# Vulnerabilities published in 2021


- [CVE-2021-38006](https://insights.sbomify.com/CVE-2021-38006/): Use after free in Chrome (high 8.8)
- [CVE-2021-38005](https://insights.sbomify.com/CVE-2021-38005/): Use after free in Chrome (high 8.8)
- [CVE-2021-38004](https://insights.sbomify.com/CVE-2021-38004/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2021-38003](https://insights.sbomify.com/CVE-2021-38003/): Google Chromium V8 Memory Corruption (high 8.8, exploited in the wild)
- [CVE-2021-38002](https://insights.sbomify.com/CVE-2021-38002/): Use after free in Chrome (critical 9.6)
- [CVE-2021-38001](https://insights.sbomify.com/CVE-2021-38001/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-38000](https://insights.sbomify.com/CVE-2021-38000/): Google Chromium Intents Improper Input Validation (medium 6.1, exploited in the wild)
- [CVE-2021-3800](https://insights.sbomify.com/CVE-2021-3800/): Information disclosure in Glib (medium 5.5)
- [CVE-2021-37999](https://insights.sbomify.com/CVE-2021-37999/): Cross-site scripting in Chrome (medium 6.1)
- [CVE-2021-37998](https://insights.sbomify.com/CVE-2021-37998/): Use after free in Chrome (high 8.8)
- [CVE-2021-37997](https://insights.sbomify.com/CVE-2021-37997/): Use after free in Chrome (high 8.8)
- [CVE-2021-37996](https://insights.sbomify.com/CVE-2021-37996/): Security feature bypass in Chrome (medium 5.5)
- [CVE-2021-37995](https://insights.sbomify.com/CVE-2021-37995/): Other in Chrome (medium 6.5)
- [CVE-2021-37994](https://insights.sbomify.com/CVE-2021-37994/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2021-37993](https://insights.sbomify.com/CVE-2021-37993/): Use after free in Chrome (high 8.8)
- [CVE-2021-37992](https://insights.sbomify.com/CVE-2021-37992/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-37991](https://insights.sbomify.com/CVE-2021-37991/): Race condition in Chrome (high 7.5)
- [CVE-2021-37990](https://insights.sbomify.com/CVE-2021-37990/): Information disclosure in Chrome (medium 5.5)
- [CVE-2021-3799](https://insights.sbomify.com/CVE-2021-3799/): Improper Restriction of Rendered UI Layers or Frames in getgrav/grav-plugin-admin (medium 5.4)
- [CVE-2021-37989](https://insights.sbomify.com/CVE-2021-37989/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2021-37988](https://insights.sbomify.com/CVE-2021-37988/): Use after free in Chrome (high 8.8)
- [CVE-2021-37987](https://insights.sbomify.com/CVE-2021-37987/): Use after free in Chrome (high 8.8)
- [CVE-2021-37986](https://insights.sbomify.com/CVE-2021-37986/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-37985](https://insights.sbomify.com/CVE-2021-37985/): Use after free in Chrome (high 8.8)
- [CVE-2021-37984](https://insights.sbomify.com/CVE-2021-37984/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-37983](https://insights.sbomify.com/CVE-2021-37983/): Use after free in Chrome (high 8.8)
- [CVE-2021-37982](https://insights.sbomify.com/CVE-2021-37982/): Use after free in Chrome (high 8.8)
- [CVE-2021-37981](https://insights.sbomify.com/CVE-2021-37981/): Memory corruption in Chrome (critical 9.6)
- [CVE-2021-37980](https://insights.sbomify.com/CVE-2021-37980/): Security feature bypass in Chrome (high 7.4)
- [CVE-2021-3798](https://insights.sbomify.com/CVE-2021-3798/): Weak cryptography in opencryptoki (medium 5.5)
- [CVE-2021-37979](https://insights.sbomify.com/CVE-2021-37979/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-37978](https://insights.sbomify.com/CVE-2021-37978/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-37977](https://insights.sbomify.com/CVE-2021-37977/): Use after free in Chrome (high 8.8)
- [CVE-2021-37976](https://insights.sbomify.com/CVE-2021-37976/): Google Chromium Information Disclosure (medium 6.5, exploited in the wild)
- [CVE-2021-37975](https://insights.sbomify.com/CVE-2021-37975/): Google Chromium V8 Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-37974](https://insights.sbomify.com/CVE-2021-37974/): Use after free in Chrome (high 8.8)
- [CVE-2021-37973](https://insights.sbomify.com/CVE-2021-37973/): Google Chromium Portals Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2021-37972](https://insights.sbomify.com/CVE-2021-37972/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-37971](https://insights.sbomify.com/CVE-2021-37971/): Other in Chrome (medium 4.3)
- [CVE-2021-37970](https://insights.sbomify.com/CVE-2021-37970/): Use after free in Chrome (high 8.8)
- [CVE-2021-3797](https://insights.sbomify.com/CVE-2021-3797/): Use of Wrong Operator in String Comparison in hestiacp/hestiacp (medium 4.8)
- [CVE-2021-37969](https://insights.sbomify.com/CVE-2021-37969/): Privilege escalation in Chrome (high 7.8)
- [CVE-2021-37968](https://insights.sbomify.com/CVE-2021-37968/): Information disclosure in Chrome (medium 4.3)
- [CVE-2021-37967](https://insights.sbomify.com/CVE-2021-37967/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2021-37966](https://insights.sbomify.com/CVE-2021-37966/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2021-37965](https://insights.sbomify.com/CVE-2021-37965/): Information disclosure in Chrome (medium 4.3)
- [CVE-2021-37964](https://insights.sbomify.com/CVE-2021-37964/): Security feature bypass in Chrome (low 3.3)
- [CVE-2021-37963](https://insights.sbomify.com/CVE-2021-37963/): Information disclosure in Chrome (medium 4.3)
- [CVE-2021-37962](https://insights.sbomify.com/CVE-2021-37962/): Use after free in Chrome (high 8.8)
- [CVE-2021-37961](https://insights.sbomify.com/CVE-2021-37961/): Use after free in Chrome (high 8.8)
- [CVE-2021-3796](https://insights.sbomify.com/CVE-2021-3796/): Use After Free in vim/vim (high 8.2)
- [CVE-2021-37959](https://insights.sbomify.com/CVE-2021-37959/): Use after free in Chrome (high 8.8)
- [CVE-2021-37958](https://insights.sbomify.com/CVE-2021-37958/): Cross-site scripting in Chrome (medium 5.4)
- [CVE-2021-37957](https://insights.sbomify.com/CVE-2021-37957/): Use after free in Chrome (high 8.8)
- [CVE-2021-37956](https://insights.sbomify.com/CVE-2021-37956/): Use after free in Chrome (high 8.8)
- [CVE-2021-3795](https://insights.sbomify.com/CVE-2021-3795/): Inefficient Regular Expression Complexity in sindresorhus/semver-regex (high 7.5)
- [CVE-2021-37942](https://insights.sbomify.com/CVE-2021-37942/): APM Java Agent Local Privilege Escalation (high 7.0)
- [CVE-2021-37941](https://insights.sbomify.com/CVE-2021-37941/): APM Java Agent Local Privilege Escalation (high 7.8)
- [CVE-2021-37940](https://insights.sbomify.com/CVE-2021-37940/): Server-side request forgery in Enterprisesearch (medium 6.8)
- [CVE-2021-3794](https://insights.sbomify.com/CVE-2021-3794/): Inefficient Regular Expression Complexity in vuelidate/vuelidate (high 7.5)
- [CVE-2021-37939](https://insights.sbomify.com/CVE-2021-37939/): Kibana Sensitive Data Disclosure (low 2.7)
- [CVE-2021-37938](https://insights.sbomify.com/CVE-2021-37938/): Path traversal in Kibana (medium 4.3)
- [CVE-2021-37937](https://insights.sbomify.com/CVE-2021-37937/): Elasticsearch privilege escalation (medium 5.9)
- [CVE-2021-37936](https://insights.sbomify.com/CVE-2021-37936/): Cross-site scripting in Kibana (medium 5.4)
- [CVE-2021-37935](https://insights.sbomify.com/CVE-2021-37935/): Information disclosure in huntflow:huntflow enterprise (high 7.5)
- [CVE-2021-37934](https://insights.sbomify.com/CVE-2021-37934/): Security feature bypass in huntflow:huntflow enterprise (critical 9.8)
- [CVE-2021-37933](https://insights.sbomify.com/CVE-2021-37933/): Auth bypass in huntflow:huntflow enterprise (high 7.5)
- [CVE-2021-37931](https://insights.sbomify.com/CVE-2021-37931/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37930](https://insights.sbomify.com/CVE-2021-37930/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-3793](https://insights.sbomify.com/CVE-2021-3793/): Missing authorization in Binatone Hubble Cameras (medium 6.5)
- [CVE-2021-37929](https://insights.sbomify.com/CVE-2021-37929/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37928](https://insights.sbomify.com/CVE-2021-37928/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37927](https://insights.sbomify.com/CVE-2021-37927/): Auth bypass in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37926](https://insights.sbomify.com/CVE-2021-37926/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37925](https://insights.sbomify.com/CVE-2021-37925/): Command injection in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37924](https://insights.sbomify.com/CVE-2021-37924/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37923](https://insights.sbomify.com/CVE-2021-37923/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37922](https://insights.sbomify.com/CVE-2021-37922/): Path traversal in zohocorp:manageengine admanager plus (medium 5.3)
- [CVE-2021-37921](https://insights.sbomify.com/CVE-2021-37921/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37920](https://insights.sbomify.com/CVE-2021-37920/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-3792](https://insights.sbomify.com/CVE-2021-3792/): Weak cryptography in Binatone Hubble Cameras (medium 5.3)
- [CVE-2021-37919](https://insights.sbomify.com/CVE-2021-37919/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37918](https://insights.sbomify.com/CVE-2021-37918/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37916](https://insights.sbomify.com/CVE-2021-37916/): Joplin vulnerable to Cross-site Scripting in notes (medium 6.1)
- [CVE-2021-37915](https://insights.sbomify.com/CVE-2021-37915/): Command injection in grandstream:ht801 firmware (high 8.8)
- [CVE-2021-37914](https://insights.sbomify.com/CVE-2021-37914/): Workflow re-write vulnerability using input parameter (medium 6.5)
- [CVE-2021-37913](https://insights.sbomify.com/CVE-2021-37913/): HGiga OAKlouds - Command Injection-2 (critical 9.8)
- [CVE-2021-37912](https://insights.sbomify.com/CVE-2021-37912/): HGiga OAKlouds - Command Injection-1 (critical 9.8)
- [CVE-2021-37911](https://insights.sbomify.com/CVE-2021-37911/): Privilege escalation in EH600 OTA (high 8.8)
- [CVE-2021-37910](https://insights.sbomify.com/CVE-2021-37910/): ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication (low 3.7)
- [CVE-2021-3791](https://insights.sbomify.com/CVE-2021-3791/): Information disclosure in Binatone Hubble Cameras (medium 6.5)
- [CVE-2021-37909](https://insights.sbomify.com/CVE-2021-37909/): CHANGING Inc. TSSServiSignAdapter Windows Versions - Improper Input Validation (critical 9.8)
- [CVE-2021-3790](https://insights.sbomify.com/CVE-2021-3790/): Memory corruption in Binatone Hubble Cameras (medium 6.5)
- [CVE-2021-3789](https://insights.sbomify.com/CVE-2021-3789/): Weak cryptography in Binatone Hubble Cameras (medium 4.2)
- [CVE-2021-3788](https://insights.sbomify.com/CVE-2021-3788/): Auth bypass in Binatone Hubble Cameras (medium 6.8)
- [CVE-2021-3787](https://insights.sbomify.com/CVE-2021-3787/): Information disclosure in Binatone Hubble Cameras (medium 6.4)
- [CVE-2021-37867](https://insights.sbomify.com/CVE-2021-37867/): Emails of all users are exposed via one of the Boards APIs (medium 4.3)
- [CVE-2021-37866](https://insights.sbomify.com/CVE-2021-37866/): Session is not invalidated on server-side when user logged out of Boards (medium 4.7)
- [CVE-2021-37865](https://insights.sbomify.com/CVE-2021-37865/): Server-side Denial of Service while processing a specifically crafted GIF file (medium 4.3)
- [CVE-2021-37864](https://insights.sbomify.com/CVE-2021-37864/): Users can view the contents of an archived channel when access is explicitly denied by the system admin (low 2.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/117/