# Vulnerabilities published in 2021


- [CVE-2021-37613](https://insights.sbomify.com/CVE-2021-37613/): Denial of service in stormshield:stormshield network security (medium 6.5)
- [CVE-2021-3761](https://insights.sbomify.com/CVE-2021-3761/): OctoRPKI lacks contextual out-of-bounds check when validating RPKI ROA maxLength values (high 7.5)
- [CVE-2021-37608](https://insights.sbomify.com/CVE-2021-37608/): Arbitrary file upload vulnerability in OFBiz (critical 9.8)
- [CVE-2021-37606](https://insights.sbomify.com/CVE-2021-37606/): Weak cryptography in meow hash project:meow hash (medium 5.3)
- [CVE-2021-37605](https://insights.sbomify.com/CVE-2021-37605/): Weak cryptography in microchip:miwi (high 7.5)
- [CVE-2021-37604](https://insights.sbomify.com/CVE-2021-37604/): Security feature bypass in microchip:miwi (high 7.5)
- [CVE-2021-37601](https://insights.sbomify.com/CVE-2021-37601/): Information disclosure in prosody:prosody (high 7.5)
- [CVE-2021-37600](https://insights.sbomify.com/CVE-2021-37600/): Integer overflow in kernel:util-linux (medium 5.5)
- [CVE-2021-3760](https://insights.sbomify.com/CVE-2021-3760/): Use after free in kernel (high 7.8)
- [CVE-2021-37599](https://insights.sbomify.com/CVE-2021-37599/): SQL injection in nuance:winscribe dictation (critical 9.8)
- [CVE-2021-37598](https://insights.sbomify.com/CVE-2021-37598/): Auth bypass in wpcerber:wp cerber (medium 5.3)
- [CVE-2021-37597](https://insights.sbomify.com/CVE-2021-37597/): Auth bypass in wpcerber:wp cerber (critical 9.8)
- [CVE-2021-37596](https://insights.sbomify.com/CVE-2021-37596/): Cross-site scripting in telegram:web k alpha (medium 6.1)
- [CVE-2021-37595](https://insights.sbomify.com/CVE-2021-37595/): Other in freerdp:freerdp (critical 9.8)
- [CVE-2021-37594](https://insights.sbomify.com/CVE-2021-37594/): Memory corruption in freerdp:freerdp (critical 9.8)
- [CVE-2021-37593](https://insights.sbomify.com/CVE-2021-37593/): SQL injection in peel:peel shopping (critical 9.1)
- [CVE-2021-37592](https://insights.sbomify.com/CVE-2021-37592/): Security feature bypass in oisf:suricata (critical 9.8)
- [CVE-2021-3759](https://insights.sbomify.com/CVE-2021-3759/): Denial of service in kernel (medium 5.5)
- [CVE-2021-37589](https://insights.sbomify.com/CVE-2021-37589/): SQL injection in virtuasoftware:cobranca (high 7.5)
- [CVE-2021-37588](https://insights.sbomify.com/CVE-2021-37588/): Weak cryptography in jhu:charm (medium 5.9)
- [CVE-2021-37587](https://insights.sbomify.com/CVE-2021-37587/): Weak cryptography in jhu:charm (medium 6.5)
- [CVE-2021-37586](https://insights.sbomify.com/CVE-2021-37586/): Missing authorization in mitel:interaction recording (medium 4.9)
- [CVE-2021-37584](https://insights.sbomify.com/CVE-2021-37584/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37583](https://insights.sbomify.com/CVE-2021-37583/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37580](https://insights.sbomify.com/CVE-2021-37580/): Apache ShenYu Admin bypass JWT authentication (critical 9.8)
- [CVE-2021-3758](https://insights.sbomify.com/CVE-2021-3758/): Server-Side Request Forgery (SSRF) in bookstackapp/bookstack (medium 6.3)
- [CVE-2021-37579](https://insights.sbomify.com/CVE-2021-37579/): Bypass deserialization checks in Apache Dubbo (critical 9.8)
- [CVE-2021-37578](https://insights.sbomify.com/CVE-2021-37578/): Remote code execution via RMI (critical 9.8)
- [CVE-2021-37577](https://insights.sbomify.com/CVE-2021-37577/): Bluetooth LE and BR/EDR Secure Connections pairing and Secure Simple Pairing using the Passkey entry protocol in Bluetooth Core Specificatio (medium 6.8)
- [CVE-2021-37576](https://insights.sbomify.com/CVE-2021-37576/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2021-37573](https://insights.sbomify.com/CVE-2021-37573/): Cross-site scripting in tiny java web server project:tiny java web server (medium 6.1)
- [CVE-2021-37572](https://insights.sbomify.com/CVE-2021-37572/): Missing authorization in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37571](https://insights.sbomify.com/CVE-2021-37571/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37570](https://insights.sbomify.com/CVE-2021-37570/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-3757](https://insights.sbomify.com/CVE-2021-3757/): Prototype Pollution in immerjs/immer (high 7.5)
- [CVE-2021-37569](https://insights.sbomify.com/CVE-2021-37569/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37568](https://insights.sbomify.com/CVE-2021-37568/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37567](https://insights.sbomify.com/CVE-2021-37567/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37566](https://insights.sbomify.com/CVE-2021-37566/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37565](https://insights.sbomify.com/CVE-2021-37565/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37564](https://insights.sbomify.com/CVE-2021-37564/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37563](https://insights.sbomify.com/CVE-2021-37563/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37562](https://insights.sbomify.com/CVE-2021-37562/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37561](https://insights.sbomify.com/CVE-2021-37561/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-37560](https://insights.sbomify.com/CVE-2021-37560/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-3756](https://insights.sbomify.com/CVE-2021-3756/): Heap-based Buffer Overflow in hoene/libmysofa (medium 6.2)
- [CVE-2021-37558](https://insights.sbomify.com/CVE-2021-37558/): SQL injection in centreon:centreon (critical 9.8)
- [CVE-2021-37557](https://insights.sbomify.com/CVE-2021-37557/): SQL injection in centreon:centreon (high 8.8)
- [CVE-2021-37556](https://insights.sbomify.com/CVE-2021-37556/): SQL injection in centreon:centreon (high 8.8)
- [CVE-2021-37555](https://insights.sbomify.com/CVE-2021-37555/): Hardcoded credentials in trixie:tx9 automatic food dispenser firmware (critical 9.8)
- [CVE-2021-37554](https://insights.sbomify.com/CVE-2021-37554/): Missing authorization in jetbrains:youtrack (medium 4.3)
- [CVE-2021-37553](https://insights.sbomify.com/CVE-2021-37553/): Weak cryptography in jetbrains:youtrack (high 7.5)
- [CVE-2021-37552](https://insights.sbomify.com/CVE-2021-37552/): Cross-site scripting in jetbrains:youtrack (medium 5.4)
- [CVE-2021-37551](https://insights.sbomify.com/CVE-2021-37551/): Weak cryptography in jetbrains:youtrack (medium 5.3)
- [CVE-2021-37550](https://insights.sbomify.com/CVE-2021-37550/): Other in jetbrains:youtrack (high 7.5)
- [CVE-2021-37549](https://insights.sbomify.com/CVE-2021-37549/): Security feature bypass in jetbrains:youtrack (critical 9.1)
- [CVE-2021-37548](https://insights.sbomify.com/CVE-2021-37548/): Information disclosure in jetbrains:teamcity (high 7.5)
- [CVE-2021-37547](https://insights.sbomify.com/CVE-2021-37547/): File upload in jetbrains:teamcity (medium 5.3)
- [CVE-2021-37546](https://insights.sbomify.com/CVE-2021-37546/): Weak cryptography in jetbrains:teamcity (medium 5.3)
- [CVE-2021-37545](https://insights.sbomify.com/CVE-2021-37545/): Auth bypass in jetbrains:teamcity (high 7.5)
- [CVE-2021-37544](https://insights.sbomify.com/CVE-2021-37544/): Deserialization in jetbrains:teamcity (critical 9.8)
- [CVE-2021-37543](https://insights.sbomify.com/CVE-2021-37543/): Code injection in jetbrains:rubymine (high 8.8)
- [CVE-2021-37542](https://insights.sbomify.com/CVE-2021-37542/): Cross-site scripting in jetbrains:teamcity (medium 6.1)
- [CVE-2021-37541](https://insights.sbomify.com/CVE-2021-37541/): Cross-site scripting in jetbrains:hub (medium 6.1)
- [CVE-2021-37540](https://insights.sbomify.com/CVE-2021-37540/): Misconfiguration in jetbrains:hub (medium 6.5)
- [CVE-2021-3754](https://insights.sbomify.com/CVE-2021-3754/): Keycloak's improper input validation allows using email as username (medium 5.3)
- [CVE-2021-37539](https://insights.sbomify.com/CVE-2021-37539/): File upload in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-37538](https://insights.sbomify.com/CVE-2021-37538/): SQL injection in smartdatasoft:smartblog (critical 9.8)
- [CVE-2021-37535](https://insights.sbomify.com/CVE-2021-37535/): Missing authorization in SAP NetWeaver Application Server Java (JMS Connector Service) (critical 10.0)
- [CVE-2021-37534](https://insights.sbomify.com/CVE-2021-37534/): Cross-site scripting in misp-project:misp (medium 5.4)
- [CVE-2021-37533](https://insights.sbomify.com/CVE-2021-37533/): Apache Commons Net's FTP client trusts the host from PASV response by default (medium 6.5)
- [CVE-2021-37532](https://insights.sbomify.com/CVE-2021-37532/): Path traversal in SAP Business One (medium 4.3)
- [CVE-2021-37531](https://insights.sbomify.com/CVE-2021-37531/): Command injection in SAP NetWeaver Knowledge Management XML Forms (critical 9.9)
- [CVE-2021-37530](https://insights.sbomify.com/CVE-2021-37530/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2021-3753](https://insights.sbomify.com/CVE-2021-3753/): Race condition in kernel (medium 4.7)
- [CVE-2021-37529](https://insights.sbomify.com/CVE-2021-37529/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2021-37524](https://insights.sbomify.com/CVE-2021-37524/): Cross-site scripting in fusionpbx:fusionpbx (medium 6.1)
- [CVE-2021-37522](https://insights.sbomify.com/CVE-2021-37522/): SQL injection in locke-bot project:locke-bot (critical 9.8)
- [CVE-2021-3752](https://insights.sbomify.com/CVE-2021-3752/): Use after free in kernel (high 7.1)
- [CVE-2021-37519](https://insights.sbomify.com/CVE-2021-37519/): Memory corruption in memcached:memcached (medium 5.5)
- [CVE-2021-37518](https://insights.sbomify.com/CVE-2021-37518/): Cross-site scripting in vimium project:vimium (medium 6.1)
- [CVE-2021-37517](https://insights.sbomify.com/CVE-2021-37517/): Access Control vulnerability in Dolibarr (high 7.5)
- [CVE-2021-3751](https://insights.sbomify.com/CVE-2021-3751/): Out-of-bounds Write in bfabiszewski/libmobi (critical 9.6)
- [CVE-2021-37504](https://insights.sbomify.com/CVE-2021-37504/): jQuery-Upload-File XSS in fileNameStr (medium 6.1)
- [CVE-2021-37502](https://insights.sbomify.com/CVE-2021-37502/): Cross site scripting in automad/automad (medium 5.4)
- [CVE-2021-37501](https://insights.sbomify.com/CVE-2021-37501/): Memory corruption in hdfgroup:hdf5 (high 7.5)
- [CVE-2021-37500](https://insights.sbomify.com/CVE-2021-37500/): Path traversal in reprisesoftware:reprise license manager (high 8.1)
- [CVE-2021-3750](https://insights.sbomify.com/CVE-2021-3750/): Use after free in QEMU (high 8.2)
- [CVE-2021-37499](https://insights.sbomify.com/CVE-2021-37499/): Other in reprisesoftware:reprise license manager (medium 6.5)
- [CVE-2021-37498](https://insights.sbomify.com/CVE-2021-37498/): Server-side request forgery in reprisesoftware:reprise license manager (medium 6.5)
- [CVE-2021-37497](https://insights.sbomify.com/CVE-2021-37497/): SQL injection in pbootcms:pbootcms (critical 9.8)
- [CVE-2021-37492](https://insights.sbomify.com/CVE-2021-37492/): Information disclosure in ravencoin:ravencoin (high 7.5)
- [CVE-2021-37491](https://insights.sbomify.com/CVE-2021-37491/): Information disclosure in dogecoin:dogecoin (high 7.5)
- [CVE-2021-3749](https://insights.sbomify.com/CVE-2021-3749/): Inefficient Regular Expression Complexity in axios/axios (high 7.5)
- [CVE-2021-3748](https://insights.sbomify.com/CVE-2021-3748/): Use after free in QEMU (virtio-net) (high 7.5)
- [CVE-2021-37478](https://insights.sbomify.com/CVE-2021-37478/): SQL injection in naviwebs:navigatecms (critical 9.8)
- [CVE-2021-37477](https://insights.sbomify.com/CVE-2021-37477/): SQL injection in naviwebs:navigatecms (critical 9.8)
- [CVE-2021-37476](https://insights.sbomify.com/CVE-2021-37476/): SQL injection in naviwebs:navigatecms (critical 9.8)
- [CVE-2021-37475](https://insights.sbomify.com/CVE-2021-37475/): SQL injection in naviwebs:navigatecms (critical 9.8)
- [CVE-2021-37473](https://insights.sbomify.com/CVE-2021-37473/): SQL injection in naviwebs:navigatecms (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/120/