# Vulnerabilities published in 2021


- [CVE-2021-3620](https://insights.sbomify.com/CVE-2021-3620/): Ansible discloses sensitive information in traceback error message (medium 5.5)
- [CVE-2021-36199](https://insights.sbomify.com/CVE-2021-36199/): VideoEdge (medium 5.3)
- [CVE-2021-36198](https://insights.sbomify.com/CVE-2021-36198/): Entrapass (high 8.3)
- [CVE-2021-36195](https://insights.sbomify.com/CVE-2021-36195/): Command injection in Fortinet FortiWeb (medium 4.2)
- [CVE-2021-36194](https://insights.sbomify.com/CVE-2021-36194/): Memory corruption in Fortinet FortiWeb (high 8.8)
- [CVE-2021-36193](https://insights.sbomify.com/CVE-2021-36193/): Memory corruption in FortiADC (medium 6.3)
- [CVE-2021-36192](https://insights.sbomify.com/CVE-2021-36192/): Information disclosure in Fortinet FortiManager (medium 5.2)
- [CVE-2021-36191](https://insights.sbomify.com/CVE-2021-36191/): Open redirect in Fortinet FortiWeb (medium 4.1)
- [CVE-2021-36190](https://insights.sbomify.com/CVE-2021-36190/): Security feature bypass in Fortinet FortiWeb (medium 5.5)
- [CVE-2021-3619](https://insights.sbomify.com/CVE-2021-3619/): Rapid7 Velociraptor Notebooks Authenticated Persistent XSS (low 3.5)
- [CVE-2021-36189](https://insights.sbomify.com/CVE-2021-36189/): Information disclosure in Fortinet FortiClientEMS (medium 6.8)
- [CVE-2021-36188](https://insights.sbomify.com/CVE-2021-36188/): Cross-site scripting in Fortinet FortiWeb (medium 6.1)
- [CVE-2021-36187](https://insights.sbomify.com/CVE-2021-36187/): Denial of service in Fortinet FortiWeb (medium 5.3)
- [CVE-2021-36186](https://insights.sbomify.com/CVE-2021-36186/): Memory corruption in Fortinet FortiWeb (high 8.8)
- [CVE-2021-36185](https://insights.sbomify.com/CVE-2021-36185/): Command injection in Fortinet FortiWLM (high 8.8)
- [CVE-2021-36184](https://insights.sbomify.com/CVE-2021-36184/): SQL injection in Fortinet FortiWLM (high 8.8)
- [CVE-2021-36183](https://insights.sbomify.com/CVE-2021-36183/): Privilege escalation in Fortinet FortiClientWindows (high 7.4)
- [CVE-2021-36182](https://insights.sbomify.com/CVE-2021-36182/): Command injection in Fortinet FortiWeb (high 8.8)
- [CVE-2021-36181](https://insights.sbomify.com/CVE-2021-36181/): Race condition in Fortinet FortiPortal (low 3.1)
- [CVE-2021-36180](https://insights.sbomify.com/CVE-2021-36180/): Command injection in Fortinet FortiWeb (high 8.1)
- [CVE-2021-3618](https://insights.sbomify.com/CVE-2021-3618/): Security feature bypass in ALPACA (high 7.4)
- [CVE-2021-36179](https://insights.sbomify.com/CVE-2021-36179/): Memory corruption in Fortinet FortiWeb (high 8.0)
- [CVE-2021-36178](https://insights.sbomify.com/CVE-2021-36178/): Information disclosure in Fortinet FortiSDNConnector (medium 4.3)
- [CVE-2021-36177](https://insights.sbomify.com/CVE-2021-36177/): Missing authorization in fortinet:fortiauthenticator (medium 4.2)
- [CVE-2021-36176](https://insights.sbomify.com/CVE-2021-36176/): Denial of service in Fortinet FortiPortal (medium 6.1)
- [CVE-2021-36175](https://insights.sbomify.com/CVE-2021-36175/): Cross-site scripting in Fortinet FortiWebManager (medium 4.1)
- [CVE-2021-36174](https://insights.sbomify.com/CVE-2021-36174/): Denial of service in Fortinet FortiPortal (medium 4.3)
- [CVE-2021-36173](https://insights.sbomify.com/CVE-2021-36173/): Memory corruption in Fortinet FortiOS (high 8.0)
- [CVE-2021-36172](https://insights.sbomify.com/CVE-2021-36172/): XML external entity in Fortinet FortiPortal (medium 4.3)
- [CVE-2021-36171](https://insights.sbomify.com/CVE-2021-36171/): Weak cryptography in Fortinet FortiPortal (high 8.1)
- [CVE-2021-36170](https://insights.sbomify.com/CVE-2021-36170/): Information disclosure in Fortinet FortiManager, FortiAnalyzer (low 3.2)
- [CVE-2021-3617](https://insights.sbomify.com/CVE-2021-3617/): Command injection in Smart Camera X3, X5, and C2E firmware (high 7.2)
- [CVE-2021-36169](https://insights.sbomify.com/CVE-2021-36169/): Other in Fortinet FortiOS (medium 4.2)
- [CVE-2021-36168](https://insights.sbomify.com/CVE-2021-36168/): Path traversal in Fortinet FortiPortal (medium 6.5)
- [CVE-2021-36167](https://insights.sbomify.com/CVE-2021-36167/): Auth bypass in Fortinet FortiClientWindows (medium 4.3)
- [CVE-2021-36166](https://insights.sbomify.com/CVE-2021-36166/): Weak cryptography in Fortinet FortiMail (critical 9.8)
- [CVE-2021-36165](https://insights.sbomify.com/CVE-2021-36165/): Information disclosure in riconmobile:s9922l firmware (medium 5.3)
- [CVE-2021-36163](https://insights.sbomify.com/CVE-2021-36163/): Unsafe deserialization in providers using the Hessian protocol (critical 9.8)
- [CVE-2021-36162](https://insights.sbomify.com/CVE-2021-36162/): Unprotected yaml deserialization cause RCE (high 8.8)
- [CVE-2021-36161](https://insights.sbomify.com/CVE-2021-36161/): Unprotected input value toString cause RCE (critical 9.8)
- [CVE-2021-36160](https://insights.sbomify.com/CVE-2021-36160/): mod_proxy_uwsgi out of bound read (high 7.5)
- [CVE-2021-3616](https://insights.sbomify.com/CVE-2021-3616/): Missing authorization in Smart Camera X3, X5, and C2E firmware (critical 9.4)
- [CVE-2021-36159](https://insights.sbomify.com/CVE-2021-36159/): Memory corruption in freebsd:libfetch (critical 9.1)
- [CVE-2021-36158](https://insights.sbomify.com/CVE-2021-36158/): Hardcoded credentials in alpinelinux:aports (medium 5.9)
- [CVE-2021-36157](https://insights.sbomify.com/CVE-2021-36157/): Path traversal in Grafana Cortex (medium 5.3)
- [CVE-2021-36156](https://insights.sbomify.com/CVE-2021-36156/): Path traversal in Grafana Loki (medium 5.3)
- [CVE-2021-36155](https://insights.sbomify.com/CVE-2021-36155/): Uncontrolled Resource Consumption in LengthPrefixedMessageReader (high 7.5)
- [CVE-2021-36154](https://insights.sbomify.com/CVE-2021-36154/): Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec (high 7.5)
- [CVE-2021-36153](https://insights.sbomify.com/CVE-2021-36153/): Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec (high 7.5)
- [CVE-2021-36152](https://insights.sbomify.com/CVE-2021-36152/): Insecure TrustManager used in LDAP connections (critical 9.8)
- [CVE-2021-36151](https://insights.sbomify.com/CVE-2021-36151/): Local Credentials Disclosure Vulnerability (medium 5.5)
- [CVE-2021-36150](https://insights.sbomify.com/CVE-2021-36150/): Cross-site Scripting in SilverStripe Framework (medium 6.1)
- [CVE-2021-3615](https://insights.sbomify.com/CVE-2021-3615/): Code injection in Smart Camera X3, X5, and C2E firmware (medium 6.6)
- [CVE-2021-36148](https://insights.sbomify.com/CVE-2021-36148/): Memory corruption in linux:acrn (high 7.8)
- [CVE-2021-36147](https://insights.sbomify.com/CVE-2021-36147/): Null dereference in linux:acrn (high 7.5)
- [CVE-2021-36146](https://insights.sbomify.com/CVE-2021-36146/): Null dereference in linux:acrn (high 7.5)
- [CVE-2021-36145](https://insights.sbomify.com/CVE-2021-36145/): Use after free in linux:acrn (high 7.5)
- [CVE-2021-36144](https://insights.sbomify.com/CVE-2021-36144/): Use after free in linux:acrn (high 7.5)
- [CVE-2021-36143](https://insights.sbomify.com/CVE-2021-36143/): Null dereference in linux:acrn (high 7.5)
- [CVE-2021-3614](https://insights.sbomify.com/CVE-2021-3614/): Privilege escalation in Notebook BIOS (medium 6.4)
- [CVE-2021-36134](https://insights.sbomify.com/CVE-2021-36134/): Out of bounds write in Netop Vision Pro (high 7.4)
- [CVE-2021-36133](https://insights.sbomify.com/CVE-2021-36133/): Security feature bypass in trustedfirmware:op-tee (high 7.1)
- [CVE-2021-36132](https://insights.sbomify.com/CVE-2021-36132/): Missing authorization in mediawiki:mediawiki (high 8.8)
- [CVE-2021-36131](https://insights.sbomify.com/CVE-2021-36131/): Cross-site scripting in mediawiki:mediawiki (medium 4.8)
- [CVE-2021-36130](https://insights.sbomify.com/CVE-2021-36130/): Cross-site scripting in mediawiki:mediawiki (medium 4.8)
- [CVE-2021-3613](https://insights.sbomify.com/CVE-2021-3613/): Other in OpenVPN Connect (high 7.8)
- [CVE-2021-36129](https://insights.sbomify.com/CVE-2021-36129/): Missing authorization in mediawiki:mediawiki (medium 4.3)
- [CVE-2021-36128](https://insights.sbomify.com/CVE-2021-36128/): Other in mediawiki:mediawiki (critical 9.8)
- [CVE-2021-36127](https://insights.sbomify.com/CVE-2021-36127/): Information disclosure in mediawiki:mediawiki (medium 4.3)
- [CVE-2021-36126](https://insights.sbomify.com/CVE-2021-36126/): Security feature bypass in mediawiki:mediawiki (critical 9.8)
- [CVE-2021-36125](https://insights.sbomify.com/CVE-2021-36125/): Denial of service in mediawiki:mediawiki (high 7.5)
- [CVE-2021-36124](https://insights.sbomify.com/CVE-2021-36124/): Missing authorization in echobh:sharecare (critical 9.8)
- [CVE-2021-36123](https://insights.sbomify.com/CVE-2021-36123/): Path traversal in echobh:sharecare (medium 6.5)
- [CVE-2021-36122](https://insights.sbomify.com/CVE-2021-36122/): Command injection in echobh:sharecare (high 8.8)
- [CVE-2021-36121](https://insights.sbomify.com/CVE-2021-36121/): File upload in echobh:sharecare (high 8.8)
- [CVE-2021-3612](https://insights.sbomify.com/CVE-2021-3612/): Memory corruption in kernel (high 7.8)
- [CVE-2021-3611](https://insights.sbomify.com/CVE-2021-3611/): Memory corruption in QEMU (medium 6.5)
- [CVE-2021-36100](https://insights.sbomify.com/CVE-2021-36100/): Authenticated remote code execution (medium 6.4)
- [CVE-2021-3610](https://insights.sbomify.com/CVE-2021-3610/): Memory corruption in ImageMagick (high 7.5)
- [CVE-2021-36097](https://insights.sbomify.com/CVE-2021-36097/): Agents are able to lock the ticket without the "Owner" permission (low 3.5)
- [CVE-2021-36096](https://insights.sbomify.com/CVE-2021-36096/): Support Bundle includes S/Mime and PGP secret or PIN (medium 5.2)
- [CVE-2021-36095](https://insights.sbomify.com/CVE-2021-36095/): User enumeration issue using "lost password" feature (medium 5.3)
- [CVE-2021-36094](https://insights.sbomify.com/CVE-2021-36094/): XSS attack in appointment edit popup screen (medium 5.7)
- [CVE-2021-36093](https://insights.sbomify.com/CVE-2021-36093/): DoS attack using PostMaster filters (medium 5.3)
- [CVE-2021-36092](https://insights.sbomify.com/CVE-2021-36092/): XSS attack using special link in email (medium 6.5)
- [CVE-2021-36091](https://insights.sbomify.com/CVE-2021-36091/): Unautorized access to the calendar appointments (low 3.5)
- [CVE-2021-36090](https://insights.sbomify.com/CVE-2021-36090/): Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (high 7.5)
- [CVE-2021-3609](https://insights.sbomify.com/CVE-2021-3609/): Race condition in kernel (high 7.0)
- [CVE-2021-36089](https://insights.sbomify.com/CVE-2021-36089/): Memory corruption in zope:grok (high 7.8)
- [CVE-2021-36088](https://insights.sbomify.com/CVE-2021-36088/): Memory corruption in treasuredata:fluent bit (critical 9.8)
- [CVE-2021-36087](https://insights.sbomify.com/CVE-2021-36087/): Memory corruption in fedoraproject:fedora (low 3.3)
- [CVE-2021-36086](https://insights.sbomify.com/CVE-2021-36086/): Use after free in debian:debian linux (low 3.3)
- [CVE-2021-36085](https://insights.sbomify.com/CVE-2021-36085/): Use after free in fedoraproject:fedora (low 3.3)
- [CVE-2021-36084](https://insights.sbomify.com/CVE-2021-36084/): Use after free in fedoraproject:fedora (low 3.3)
- [CVE-2021-36083](https://insights.sbomify.com/CVE-2021-36083/): Memory corruption in kde:kimageformats (medium 5.5)
- [CVE-2021-36082](https://insights.sbomify.com/CVE-2021-36082/): Memory corruption in ntop:ndpi (high 8.8)
- [CVE-2021-36081](https://insights.sbomify.com/CVE-2021-36081/): Use after free in tesseract-ocr:tesseract ocr (high 7.8)
- [CVE-2021-36080](https://insights.sbomify.com/CVE-2021-36080/): Memory corruption in gnu:libredwg (high 8.8)
- [CVE-2021-3608](https://insights.sbomify.com/CVE-2021-3608/): Memory corruption in QEMU (medium 6.0)
- [CVE-2021-36079](https://insights.sbomify.com/CVE-2021-36079/): Adobe Bridge SGI File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/130/