# Vulnerabilities published in 2021


- [CVE-2021-37165](https://insights.sbomify.com/CVE-2021-37165/): Memory corruption in swisslog-healthcare:hmi-3 control panel firmware (critical 9.8)
- [CVE-2021-37164](https://insights.sbomify.com/CVE-2021-37164/): Memory corruption in swisslog-healthcare:hmi-3 control panel firmware (critical 9.8)
- [CVE-2021-37163](https://insights.sbomify.com/CVE-2021-37163/): Hardcoded credentials in swisslog-healthcare:hmi-3 control panel firmware (critical 9.8)
- [CVE-2021-37162](https://insights.sbomify.com/CVE-2021-37162/): Memory corruption in swisslog-healthcare:hmi-3 control panel firmware (critical 9.8)
- [CVE-2021-37161](https://insights.sbomify.com/CVE-2021-37161/): Memory corruption in swisslog-healthcare:hmi-3 control panel firmware (critical 9.8)
- [CVE-2021-37160](https://insights.sbomify.com/CVE-2021-37160/): Security feature bypass in swisslog-healthcare:hmi-3 control panel firmware (critical 9.8)
- [CVE-2021-3716](https://insights.sbomify.com/CVE-2021-3716/): Other in nbdkit (low 3.1)
- [CVE-2021-37159](https://insights.sbomify.com/CVE-2021-37159/): Use after free in debian:debian linux (medium 6.4)
- [CVE-2021-37158](https://insights.sbomify.com/CVE-2021-37158/): Command injection in opengamepanel:opengamepanel (high 8.8)
- [CVE-2021-37157](https://insights.sbomify.com/CVE-2021-37157/): Information disclosure in opengamepanel:opengamepanel (high 8.8)
- [CVE-2021-37156](https://insights.sbomify.com/CVE-2021-37156/): Auth bypass in redmine:redmine (high 7.5)
- [CVE-2021-37155](https://insights.sbomify.com/CVE-2021-37155/): Security feature bypass in wolfssl:wolfssl (critical 9.8)
- [CVE-2021-37154](https://insights.sbomify.com/CVE-2021-37154/): Other in forgerock:access management (critical 9.8)
- [CVE-2021-37153](https://insights.sbomify.com/CVE-2021-37153/): Auth bypass in forgerock:access management (critical 9.8)
- [CVE-2021-37152](https://insights.sbomify.com/CVE-2021-37152/): Cross-site scripting in sonatype:nexus repository manager (medium 5.4)
- [CVE-2021-37151](https://insights.sbomify.com/CVE-2021-37151/): Information disclosure in Identity (medium 5.3)
- [CVE-2021-37150](https://insights.sbomify.com/CVE-2021-37150/): Protocol vs scheme mismatch (medium 4.2)
- [CVE-2021-3715](https://insights.sbomify.com/CVE-2021-3715/): Use after free in kernel (high 7.8)
- [CVE-2021-37149](https://insights.sbomify.com/CVE-2021-37149/): Request Smuggling - multiple attacks (high 7.5)
- [CVE-2021-37148](https://insights.sbomify.com/CVE-2021-37148/): Request Smuggling - transfer encoding validation (high 7.5)
- [CVE-2021-37147](https://insights.sbomify.com/CVE-2021-37147/): Request Smuggling - LF line ending (high 7.5)
- [CVE-2021-37146](https://insights.sbomify.com/CVE-2021-37146/): Denial of service in ros:ros-comm (high 7.5)
- [CVE-2021-37145](https://insights.sbomify.com/CVE-2021-37145/): Command injection in poly:cx5100 firmware (high 7.2)
- [CVE-2021-37144](https://insights.sbomify.com/CVE-2021-37144/): Path traversal in cszcms:csz cms (critical 9.1)
- [CVE-2021-3714](https://insights.sbomify.com/CVE-2021-3714/): Information disclosure in kernel (medium 5.9)
- [CVE-2021-37137](https://insights.sbomify.com/CVE-2021-37137/): SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way (high 7.5)
- [CVE-2021-37136](https://insights.sbomify.com/CVE-2021-37136/): Bzip2Decoder doesn't allow setting size restrictions for decompressed data (high 7.5)
- [CVE-2021-37134](https://insights.sbomify.com/CVE-2021-37134/): Race condition in HarmonyOS (high 8.1)
- [CVE-2021-37133](https://insights.sbomify.com/CVE-2021-37133/): Missing authorization in EMUI (high 7.5)
- [CVE-2021-37132](https://insights.sbomify.com/CVE-2021-37132/): Missing authorization in HarmonyOS (medium 5.3)
- [CVE-2021-37131](https://insights.sbomify.com/CVE-2021-37131/): Code injection in ManageOne;iManager NetEco;iManager NetEco 6000 (medium 6.8)
- [CVE-2021-37130](https://insights.sbomify.com/CVE-2021-37130/): Path traversal in FusionCube (high 7.5)
- [CVE-2021-3713](https://insights.sbomify.com/CVE-2021-3713/): Memory corruption in QEMU (high 7.4)
- [CVE-2021-37129](https://insights.sbomify.com/CVE-2021-37129/): Memory corruption in IIPS Module;NGFW Module;NIP6600;S12700;S1700;S2700;S5700;S6700;S7700;S9700;USG9500 (high 7.5)
- [CVE-2021-37128](https://insights.sbomify.com/CVE-2021-37128/): Path traversal in HarmonyOS (critical 9.8)
- [CVE-2021-37127](https://insights.sbomify.com/CVE-2021-37127/): Security feature bypass in iManager NetEco;iManager NetEco 6000 (high 7.2)
- [CVE-2021-37126](https://insights.sbomify.com/CVE-2021-37126/): Path traversal in HarmonyOS (high 7.5)
- [CVE-2021-37125](https://insights.sbomify.com/CVE-2021-37125/): Information disclosure in HarmonyOS (high 7.5)
- [CVE-2021-37124](https://insights.sbomify.com/CVE-2021-37124/): Path traversal in PC Smart Full Scene 11.1 (medium 6.5)
- [CVE-2021-37123](https://insights.sbomify.com/CVE-2021-37123/): Auth bypass in Hero-CT060 (critical 9.8)
- [CVE-2021-37122](https://insights.sbomify.com/CVE-2021-37122/): Use after free in CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800 (medium 6.5)
- [CVE-2021-37121](https://insights.sbomify.com/CVE-2021-37121/): Misconfiguration in EMUI;Magic UI (critical 9.8)
- [CVE-2021-37120](https://insights.sbomify.com/CVE-2021-37120/): Memory corruption in EMUI;Magic UI (critical 9.8)
- [CVE-2021-3712](https://insights.sbomify.com/CVE-2021-3712/): Read buffer overruns processing ASN.1 strings (high 7.4)
- [CVE-2021-37119](https://insights.sbomify.com/CVE-2021-37119/): Business logic in EMUI (high 7.5)
- [CVE-2021-37118](https://insights.sbomify.com/CVE-2021-37118/): Information disclosure in HarmonyOS (medium 5.3)
- [CVE-2021-37117](https://insights.sbomify.com/CVE-2021-37117/): Business logic in EMUI (high 7.5)
- [CVE-2021-37116](https://insights.sbomify.com/CVE-2021-37116/): Other in HarmonyOS (critical 9.1)
- [CVE-2021-37115](https://insights.sbomify.com/CVE-2021-37115/): Memory corruption in EMUI (medium 5.5)
- [CVE-2021-37114](https://insights.sbomify.com/CVE-2021-37114/): Memory corruption in EMUI (medium 5.3)
- [CVE-2021-37113](https://insights.sbomify.com/CVE-2021-37113/): Privilege escalation in EMUI (high 7.5)
- [CVE-2021-37112](https://insights.sbomify.com/CVE-2021-37112/): Other in HarmonyOS (medium 5.3)
- [CVE-2021-37111](https://insights.sbomify.com/CVE-2021-37111/): Denial of service in EMUI (high 7.5)
- [CVE-2021-37110](https://insights.sbomify.com/CVE-2021-37110/): Weak cryptography in EMUI;Magic UI;Harmony OS (high 7.5)
- [CVE-2021-3711](https://insights.sbomify.com/CVE-2021-3711/): SM2 Decryption Buffer Overflow (critical 9.8)
- [CVE-2021-37109](https://insights.sbomify.com/CVE-2021-37109/): Security feature bypass in EMUI (high 7.8)
- [CVE-2021-37107](https://insights.sbomify.com/CVE-2021-37107/): Memory corruption in EMUI (medium 5.5)
- [CVE-2021-37106](https://insights.sbomify.com/CVE-2021-37106/): Command injection in FusionCompute (high 7.2)
- [CVE-2021-37105](https://insights.sbomify.com/CVE-2021-37105/): File upload in FusionCompute (high 7.5)
- [CVE-2021-37104](https://insights.sbomify.com/CVE-2021-37104/): Server-side request forgery in HUAWEI P40 (high 7.5)
- [CVE-2021-37103](https://insights.sbomify.com/CVE-2021-37103/): Misconfiguration in EMUI (medium 5.5)
- [CVE-2021-37102](https://insights.sbomify.com/CVE-2021-37102/): Command injection in FusionCompute (high 8.8)
- [CVE-2021-37101](https://insights.sbomify.com/CVE-2021-37101/): Missing authorization in AIS-BW50-00 (medium 6.8)
- [CVE-2021-37100](https://insights.sbomify.com/CVE-2021-37100/): Auth bypass in HarmonyOS (high 7.5)
- [CVE-2021-3710](https://insights.sbomify.com/CVE-2021-3710/): Apport info disclosure via path traversal bug in read_file (medium 6.5)
- [CVE-2021-37099](https://insights.sbomify.com/CVE-2021-37099/): Path traversal in HarmonyOS (critical 9.1)
- [CVE-2021-37098](https://insights.sbomify.com/CVE-2021-37098/): Other in HarmonyOS (high 7.5)
- [CVE-2021-37097](https://insights.sbomify.com/CVE-2021-37097/): Code injection in EMUI (high 7.5)
- [CVE-2021-37096](https://insights.sbomify.com/CVE-2021-37096/): Information disclosure in EMUI (high 7.5)
- [CVE-2021-37095](https://insights.sbomify.com/CVE-2021-37095/): Integer overflow in HarmonyOS (critical 9.8)
- [CVE-2021-37094](https://insights.sbomify.com/CVE-2021-37094/): Denial of service in HarmonyOS (high 7.5)
- [CVE-2021-37093](https://insights.sbomify.com/CVE-2021-37093/): Missing authorization in EMUI (medium 5.3)
- [CVE-2021-37092](https://insights.sbomify.com/CVE-2021-37092/): Other in EMUI (high 7.5)
- [CVE-2021-37091](https://insights.sbomify.com/CVE-2021-37091/): Missing authorization in HarmonyOS (high 7.5)
- [CVE-2021-37090](https://insights.sbomify.com/CVE-2021-37090/): Memory corruption in HarmonyOS (high 7.5)
- [CVE-2021-3709](https://insights.sbomify.com/CVE-2021-3709/): Apport file permission bypass through emacs byte compilation errors (medium 6.5)
- [CVE-2021-37089](https://insights.sbomify.com/CVE-2021-37089/): Other in HarmonyOS (high 7.5)
- [CVE-2021-37088](https://insights.sbomify.com/CVE-2021-37088/): Path traversal in HarmonyOS (critical 9.1)
- [CVE-2021-37087](https://insights.sbomify.com/CVE-2021-37087/): Path traversal in HarmonyOS (critical 9.1)
- [CVE-2021-37086](https://insights.sbomify.com/CVE-2021-37086/): Information disclosure in HarmonyOS (high 8.6)
- [CVE-2021-37085](https://insights.sbomify.com/CVE-2021-37085/): Race condition in HarmonyOS (medium 5.9)
- [CVE-2021-37084](https://insights.sbomify.com/CVE-2021-37084/): Other in HarmonyOS (critical 9.8)
- [CVE-2021-37083](https://insights.sbomify.com/CVE-2021-37083/): Null dereference in HarmonyOS (high 7.5)
- [CVE-2021-37082](https://insights.sbomify.com/CVE-2021-37082/): Race condition in HarmonyOS (medium 5.9)
- [CVE-2021-37081](https://insights.sbomify.com/CVE-2021-37081/): Denial of service in HarmonyOS (high 7.5)
- [CVE-2021-37080](https://insights.sbomify.com/CVE-2021-37080/): Other in HarmonyOS (high 7.5)
- [CVE-2021-3708](https://insights.sbomify.com/CVE-2021-3708/): Command injection in DSL-2750U (high 7.8)
- [CVE-2021-37079](https://insights.sbomify.com/CVE-2021-37079/): Other in HarmonyOS (critical 9.1)
- [CVE-2021-37078](https://insights.sbomify.com/CVE-2021-37078/): Denial of service in HarmonyOS (high 7.5)
- [CVE-2021-37077](https://insights.sbomify.com/CVE-2021-37077/): Null dereference in HarmonyOS (high 7.5)
- [CVE-2021-37076](https://insights.sbomify.com/CVE-2021-37076/): Memory corruption in HarmonyOS (high 7.5)
- [CVE-2021-37075](https://insights.sbomify.com/CVE-2021-37075/): Other in EMUI (high 7.5)
- [CVE-2021-37074](https://insights.sbomify.com/CVE-2021-37074/): Race condition in EMUI (high 8.1)
- [CVE-2021-37073](https://insights.sbomify.com/CVE-2021-37073/): Race condition in HarmonyOS (low 3.7)
- [CVE-2021-37072](https://insights.sbomify.com/CVE-2021-37072/): Memory corruption in HarmonyOS (high 7.5)
- [CVE-2021-37071](https://insights.sbomify.com/CVE-2021-37071/): Business logic in HarmonyOS (high 7.5)
- [CVE-2021-37070](https://insights.sbomify.com/CVE-2021-37070/): Memory corruption in HarmonyOS (high 7.5)
- [CVE-2021-3707](https://insights.sbomify.com/CVE-2021-3707/): Missing authorization in DSL-2750U (medium 5.5)
- [CVE-2021-37069](https://insights.sbomify.com/CVE-2021-37069/): Race condition in EMUI (high 7.4)
- [CVE-2021-37068](https://insights.sbomify.com/CVE-2021-37068/): Denial of service in HarmonyOS (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/123/