# Vulnerabilities published in 2021


- [CVE-2021-34746](https://insights.sbomify.com/CVE-2021-34746/): Cisco Enterprise NFV Infrastructure Software Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2021-34745](https://insights.sbomify.com/CVE-2021-34745/): AppDynamics .NET Agent Privilege Escalation Vulnerability (high 7.8)
- [CVE-2021-34744](https://insights.sbomify.com/CVE-2021-34744/): Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities (medium 4.9)
- [CVE-2021-34743](https://insights.sbomify.com/CVE-2021-34743/): Cisco Webex Software Application Authorization Bypass Vulnerability (medium 4.3)
- [CVE-2021-34742](https://insights.sbomify.com/CVE-2021-34742/): Cisco Vision Dynamic Signage Director Reflected Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2021-34741](https://insights.sbomify.com/CVE-2021-34741/): Cisco Email Security Appliance Denial of Service Vulnerability (high 7.5)
- [CVE-2021-34740](https://insights.sbomify.com/CVE-2021-34740/): Cisco Aironet Access Points WLAN Control Protocol Packet Buffer Leak Denial of Service Vulnerability (high 7.4)
- [CVE-2021-3474](https://insights.sbomify.com/CVE-2021-3474/): Integer overflow in OpenEXR (medium 5.3)
- [CVE-2021-34739](https://insights.sbomify.com/CVE-2021-34739/): Cisco Small Business Series Switches Session Credentials Replay Vulnerability (high 8.1)
- [CVE-2021-34738](https://insights.sbomify.com/CVE-2021-34738/): Cisco Identity Services Engine Cross-Site Scripting Vulnerabilities (medium 6.1)
- [CVE-2021-34737](https://insights.sbomify.com/CVE-2021-34737/): Cisco IOS XR Software DHCP Version 4 Server Denial of Service Vulnerability (medium 5.8)
- [CVE-2021-34736](https://insights.sbomify.com/CVE-2021-34736/): Cisco Integrated Management Controller GUI Denial of Service Vulnerability (medium 5.3)
- [CVE-2021-34735](https://insights.sbomify.com/CVE-2021-34735/): Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities (high 8.8)
- [CVE-2021-34734](https://insights.sbomify.com/CVE-2021-34734/): Memory corruption in Cisco Video Surveillance 7000 Series IP Cameras (medium 6.5)
- [CVE-2021-34733](https://insights.sbomify.com/CVE-2021-34733/): Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-34732](https://insights.sbomify.com/CVE-2021-34732/): Cisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2021-34731](https://insights.sbomify.com/CVE-2021-34731/): Cisco Prime Access Registrar Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2021-34730](https://insights.sbomify.com/CVE-2021-34730/): Memory corruption in Cisco Small Business RV Series Router Firmware (critical 9.8)
- [CVE-2021-3473](https://insights.sbomify.com/CVE-2021-3473/): Information disclosure in XClarity Controller (XCC) (medium 4.5)
- [CVE-2021-34729](https://insights.sbomify.com/CVE-2021-34729/): Cisco IOS XE SD-WAN Software Command Injection Vulnerability (medium 6.7)
- [CVE-2021-34728](https://insights.sbomify.com/CVE-2021-34728/): Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities (high 7.8)
- [CVE-2021-34727](https://insights.sbomify.com/CVE-2021-34727/): Cisco IOS XE SD-WAN Software Buffer Overflow Vulnerability (critical 9.8)
- [CVE-2021-34726](https://insights.sbomify.com/CVE-2021-34726/): Cisco SD-WAN Software Command Injection Vulnerability (medium 6.7)
- [CVE-2021-34725](https://insights.sbomify.com/CVE-2021-34725/): Cisco IOS XE SD-WAN Software Command Injection Vulnerability (medium 6.7)
- [CVE-2021-34724](https://insights.sbomify.com/CVE-2021-34724/): Cisco IOS XE SD-WAN Software Privilege Escalation Vulnerability (medium 6.0)
- [CVE-2021-34723](https://insights.sbomify.com/CVE-2021-34723/): Cisco IOS XE SD-WAN Software Arbitrary File Overwrite Vulnerability (medium 6.7)
- [CVE-2021-34722](https://insights.sbomify.com/CVE-2021-34722/): Cisco IOS XR Software Command Injection Vulnerabilities (medium 6.7)
- [CVE-2021-34721](https://insights.sbomify.com/CVE-2021-34721/): Cisco IOS XR Software Command Injection Vulnerabilities (medium 6.7)
- [CVE-2021-34720](https://insights.sbomify.com/CVE-2021-34720/): Denial of service in Cisco IOS XR Software (high 8.6)
- [CVE-2021-3472](https://insights.sbomify.com/CVE-2021-3472/): Integer overflow in xorg-x11-server (high 7.8)
- [CVE-2021-34719](https://insights.sbomify.com/CVE-2021-34719/): Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities (high 7.8)
- [CVE-2021-34718](https://insights.sbomify.com/CVE-2021-34718/): Cisco IOS XR Software Arbitrary File Read and Write Vulnerability (high 8.1)
- [CVE-2021-34716](https://insights.sbomify.com/CVE-2021-34716/): Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution Vulnerability (medium 6.7)
- [CVE-2021-34715](https://insights.sbomify.com/CVE-2021-34715/): Cisco Expressway Series and TelePresence Video Communication Server Image Verification Vulnerability (medium 4.7)
- [CVE-2021-34714](https://insights.sbomify.com/CVE-2021-34714/): Multiple Cisco Operating Systems Unidirectional Link Detection Denial of Service Vulnerability (high 7.4)
- [CVE-2021-34713](https://insights.sbomify.com/CVE-2021-34713/): Cisco IOS XR Software for ASR 9000 Series Routers Denial of Service Vulnerability (high 7.4)
- [CVE-2021-34712](https://insights.sbomify.com/CVE-2021-34712/): Cisco SD-WAN vManage Software Cypher Query Language Injection Vulnerability (medium 5.4)
- [CVE-2021-34711](https://insights.sbomify.com/CVE-2021-34711/): Cisco IP Phone Software Arbitrary File Read Vulnerability (medium 5.5)
- [CVE-2021-34710](https://insights.sbomify.com/CVE-2021-34710/): Cisco ATA 190 Series Analog Telephone Adapter Software Vulnerabilities (high 8.8)
- [CVE-2021-34709](https://insights.sbomify.com/CVE-2021-34709/): Security feature bypass in Cisco IOS XR Software (medium 6.0)
- [CVE-2021-34708](https://insights.sbomify.com/CVE-2021-34708/): Security feature bypass in Cisco IOS XR Software (medium 6.0)
- [CVE-2021-34707](https://insights.sbomify.com/CVE-2021-34707/): Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability (medium 6.5)
- [CVE-2021-34706](https://insights.sbomify.com/CVE-2021-34706/): Cisco Identity Services Engine XML External Entity Injection Vulnerability (medium 6.4)
- [CVE-2021-34705](https://insights.sbomify.com/CVE-2021-34705/): Cisco IOS and IOS XE Software FXO Interface Destination Pattern Bypass Vulnerability (medium 5.3)
- [CVE-2021-34704](https://insights.sbomify.com/CVE-2021-34704/): Memory corruption in Cisco Adaptive Security Appliance Software (high 8.6)
- [CVE-2021-34703](https://insights.sbomify.com/CVE-2021-34703/): Cisco IOS and IOS XE Software Link Layer Discovery Protocol Denial of Service Vulnerability (medium 6.8)
- [CVE-2021-34702](https://insights.sbomify.com/CVE-2021-34702/): Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability (medium 4.3)
- [CVE-2021-34701](https://insights.sbomify.com/CVE-2021-34701/): Cisco Unified Communications Products Path Traversal Vulnerability (medium 4.3)
- [CVE-2021-34700](https://insights.sbomify.com/CVE-2021-34700/): Cisco SD-WAN vManage Software Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-3470](https://insights.sbomify.com/CVE-2021-3470/): Memory corruption in redis (medium 5.3)
- [CVE-2021-34699](https://insights.sbomify.com/CVE-2021-34699/): Cisco IOS and IOS XE Software TrustSec CLI Parser Denial of Service Vulnerability (high 7.7)
- [CVE-2021-34698](https://insights.sbomify.com/CVE-2021-34698/): Cisco Web Security Appliance Proxy Service Denial of Service Vulnerability (high 8.6)
- [CVE-2021-34697](https://insights.sbomify.com/CVE-2021-34697/): Cisco IOS XE Software Protection Against Distributed Denial of Service Attacks Feature Vulnerability (medium 5.8)
- [CVE-2021-34696](https://insights.sbomify.com/CVE-2021-34696/): Cisco ASR 900 and ASR 920 Series Aggregation Services Routers Access Control List Bypass Vulnerability (medium 5.8)
- [CVE-2021-34693](https://insights.sbomify.com/CVE-2021-34693/): Information disclosure in debian:debian linux (medium 5.5)
- [CVE-2021-34692](https://insights.sbomify.com/CVE-2021-34692/): Privilege escalation in idrive:remotepc (high 7.8)
- [CVE-2021-34691](https://insights.sbomify.com/CVE-2021-34691/): Denial of service in idrive:remotepc (high 7.5)
- [CVE-2021-34690](https://insights.sbomify.com/CVE-2021-34690/): Auth bypass in idrive:remotepc (critical 9.8)
- [CVE-2021-3469](https://insights.sbomify.com/CVE-2021-3469/): Auth bypass in Foreman (medium 5.4)
- [CVE-2021-34689](https://insights.sbomify.com/CVE-2021-34689/): Information disclosure in idrive:remotepc (medium 5.5)
- [CVE-2021-34688](https://insights.sbomify.com/CVE-2021-34688/): Hardcoded credentials in idrive:remotepc (low 3.3)
- [CVE-2021-34687](https://insights.sbomify.com/CVE-2021-34687/): Weak cryptography in idrive:remotepc (medium 5.3)
- [CVE-2021-34685](https://insights.sbomify.com/CVE-2021-34685/): File upload in hitachi:vantara pentaho (low 2.7)
- [CVE-2021-34684](https://insights.sbomify.com/CVE-2021-34684/): SQL injection in hitachi:vantara pentaho (critical 9.8)
- [CVE-2021-34683](https://insights.sbomify.com/CVE-2021-34683/): Information disclosure in eic:e-document system (medium 5.3)
- [CVE-2021-34682](https://insights.sbomify.com/CVE-2021-34682/): Security feature bypass in gov:imposto de renda da pessoa fisica 2021 (low 3.7)
- [CVE-2021-3468](https://insights.sbomify.com/CVE-2021-3468/): Denial of service in avahi (medium 5.5)
- [CVE-2021-34679](https://insights.sbomify.com/CVE-2021-34679/): Information disclosure in thycotic:password reset server (critical 10.0)
- [CVE-2021-34676](https://insights.sbomify.com/CVE-2021-34676/): Auth bypass in basixonline:nex-forms (high 7.5)
- [CVE-2021-34675](https://insights.sbomify.com/CVE-2021-34675/): Auth bypass in basixonline:nex-forms (high 7.5)
- [CVE-2021-3467](https://insights.sbomify.com/CVE-2021-3467/): Null dereference in jasper (medium 5.5)
- [CVE-2021-34668](https://insights.sbomify.com/CVE-2021-34668/): WordPress Real Media Library <= 4.14.1 Author-only Stored Cross-Site Scripting (medium 6.4)
- [CVE-2021-34667](https://insights.sbomify.com/CVE-2021-34667/): Calendar_plugin <= 1.0 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34666](https://insights.sbomify.com/CVE-2021-34666/): Add Sidebar <= 2.0.0 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34665](https://insights.sbomify.com/CVE-2021-34665/): WP SEO Tags <= 2.2.7 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34664](https://insights.sbomify.com/CVE-2021-34664/): Moova for WooCommerce <= 3.5 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34663](https://insights.sbomify.com/CVE-2021-34663/): jQuery Tagline Rotator <= 0.1.5 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34661](https://insights.sbomify.com/CVE-2021-34661/): WP Fusion Lite <= 3.37.18 Cross-Site Request Forgery to Data Deletion (medium 6.1)
- [CVE-2021-34660](https://insights.sbomify.com/CVE-2021-34660/): WP Fusion Lite <= 3.37.18 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-3466](https://insights.sbomify.com/CVE-2021-3466/): Memory corruption in libmicrohttpd (critical 9.8)
- [CVE-2021-34659](https://insights.sbomify.com/CVE-2021-34659/): Plugmatter Pricing Table Lite <= 1.0.32 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34658](https://insights.sbomify.com/CVE-2021-34658/): Simple Popup Newsletter <= 1.4.7 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34657](https://insights.sbomify.com/CVE-2021-34657/): TypoFR <= 0.11 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34656](https://insights.sbomify.com/CVE-2021-34656/): 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat <= 5.2.7 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34655](https://insights.sbomify.com/CVE-2021-34655/): WP Songbook <= 2.0.11 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34654](https://insights.sbomify.com/CVE-2021-34654/): Custom Post Type Relations <= 1.0 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34653](https://insights.sbomify.com/CVE-2021-34653/): WP Fountain <= 1.5.9 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34652](https://insights.sbomify.com/CVE-2021-34652/): Media Usage <= 0.0.4 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34651](https://insights.sbomify.com/CVE-2021-34651/): Scribble Maps <= 1.2 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34650](https://insights.sbomify.com/CVE-2021-34650/): eID Easy <= 4.6 Reflected Cross-Site Scripting (medium 5.4)
- [CVE-2021-34649](https://insights.sbomify.com/CVE-2021-34649/): Simple Behance Portfolio <= 0.2 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34648](https://insights.sbomify.com/CVE-2021-34648/): Ninja Forms <= 3.5.7 Unprotected REST-API to Email Injection (medium 6.4)
- [CVE-2021-34647](https://insights.sbomify.com/CVE-2021-34647/): Ninja Forms <= 3.5.7 Sensitive Information Disclosure (medium 6.5)
- [CVE-2021-34646](https://insights.sbomify.com/CVE-2021-34646/): Booster for WooCommerce <= 5.4.3 Authentication Bypass (critical 9.8)
- [CVE-2021-34645](https://insights.sbomify.com/CVE-2021-34645/): Shopping Cart & eCommerce Store <= 5.1.0 Cross-Site Request Forgery to Stored Cross-Site Scripting (high 8.8)
- [CVE-2021-34644](https://insights.sbomify.com/CVE-2021-34644/): Multiplayer Games <= 3.7 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34643](https://insights.sbomify.com/CVE-2021-34643/): Skaut bazar <= 1.3.2 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34642](https://insights.sbomify.com/CVE-2021-34642/): Smart Email Alerts <= 1.0.10 Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-34641](https://insights.sbomify.com/CVE-2021-34641/): SEOPress <= 5.0.0 – 5.0.3 Authenticated Stored Cross-Site Scripting (medium 6.4)
- [CVE-2021-34640](https://insights.sbomify.com/CVE-2021-34640/): Securimage-WP-Fixed <= 3.5.4 Reflected Cross-Site Scripting (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/140/