# Vulnerabilities published in 2021 - [CVE-2021-39564](https://insights.sbomify.com/CVE-2021-39564/): Memory corruption in swftools:swftools (high 7.8) - [CVE-2021-39563](https://insights.sbomify.com/CVE-2021-39563/): Null dereference in swftools:swftools (medium 5.5) - [CVE-2021-39562](https://insights.sbomify.com/CVE-2021-39562/): Null dereference in swftools:swftools (medium 5.5) - [CVE-2021-39561](https://insights.sbomify.com/CVE-2021-39561/): Memory corruption in swftools:swftools (high 7.8) - [CVE-2021-3956](https://insights.sbomify.com/CVE-2021-3956/): Auth bypass in XClarity Controller (XCC) (medium 4.3) - [CVE-2021-39559](https://insights.sbomify.com/CVE-2021-39559/): Null dereference in swftools:swftools (medium 5.5) - [CVE-2021-39558](https://insights.sbomify.com/CVE-2021-39558/): Memory corruption in swftools:swftools (high 7.8) - [CVE-2021-39557](https://insights.sbomify.com/CVE-2021-39557/): Null dereference in swftools:swftools (medium 5.5) - [CVE-2021-39556](https://insights.sbomify.com/CVE-2021-39556/): Null dereference in swftools:swftools (medium 5.5) - [CVE-2021-39555](https://insights.sbomify.com/CVE-2021-39555/): Null dereference in swftools:swftools (medium 5.5) - [CVE-2021-39554](https://insights.sbomify.com/CVE-2021-39554/): Null dereference in swftools:swftools (medium 5.5) - [CVE-2021-39553](https://insights.sbomify.com/CVE-2021-39553/): Null dereference in swftools:swftools (medium 5.5) - [CVE-2021-39552](https://insights.sbomify.com/CVE-2021-39552/): Memory corruption in sela project:sela (high 7.8) - [CVE-2021-39551](https://insights.sbomify.com/CVE-2021-39551/): Memory corruption in sela project:sela (high 7.8) - [CVE-2021-39550](https://insights.sbomify.com/CVE-2021-39550/): Memory corruption in sela project:sela (high 7.8) - [CVE-2021-39549](https://insights.sbomify.com/CVE-2021-39549/): Null dereference in sela project:sela (medium 5.5) - [CVE-2021-39548](https://insights.sbomify.com/CVE-2021-39548/): Null dereference in sela project:sela (medium 5.5) - [CVE-2021-39547](https://insights.sbomify.com/CVE-2021-39547/): Null dereference in sela project:sela (medium 5.5) - [CVE-2021-39546](https://insights.sbomify.com/CVE-2021-39546/): Memory corruption in sela project:sela (high 7.8) - [CVE-2021-39545](https://insights.sbomify.com/CVE-2021-39545/): Null dereference in sela project:sela (medium 5.5) - [CVE-2021-39544](https://insights.sbomify.com/CVE-2021-39544/): Memory corruption in sela project:sela (high 7.8) - [CVE-2021-39543](https://insights.sbomify.com/CVE-2021-39543/): Null dereference in pdftools project:pdftools (medium 5.5) - [CVE-2021-39542](https://insights.sbomify.com/CVE-2021-39542/): Null dereference in pdftools project:pdftools (medium 5.5) - [CVE-2021-39541](https://insights.sbomify.com/CVE-2021-39541/): Null dereference in pdftools project:pdftools (medium 5.5) - [CVE-2021-39540](https://insights.sbomify.com/CVE-2021-39540/): Memory corruption in pdftools project:pdftools (high 7.8) - [CVE-2021-39539](https://insights.sbomify.com/CVE-2021-39539/): Null dereference in pdftools project:pdftools (medium 5.5) - [CVE-2021-39538](https://insights.sbomify.com/CVE-2021-39538/): Null dereference in pdftools project:pdftools (medium 5.5) - [CVE-2021-39537](https://insights.sbomify.com/CVE-2021-39537/): Memory corruption in apple:mac os x (high 8.8) - [CVE-2021-39536](https://insights.sbomify.com/CVE-2021-39536/): Memory corruption in libxsmm project:libxsmm (high 8.8) - [CVE-2021-39535](https://insights.sbomify.com/CVE-2021-39535/): Null dereference in libxsmm project:libxsmm (medium 6.5) - [CVE-2021-39534](https://insights.sbomify.com/CVE-2021-39534/): Memory corruption in juniper:libslax (high 8.8) - [CVE-2021-39533](https://insights.sbomify.com/CVE-2021-39533/): Memory corruption in juniper:libslax (high 8.8) - [CVE-2021-39532](https://insights.sbomify.com/CVE-2021-39532/): Null dereference in juniper:libslax (medium 6.5) - [CVE-2021-39531](https://insights.sbomify.com/CVE-2021-39531/): Memory corruption in juniper:libslax (high 8.8) - [CVE-2021-39530](https://insights.sbomify.com/CVE-2021-39530/): Memory corruption in gnu:libredwg (high 8.8) - [CVE-2021-39528](https://insights.sbomify.com/CVE-2021-39528/): Memory corruption in gnu:libredwg (high 8.8) - [CVE-2021-39527](https://insights.sbomify.com/CVE-2021-39527/): Memory corruption in gnu:libredwg (high 8.8) - [CVE-2021-39525](https://insights.sbomify.com/CVE-2021-39525/): Memory corruption in gnu:libredwg (high 8.8) - [CVE-2021-39523](https://insights.sbomify.com/CVE-2021-39523/): Null dereference in gnu:libredwg (medium 6.5) - [CVE-2021-39522](https://insights.sbomify.com/CVE-2021-39522/): Memory corruption in gnu:libredwg (high 8.8) - [CVE-2021-39521](https://insights.sbomify.com/CVE-2021-39521/): Null dereference in gnu:libredwg (medium 6.5) - [CVE-2021-39520](https://insights.sbomify.com/CVE-2021-39520/): Null dereference in jpeg:libjpeg (medium 6.5) - [CVE-2021-39519](https://insights.sbomify.com/CVE-2021-39519/): Null dereference in jpeg:libjpeg (medium 6.5) - [CVE-2021-39518](https://insights.sbomify.com/CVE-2021-39518/): Memory corruption in jpeg:libjpeg (medium 6.5) - [CVE-2021-39517](https://insights.sbomify.com/CVE-2021-39517/): Null dereference in jpeg:libjpeg (medium 6.5) - [CVE-2021-39516](https://insights.sbomify.com/CVE-2021-39516/): Null dereference in jpeg:libjpeg (medium 6.5) - [CVE-2021-39515](https://insights.sbomify.com/CVE-2021-39515/): Null dereference in jpeg:libjpeg (medium 6.5) - [CVE-2021-39514](https://insights.sbomify.com/CVE-2021-39514/): Denial of service in jpeg:libjpeg (medium 6.5) - [CVE-2021-39510](https://insights.sbomify.com/CVE-2021-39510/): Command injection in dlink:dir-816 firmware (critical 9.8) - [CVE-2021-39509](https://insights.sbomify.com/CVE-2021-39509/): Command injection in dlink:dir-816 firmware (critical 9.8) - [CVE-2021-39503](https://insights.sbomify.com/CVE-2021-39503/): Code injection in phpmywind:phpmywind (high 7.2) - [CVE-2021-39501](https://insights.sbomify.com/CVE-2021-39501/): Open redirect in eyoucms:eyoucms (medium 6.1) - [CVE-2021-39500](https://insights.sbomify.com/CVE-2021-39500/): Path traversal in eyoucms:eyoucms (high 7.5) - [CVE-2021-3950](https://insights.sbomify.com/CVE-2021-3950/): Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk (high 8.8) - [CVE-2021-39499](https://insights.sbomify.com/CVE-2021-39499/): Cross-site scripting in eyoucms:eyoucms (medium 6.1) - [CVE-2021-39497](https://insights.sbomify.com/CVE-2021-39497/): Server-side request forgery in eyoucms:eyoucms (critical 9.8) - [CVE-2021-39496](https://insights.sbomify.com/CVE-2021-39496/): Cross-site scripting in eyoucms:eyoucms (medium 5.4) - [CVE-2021-39491](https://insights.sbomify.com/CVE-2021-39491/): Cross-site scripting in rengine project:rengine (medium 5.4) - [CVE-2021-39486](https://insights.sbomify.com/CVE-2021-39486/): Cross-site scripting in gilacms:gila cms (medium 5.4) - [CVE-2021-39480](https://insights.sbomify.com/CVE-2021-39480/): Denial of service in bingrep (high 7.5) - [CVE-2021-3948](https://insights.sbomify.com/CVE-2021-3948/): Misconfiguration in mig-controller (medium 6.3) - [CVE-2021-39474](https://insights.sbomify.com/CVE-2021-39474/): Command injection in ubeeinteractive:ubc1319 firmware (high 7.2) - [CVE-2021-39473](https://insights.sbomify.com/CVE-2021-39473/): Cross-site scripting in hotelmanager project:hotelmanager (medium 5.4) - [CVE-2021-3947](https://insights.sbomify.com/CVE-2021-3947/): Memory corruption in QEMU (medium 5.5) - [CVE-2021-39459](https://insights.sbomify.com/CVE-2021-39459/): Code injection in redaxo:redaxo (high 7.2) - [CVE-2021-39458](https://insights.sbomify.com/CVE-2021-39458/): Information disclosure in redaxo:redaxo (medium 6.5) - [CVE-2021-3945](https://insights.sbomify.com/CVE-2021-3945/): Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk (high 8.8) - [CVE-2021-3944](https://insights.sbomify.com/CVE-2021-3944/): Cross-Site Request Forgery (CSRF) in bookstackapp/bookstack (low 3.1) - [CVE-2021-39434](https://insights.sbomify.com/CVE-2021-39434/): Hardcoded credentials in zkteco:zktime (high 7.5) - [CVE-2021-39433](https://insights.sbomify.com/CVE-2021-39433/): Path traversal in biqs:biqsdrive (high 7.5) - [CVE-2021-39432](https://insights.sbomify.com/CVE-2021-39432/): diplib Double Free (medium 6.5) - [CVE-2021-3943](https://insights.sbomify.com/CVE-2021-3943/): Moodle vulnerable to RCE via unsafe deserialization (critical 9.8) - [CVE-2021-39428](https://insights.sbomify.com/CVE-2021-39428/): Cross-site scripting in eyoucms:eyoucms (medium 5.4) - [CVE-2021-39427](https://insights.sbomify.com/CVE-2021-39427/): Cross-site scripting in vtimecn:188jianzhan (medium 5.4) - [CVE-2021-39426](https://insights.sbomify.com/CVE-2021-39426/): Code injection in seacms:seacms (critical 9.8) - [CVE-2021-39425](https://insights.sbomify.com/CVE-2021-39425/): Open redirect in seeddms:seeddms (medium 6.1) - [CVE-2021-39421](https://insights.sbomify.com/CVE-2021-39421/): Cross-site scripting in seeddms:seeddms (medium 6.1) - [CVE-2021-39420](https://insights.sbomify.com/CVE-2021-39420/): Cross-site scripting in vfront:vfront (medium 6.1) - [CVE-2021-3942](https://insights.sbomify.com/CVE-2021-3942/): Memory corruption in HP Print products and Digital Sending products (critical 9.8) - [CVE-2021-39416](https://insights.sbomify.com/CVE-2021-39416/): Cross-site scripting in remoteclinic:remote clinic (medium 6.1) - [CVE-2021-39413](https://insights.sbomify.com/CVE-2021-39413/): Cross-site scripting in seopanel:seo panel (medium 6.1) - [CVE-2021-39412](https://insights.sbomify.com/CVE-2021-39412/): Cross-site scripting in shopping portal project:shopping portal (medium 6.1) - [CVE-2021-39411](https://insights.sbomify.com/CVE-2021-39411/): Cross-site scripting in phpgurukul:hospital management system (medium 6.1) - [CVE-2021-3941](https://insights.sbomify.com/CVE-2021-3941/): Denial of service in openexr (medium 6.5) - [CVE-2021-39409](https://insights.sbomify.com/CVE-2021-39409/): Auth bypass in online student rate system project:online student rate system (critical 9.8) - [CVE-2021-39408](https://insights.sbomify.com/CVE-2021-39408/): Cross-site scripting in online student rate system project:online student rate system (medium 6.1) - [CVE-2021-39404](https://insights.sbomify.com/CVE-2021-39404/): Cross-site scripting in maianaffiliate:maianaffiliate (medium 4.8) - [CVE-2021-39402](https://insights.sbomify.com/CVE-2021-39402/): Code injection in maianmedia:maianaffiliate (high 7.2) - [CVE-2021-39394](https://insights.sbomify.com/CVE-2021-39394/): Cross-site request forgery in mm-wiki project:mm-wiki (medium 6.5) - [CVE-2021-39393](https://insights.sbomify.com/CVE-2021-39393/): Cross-site scripting in mm-wiki project:mm-wiki (medium 6.1) - [CVE-2021-39392](https://insights.sbomify.com/CVE-2021-39392/): Deserialization in mylittletools:mylittlebackup (critical 9.8) - [CVE-2021-39391](https://insights.sbomify.com/CVE-2021-39391/): Cross-site Scripting in Beego (medium 6.1) - [CVE-2021-39390](https://insights.sbomify.com/CVE-2021-39390/): Cross-site scripting in partkeepr:partkeepr (medium 5.4) - [CVE-2021-3939](https://insights.sbomify.com/CVE-2021-3939/): Free of static data in accountsservice (high 7.8) - [CVE-2021-39384](https://insights.sbomify.com/CVE-2021-39384/): File upload in diaowen:dwsurvey (critical 9.8) - [CVE-2021-39383](https://insights.sbomify.com/CVE-2021-39383/): Code injection in diaowen:dwsurvey (critical 9.8) - [CVE-2021-3938](https://insights.sbomify.com/CVE-2021-3938/): Cross-site Scripting (XSS) - Generic in snipe/snipe-it (low 3.9) - [CVE-2021-39379](https://insights.sbomify.com/CVE-2021-39379/): SQL injection in os4ed:opensis (critical 9.8) - [CVE-2021-39378](https://insights.sbomify.com/CVE-2021-39378/): SQL injection in os4ed:opensis (critical 9.8) - [CVE-2021-39377](https://insights.sbomify.com/CVE-2021-39377/): SQL injection in os4ed:opensis (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/105/