# Vulnerabilities published in 2021


- [CVE-2021-35055](https://insights.sbomify.com/CVE-2021-35055/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-35054](https://insights.sbomify.com/CVE-2021-35054/): Path traversal in minecraft:minecraft (high 7.5)
- [CVE-2021-35053](https://insights.sbomify.com/CVE-2021-35053/): Denial of service in Kaspersky Endpoint Security for Windows (high 7.5)
- [CVE-2021-35052](https://insights.sbomify.com/CVE-2021-35052/): Privilege escalation in Kaspersky Password Manager for Windows (high 7.8)
- [CVE-2021-35050](https://insights.sbomify.com/CVE-2021-35050/): User Credentials Stored in a Recoverable Format within Fidelis Network and Deception (medium 6.5)
- [CVE-2021-3505](https://insights.sbomify.com/CVE-2021-3505/): Weak cryptography in libtpms (medium 5.5)
- [CVE-2021-35049](https://insights.sbomify.com/CVE-2021-35049/): Command Injection Vulnerability in Fidelis Network and Deception (critical 9.9)
- [CVE-2021-35048](https://insights.sbomify.com/CVE-2021-35048/): Unauthenticated SQL Injection Vulnerability in Fidelis Network and Deception (critical 9.8)
- [CVE-2021-35047](https://insights.sbomify.com/CVE-2021-35047/): Privileged Command Injection Vulnerability in Fidelis Network and Deception (critical 9.9)
- [CVE-2021-35046](https://insights.sbomify.com/CVE-2021-35046/): Auth bypass in icehrm:icehrm (medium 6.1)
- [CVE-2021-35045](https://insights.sbomify.com/CVE-2021-35045/): Cross-site scripting in icehrm:icehrm (medium 6.1)
- [CVE-2021-35043](https://insights.sbomify.com/CVE-2021-35043/): Cross-site Scripting in OWASP AntiSamy (medium 6.1)
- [CVE-2021-35042](https://insights.sbomify.com/CVE-2021-35042/): SQL Injection in Django (critical 9.8)
- [CVE-2021-35041](https://insights.sbomify.com/CVE-2021-35041/): Denial of service in fisco-bcos:fisco-bcos (high 7.5)
- [CVE-2021-3504](https://insights.sbomify.com/CVE-2021-3504/): Memory corruption in hivex (medium 5.4)
- [CVE-2021-35039](https://insights.sbomify.com/CVE-2021-35039/): Security feature bypass in debian:debian linux (high 7.8)
- [CVE-2021-35037](https://insights.sbomify.com/CVE-2021-35037/): Open redirect in jamf:jamf (medium 6.1)
- [CVE-2021-35036](https://insights.sbomify.com/CVE-2021-35036/): Information disclosure in VMG3625-T50B firmware (medium 6.5)
- [CVE-2021-35035](https://insights.sbomify.com/CVE-2021-35035/): Information disclosure in NBG6604 series firmware (medium 4.9)
- [CVE-2021-35034](https://insights.sbomify.com/CVE-2021-35034/): Auth bypass in NBG6604 series firmware (high 7.4)
- [CVE-2021-35033](https://insights.sbomify.com/CVE-2021-35033/): Hardcoded credentials in NBG6818 series firmware (high 7.8)
- [CVE-2021-35032](https://insights.sbomify.com/CVE-2021-35032/): Command injection in GS1900 series firmware (medium 6.4)
- [CVE-2021-35031](https://insights.sbomify.com/CVE-2021-35031/): Command injection in GS1900 series firmware (medium 6.8)
- [CVE-2021-35030](https://insights.sbomify.com/CVE-2021-35030/): Cross-site scripting in GS1900-8 Firmware (low 3.5)
- [CVE-2021-3503](https://insights.sbomify.com/CVE-2021-3503/): Metrics exposure in Wildfly (medium 4.3)
- [CVE-2021-35029](https://insights.sbomify.com/CVE-2021-35029/): Auth bypass in ATP series Firmware (critical 9.8)
- [CVE-2021-35028](https://insights.sbomify.com/CVE-2021-35028/): Command injection in ZyWALL VPN2S Firmware (high 7.3)
- [CVE-2021-35027](https://insights.sbomify.com/CVE-2021-35027/): Path traversal in ZyWALL VPN2S Firmware (high 7.5)
- [CVE-2021-3502](https://insights.sbomify.com/CVE-2021-3502/): Denial of service in avahi (medium 5.5)
- [CVE-2021-3501](https://insights.sbomify.com/CVE-2021-3501/): Memory corruption in kernel (high 7.1)
- [CVE-2021-35005](https://insights.sbomify.com/CVE-2021-35005/): Memory corruption in TeamViewer (low 3.3)
- [CVE-2021-35004](https://insights.sbomify.com/CVE-2021-35004/): Memory corruption in TL-WA1201 (high 8.8)
- [CVE-2021-35003](https://insights.sbomify.com/CVE-2021-35003/): Memory corruption in Archer C90 (critical 9.8)
- [CVE-2021-35002](https://insights.sbomify.com/CVE-2021-35002/): BMC Track-It! Unrestricted File Upload Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-35001](https://insights.sbomify.com/CVE-2021-35001/): BMC Track-It! GetData Missing Authorization Information Disclosure Vulnerability (low 3.1)
- [CVE-2021-35000](https://insights.sbomify.com/CVE-2021-35000/): OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-3500](https://insights.sbomify.com/CVE-2021-3500/): Memory corruption in djvulibre (high 7.8)
- [CVE-2021-34999](https://insights.sbomify.com/CVE-2021-34999/): OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability (low 3.8)
- [CVE-2021-34998](https://insights.sbomify.com/CVE-2021-34998/): Privilege escalation in Free Antivirus (high 7.0)
- [CVE-2021-34997](https://insights.sbomify.com/CVE-2021-34997/): File upload in CommCell (high 8.8)
- [CVE-2021-34996](https://insights.sbomify.com/CVE-2021-34996/): Command injection in CommCell (high 8.8)
- [CVE-2021-34995](https://insights.sbomify.com/CVE-2021-34995/): File upload in CommCell (high 8.8)
- [CVE-2021-34994](https://insights.sbomify.com/CVE-2021-34994/): Code injection in CommCell (high 8.8)
- [CVE-2021-34993](https://insights.sbomify.com/CVE-2021-34993/): Auth bypass in CommCell (critical 9.8)
- [CVE-2021-34992](https://insights.sbomify.com/CVE-2021-34992/): Deserialization in C1 CMS (high 8.8)
- [CVE-2021-34991](https://insights.sbomify.com/CVE-2021-34991/): Memory corruption in R6400v2 (high 8.8)
- [CVE-2021-3499](https://insights.sbomify.com/CVE-2021-3499/): Improper Input Validation (medium 5.6)
- [CVE-2021-34987](https://insights.sbomify.com/CVE-2021-34987/): Memory corruption in Desktop (high 8.2)
- [CVE-2021-34986](https://insights.sbomify.com/CVE-2021-34986/): Race condition in Desktop (high 7.8)
- [CVE-2021-34985](https://insights.sbomify.com/CVE-2021-34985/): Memory corruption in ContextCapture (low 3.3)
- [CVE-2021-34984](https://insights.sbomify.com/CVE-2021-34984/): Memory corruption in ContextCapture (low 3.3)
- [CVE-2021-34983](https://insights.sbomify.com/CVE-2021-34983/): NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability (medium 6.5)
- [CVE-2021-34982](https://insights.sbomify.com/CVE-2021-34982/): NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-34981](https://insights.sbomify.com/CVE-2021-34981/): Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability (high 7.5)
- [CVE-2021-34980](https://insights.sbomify.com/CVE-2021-34980/): Memory corruption in R6260 (high 8.8)
- [CVE-2021-3498](https://insights.sbomify.com/CVE-2021-3498/): Memory corruption in gstreamer-plugins-good (high 7.8)
- [CVE-2021-34979](https://insights.sbomify.com/CVE-2021-34979/): Memory corruption in R6260 (high 8.8)
- [CVE-2021-34978](https://insights.sbomify.com/CVE-2021-34978/): Memory corruption in R6260 (high 8.8)
- [CVE-2021-34977](https://insights.sbomify.com/CVE-2021-34977/): Auth bypass in R7000 (high 8.8)
- [CVE-2021-34976](https://insights.sbomify.com/CVE-2021-34976/): Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-34975](https://insights.sbomify.com/CVE-2021-34975/): Foxit PDF Reader transitionToState Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34974](https://insights.sbomify.com/CVE-2021-34974/): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34973](https://insights.sbomify.com/CVE-2021-34973/): Foxit PDF Reader PDF File Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-34972](https://insights.sbomify.com/CVE-2021-34972/): Foxit PDF Reader AcroForm Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-34971](https://insights.sbomify.com/CVE-2021-34971/): Foxit PDF Reader JPG2000 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34970](https://insights.sbomify.com/CVE-2021-34970/): Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-3497](https://insights.sbomify.com/CVE-2021-3497/): Use after free in gstreamer-plugins-good (high 7.8)
- [CVE-2021-34969](https://insights.sbomify.com/CVE-2021-34969/): Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-34968](https://insights.sbomify.com/CVE-2021-34968/): Foxit PDF Editor transitionToState Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34967](https://insights.sbomify.com/CVE-2021-34967/): Foxit PDF Editor Line Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34966](https://insights.sbomify.com/CVE-2021-34966/): Foxit PDF Editor FileAttachment Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34965](https://insights.sbomify.com/CVE-2021-34965/): Foxit PDF Editor Squiggly Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34964](https://insights.sbomify.com/CVE-2021-34964/): Foxit PDF Editor Polygon Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34963](https://insights.sbomify.com/CVE-2021-34963/): Foxit PDF Editor PolyLine Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34962](https://insights.sbomify.com/CVE-2021-34962/): Foxit PDF Editor Caret Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34961](https://insights.sbomify.com/CVE-2021-34961/): Foxit PDF Editor Ink Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34960](https://insights.sbomify.com/CVE-2021-34960/): Foxit PDF Editor Circle Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-3496](https://insights.sbomify.com/CVE-2021-3496/): Memory corruption in jhead (high 7.8)
- [CVE-2021-34959](https://insights.sbomify.com/CVE-2021-34959/): Foxit PDF Editor Square Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34958](https://insights.sbomify.com/CVE-2021-34958/): Foxit PDF Editor Text Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34957](https://insights.sbomify.com/CVE-2021-34957/): Foxit PDF Editor Highlight Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34956](https://insights.sbomify.com/CVE-2021-34956/): Foxit PDF Editor Underline Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34955](https://insights.sbomify.com/CVE-2021-34955/): Foxit PDF Editor Stamp Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34954](https://insights.sbomify.com/CVE-2021-34954/): Foxit PDF Editor StrikeOut Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34953](https://insights.sbomify.com/CVE-2021-34953/): Foxit PDF Reader Annotation Use of Uninitialized Variable Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34952](https://insights.sbomify.com/CVE-2021-34952/): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34951](https://insights.sbomify.com/CVE-2021-34951/): Foxit PDF Reader Annotation Use of Uninitialized Variable Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-34950](https://insights.sbomify.com/CVE-2021-34950/): Foxit PDF Reader Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-3495](https://insights.sbomify.com/CVE-2021-3495/): Access control flaw in Kiali (high 8.8)
- [CVE-2021-34949](https://insights.sbomify.com/CVE-2021-34949/): Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-34948](https://insights.sbomify.com/CVE-2021-34948/): Foxit PDF Reader Square Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34947](https://insights.sbomify.com/CVE-2021-34947/): NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-34946](https://insights.sbomify.com/CVE-2021-34946/): Memory corruption in View (high 7.8)
- [CVE-2021-34945](https://insights.sbomify.com/CVE-2021-34945/): Memory corruption in View (high 7.8)
- [CVE-2021-34944](https://insights.sbomify.com/CVE-2021-34944/): Memory corruption in View (low 3.3)
- [CVE-2021-34943](https://insights.sbomify.com/CVE-2021-34943/): Memory corruption in View (low 3.3)
- [CVE-2021-34942](https://insights.sbomify.com/CVE-2021-34942/): Memory corruption in View (high 7.8)
- [CVE-2021-34941](https://insights.sbomify.com/CVE-2021-34941/): Memory corruption in View (high 7.8)
- [CVE-2021-34940](https://insights.sbomify.com/CVE-2021-34940/): Memory corruption in View (high 7.8)
- [CVE-2021-3494](https://insights.sbomify.com/CVE-2021-3494/): Security feature bypass in foreman (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/137/