# Vulnerabilities published in 2021


- [CVE-2021-35985](https://insights.sbomify.com/CVE-2021-35985/): Adobe Acrobat Pro DC PDFLibTool Null Pointer Dereference Bug (medium 5.5)
- [CVE-2021-35984](https://insights.sbomify.com/CVE-2021-35984/): Adobe Acrobat Pro DC PDFLibTool Null Pointer Dereference Bug (medium 5.5)
- [CVE-2021-35983](https://insights.sbomify.com/CVE-2021-35983/): Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-35982](https://insights.sbomify.com/CVE-2021-35982/): Adobe Reader DC Windows Installer Uncontrolled Search Path element could lead to Arbitrary Code Execution (high 7.3)
- [CVE-2021-35981](https://insights.sbomify.com/CVE-2021-35981/): Adobe Acrobat Reader DC launchURL Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-35980](https://insights.sbomify.com/CVE-2021-35980/): Adobe Acrobat Reader SpellDictionaryExport Path Traversal Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-3598](https://insights.sbomify.com/CVE-2021-3598/): Memory corruption in OpenEXR (medium 5.5)
- [CVE-2021-35979](https://insights.sbomify.com/CVE-2021-35979/): Weak cryptography in digi:6350-sr firmware (high 8.1)
- [CVE-2021-35978](https://insights.sbomify.com/CVE-2021-35978/): Command injection in digi:transport dr64 firmware (critical 9.8)
- [CVE-2021-35977](https://insights.sbomify.com/CVE-2021-35977/): Memory corruption in digi:6350-sr firmware (critical 9.8)
- [CVE-2021-35976](https://insights.sbomify.com/CVE-2021-35976/): Cross-site scripting in plesk:obsidian (medium 6.1)
- [CVE-2021-35975](https://insights.sbomify.com/CVE-2021-35975/): Path traversal in systematica:financial calculator (medium 5.3)
- [CVE-2021-35973](https://insights.sbomify.com/CVE-2021-35973/): Auth bypass in netgear:wac104 firmware (critical 9.8)
- [CVE-2021-35971](https://insights.sbomify.com/CVE-2021-35971/): Deserialization in veeam:veeam backup \& replication (critical 9.8)
- [CVE-2021-35970](https://insights.sbomify.com/CVE-2021-35970/): Missing authorization in voxmedia:coral talk (high 7.5)
- [CVE-2021-3597](https://insights.sbomify.com/CVE-2021-3597/): undertow Race Condition vulnerability (medium 5.9)
- [CVE-2021-35969](https://insights.sbomify.com/CVE-2021-35969/): Denial of service in pexip:infinity (high 7.5)
- [CVE-2021-35968](https://insights.sbomify.com/CVE-2021-35968/): Learningdigital.com, Inc. Orca HCM - Path Traversal-2 (medium 4.3)
- [CVE-2021-35967](https://insights.sbomify.com/CVE-2021-35967/): Learningdigital.com, Inc. Orca HCM - Path Traversal-1 (medium 5.3)
- [CVE-2021-35966](https://insights.sbomify.com/CVE-2021-35966/): Learningdigital.com, Inc. Orca HCM - URL Redirection to Untrusted Site ('Open Redirect') (medium 6.1)
- [CVE-2021-35965](https://insights.sbomify.com/CVE-2021-35965/): Learningdigital.com, Inc. Orca HCM - Hard-code password (critical 9.8)
- [CVE-2021-35964](https://insights.sbomify.com/CVE-2021-35964/): Learningdigital.com, Inc. Orca HCM - Broken Authentication (high 7.3)
- [CVE-2021-35963](https://insights.sbomify.com/CVE-2021-35963/): Learningdigital.com, Inc. Orca HCM - Unrestricted Upload of File with Dangerous Type (critical 9.8)
- [CVE-2021-35962](https://insights.sbomify.com/CVE-2021-35962/): TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Path Traversal (high 7.5)
- [CVE-2021-35961](https://insights.sbomify.com/CVE-2021-35961/): TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Use of Hard-coded Credentials (critical 9.8)
- [CVE-2021-3596](https://insights.sbomify.com/CVE-2021-3596/): Null dereference in ImageMagick (medium 6.5)
- [CVE-2021-35959](https://insights.sbomify.com/CVE-2021-35959/): Plone has stored XSS in folder contents (medium 5.4)
- [CVE-2021-35958](https://insights.sbomify.com/CVE-2021-35958/): Path traversal in google:tensorflow (critical 9.1)
- [CVE-2021-35957](https://insights.sbomify.com/CVE-2021-35957/): Security feature bypass in stormshield:endpoint security (medium 6.7)
- [CVE-2021-35956](https://insights.sbomify.com/CVE-2021-35956/): Cross-site scripting in akcp:sensorprobe2 firmware (medium 5.4)
- [CVE-2021-35955](https://insights.sbomify.com/CVE-2021-35955/): Cross site scripting via HTML attributes in the back end (medium 4.8)
- [CVE-2021-35954](https://insights.sbomify.com/CVE-2021-35954/): Security feature bypass in fastrack:reflex 2.0 firmware (high 8.1)
- [CVE-2021-35953](https://insights.sbomify.com/CVE-2021-35953/): Denial of service in fastrack:reflex 2.0 firmware (high 7.5)
- [CVE-2021-35952](https://insights.sbomify.com/CVE-2021-35952/): Missing authorization in fastrack:reflex 2.0 firmware (medium 5.3)
- [CVE-2021-35951](https://insights.sbomify.com/CVE-2021-35951/): Missing authorization in fastrack:reflex 2.0 firmware (high 7.5)
- [CVE-2021-3595](https://insights.sbomify.com/CVE-2021-3595/): Memory corruption in QEMU (low 3.8)
- [CVE-2021-35949](https://insights.sbomify.com/CVE-2021-35949/): Missing authorization in owncloud:owncloud (medium 5.3)
- [CVE-2021-35948](https://insights.sbomify.com/CVE-2021-35948/): Auth bypass in owncloud:owncloud (medium 5.4)
- [CVE-2021-35947](https://insights.sbomify.com/CVE-2021-35947/): Information disclosure in owncloud:owncloud (medium 5.3)
- [CVE-2021-35946](https://insights.sbomify.com/CVE-2021-35946/): Privilege escalation in owncloud:owncloud (critical 9.8)
- [CVE-2021-35945](https://insights.sbomify.com/CVE-2021-35945/): Memory corruption in couchbase:couchbase server (high 7.5)
- [CVE-2021-35944](https://insights.sbomify.com/CVE-2021-35944/): Memory corruption in couchbase:couchbase server (high 7.5)
- [CVE-2021-35943](https://insights.sbomify.com/CVE-2021-35943/): Auth bypass in couchbase:couchbase server (critical 9.8)
- [CVE-2021-35942](https://insights.sbomify.com/CVE-2021-35942/): Integer overflow in debian:debian linux (critical 9.1)
- [CVE-2021-35941](https://insights.sbomify.com/CVE-2021-35941/): Missing authorization in westerndigital:wd my book live duo firmware (high 7.5)
- [CVE-2021-35940](https://insights.sbomify.com/CVE-2021-35940/): Regression of CVE-2017-12613 (high 7.1)
- [CVE-2021-3594](https://insights.sbomify.com/CVE-2021-3594/): Memory corruption in QEMU (low 3.8)
- [CVE-2021-35939](https://insights.sbomify.com/CVE-2021-35939/): Privilege escalation in RPM (medium 6.7)
- [CVE-2021-35938](https://insights.sbomify.com/CVE-2021-35938/): Privilege escalation in RPM (medium 6.7)
- [CVE-2021-35937](https://insights.sbomify.com/CVE-2021-35937/): Race condition in RPM (medium 6.4)
- [CVE-2021-35936](https://insights.sbomify.com/CVE-2021-35936/): No Authentication on Logging Server (medium 5.3)
- [CVE-2021-3593](https://insights.sbomify.com/CVE-2021-3593/): Memory corruption in QEMU (low 3.8)
- [CVE-2021-3592](https://insights.sbomify.com/CVE-2021-3592/): Information disclosure in QEMU (low 3.8)
- [CVE-2021-3590](https://insights.sbomify.com/CVE-2021-3590/): Information disclosure in foreman (high 8.8)
- [CVE-2021-3589](https://insights.sbomify.com/CVE-2021-3589/): Missing Authentication for Critical Function in Foreman Ansible (high 8.0)
- [CVE-2021-3588](https://insights.sbomify.com/CVE-2021-3588/): memory contents disclosure in cli_feat_read_cb (low 3.3)
- [CVE-2021-3586](https://insights.sbomify.com/CVE-2021-3586/): Misconfiguration in servicemesh-operator (critical 9.8)
- [CVE-2021-3585](https://insights.sbomify.com/CVE-2021-3585/): Information disclosure in openstack/tripleo-heat-templates. (medium 5.5)
- [CVE-2021-3584](https://insights.sbomify.com/CVE-2021-3584/): Command injection in foreman (high 7.2)
- [CVE-2021-3583](https://insights.sbomify.com/CVE-2021-3583/): Improper Input Validation and Command Injection in Ansible (high 7.1)
- [CVE-2021-3582](https://insights.sbomify.com/CVE-2021-3582/): Memory corruption in QEMU (medium 6.5)
- [CVE-2021-3581](https://insights.sbomify.com/CVE-2021-3581/): Buffer Access with Incorrect Length Value in zephyr (high 7.0)
- [CVE-2021-3580](https://insights.sbomify.com/CVE-2021-3580/): Denial of service in nettle (high 7.5)
- [CVE-2021-3579](https://insights.sbomify.com/CVE-2021-3579/): Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe (high 7.8)
- [CVE-2021-3578](https://insights.sbomify.com/CVE-2021-3578/): Memory corruption in isync (high 7.8)
- [CVE-2021-3577](https://insights.sbomify.com/CVE-2021-3577/): Command injection in Binatone Hubble Cameras (high 8.8)
- [CVE-2021-3576](https://insights.sbomify.com/CVE-2021-3576/): Privilege escalation via SeImpersonatePrivilege (high 7.8)
- [CVE-2021-3575](https://insights.sbomify.com/CVE-2021-3575/): Memory corruption in OpenJPEG (high 7.8)
- [CVE-2021-3574](https://insights.sbomify.com/CVE-2021-3574/): Denial of service in ImageMagick (low 3.3)
- [CVE-2021-3573](https://insights.sbomify.com/CVE-2021-3573/): Use after free in kernel (medium 6.4)
- [CVE-2021-3572](https://insights.sbomify.com/CVE-2021-3572/): Improper Input Validation in pip (medium 5.7)
- [CVE-2021-3571](https://insights.sbomify.com/CVE-2021-3571/): Memory corruption in linuxptp (high 7.1)
- [CVE-2021-3570](https://insights.sbomify.com/CVE-2021-3570/): Memory corruption in linuxptp (high 8.8)
- [CVE-2021-3569](https://insights.sbomify.com/CVE-2021-3569/): Memory corruption in libtpms (medium 5.5)
- [CVE-2021-35689](https://insights.sbomify.com/CVE-2021-35689/): Other in Oracle Talent Acquisition Cloud - Taleo Enterprise Edition (critical 9.8)
- [CVE-2021-35687](https://insights.sbomify.com/CVE-2021-35687/): Information disclosure in Financial Services Analytical Applications Infrastructure (medium 5.3)
- [CVE-2021-35686](https://insights.sbomify.com/CVE-2021-35686/): Information disclosure in Financial Services Analytical Applications Infrastructure (medium 4.3)
- [CVE-2021-35683](https://insights.sbomify.com/CVE-2021-35683/): Other in Hyperion Essbase Administration Services (critical 9.9)
- [CVE-2021-3567](https://insights.sbomify.com/CVE-2021-3567/): Security feature bypass in caribou (high 7.5)
- [CVE-2021-35666](https://insights.sbomify.com/CVE-2021-35666/): Other in HTTP Server (medium 5.9)
- [CVE-2021-35665](https://insights.sbomify.com/CVE-2021-35665/): Cross-site scripting in Hyperion Financial Reporting (medium 6.1)
- [CVE-2021-35662](https://insights.sbomify.com/CVE-2021-35662/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2021-35661](https://insights.sbomify.com/CVE-2021-35661/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2021-35660](https://insights.sbomify.com/CVE-2021-35660/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2021-3566](https://insights.sbomify.com/CVE-2021-3566/): Information disclosure in ffmpeg (medium 5.5)
- [CVE-2021-35659](https://insights.sbomify.com/CVE-2021-35659/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2021-35658](https://insights.sbomify.com/CVE-2021-35658/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2021-35657](https://insights.sbomify.com/CVE-2021-35657/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2021-35656](https://insights.sbomify.com/CVE-2021-35656/): Denial of service in Outside In Technology (high 7.5)
- [CVE-2021-35655](https://insights.sbomify.com/CVE-2021-35655/): Information disclosure in Hyperion Essbase Administration Services (medium 5.3)
- [CVE-2021-35654](https://insights.sbomify.com/CVE-2021-35654/): Denial of service in Hyperion Essbase Administration Services (high 7.5)
- [CVE-2021-35653](https://insights.sbomify.com/CVE-2021-35653/): Other in Hyperion Essbase Administration Services (high 7.7)
- [CVE-2021-35652](https://insights.sbomify.com/CVE-2021-35652/): Other in Hyperion Essbase Administration Services (critical 10.0)
- [CVE-2021-35651](https://insights.sbomify.com/CVE-2021-35651/): Other in Hyperion Essbase Administration Services (high 8.5)
- [CVE-2021-35650](https://insights.sbomify.com/CVE-2021-35650/): Other in Secure Global Desktop (medium 4.6)
- [CVE-2021-3565](https://insights.sbomify.com/CVE-2021-3565/): Hardcoded credentials in tpm2-tools (medium 5.9)
- [CVE-2021-35649](https://insights.sbomify.com/CVE-2021-35649/): Other in Secure Global Desktop (medium 5.4)
- [CVE-2021-35648](https://insights.sbomify.com/CVE-2021-35648/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-35647](https://insights.sbomify.com/CVE-2021-35647/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-35646](https://insights.sbomify.com/CVE-2021-35646/): Denial of service in MySQL Server (medium 4.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/132/