# Vulnerabilities published in 2021 - [CVE-2021-38155](https://insights.sbomify.com/CVE-2021-38155/): OpenStack Keystone allows information disclosure during account locking (high 7.5) - [CVE-2021-38154](https://insights.sbomify.com/CVE-2021-38154/): Missing authorization in canon:- (high 7.5) - [CVE-2021-38153](https://insights.sbomify.com/CVE-2021-38153/): Timing Attack Vulnerability for Apache Kafka Connect and Clients (medium 5.9) - [CVE-2021-38152](https://insights.sbomify.com/CVE-2021-38152/): Cross-site scripting in chikitsa:patient management system (medium 5.4) - [CVE-2021-38151](https://insights.sbomify.com/CVE-2021-38151/): Cross-site scripting in chikitsa:patient management system (medium 5.4) - [CVE-2021-38150](https://insights.sbomify.com/CVE-2021-38150/): Information disclosure in SAP Business Client (medium 6.1) - [CVE-2021-3815](https://insights.sbomify.com/CVE-2021-3815/): Prototype Pollution in fabiocaccamo/utils.js (high 8.0) - [CVE-2021-38149](https://insights.sbomify.com/CVE-2021-38149/): Cross-site scripting in chikitsa:patient management system (medium 5.4) - [CVE-2021-38148](https://insights.sbomify.com/CVE-2021-38148/): Obsidian does not require user confirmation for non-http/https URLs. (critical 9.8) - [CVE-2021-38147](https://insights.sbomify.com/CVE-2021-38147/): Missing authorization in wipro:holmes (high 7.5) - [CVE-2021-38146](https://insights.sbomify.com/CVE-2021-38146/): Path traversal in wipro:holmes (high 7.5) - [CVE-2021-38145](https://insights.sbomify.com/CVE-2021-38145/): SQL injection in formtools:core (critical 9.8) - [CVE-2021-38144](https://insights.sbomify.com/CVE-2021-38144/): Cross-site scripting in formtools:core (medium 5.4) - [CVE-2021-38143](https://insights.sbomify.com/CVE-2021-38143/): Cross-site scripting in formtools:core (medium 6.1) - [CVE-2021-38142](https://insights.sbomify.com/CVE-2021-38142/): Weak cryptography in barco:mirrorop windows sender (high 8.8) - [CVE-2021-38140](https://insights.sbomify.com/CVE-2021-38140/): Privilege escalation in set user project:set user (critical 9.8) - [CVE-2021-3814](https://insights.sbomify.com/CVE-2021-3814/): Auth bypass in 3scale (high 7.5) - [CVE-2021-38138](https://insights.sbomify.com/CVE-2021-38138/): Cross-site scripting in onenav:onenav (medium 5.4) - [CVE-2021-38137](https://insights.sbomify.com/CVE-2021-38137/): Privilege escalation in corero:securewatch managed services (high 8.1) - [CVE-2021-38136](https://insights.sbomify.com/CVE-2021-38136/): Path traversal in corero:securewatch managed services (medium 6.5) - [CVE-2021-38135](https://insights.sbomify.com/CVE-2021-38135/): Possible External service interaction Vulnerability in OpenText iManager (high 8.6) - [CVE-2021-38134](https://insights.sbomify.com/CVE-2021-38134/): Possible Reflected and Stored XSS in OpenText iManager (medium 6.1) - [CVE-2021-38133](https://insights.sbomify.com/CVE-2021-38133/): Possible Improper authentication Vulnerability in OpenText eDirectory (high 7.4) - [CVE-2021-38132](https://insights.sbomify.com/CVE-2021-38132/): Possible External service interaction Vulnerability (medium 5.3) - [CVE-2021-38131](https://insights.sbomify.com/CVE-2021-38131/): Cross-Site Scripting (XSS) Vulnerability (medium 5.4) - [CVE-2021-38130](https://insights.sbomify.com/CVE-2021-38130/): Information disclosure in Voltage SecureMail Mail Relay. (medium 6.5) - [CVE-2021-3813](https://insights.sbomify.com/CVE-2021-3813/): Improper Privilege Management in chatwoot/chatwoot (medium 6.5) - [CVE-2021-38129](https://insights.sbomify.com/CVE-2021-38129/): Privilege escalation in Micro Focus Operations Agent. (low 3.3) - [CVE-2021-38127](https://insights.sbomify.com/CVE-2021-38127/): Cross-site scripting in ArcSight Enterprise Security Manager (ESM) (medium 6.1) - [CVE-2021-38126](https://insights.sbomify.com/CVE-2021-38126/): Cross-site scripting in ArcSight Enterprise Security Manager (ESM) (medium 6.1) - [CVE-2021-38125](https://insights.sbomify.com/CVE-2021-38125/): Other in Operations Bridge containerized. (critical 9.8) - [CVE-2021-38124](https://insights.sbomify.com/CVE-2021-38124/): Command injection in ArcSight Enterprise Security Manager (ESM). (critical 9.8) - [CVE-2021-38123](https://insights.sbomify.com/CVE-2021-38123/): Open redirect in Network Automation. (medium 6.1) - [CVE-2021-38122](https://insights.sbomify.com/CVE-2021-38122/): Cross-Site Scripting (XSS) in Advance Authentication (medium 6.2) - [CVE-2021-38121](https://insights.sbomify.com/CVE-2021-38121/): Weak communication protocol identified in Advance Authentication client application (high 8.3) - [CVE-2021-38120](https://insights.sbomify.com/CVE-2021-38120/): Remote Code Execution using Bash command Injection in backup scheduling functionality in NetIQ Advance Authentication (medium 5.1) - [CVE-2021-3812](https://insights.sbomify.com/CVE-2021-3812/): Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte (medium 6.7) - [CVE-2021-38119](https://insights.sbomify.com/CVE-2021-38119/): Possible Reflected Cross-Site Scripting (XSS) Vulnerability in OpenText iManager (medium 6.1) - [CVE-2021-38118](https://insights.sbomify.com/CVE-2021-38118/): Possible Local Privilege Escalation Vulnerability in OpenText iManager (medium 5.5) - [CVE-2021-38117](https://insights.sbomify.com/CVE-2021-38117/): Possible Remote Code Execution Vulnerability OpenText iManager (high 8.8) - [CVE-2021-38116](https://insights.sbomify.com/CVE-2021-38116/): Possible Command injection Vulnerability in OpenText iManager (high 8.8) - [CVE-2021-38115](https://insights.sbomify.com/CVE-2021-38115/): Memory corruption in libgd:libgd (medium 6.5) - [CVE-2021-38114](https://insights.sbomify.com/CVE-2021-38114/): Other in debian:debian linux (medium 5.5) - [CVE-2021-38113](https://insights.sbomify.com/CVE-2021-38113/): Cross-site scripting in openwebif project:openwebif (medium 5.4) - [CVE-2021-38112](https://insights.sbomify.com/CVE-2021-38112/): Command injection in amazon:aws workspaces (high 8.8) - [CVE-2021-38111](https://insights.sbomify.com/CVE-2021-38111/): Memory corruption in defcon:def con 27 firmware (high 8.8) - [CVE-2021-38110](https://insights.sbomify.com/CVE-2021-38110/): Memory corruption in corel:wordperfect 2020 (high 7.8) - [CVE-2021-3811](https://insights.sbomify.com/CVE-2021-3811/): Cross-site Scripting (XSS) - Reflected in pi-hole/adminlte (medium 6.7) - [CVE-2021-38109](https://insights.sbomify.com/CVE-2021-38109/): Memory corruption in corel:coreldraw 2020 (medium 5.5) - [CVE-2021-38108](https://insights.sbomify.com/CVE-2021-38108/): Memory corruption in corel:wordperfect 2020 (medium 5.5) - [CVE-2021-38107](https://insights.sbomify.com/CVE-2021-38107/): Memory corruption in corel:coreldraw 2020 (medium 5.5) - [CVE-2021-38106](https://insights.sbomify.com/CVE-2021-38106/): Memory corruption in corel:presentations 2020 (medium 5.5) - [CVE-2021-38105](https://insights.sbomify.com/CVE-2021-38105/): Memory corruption in corel:presentations 2020 (medium 5.5) - [CVE-2021-38104](https://insights.sbomify.com/CVE-2021-38104/): Memory corruption in corel:presentations 2020 (medium 5.5) - [CVE-2021-38103](https://insights.sbomify.com/CVE-2021-38103/): Memory corruption in corel:presentations 2020 (high 7.8) - [CVE-2021-38102](https://insights.sbomify.com/CVE-2021-38102/): Memory corruption in corel:presentations 2020 (medium 5.5) - [CVE-2021-38101](https://insights.sbomify.com/CVE-2021-38101/): Memory corruption in corel:photopaint 2020 (high 7.8) - [CVE-2021-38100](https://insights.sbomify.com/CVE-2021-38100/): Memory corruption in corel:photopaint 2020 (high 7.8) - [CVE-2021-3810](https://insights.sbomify.com/CVE-2021-3810/): Inefficient Regular Expression Complexity in cdr/code-server (high 7.5) - [CVE-2021-38099](https://insights.sbomify.com/CVE-2021-38099/): Memory corruption in corel:photopaint 2020 (high 7.8) - [CVE-2021-38098](https://insights.sbomify.com/CVE-2021-38098/): Memory corruption in corel:pdf fusion (high 7.8) - [CVE-2021-38097](https://insights.sbomify.com/CVE-2021-38097/): Memory corruption in corel:pdf fusion (high 7.8) - [CVE-2021-38096](https://insights.sbomify.com/CVE-2021-38096/): Memory corruption in corel:pdf fusion (high 7.8) - [CVE-2021-38095](https://insights.sbomify.com/CVE-2021-38095/): Missing authorization in planview:spigit (high 7.5) - [CVE-2021-38094](https://insights.sbomify.com/CVE-2021-38094/): Integer overflow in ffmpeg:ffmpeg (high 8.8) - [CVE-2021-38093](https://insights.sbomify.com/CVE-2021-38093/): Integer overflow in ffmpeg:ffmpeg (high 8.8) - [CVE-2021-38092](https://insights.sbomify.com/CVE-2021-38092/): Integer overflow in ffmpeg:ffmpeg (high 8.8) - [CVE-2021-38091](https://insights.sbomify.com/CVE-2021-38091/): Integer overflow in ffmpeg:ffmpeg (high 8.8) - [CVE-2021-38090](https://insights.sbomify.com/CVE-2021-38090/): Integer overflow in ffmpeg:ffmpeg (high 8.8) - [CVE-2021-3809](https://insights.sbomify.com/CVE-2021-3809/): Privilege escalation in HP PC BIOS (high 7.8) - [CVE-2021-38088](https://insights.sbomify.com/CVE-2021-38088/): Privilege escalation in acronis:cyber protect (high 7.8) - [CVE-2021-38087](https://insights.sbomify.com/CVE-2021-38087/): Cross-site scripting in acronis:cyber protect (medium 6.1) - [CVE-2021-38086](https://insights.sbomify.com/CVE-2021-38086/): Privilege escalation in acronis:cyber protect (high 7.8) - [CVE-2021-38085](https://insights.sbomify.com/CVE-2021-38085/): Privilege escalation in canon:pixma tr150 firmware (high 7.8) - [CVE-2021-38084](https://insights.sbomify.com/CVE-2021-38084/): Command injection in courier-mta:courier mail server (high 8.1) - [CVE-2021-3808](https://insights.sbomify.com/CVE-2021-3808/): Privilege escalation in HP PC BIOS (high 7.8) - [CVE-2021-3807](https://insights.sbomify.com/CVE-2021-3807/): Inefficient Regular Expression Complexity in chalk/ansi-regex (high 7.5) - [CVE-2021-3806](https://insights.sbomify.com/CVE-2021-3806/): Path Traversal in Pardus Software Center (medium 5.3) - [CVE-2021-3805](https://insights.sbomify.com/CVE-2021-3805/): Prototype Pollution in mariocasciaro/object-path (high 7.5) - [CVE-2021-3804](https://insights.sbomify.com/CVE-2021-3804/): Inefficient Regular Expression Complexity in nervjs/taro (high 7.5) - [CVE-2021-3803](https://insights.sbomify.com/CVE-2021-3803/): Inefficient Regular Expression Complexity in fb55/nth-check (high 7.5) - [CVE-2021-38023](https://insights.sbomify.com/CVE-2021-38023/): Use after free in Chrome (high 8.8) - [CVE-2021-38022](https://insights.sbomify.com/CVE-2021-38022/): Information disclosure in Chrome (medium 6.5) - [CVE-2021-38021](https://insights.sbomify.com/CVE-2021-38021/): Security feature bypass in Chrome (medium 6.5) - [CVE-2021-38020](https://insights.sbomify.com/CVE-2021-38020/): Security feature bypass in Chrome (medium 4.3) - [CVE-2021-3802](https://insights.sbomify.com/CVE-2021-3802/): Denial of service in udisks2 (medium 4.2) - [CVE-2021-38019](https://insights.sbomify.com/CVE-2021-38019/): Security feature bypass in Chrome (medium 6.5) - [CVE-2021-38018](https://insights.sbomify.com/CVE-2021-38018/): Other in Chrome (medium 6.5) - [CVE-2021-38017](https://insights.sbomify.com/CVE-2021-38017/): Security feature bypass in Chrome (high 8.8) - [CVE-2021-38016](https://insights.sbomify.com/CVE-2021-38016/): Security feature bypass in Chrome (high 8.8) - [CVE-2021-38015](https://insights.sbomify.com/CVE-2021-38015/): Security feature bypass in Chrome (high 8.8) - [CVE-2021-38014](https://insights.sbomify.com/CVE-2021-38014/): Memory corruption in Chrome (high 8.8) - [CVE-2021-38013](https://insights.sbomify.com/CVE-2021-38013/): Memory corruption in Chrome (critical 9.6) - [CVE-2021-38012](https://insights.sbomify.com/CVE-2021-38012/): Memory corruption in Chrome (high 8.8) - [CVE-2021-38011](https://insights.sbomify.com/CVE-2021-38011/): Use after free in Chrome (high 8.8) - [CVE-2021-38010](https://insights.sbomify.com/CVE-2021-38010/): Security feature bypass in Chrome (medium 6.5) - [CVE-2021-3801](https://insights.sbomify.com/CVE-2021-3801/): Inefficient Regular Expression Complexity in prismjs/prism (high 7.5) - [CVE-2021-38009](https://insights.sbomify.com/CVE-2021-38009/): Information disclosure in Chrome (medium 6.5) - [CVE-2021-38008](https://insights.sbomify.com/CVE-2021-38008/): Use after free in Chrome (high 8.8) - [CVE-2021-38007](https://insights.sbomify.com/CVE-2021-38007/): Memory corruption in Chrome (high 8.8) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/116/