardcoded credentials in dlink:dvg-3104ms firmware (high 8.8)
- [CVE-2021-3961](https://insights.sbomify.com/CVE-2021-3961/): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (high 8.0)
- [CVE-2021-39609](https://insights.sbomify.com/CVE-2021-39609/): Cross-site scripting in flatcore:flatcore-cms (medium 5.4)
- [CVE-2021-39608](https://insights.sbomify.com/CVE-2021-39608/): File upload in flatcore:flatcore-cms (high 7.2)
- [CVE-2021-39602](https://insights.sbomify.com/CVE-2021-39602/): Memory corruption in miniftpd project:miniftpd (medium 6.5)
- [CVE-2021-3960](https://insights.sbomify.com/CVE-2021-3960/): Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146) (high 7.1)
- [CVE-2021-39599](https://insights.sbomify.com/CVE-2021-39599/): Cross-site scripting in cxuu:cxuucms (medium 6.1)
- [CVE-2021-39598](https://insights.sbomify.com/CVE-2021-39598/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39597](https://insights.sbomify.com/CVE-2021-39597/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39596](https://insights.sbomify.com/CVE-2021-39596/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39595](https://insights.sbomify.com/CVE-2021-39595/): Memory corruption in swftools:swftools (high 7.8)
- [CVE-2021-39594](https://insights.sbomify.com/CVE-2021-39594/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39593](https://insights.sbomify.com/CVE-2021-39593/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39592](https://insights.sbomify.com/CVE-2021-39592/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39591](https://insights.sbomify.com/CVE-2021-39591/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39590](https://insights.sbomify.com/CVE-2021-39590/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-3959](https://insights.sbomify.com/CVE-2021-3959/): Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145) (medium 6.8)
- [CVE-2021-39589](https://insights.sbomify.com/CVE-2021-39589/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39588](https://insights.sbomify.com/CVE-2021-39588/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39587](https://insights.sbomify.com/CVE-2021-39587/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39585](https://insights.sbomify.com/CVE-2021-39585/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39584](https://insights.sbomify.com/CVE-2021-39584/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39583](https://insights.sbomify.com/CVE-2021-39583/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39582](https://insights.sbomify.com/CVE-2021-39582/): Memory corruption in swftools:swftools (high 7.8)
- [CVE-2021-3958](https://insights.sbomify.com/CVE-2021-3958/): SQL Injection Vulnerability in Ipack SCADA Software (critical 9.8)
- [CVE-2021-39579](https://insights.sbomify.com/CVE-2021-39579/): Memory corruption in swftools:swftools (high 7.8)
- [CVE-2021-39577](https://insights.sbomify.com/CVE-2021-39577/): Memory corruption in swftools:swftools (high 7.8)
- [CVE-2021-39575](https://insights.sbomify.com/CVE-2021-39575/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2021-39574](https://insights.sbomify.com/CVE-2021-39574/): Memory corruption in swftools:swftools (high 7.8)
- [CVE-2021-3957](https://insights.sbomify.com/CVE-2021-3957/): Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2 (medium 4.6)
- [CVE-2021-39569](https://insights.sbomify.com/CVE-2021-39569/): Memory corruption in swftools:swftools (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/104/