# Vulnerabilities published in 2021


- [CVE-2021-35208](https://insights.sbomify.com/CVE-2021-35208/): Cross-site scripting in zimbra:collaboration (medium 5.4)
- [CVE-2021-35207](https://insights.sbomify.com/CVE-2021-35207/): Cross-site scripting in zimbra:collaboration (medium 6.1)
- [CVE-2021-35206](https://insights.sbomify.com/CVE-2021-35206/): Unvalidated redirects (medium 6.1)
- [CVE-2021-35205](https://insights.sbomify.com/CVE-2021-35205/): Open redirect in netscout:ngeniusone (medium 5.4)
- [CVE-2021-35204](https://insights.sbomify.com/CVE-2021-35204/): Cross-site scripting in netscout:ngeniusone (medium 5.4)
- [CVE-2021-35203](https://insights.sbomify.com/CVE-2021-35203/): Path traversal in netscout:ngeniusone (medium 5.7)
- [CVE-2021-35202](https://insights.sbomify.com/CVE-2021-35202/): Missing authorization in netscout:ngeniusone (medium 4.3)
- [CVE-2021-35201](https://insights.sbomify.com/CVE-2021-35201/): XML external entity in netscout:ngeniusone (medium 6.5)
- [CVE-2021-35200](https://insights.sbomify.com/CVE-2021-35200/): Cross-site scripting in netscout:ngeniusone (medium 4.8)
- [CVE-2021-3520](https://insights.sbomify.com/CVE-2021-3520/): lz4-sys vulnerable to memory corruption via issue in liblz4 (critical 9.8)
- [CVE-2021-35199](https://insights.sbomify.com/CVE-2021-35199/): Cross-site scripting in netscout:ngeniusone (medium 5.4)
- [CVE-2021-35198](https://insights.sbomify.com/CVE-2021-35198/): Cross-site scripting in netscout:ngeniusone (medium 5.4)
- [CVE-2021-35197](https://insights.sbomify.com/CVE-2021-35197/): Missing authorization in debian:debian linux (high 7.5)
- [CVE-2021-35196](https://insights.sbomify.com/CVE-2021-35196/): Deserialization in theologeek:manuskript (high 7.8)
- [CVE-2021-35193](https://insights.sbomify.com/CVE-2021-35193/): Auth bypass in pattersondental:eaglesoft (high 7.5)
- [CVE-2021-3519](https://insights.sbomify.com/CVE-2021-3519/): Auth bypass in Desktop BIOS (medium 6.4)
- [CVE-2021-3518](https://insights.sbomify.com/CVE-2021-3518/): Nokogiri Implements libxml2 version vulnerable to use-after-free (high 8.8)
- [CVE-2021-3517](https://insights.sbomify.com/CVE-2021-3517/): Nokogiri contains libxml Out-of-bounds Write vulnerability (high 8.6)
- [CVE-2021-3516](https://insights.sbomify.com/CVE-2021-3516/): Use after free in libxml2 (high 7.8)
- [CVE-2021-3515](https://insights.sbomify.com/CVE-2021-3515/): Command injection in pglogical (medium 6.7)
- [CVE-2021-3514](https://insights.sbomify.com/CVE-2021-3514/): Null dereference in 389-ds-base (medium 6.5)
- [CVE-2021-35135](https://insights.sbomify.com/CVE-2021-35135/): Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (medium 6.2)
- [CVE-2021-35134](https://insights.sbomify.com/CVE-2021-35134/): Memory corruption in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2021-35133](https://insights.sbomify.com/CVE-2021-35133/): Use after free in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (medium 6.7)
- [CVE-2021-35132](https://insights.sbomify.com/CVE-2021-35132/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2021-35130](https://insights.sbomify.com/CVE-2021-35130/): Use after free in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2021-3513](https://insights.sbomify.com/CVE-2021-3513/): Incorrect implementation of lockout feature in Keycloak (high 7.5)
- [CVE-2021-35129](https://insights.sbomify.com/CVE-2021-35129/): Memory corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2021-35126](https://insights.sbomify.com/CVE-2021-35126/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2021-35123](https://insights.sbomify.com/CVE-2021-35123/): Memory corruption in Snapdragon Connectivity, Snapdragon Industrial IOT (high 8.8)
- [CVE-2021-35122](https://insights.sbomify.com/CVE-2021-35122/): Other in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (critical 9.3)
- [CVE-2021-35121](https://insights.sbomify.com/CVE-2021-35121/): Use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (medium 6.7)
- [CVE-2021-35120](https://insights.sbomify.com/CVE-2021-35120/): Use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (medium 6.7)
- [CVE-2021-3512](https://insights.sbomify.com/CVE-2021-3512/): Auth bypass in Buffalo broadband routers (high 8.8)
- [CVE-2021-35119](https://insights.sbomify.com/CVE-2021-35119/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (medium 5.5)
- [CVE-2021-35118](https://insights.sbomify.com/CVE-2021-35118/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (medium 6.7)
- [CVE-2021-35117](https://insights.sbomify.com/CVE-2021-35117/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (high 8.2)
- [CVE-2021-35116](https://insights.sbomify.com/CVE-2021-35116/): Other in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.7)
- [CVE-2021-35115](https://insights.sbomify.com/CVE-2021-35115/): Use after free in Snapdragon Auto, Snapdragon Mobile (high 8.4)
- [CVE-2021-35114](https://insights.sbomify.com/CVE-2021-35114/): Memory corruption in Snapdragon Auto (high 8.4)
- [CVE-2021-35113](https://insights.sbomify.com/CVE-2021-35113/): Auth bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.3)
- [CVE-2021-35112](https://insights.sbomify.com/CVE-2021-35112/): Missing authorization in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2021-35111](https://insights.sbomify.com/CVE-2021-35111/): Race condition in Snapdragon Connectivity, Snapdragon Mobile (high 7.5)
- [CVE-2021-35110](https://insights.sbomify.com/CVE-2021-35110/): Memory corruption in Snapdragon Connectivity, Snapdragon Mobile (high 8.1)
- [CVE-2021-3511](https://insights.sbomify.com/CVE-2021-3511/): Information disclosure in Buffalo broadband routers (medium 4.3)
- [CVE-2021-35109](https://insights.sbomify.com/CVE-2021-35109/): Memory corruption in Snapdragon Connectivity, Snapdragon Mobile (medium 6.8)
- [CVE-2021-35108](https://insights.sbomify.com/CVE-2021-35108/): Security feature bypass in Snapdragon Connectivity, Snapdragon Mobile (medium 6.8)
- [CVE-2021-35106](https://insights.sbomify.com/CVE-2021-35106/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2021-35105](https://insights.sbomify.com/CVE-2021-35105/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2021-35104](https://insights.sbomify.com/CVE-2021-35104/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2021-35103](https://insights.sbomify.com/CVE-2021-35103/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2021-35102](https://insights.sbomify.com/CVE-2021-35102/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile (high 7.8)
- [CVE-2021-35101](https://insights.sbomify.com/CVE-2021-35101/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile (high 7.1)
- [CVE-2021-35100](https://insights.sbomify.com/CVE-2021-35100/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5)
- [CVE-2021-3510](https://insights.sbomify.com/CVE-2021-3510/): Zephyr JSON decoder incorrectly decodes array of array (high 7.5)
- [CVE-2021-35098](https://insights.sbomify.com/CVE-2021-35098/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (medium 6.7)
- [CVE-2021-35097](https://insights.sbomify.com/CVE-2021-35097/): Auth bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.3)
- [CVE-2021-35096](https://insights.sbomify.com/CVE-2021-35096/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-35095](https://insights.sbomify.com/CVE-2021-35095/): Race condition in Snapdragon Connectivity, Snapdragon Mobile (high 8.4)
- [CVE-2021-35094](https://insights.sbomify.com/CVE-2021-35094/): Auth bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2021-35093](https://insights.sbomify.com/CVE-2021-35093/): Memory corruption in BlueCore (medium 6.5)
- [CVE-2021-35092](https://insights.sbomify.com/CVE-2021-35092/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (medium 6.7)
- [CVE-2021-35091](https://insights.sbomify.com/CVE-2021-35091/): Memory corruption in Snapdragon Connectivity, Snapdragon Mobile (high 8.4)
- [CVE-2021-35090](https://insights.sbomify.com/CVE-2021-35090/): Race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (critical 9.3)
- [CVE-2021-3509](https://insights.sbomify.com/CVE-2021-3509/): Cross-site scripting in ceph-dashboard (medium 6.1)
- [CVE-2021-35089](https://insights.sbomify.com/CVE-2021-35089/): Memory corruption in Snapdragon Auto (high 8.4)
- [CVE-2021-35088](https://insights.sbomify.com/CVE-2021-35088/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 8.2)
- [CVE-2021-35087](https://insights.sbomify.com/CVE-2021-35087/): Null dereference in Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-35086](https://insights.sbomify.com/CVE-2021-35086/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-35085](https://insights.sbomify.com/CVE-2021-35085/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (medium 5.5)
- [CVE-2021-35084](https://insights.sbomify.com/CVE-2021-35084/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (medium 5.5)
- [CVE-2021-35083](https://insights.sbomify.com/CVE-2021-35083/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.2)
- [CVE-2021-35082](https://insights.sbomify.com/CVE-2021-35082/): Race condition in Snapdragon Industrial IOT (critical 9.1)
- [CVE-2021-35081](https://insights.sbomify.com/CVE-2021-35081/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (critical 9.8)
- [CVE-2021-35080](https://insights.sbomify.com/CVE-2021-35080/): Information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (medium 6.5)
- [CVE-2021-3508](https://insights.sbomify.com/CVE-2021-3508/): Denial of service in PDFResurrect (medium 5.5)
- [CVE-2021-35079](https://insights.sbomify.com/CVE-2021-35079/): Missing authorization in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (medium 6.2)
- [CVE-2021-35078](https://insights.sbomify.com/CVE-2021-35078/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.5)
- [CVE-2021-35077](https://insights.sbomify.com/CVE-2021-35077/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2021-35076](https://insights.sbomify.com/CVE-2021-35076/): Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-35075](https://insights.sbomify.com/CVE-2021-35075/): Null dereference in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2021-35074](https://insights.sbomify.com/CVE-2021-35074/): Integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2021-35073](https://insights.sbomify.com/CVE-2021-35073/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-35072](https://insights.sbomify.com/CVE-2021-35072/): Memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2021-35071](https://insights.sbomify.com/CVE-2021-35071/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 5.5)
- [CVE-2021-35070](https://insights.sbomify.com/CVE-2021-35070/): Information disclosure in Snapdragon Industrial IOT, Snapdragon Mobile (medium 6.5)
- [CVE-2021-3507](https://insights.sbomify.com/CVE-2021-3507/): Memory corruption in QEMU (medium 6.1)
- [CVE-2021-35069](https://insights.sbomify.com/CVE-2021-35069/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2021-35068](https://insights.sbomify.com/CVE-2021-35068/): Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2021-35067](https://insights.sbomify.com/CVE-2021-35067/): Auth bypass in meross:msg100 firmware (high 8.1)
- [CVE-2021-35066](https://insights.sbomify.com/CVE-2021-35066/): XML external entity in connectwise:automate (critical 9.8)
- [CVE-2021-35065](https://insights.sbomify.com/CVE-2021-35065/): glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service (high 7.5)
- [CVE-2021-35064](https://insights.sbomify.com/CVE-2021-35064/): Privilege escalation in kramerav:viaware (critical 9.8)
- [CVE-2021-35063](https://insights.sbomify.com/CVE-2021-35063/): Security feature bypass in debian:debian linux (high 7.5)
- [CVE-2021-35062](https://insights.sbomify.com/CVE-2021-35062/): Command injection in testzentrum-odw:testerfassung (high 8.1)
- [CVE-2021-35061](https://insights.sbomify.com/CVE-2021-35061/): Cross-site scripting in drk-odenwaldkreis:testerfassung (medium 6.1)
- [CVE-2021-35060](https://insights.sbomify.com/CVE-2021-35060/): Information disclosure in openwaygroup:way4 (medium 5.3)
- [CVE-2021-3506](https://insights.sbomify.com/CVE-2021-3506/): Memory corruption in kernel (high 7.1)
- [CVE-2021-35059](https://insights.sbomify.com/CVE-2021-35059/): Cross-site scripting in openwaygroup:way4 (medium 6.1)
- [CVE-2021-35056](https://insights.sbomify.com/CVE-2021-35056/): Privilege escalation in unisys:stealth (medium 6.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/136/