# Vulnerabilities published in 2021


- [CVE-2021-38500](https://insights.sbomify.com/CVE-2021-38500/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-3850](https://insights.sbomify.com/CVE-2021-3850/): Authentication Bypass by Primary Weakness in adodb/adodb (critical 9.1)
- [CVE-2021-38499](https://insights.sbomify.com/CVE-2021-38499/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-38498](https://insights.sbomify.com/CVE-2021-38498/): Use after free in Firefox (high 7.5)
- [CVE-2021-38497](https://insights.sbomify.com/CVE-2021-38497/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2021-38496](https://insights.sbomify.com/CVE-2021-38496/): Use after free in Firefox (high 8.8)
- [CVE-2021-38495](https://insights.sbomify.com/CVE-2021-38495/): Memory corruption in Firefox ESR (high 8.8)
- [CVE-2021-38494](https://insights.sbomify.com/CVE-2021-38494/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-38493](https://insights.sbomify.com/CVE-2021-38493/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-38492](https://insights.sbomify.com/CVE-2021-38492/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2021-38491](https://insights.sbomify.com/CVE-2021-38491/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2021-38490](https://insights.sbomify.com/CVE-2021-38490/): XML external entity in altova:mobiletogether server (high 7.5)
- [CVE-2021-3849](https://insights.sbomify.com/CVE-2021-3849/): Auth bypass in Fan Power Controller2 (FPC2) (critical 9.8)
- [CVE-2021-38489](https://insights.sbomify.com/CVE-2021-38489/): HDD Password Stored In Plaintext (high 8.2)
- [CVE-2021-38488](https://insights.sbomify.com/CVE-2021-38488/): Delta Electronics DIALink (medium 5.5)
- [CVE-2021-38487](https://insights.sbomify.com/CVE-2021-38487/): Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro (high 8.8)
- [CVE-2021-38486](https://insights.sbomify.com/CVE-2021-38486/): InHand Networks IR615 Router (high 8.0)
- [CVE-2021-38485](https://insights.sbomify.com/CVE-2021-38485/): Emerson WirelessHART Gateway (high 8.0)
- [CVE-2021-38484](https://insights.sbomify.com/CVE-2021-38484/): InHand Networks IR615 Router (critical 9.1)
- [CVE-2021-38483](https://insights.sbomify.com/CVE-2021-38483/): ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform (medium 6.0)
- [CVE-2021-38482](https://insights.sbomify.com/CVE-2021-38482/): InHand Networks IR615 Router (high 8.7)
- [CVE-2021-38481](https://insights.sbomify.com/CVE-2021-38481/): AUVESY Versiondog (high 8.1)
- [CVE-2021-38480](https://insights.sbomify.com/CVE-2021-38480/): InHand Networks IR615 Router (critical 9.6)
- [CVE-2021-3848](https://insights.sbomify.com/CVE-2021-3848/): Privilege escalation in Trend Micro Apex One (medium 5.5)
- [CVE-2021-38479](https://insights.sbomify.com/CVE-2021-38479/): AUVESY Versiondog (medium 6.5)
- [CVE-2021-38478](https://insights.sbomify.com/CVE-2021-38478/): InHand Networks IR615 Router (critical 9.1)
- [CVE-2021-38477](https://insights.sbomify.com/CVE-2021-38477/): AUVESY Versiondog (critical 9.8)
- [CVE-2021-38476](https://insights.sbomify.com/CVE-2021-38476/): InHand Networks IR615 Router (medium 6.5)
- [CVE-2021-38475](https://insights.sbomify.com/CVE-2021-38475/): AUVESY Versiondog (high 7.3)
- [CVE-2021-38474](https://insights.sbomify.com/CVE-2021-38474/): InHand Networks IR615 Router (medium 6.3)
- [CVE-2021-38473](https://insights.sbomify.com/CVE-2021-38473/): AUVESY Versiondog (high 8.0)
- [CVE-2021-38472](https://insights.sbomify.com/CVE-2021-38472/): InHand Networks IR615 Router (medium 4.7)
- [CVE-2021-38471](https://insights.sbomify.com/CVE-2021-38471/): AUVESY Versiondog (critical 9.1)
- [CVE-2021-38470](https://insights.sbomify.com/CVE-2021-38470/): InHand Networks IR615 Router (critical 9.1)
- [CVE-2021-3847](https://insights.sbomify.com/CVE-2021-3847/): Privilege escalation in kernel (high 7.8)
- [CVE-2021-38469](https://insights.sbomify.com/CVE-2021-38469/): AUVESY Versiondog (critical 9.1)
- [CVE-2021-38468](https://insights.sbomify.com/CVE-2021-38468/): InHand Networks IR615 Router (high 8.7)
- [CVE-2021-38467](https://insights.sbomify.com/CVE-2021-38467/): AUVESY Versiondog (high 7.3)
- [CVE-2021-38466](https://insights.sbomify.com/CVE-2021-38466/): InHand Networks IR615 Router (high 8.8)
- [CVE-2021-38465](https://insights.sbomify.com/CVE-2021-38465/): AUVESY Versiondog (high 8.0)
- [CVE-2021-38464](https://insights.sbomify.com/CVE-2021-38464/): InHand Networks IR615 Router (medium 6.4)
- [CVE-2021-38463](https://insights.sbomify.com/CVE-2021-38463/): AUVESY Versiondog (high 7.3)
- [CVE-2021-38462](https://insights.sbomify.com/CVE-2021-38462/): InHand Networks IR615 Router (critical 9.8)
- [CVE-2021-38461](https://insights.sbomify.com/CVE-2021-38461/): AUVESY Versiondog (high 8.2)
- [CVE-2021-38460](https://insights.sbomify.com/CVE-2021-38460/): Moxa MXview Network Management Software (high 7.5)
- [CVE-2021-3846](https://insights.sbomify.com/CVE-2021-3846/): Unrestricted Upload of File with Dangerous Type in firefly-iii/firefly-iii (medium 6.3)
- [CVE-2021-38459](https://insights.sbomify.com/CVE-2021-38459/): AUVESY Versiondog (high 8.1)
- [CVE-2021-38458](https://insights.sbomify.com/CVE-2021-38458/): Moxa MXview Network Management Software (critical 9.8)
- [CVE-2021-38457](https://insights.sbomify.com/CVE-2021-38457/): AUVESY Versiondog (critical 9.8)
- [CVE-2021-38456](https://insights.sbomify.com/CVE-2021-38456/): Moxa MXview Network Management Software (critical 9.8)
- [CVE-2021-38455](https://insights.sbomify.com/CVE-2021-38455/): AUVESY Versiondog (high 7.3)
- [CVE-2021-38454](https://insights.sbomify.com/CVE-2021-38454/): Moxa MXview Network Management Software (critical 10.0)
- [CVE-2021-38453](https://insights.sbomify.com/CVE-2021-38453/): AUVESY Versiondog (critical 9.1)
- [CVE-2021-38452](https://insights.sbomify.com/CVE-2021-38452/): Moxa MXview Network Management Software (high 7.5)
- [CVE-2021-38451](https://insights.sbomify.com/CVE-2021-38451/): AUVESY Versiondog (medium 4.8)
- [CVE-2021-38450](https://insights.sbomify.com/CVE-2021-38450/): Trane Tracer Code Injection (critical 9.9)
- [CVE-2021-3845](https://insights.sbomify.com/CVE-2021-3845/): External Control of File Name or Path in netristv/ws-scrcpy (high 7.5)
- [CVE-2021-38449](https://insights.sbomify.com/CVE-2021-38449/): AUVESY Versiondog (critical 9.8)
- [CVE-2021-38448](https://insights.sbomify.com/CVE-2021-38448/): Trane Symbio Improper Control of Generation of Code (high 7.5)
- [CVE-2021-38447](https://insights.sbomify.com/CVE-2021-38447/): OCI OpenDDS Secure Amplification (high 8.6)
- [CVE-2021-38445](https://insights.sbomify.com/CVE-2021-38445/): OCI OpenDDS Secure Improper Handling of Length Parameter Inconsistency (high 7.0)
- [CVE-2021-38443](https://insights.sbomify.com/CVE-2021-38443/): Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure (medium 6.6)
- [CVE-2021-38442](https://insights.sbomify.com/CVE-2021-38442/): FATEK Automation WinProladder (high 7.8)
- [CVE-2021-38441](https://insights.sbomify.com/CVE-2021-38441/): Eclipse CycloneDDS Write-what-where Condition (medium 6.6)
- [CVE-2021-38440](https://insights.sbomify.com/CVE-2021-38440/): FATEK Automation WinProladder (low 3.3)
- [CVE-2021-3844](https://insights.sbomify.com/CVE-2021-3844/): Rapid7 InsightVM Insufficient Session Expiration (medium 5.7)
- [CVE-2021-38439](https://insights.sbomify.com/CVE-2021-38439/): GurumDDS Heap-based Buffer Overflow (high 8.6)
- [CVE-2021-38438](https://insights.sbomify.com/CVE-2021-38438/): FATEK Automation WinProladder (high 7.8)
- [CVE-2021-38436](https://insights.sbomify.com/CVE-2021-38436/): FATEK Automation WinProladder (high 7.8)
- [CVE-2021-38435](https://insights.sbomify.com/CVE-2021-38435/): RTI Connext DDS Professional and Connext DDS Secure Incorrect Calculation of Buffer Size (medium 6.6)
- [CVE-2021-38434](https://insights.sbomify.com/CVE-2021-38434/): FATEK Automation WinProladder (high 7.8)
- [CVE-2021-38433](https://insights.sbomify.com/CVE-2021-38433/): RTI Connext DDS Professional and Connext DDS Secure Stack-based Buffer Overflow (medium 6.6)
- [CVE-2021-38432](https://insights.sbomify.com/CVE-2021-38432/): FATEK Automation Communication Server (critical 9.8)
- [CVE-2021-38431](https://insights.sbomify.com/CVE-2021-38431/): Advantech WebAccess SCADA (medium 4.3)
- [CVE-2021-38430](https://insights.sbomify.com/CVE-2021-38430/): FATEK Automation WinProladder (high 7.8)
- [CVE-2021-3843](https://insights.sbomify.com/CVE-2021-3843/): Other in ThinkPad BIOS (medium 6.7)
- [CVE-2021-38429](https://insights.sbomify.com/CVE-2021-38429/): OCI OpenDDS Secure Network Amplification (medium 6.6)
- [CVE-2021-38428](https://insights.sbomify.com/CVE-2021-38428/): Delta Electronics DIALink (medium 5.5)
- [CVE-2021-38427](https://insights.sbomify.com/CVE-2021-38427/): RTI Connext DDS Professional and Connext DDS Secure Stack-based Buffer Overflow (medium 6.6)
- [CVE-2021-38426](https://insights.sbomify.com/CVE-2021-38426/): FATEK Automation WinProladder (high 7.8)
- [CVE-2021-38425](https://insights.sbomify.com/CVE-2021-38425/): eProsima Fast DDS Network Amplification (high 7.5)
- [CVE-2021-38424](https://insights.sbomify.com/CVE-2021-38424/): Delta Electronics DIALink (medium 5.9)
- [CVE-2021-38423](https://insights.sbomify.com/CVE-2021-38423/): GurumDDS Heap-based Incorrect Calculation of Buffer Size (medium 6.6)
- [CVE-2021-38422](https://insights.sbomify.com/CVE-2021-38422/): Delta Electronics DIALink (high 7.8)
- [CVE-2021-38421](https://insights.sbomify.com/CVE-2021-38421/): Fuji Electric Tellus Lite V-Simulator out of bounds read (high 7.8)
- [CVE-2021-38420](https://insights.sbomify.com/CVE-2021-38420/): Delta Electronics DIALink (high 7.8)
- [CVE-2021-3842](https://insights.sbomify.com/CVE-2021-3842/): Inefficient Regular Expression Complexity in nltk/nltk (high 7.5)
- [CVE-2021-38419](https://insights.sbomify.com/CVE-2021-38419/): Fuji Electric Tellus Lite V-Simulator out of bounds write (high 7.8)
- [CVE-2021-38418](https://insights.sbomify.com/CVE-2021-38418/): Delta Electronics DIALink (high 8.8)
- [CVE-2021-38417](https://insights.sbomify.com/CVE-2021-38417/): VISAM VBASE Editor Improper Access Control (high 7.4)
- [CVE-2021-38416](https://insights.sbomify.com/CVE-2021-38416/): Delta Electronics DIALink (high 7.8)
- [CVE-2021-38415](https://insights.sbomify.com/CVE-2021-38415/): Fuji Electric Tellus Lite V-Simulator heap based buffer overflow (high 7.8)
- [CVE-2021-38413](https://insights.sbomify.com/CVE-2021-38413/): Fuji Electric Tellus Lite V-Simulator stack based buffer overflow (high 7.8)
- [CVE-2021-38412](https://insights.sbomify.com/CVE-2021-38412/): Digi PortServer TS 16 Improper Authentication (critical 9.6)
- [CVE-2021-38411](https://insights.sbomify.com/CVE-2021-38411/): Delta Electronics DIALink (medium 5.5)
- [CVE-2021-38410](https://insights.sbomify.com/CVE-2021-38410/): AVEVA PCS Portal Uncontrolled Search Path Element (high 7.3)
- [CVE-2021-3841](https://insights.sbomify.com/CVE-2021-3841/): Stored Cross-site Scripting (XSS) in sylius/sylius (medium 4.1)
- [CVE-2021-38409](https://insights.sbomify.com/CVE-2021-38409/): Fuji Electric Tellus Lite V-Simulator uninitialized pointer (high 7.8)
- [CVE-2021-38408](https://insights.sbomify.com/CVE-2021-38408/): Memory corruption in Advantech WebAccess (critical 9.8)
- [CVE-2021-38407](https://insights.sbomify.com/CVE-2021-38407/): Delta Electronics DIALink (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/113/