# Vulnerabilities published in 2021


- [CVE-2021-34846](https://insights.sbomify.com/CVE-2021-34846/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34845](https://insights.sbomify.com/CVE-2021-34845/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34844](https://insights.sbomify.com/CVE-2021-34844/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34843](https://insights.sbomify.com/CVE-2021-34843/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34842](https://insights.sbomify.com/CVE-2021-34842/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34841](https://insights.sbomify.com/CVE-2021-34841/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34840](https://insights.sbomify.com/CVE-2021-34840/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34839](https://insights.sbomify.com/CVE-2021-34839/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34838](https://insights.sbomify.com/CVE-2021-34838/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34837](https://insights.sbomify.com/CVE-2021-34837/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34836](https://insights.sbomify.com/CVE-2021-34836/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34835](https://insights.sbomify.com/CVE-2021-34835/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34834](https://insights.sbomify.com/CVE-2021-34834/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34833](https://insights.sbomify.com/CVE-2021-34833/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34832](https://insights.sbomify.com/CVE-2021-34832/): Use after free in PDF Reader (high 7.8)
- [CVE-2021-34831](https://insights.sbomify.com/CVE-2021-34831/): Use after free in Reader (high 7.8)
- [CVE-2021-34830](https://insights.sbomify.com/CVE-2021-34830/): Memory corruption in DAP-1330 (high 8.8)
- [CVE-2021-3483](https://insights.sbomify.com/CVE-2021-3483/): Use after free in kernel (high 7.8)
- [CVE-2021-34829](https://insights.sbomify.com/CVE-2021-34829/): Memory corruption in DAP-1330 (high 8.8)
- [CVE-2021-34828](https://insights.sbomify.com/CVE-2021-34828/): Memory corruption in DAP-1330 (high 8.8)
- [CVE-2021-34827](https://insights.sbomify.com/CVE-2021-34827/): Memory corruption in DAP-1330 (high 8.8)
- [CVE-2021-34825](https://insights.sbomify.com/CVE-2021-34825/): Security feature bypass in fedoraproject:fedora (high 7.5)
- [CVE-2021-34824](https://insights.sbomify.com/CVE-2021-34824/): Information disclosure in istio:istio (high 8.8)
- [CVE-2021-34823](https://insights.sbomify.com/CVE-2021-34823/): XML external entity in on24:screenshare (critical 9.1)
- [CVE-2021-34821](https://insights.sbomify.com/CVE-2021-34821/): Cross-site scripting in aat:novus management system (medium 6.1)
- [CVE-2021-34820](https://insights.sbomify.com/CVE-2021-34820/): Path traversal in aat:novus management system (high 7.5)
- [CVE-2021-3482](https://insights.sbomify.com/CVE-2021-3482/): Memory corruption in exiv2 (medium 6.5)
- [CVE-2021-34817](https://insights.sbomify.com/CVE-2021-34817/): Cross-site scripting in etherpad:etherpad (medium 6.1)
- [CVE-2021-34816](https://insights.sbomify.com/CVE-2021-34816/): Command injection in etherpad:etherpad (high 7.2)
- [CVE-2021-34815](https://insights.sbomify.com/CVE-2021-34815/): Cross-site scripting in checksec:canopy (medium 4.8)
- [CVE-2021-34814](https://insights.sbomify.com/CVE-2021-34814/): Security feature bypass in proofpoint:spam engine (high 7.5)
- [CVE-2021-34813](https://insights.sbomify.com/CVE-2021-34813/): Memory corruption in matrix:olm (critical 9.8)
- [CVE-2021-34812](https://insights.sbomify.com/CVE-2021-34812/): Hardcoded credentials in Synology Calendar (medium 5.8)
- [CVE-2021-34811](https://insights.sbomify.com/CVE-2021-34811/): Server-side request forgery in Download Station (medium 5.0)
- [CVE-2021-34810](https://insights.sbomify.com/CVE-2021-34810/): Privilege escalation in Download Station (critical 9.9)
- [CVE-2021-3481](https://insights.sbomify.com/CVE-2021-3481/): Memory corruption in qt (high 7.1)
- [CVE-2021-34809](https://insights.sbomify.com/CVE-2021-34809/): Command injection in Download Station (critical 9.9)
- [CVE-2021-34808](https://insights.sbomify.com/CVE-2021-34808/): Server-side request forgery in Media Server (medium 5.8)
- [CVE-2021-34807](https://insights.sbomify.com/CVE-2021-34807/): Open redirect in zimbra:collaboration (medium 6.1)
- [CVE-2021-34805](https://insights.sbomify.com/CVE-2021-34805/): Path traversal in land-software:faust iserver (high 7.5)
- [CVE-2021-34803](https://insights.sbomify.com/CVE-2021-34803/): Other in teamviewer:teamviewer (high 7.8)
- [CVE-2021-34802](https://insights.sbomify.com/CVE-2021-34802/): Improper Privilege Management in Neo4j Graph Database (high 8.8)
- [CVE-2021-34801](https://insights.sbomify.com/CVE-2021-34801/): Denial of service in Valine (medium 5.3)
- [CVE-2021-34800](https://insights.sbomify.com/CVE-2021-34800/): Sensitive information could be logged (high 7.5)
- [CVE-2021-3480](https://insights.sbomify.com/CVE-2021-3480/): Null dereference in slapi-nis (high 7.5)
- [CVE-2021-34798](https://insights.sbomify.com/CVE-2021-34798/): NULL pointer dereference in httpd core (high 7.5)
- [CVE-2021-34797](https://insights.sbomify.com/CVE-2021-34797/): Apache Geode project log file redaction of sensitive information vulnerability (high 7.5)
- [CVE-2021-34795](https://insights.sbomify.com/CVE-2021-34795/): Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities (critical 10.0)
- [CVE-2021-34794](https://insights.sbomify.com/CVE-2021-34794/): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Access Control Vulnerability (medium 5.3)
- [CVE-2021-34793](https://insights.sbomify.com/CVE-2021-34793/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2021-34792](https://insights.sbomify.com/CVE-2021-34792/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2021-34791](https://insights.sbomify.com/CVE-2021-34791/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 4.7)
- [CVE-2021-34790](https://insights.sbomify.com/CVE-2021-34790/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 4.7)
- [CVE-2021-3479](https://insights.sbomify.com/CVE-2021-3479/): Denial of service in OpenEXR (medium 5.5)
- [CVE-2021-34789](https://insights.sbomify.com/CVE-2021-34789/): Cisco Tetration Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2021-34788](https://insights.sbomify.com/CVE-2021-34788/): Race condition in Cisco AnyConnect Secure Mobility Client (high 7.0)
- [CVE-2021-34787](https://insights.sbomify.com/CVE-2021-34787/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 5.3)
- [CVE-2021-34786](https://insights.sbomify.com/CVE-2021-34786/): Cisco BroadWorks CommPilot Application Software Vulnerabilities (medium 6.5)
- [CVE-2021-34785](https://insights.sbomify.com/CVE-2021-34785/): Cisco BroadWorks CommPilot Application Software Vulnerabilities (medium 6.5)
- [CVE-2021-34784](https://insights.sbomify.com/CVE-2021-34784/): Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2021-34783](https://insights.sbomify.com/CVE-2021-34783/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2021-34782](https://insights.sbomify.com/CVE-2021-34782/): Cisco DNA Center Information Disclosure Vulnerability (medium 4.3)
- [CVE-2021-34781](https://insights.sbomify.com/CVE-2021-34781/): Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability (high 8.6)
- [CVE-2021-34780](https://insights.sbomify.com/CVE-2021-34780/): Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities (medium 4.3)
- [CVE-2021-3478](https://insights.sbomify.com/CVE-2021-3478/): Denial of service in OpenEXR (medium 5.5)
- [CVE-2021-34779](https://insights.sbomify.com/CVE-2021-34779/): Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities (medium 4.3)
- [CVE-2021-34778](https://insights.sbomify.com/CVE-2021-34778/): Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities (medium 4.3)
- [CVE-2021-34777](https://insights.sbomify.com/CVE-2021-34777/): Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities (medium 4.3)
- [CVE-2021-34776](https://insights.sbomify.com/CVE-2021-34776/): Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities (medium 4.3)
- [CVE-2021-34775](https://insights.sbomify.com/CVE-2021-34775/): Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities (medium 4.3)
- [CVE-2021-34774](https://insights.sbomify.com/CVE-2021-34774/): Cisco Common Services Platform Collector Information Disclosure Vulnerability (medium 4.9)
- [CVE-2021-34773](https://insights.sbomify.com/CVE-2021-34773/): Cisco Unified Communications Products Cross-Site Request Forgery Vulnerability (medium 6.5)
- [CVE-2021-34772](https://insights.sbomify.com/CVE-2021-34772/): Cisco Orbital Open Redirect Vulnerability (medium 4.7)
- [CVE-2021-34771](https://insights.sbomify.com/CVE-2021-34771/): Cisco IOS XR Software Unauthorized Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-34770](https://insights.sbomify.com/CVE-2021-34770/): Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability (critical 10.0)
- [CVE-2021-3477](https://insights.sbomify.com/CVE-2021-3477/): Integer overflow in OpenEXR (medium 5.5)
- [CVE-2021-34769](https://insights.sbomify.com/CVE-2021-34769/): Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities (high 8.6)
- [CVE-2021-34768](https://insights.sbomify.com/CVE-2021-34768/): Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Denial of Service Vulnerabilities (high 8.6)
- [CVE-2021-34767](https://insights.sbomify.com/CVE-2021-34767/): Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability (high 7.4)
- [CVE-2021-34766](https://insights.sbomify.com/CVE-2021-34766/): Cisco Smart Software Manager Privilege Escalation Vulnerability (medium 5.4)
- [CVE-2021-34765](https://insights.sbomify.com/CVE-2021-34765/): Cisco Nexus Insights Authenticated Information Disclosure Vulnerability (medium 4.3)
- [CVE-2021-34764](https://insights.sbomify.com/CVE-2021-34764/): Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities (medium 4.8)
- [CVE-2021-34763](https://insights.sbomify.com/CVE-2021-34763/): Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities (medium 4.8)
- [CVE-2021-34762](https://insights.sbomify.com/CVE-2021-34762/): Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability (high 8.1)
- [CVE-2021-34761](https://insights.sbomify.com/CVE-2021-34761/): Cisco Firepower Threat Defense Software CLI Arbitrary File Write Vulnerability (medium 4.4)
- [CVE-2021-34760](https://insights.sbomify.com/CVE-2021-34760/): Cisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2021-3476](https://insights.sbomify.com/CVE-2021-3476/): Integer overflow in OpenEXR (medium 5.3)
- [CVE-2021-34759](https://insights.sbomify.com/CVE-2021-34759/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2021-34758](https://insights.sbomify.com/CVE-2021-34758/): Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerability (medium 4.4)
- [CVE-2021-34757](https://insights.sbomify.com/CVE-2021-34757/): Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities (medium 4.9)
- [CVE-2021-34756](https://insights.sbomify.com/CVE-2021-34756/): Cisco Firepower Threat Defense Software Command Injection Vulnerabilities (medium 6.7)
- [CVE-2021-34755](https://insights.sbomify.com/CVE-2021-34755/): Cisco Firepower Threat Defense Software Command Injection Vulnerabilities (medium 6.7)
- [CVE-2021-34754](https://insights.sbomify.com/CVE-2021-34754/): Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass Vulnerabilities (medium 5.8)
- [CVE-2021-34753](https://insights.sbomify.com/CVE-2021-34753/): Cisco Firepower Threat Defense Ethernet Industrial Protocol Policy Bypass Vulnerabilities (medium 5.8)
- [CVE-2021-34752](https://insights.sbomify.com/CVE-2021-34752/): Cisco Firepower Threat Defense Command Injection Vulnerabilities (medium 6.7)
- [CVE-2021-34751](https://insights.sbomify.com/CVE-2021-34751/): Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability (medium 4.3)
- [CVE-2021-34750](https://insights.sbomify.com/CVE-2021-34750/): Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerability (medium 4.3)
- [CVE-2021-3475](https://insights.sbomify.com/CVE-2021-3475/): Integer overflow in OpenEXR (medium 5.3)
- [CVE-2021-34749](https://insights.sbomify.com/CVE-2021-34749/): Multiple Cisco Products Server Name Identification Data Exfiltration Vulnerability (medium 5.8)
- [CVE-2021-34748](https://insights.sbomify.com/CVE-2021-34748/): Cisco Intersight Virtual Appliance Command Injection Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/139/