# Vulnerabilities published in 2021


- [CVE-2021-3634](https://insights.sbomify.com/CVE-2021-3634/): Memory corruption in libssh (medium 6.5)
- [CVE-2021-36339](https://insights.sbomify.com/CVE-2021-36339/): Hardcoded credentials in Solutions Enabler vApp (high 7.8)
- [CVE-2021-36338](https://insights.sbomify.com/CVE-2021-36338/): Privilege escalation in Unisphere for PowerMax (medium 6.3)
- [CVE-2021-36337](https://insights.sbomify.com/CVE-2021-36337/): Weak cryptography in Wyse Management Suite (medium 6.5)
- [CVE-2021-36336](https://insights.sbomify.com/CVE-2021-36336/): Deserialization in Wyse Management Suite (critical 9.8)
- [CVE-2021-36335](https://insights.sbomify.com/CVE-2021-36335/): Other in CloudLink (medium 4.3)
- [CVE-2021-36334](https://insights.sbomify.com/CVE-2021-36334/): Code injection in CloudLink (medium 5.9)
- [CVE-2021-36333](https://insights.sbomify.com/CVE-2021-36333/): Memory corruption in CloudLink (medium 5.5)
- [CVE-2021-36332](https://insights.sbomify.com/CVE-2021-36332/): Open redirect in CloudLink (medium 5.4)
- [CVE-2021-36330](https://insights.sbomify.com/CVE-2021-36330/): Auth bypass in Dell EMC Streaming Data Platform (high 8.1)
- [CVE-2021-3633](https://insights.sbomify.com/CVE-2021-3633/): Privilege escalation in Driver Management (high 7.3)
- [CVE-2021-36329](https://insights.sbomify.com/CVE-2021-36329/): Missing authorization in Dell EMC Streaming Data Platform (medium 6.5)
- [CVE-2021-36328](https://insights.sbomify.com/CVE-2021-36328/): SQL injection in Dell EMC Streaming Data Platform (high 8.8)
- [CVE-2021-36327](https://insights.sbomify.com/CVE-2021-36327/): Server-side request forgery in Dell EMC Streaming Data Platform (medium 5.3)
- [CVE-2021-36326](https://insights.sbomify.com/CVE-2021-36326/): Weak cryptography in Dell EMC Streaming Data Platform (medium 6.5)
- [CVE-2021-36325](https://insights.sbomify.com/CVE-2021-36325/): Other in CPG BIOS (high 7.5)
- [CVE-2021-36324](https://insights.sbomify.com/CVE-2021-36324/): Other in CPG BIOS (high 7.5)
- [CVE-2021-36323](https://insights.sbomify.com/CVE-2021-36323/): Other in CPG BIOS (high 7.5)
- [CVE-2021-36322](https://insights.sbomify.com/CVE-2021-36322/): Other in Networking X-Series (medium 6.1)
- [CVE-2021-36321](https://insights.sbomify.com/CVE-2021-36321/): Denial of service in Networking X-Series (high 7.5)
- [CVE-2021-36320](https://insights.sbomify.com/CVE-2021-36320/): Auth bypass in Networking X-Series (high 7.5)
- [CVE-2021-3632](https://insights.sbomify.com/CVE-2021-3632/): Keycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow (high 7.5)
- [CVE-2021-36319](https://insights.sbomify.com/CVE-2021-36319/): Information disclosure in Dell Networking OS10 (low 3.3)
- [CVE-2021-36318](https://insights.sbomify.com/CVE-2021-36318/): Information disclosure in Avamar (medium 6.7)
- [CVE-2021-36317](https://insights.sbomify.com/CVE-2021-36317/): Information disclosure in Avamar (medium 6.7)
- [CVE-2021-36316](https://insights.sbomify.com/CVE-2021-36316/): Privilege escalation in Avamar (medium 6.7)
- [CVE-2021-36315](https://insights.sbomify.com/CVE-2021-36315/): Privilege escalation in PowerScale Nodes (medium 6.8)
- [CVE-2021-36314](https://insights.sbomify.com/CVE-2021-36314/): Other in CloudLink (high 7.1)
- [CVE-2021-36313](https://insights.sbomify.com/CVE-2021-36313/): Command injection in CloudLink (critical 9.1)
- [CVE-2021-36312](https://insights.sbomify.com/CVE-2021-36312/): Hardcoded credentials in CloudLink (critical 9.1)
- [CVE-2021-36311](https://insights.sbomify.com/CVE-2021-36311/): Missing authorization in NetWorker (medium 6.0)
- [CVE-2021-36310](https://insights.sbomify.com/CVE-2021-36310/): Denial of service in Dell Networking OS10 (medium 4.9)
- [CVE-2021-3631](https://insights.sbomify.com/CVE-2021-3631/): Privilege escalation in libvirt (medium 6.3)
- [CVE-2021-36309](https://insights.sbomify.com/CVE-2021-36309/): Information disclosure in Enterprise SONiC OS (high 7.1)
- [CVE-2021-36308](https://insights.sbomify.com/CVE-2021-36308/): Auth bypass in Networking OS (medium 5.9)
- [CVE-2021-36307](https://insights.sbomify.com/CVE-2021-36307/): Privilege escalation in Networking OS (high 8.8)
- [CVE-2021-36306](https://insights.sbomify.com/CVE-2021-36306/): Auth bypass in Networking OS (high 8.1)
- [CVE-2021-36305](https://insights.sbomify.com/CVE-2021-36305/): Race condition in PowerScale OneFS (medium 6.5)
- [CVE-2021-36302](https://insights.sbomify.com/CVE-2021-36302/): Privilege escalation in Dell EMC Integrated System for Microsoft Azure Stack Hub (critical 9.9)
- [CVE-2021-36301](https://insights.sbomify.com/CVE-2021-36301/): Memory corruption in Integrated Dell Remote Access Controller (iDRAC) (medium 5.9)
- [CVE-2021-36300](https://insights.sbomify.com/CVE-2021-36300/): SQL injection in Integrated Dell Remote Access Controller (iDRAC) (medium 6.5)
- [CVE-2021-3630](https://insights.sbomify.com/CVE-2021-3630/): Memory corruption in djvulibre (medium 5.5)
- [CVE-2021-36299](https://insights.sbomify.com/CVE-2021-36299/): SQL injection in Integrated Dell Remote Access Controller (iDRAC) (high 7.1)
- [CVE-2021-36298](https://insights.sbomify.com/CVE-2021-36298/): Weak cryptography in Isilon InsightIQ (high 8.1)
- [CVE-2021-36297](https://insights.sbomify.com/CVE-2021-36297/): Other in SupportAssist Client Consumer (high 7.8)
- [CVE-2021-36296](https://insights.sbomify.com/CVE-2021-36296/): Command injection in VNX Control Station (high 7.2)
- [CVE-2021-36295](https://insights.sbomify.com/CVE-2021-36295/): Command injection in VNX Control Station (high 7.2)
- [CVE-2021-36294](https://insights.sbomify.com/CVE-2021-36294/): Auth bypass in VNX Control Station (critical 9.8)
- [CVE-2021-36293](https://insights.sbomify.com/CVE-2021-36293/): Privilege escalation in VNX2 (medium 6.4)
- [CVE-2021-36290](https://insights.sbomify.com/CVE-2021-36290/): Privilege escalation in VNX2 (medium 6.4)
- [CVE-2021-3629](https://insights.sbomify.com/CVE-2021-3629/): Undertow Uncontrolled Resource Consumption (medium 5.9)
- [CVE-2021-36289](https://insights.sbomify.com/CVE-2021-36289/): Information disclosure in VNX Control Station (high 7.8)
- [CVE-2021-36288](https://insights.sbomify.com/CVE-2021-36288/): Path traversal in VNX2 (high 8.6)
- [CVE-2021-36287](https://insights.sbomify.com/CVE-2021-36287/): Command injection in VNX2 (high 7.3)
- [CVE-2021-36286](https://insights.sbomify.com/CVE-2021-36286/): Path traversal in SupportAssist Client Consumer (high 7.1)
- [CVE-2021-36285](https://insights.sbomify.com/CVE-2021-36285/): Security feature bypass in CPG BIOS (medium 5.7)
- [CVE-2021-36284](https://insights.sbomify.com/CVE-2021-36284/): Security feature bypass in CPG BIOS (medium 5.7)
- [CVE-2021-36283](https://insights.sbomify.com/CVE-2021-36283/): Other in CPG BIOS (high 7.5)
- [CVE-2021-36282](https://insights.sbomify.com/CVE-2021-36282/): Information disclosure in PowerScale OneFS (low 2.5)
- [CVE-2021-36281](https://insights.sbomify.com/CVE-2021-36281/): Privilege escalation in PowerScale OneFS (high 7.5)
- [CVE-2021-36280](https://insights.sbomify.com/CVE-2021-36280/): Misconfiguration in PowerScale OneFS (high 7.8)
- [CVE-2021-3628](https://insights.sbomify.com/CVE-2021-3628/): OpenKM Document Management Community vulnerable to Cross Site Scripting (medium 4.6)
- [CVE-2021-36279](https://insights.sbomify.com/CVE-2021-36279/): Misconfiguration in PowerScale OneFS (high 7.8)
- [CVE-2021-36278](https://insights.sbomify.com/CVE-2021-36278/): Information disclosure in PowerScale OneFS (high 8.1)
- [CVE-2021-36277](https://insights.sbomify.com/CVE-2021-36277/): Security feature bypass in Alienware Command Center (AWCC) (high 7.8)
- [CVE-2021-36276](https://insights.sbomify.com/CVE-2021-36276/): Missing authorization in dbutil (high 8.8)
- [CVE-2021-36260](https://insights.sbomify.com/CVE-2021-36260/): Hikvision Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2021-3626](https://insights.sbomify.com/CVE-2021-3626/): Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts (high 8.8)
- [CVE-2021-3625](https://insights.sbomify.com/CVE-2021-3625/): Buffer overflow in Zephyr USB DFU DNLOAD (critical 9.6)
- [CVE-2021-3624](https://insights.sbomify.com/CVE-2021-3624/): Integer overflow in dcraw (high 7.8)
- [CVE-2021-36235](https://insights.sbomify.com/CVE-2021-36235/): Security feature bypass in ivanti:workspace control (high 7.8)
- [CVE-2021-36234](https://insights.sbomify.com/CVE-2021-36234/): Hardcoded credentials in unit4:mik.starlight (medium 5.5)
- [CVE-2021-36233](https://insights.sbomify.com/CVE-2021-36233/): Path traversal in unit4:mik.starlight (medium 6.5)
- [CVE-2021-36232](https://insights.sbomify.com/CVE-2021-36232/): Missing authorization in unit4:mik.starlight (high 8.8)
- [CVE-2021-36231](https://insights.sbomify.com/CVE-2021-36231/): Deserialization in unit4:mik.starlight (high 8.8)
- [CVE-2021-36230](https://insights.sbomify.com/CVE-2021-36230/): Privilege escalation in hashicorp:terraform (high 8.8)
- [CVE-2021-3623](https://insights.sbomify.com/CVE-2021-3623/): Memory corruption in libtpms (medium 6.1)
- [CVE-2021-36226](https://insights.sbomify.com/CVE-2021-36226/): Security feature bypass in westerndigital:my cloud os (critical 9.8)
- [CVE-2021-36225](https://insights.sbomify.com/CVE-2021-36225/): Missing authorization in westerndigital:my cloud os (high 8.8)
- [CVE-2021-36224](https://insights.sbomify.com/CVE-2021-36224/): Hardcoded credentials in westerndigital:my cloud os (critical 9.8)
- [CVE-2021-36222](https://insights.sbomify.com/CVE-2021-36222/): Null dereference in debian:debian linux (high 7.5)
- [CVE-2021-36221](https://insights.sbomify.com/CVE-2021-36221/): Race condition in debian:debian linux (medium 5.9)
- [CVE-2021-3622](https://insights.sbomify.com/CVE-2021-3622/): Denial of service in hivex (medium 4.3)
- [CVE-2021-36219](https://insights.sbomify.com/CVE-2021-36219/): Memory corruption in skale:sgxwallet (critical 9.8)
- [CVE-2021-36218](https://insights.sbomify.com/CVE-2021-36218/): Memory corruption in skale:sgxwallet (high 7.5)
- [CVE-2021-36216](https://insights.sbomify.com/CVE-2021-36216/): Code injection in LINE for Windows (high 7.8)
- [CVE-2021-36215](https://insights.sbomify.com/CVE-2021-36215/): Other in LINE client for iOS (medium 5.3)
- [CVE-2021-36214](https://insights.sbomify.com/CVE-2021-36214/): Cross-site scripting in LINE client for iOS (medium 6.1)
- [CVE-2021-36213](https://insights.sbomify.com/CVE-2021-36213/): HashiCorp Consul L7 deny intention results in an allow action (high 7.5)
- [CVE-2021-36212](https://insights.sbomify.com/CVE-2021-36212/): Cross-site scripting in misp-project:misp (medium 6.1)
- [CVE-2021-3621](https://insights.sbomify.com/CVE-2021-3621/): Command injection in sssd (high 8.8)
- [CVE-2021-36209](https://insights.sbomify.com/CVE-2021-36209/): Auth bypass in jetbrains:hub (critical 9.8)
- [CVE-2021-36207](https://insights.sbomify.com/CVE-2021-36207/): Metasys privilege management (high 8.8)
- [CVE-2021-36206](https://insights.sbomify.com/CVE-2021-36206/): CEVAS (critical 10.0)
- [CVE-2021-36205](https://insights.sbomify.com/CVE-2021-36205/): Metasys session token (high 8.1)
- [CVE-2021-36204](https://insights.sbomify.com/CVE-2021-36204/): Insufficiently Protected Credentials in Metasys (high 7.8)
- [CVE-2021-36203](https://insights.sbomify.com/CVE-2021-36203/): Johnson Controls Metasys SCT Pro (medium 5.3)
- [CVE-2021-36202](https://insights.sbomify.com/CVE-2021-36202/): Metasys UI (high 8.4)
- [CVE-2021-36201](https://insights.sbomify.com/CVE-2021-36201/): CCURE Observable Response Discrepancy (medium 4.3)
- [CVE-2021-36200](https://insights.sbomify.com/CVE-2021-36200/): Metasys ADS/ADX/OAS with MUI (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/129/