# Vulnerabilities published in 2021


- [CVE-2021-34440](https://insights.sbomify.com/CVE-2021-34440/): GDI+ Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-3444](https://insights.sbomify.com/CVE-2021-3444/): Linux kernel bpf verifier incorrect mod32 truncation (high 7.8)
- [CVE-2021-34439](https://insights.sbomify.com/CVE-2021-34439/): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34438](https://insights.sbomify.com/CVE-2021-34438/): Windows Font Driver Host Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-34436](https://insights.sbomify.com/CVE-2021-34436/): XML external entity in Eclipse Theia (critical 9.8)
- [CVE-2021-34435](https://insights.sbomify.com/CVE-2021-34435/): Remote code execution in Eclipse Theia (high 8.8)
- [CVE-2021-34434](https://insights.sbomify.com/CVE-2021-34434/): Security feature bypass in Eclipse Mosquitto (medium 5.3)
- [CVE-2021-34433](https://insights.sbomify.com/CVE-2021-34433/): Security feature bypass in Eclipse Californium (high 7.5)
- [CVE-2021-34432](https://insights.sbomify.com/CVE-2021-34432/): Denial of service in Eclipse Mosquitto (high 7.5)
- [CVE-2021-34431](https://insights.sbomify.com/CVE-2021-34431/): Denial of service in Eclipse Mosquitto (medium 6.5)
- [CVE-2021-34430](https://insights.sbomify.com/CVE-2021-34430/): Weak cryptography in Eclipse TinyDTLS (high 7.5)
- [CVE-2021-3443](https://insights.sbomify.com/CVE-2021-3443/): Null dereference in jasper (medium 5.5)
- [CVE-2021-34429](https://insights.sbomify.com/CVE-2021-34429/): Encoded URIs can access WEB-INF directory in Eclipse Jetty (medium 5.3)
- [CVE-2021-34428](https://insights.sbomify.com/CVE-2021-34428/): SessionListener can prevent a session from being invalidated breaking logout (low 2.9)
- [CVE-2021-34427](https://insights.sbomify.com/CVE-2021-34427/): File upload in Eclipse BIRT (critical 9.8)
- [CVE-2021-34426](https://insights.sbomify.com/CVE-2021-34426/): Arbitrary command execution in Keybase Client for Windows (medium 5.3)
- [CVE-2021-34425](https://insights.sbomify.com/CVE-2021-34425/): Server Side Request Forgery in Zoom Client for Meetings chat (medium 4.7)
- [CVE-2021-34424](https://insights.sbomify.com/CVE-2021-34424/): Process memory exposure in Zoom Client and other products (medium 5.3)
- [CVE-2021-34423](https://insights.sbomify.com/CVE-2021-34423/): Buffer overflow in Zoom client and other products (high 7.3)
- [CVE-2021-34422](https://insights.sbomify.com/CVE-2021-34422/): Path traversal of file names in Keybase Client for Windows (high 7.2)
- [CVE-2021-34421](https://insights.sbomify.com/CVE-2021-34421/): Retained exploded messages in Keybase Clients for Android and iOS (low 3.7)
- [CVE-2021-34420](https://insights.sbomify.com/CVE-2021-34420/): Zoom Windows installation executable signature bypass (medium 4.7)
- [CVE-2021-3442](https://insights.sbomify.com/CVE-2021-3442/): Cross-site scripting in Red Hat OpenShift API Management. (medium 5.4)
- [CVE-2021-34419](https://insights.sbomify.com/CVE-2021-34419/): HTML injection in Zoom Linux client (low 3.7)
- [CVE-2021-34418](https://insights.sbomify.com/CVE-2021-34418/): Pre-auth Null pointer crash in on-premise web console (medium 4.0)
- [CVE-2021-34417](https://insights.sbomify.com/CVE-2021-34417/): Authenticated remote command execution with root privileges via web console in MMR (high 7.9)
- [CVE-2021-34416](https://insights.sbomify.com/CVE-2021-34416/): Command injection in Zoom On-Premise Meeting Connector Controller, Zoom On-Premise Meeting Connector MMR, Zoom On-Premise Recording Connector, Zoom On-Premise Virtual Room Connector, Zoom On-Premise Virtual Room Connector Load Balancer (critical 9.8)
- [CVE-2021-34415](https://insights.sbomify.com/CVE-2021-34415/): Denial of service in Zoom On-Premise Meeting Connector Controller (high 7.5)
- [CVE-2021-34414](https://insights.sbomify.com/CVE-2021-34414/): Command injection in Zoom on-premise Meeting Connector Controller, Zoom on-premise Meeting Connector MMR, Zoom on-premise Recording Connector, Zoom on-premise Virtual Room Connector, Zoom on-premise Virtual Room Connector Load Balancer (high 7.2)
- [CVE-2021-34413](https://insights.sbomify.com/CVE-2021-34413/): Race condition in Zoom Plugin for Microsoft Outlook for MacOS (high 7.5)
- [CVE-2021-34412](https://insights.sbomify.com/CVE-2021-34412/): Privilege escalation in Zoom Client for Meetings for Windows (high 7.8)
- [CVE-2021-34411](https://insights.sbomify.com/CVE-2021-34411/): Privilege escalation in Zoom Rooms for Conference Room for Windows (high 7.8)
- [CVE-2021-34410](https://insights.sbomify.com/CVE-2021-34410/): Privilege escalation in Zoom Plugin for Microsoft Outlook for Mac (high 7.8)
- [CVE-2021-3441](https://insights.sbomify.com/CVE-2021-3441/): Cross-site scripting in HP OfficeJet 7110 Wide Format ePrinter (medium 4.8)
- [CVE-2021-34409](https://insights.sbomify.com/CVE-2021-34409/): Zoom Client Installer Local Privilege Escalation (high 7.8)
- [CVE-2021-34408](https://insights.sbomify.com/CVE-2021-34408/): Privilege escalation in Zoom Client for Meetings for Windows (high 7.8)
- [CVE-2021-34406](https://insights.sbomify.com/CVE-2021-34406/): Race condition in SHIELD TV (medium 4.7)
- [CVE-2021-34405](https://insights.sbomify.com/CVE-2021-34405/): Null dereference in SHIELD TV (medium 5.5)
- [CVE-2021-34404](https://insights.sbomify.com/CVE-2021-34404/): Security feature bypass in SHIELD TV (high 7.1)
- [CVE-2021-34403](https://insights.sbomify.com/CVE-2021-34403/): Use after free in SHIELD TV (high 7.8)
- [CVE-2021-34402](https://insights.sbomify.com/CVE-2021-34402/): Memory corruption in SHIELD TV (medium 6.7)
- [CVE-2021-34401](https://insights.sbomify.com/CVE-2021-34401/): Missing authorization in SHIELD TV (high 7.8)
- [CVE-2021-34400](https://insights.sbomify.com/CVE-2021-34400/): Information disclosure in NVIDIA GPU and Tegra hardware (medium 4.1)
- [CVE-2021-3440](https://insights.sbomify.com/CVE-2021-3440/): Privilege escalation in HP Print and Scan Doctor, an application within the HP Smart App for Windows (high 7.8)
- [CVE-2021-34399](https://insights.sbomify.com/CVE-2021-34399/): Information disclosure in NVIDIA GPU and Tegra hardware (medium 4.1)
- [CVE-2021-34398](https://insights.sbomify.com/CVE-2021-34398/): Privilege escalation in NVIDIA Data Center GPU Manager (DCGM) (high 7.8)
- [CVE-2021-34397](https://insights.sbomify.com/CVE-2021-34397/): Memory corruption in NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier NX (low 1.9)
- [CVE-2021-34396](https://insights.sbomify.com/CVE-2021-34396/): Misconfiguration in NVIDIA Jetson TX2 series, TX2 NX (low 3.0)
- [CVE-2021-34395](https://insights.sbomify.com/CVE-2021-34395/): Misconfiguration in NVIDIA Jetson TX1 (low 3.9)
- [CVE-2021-34394](https://insights.sbomify.com/CVE-2021-34394/): Memory corruption in NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier NX (medium 4.2)
- [CVE-2021-34393](https://insights.sbomify.com/CVE-2021-34393/): Deserialization in NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier NX (medium 4.2)
- [CVE-2021-34392](https://insights.sbomify.com/CVE-2021-34392/): Integer overflow in NVIDIA Jetson TX1 (medium 4.4)
- [CVE-2021-34391](https://insights.sbomify.com/CVE-2021-34391/): Integer overflow in NVIDIA Jetson TX1 (medium 5.3)
- [CVE-2021-34390](https://insights.sbomify.com/CVE-2021-34390/): Integer overflow in NVIDIA Jetson TX1 (medium 5.3)
- [CVE-2021-3439](https://insights.sbomify.com/CVE-2021-3439/): Privilege escalation in HP PC BIOS (high 7.8)
- [CVE-2021-34389](https://insights.sbomify.com/CVE-2021-34389/): Memory corruption in NVIDIA Jetson, TX2 series, TX2 NX, AGX Xavier series, Xavier NX (medium 5.0)
- [CVE-2021-34388](https://insights.sbomify.com/CVE-2021-34388/): Memory corruption in NVIDIA Jetson TX1, TX2 series, TX2 NX, AGX Xavier series, Xavier NX, Nano and Nano 2GB (medium 6.3)
- [CVE-2021-34387](https://insights.sbomify.com/CVE-2021-34387/): Misconfiguration in NVIDIA Jetson TX1 (medium 6.3)
- [CVE-2021-34386](https://insights.sbomify.com/CVE-2021-34386/): Integer overflow in NVIDIA Jetson TX1 (medium 6.3)
- [CVE-2021-34385](https://insights.sbomify.com/CVE-2021-34385/): Integer overflow in NVIDIA Jetson TX1 (medium 6.3)
- [CVE-2021-34384](https://insights.sbomify.com/CVE-2021-34384/): Memory corruption in NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX (medium 6.3)
- [CVE-2021-34383](https://insights.sbomify.com/CVE-2021-34383/): Memory corruption in NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX (medium 6.4)
- [CVE-2021-34382](https://insights.sbomify.com/CVE-2021-34382/): Integer overflow in NVIDIA Jetson TX1 (medium 6.7)
- [CVE-2021-34381](https://insights.sbomify.com/CVE-2021-34381/): Integer overflow in NVIDIA Jetson TX1 (medium 6.7)
- [CVE-2021-34380](https://insights.sbomify.com/CVE-2021-34380/): Memory corruption in NVIDIA Jetson TX1, TX2 series, TX2 NX, AGX Xavier series, Xavier NX, Nano and Nano 2GB (high 7.0)
- [CVE-2021-3438](https://insights.sbomify.com/CVE-2021-3438/): Memory corruption in Certain HP LaserJet products and Samsung product printers, see Security Bulletin (high 7.8)
- [CVE-2021-34379](https://insights.sbomify.com/CVE-2021-34379/): Memory corruption in NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX (high 7.7)
- [CVE-2021-34378](https://insights.sbomify.com/CVE-2021-34378/): Memory corruption in NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX (high 7.7)
- [CVE-2021-34377](https://insights.sbomify.com/CVE-2021-34377/): Memory corruption in NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX (high 7.7)
- [CVE-2021-34376](https://insights.sbomify.com/CVE-2021-34376/): Memory corruption in NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX (high 7.7)
- [CVE-2021-34375](https://insights.sbomify.com/CVE-2021-34375/): Memory corruption in NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX (high 7.7)
- [CVE-2021-34374](https://insights.sbomify.com/CVE-2021-34374/): Memory corruption in NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX (high 7.7)
- [CVE-2021-34373](https://insights.sbomify.com/CVE-2021-34373/): Memory corruption in NVIDIA Jetson TX1 (high 7.9)
- [CVE-2021-34372](https://insights.sbomify.com/CVE-2021-34372/): Integer overflow in NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier NX (high 8.2)
- [CVE-2021-34371](https://insights.sbomify.com/CVE-2021-34371/): Deserialization of Untrusted Data in Neo4j (critical 9.8)
- [CVE-2021-34370](https://insights.sbomify.com/CVE-2021-34370/): Cross-site scripting in accela:civic platform (medium 6.1)
- [CVE-2021-3437](https://insights.sbomify.com/CVE-2021-3437/): Misconfiguration in OMEN Gaming Hub SDK (critical 9.8)
- [CVE-2021-34369](https://insights.sbomify.com/CVE-2021-34369/): Missing authorization in accela:civic platform (medium 6.5)
- [CVE-2021-34364](https://insights.sbomify.com/CVE-2021-34364/): Cross-site scripting in refined-github project:refined-github (medium 6.1)
- [CVE-2021-34363](https://insights.sbomify.com/CVE-2021-34363/): The Fuck Arbitrary File Deletion via Path Traversal (critical 9.1)
- [CVE-2021-34362](https://insights.sbomify.com/CVE-2021-34362/): Command Injection Vulnerability in Media Streaming Add-on (high 8.7)
- [CVE-2021-34361](https://insights.sbomify.com/CVE-2021-34361/): Reflected XSS Vulnerability in Proxy Server (medium 5.3)
- [CVE-2021-34360](https://insights.sbomify.com/CVE-2021-34360/): CSRF Bypass in Proxy Server (medium 5.3)
- [CVE-2021-3436](https://insights.sbomify.com/CVE-2021-3436/): Business logic in zephyr (medium 4.3)
- [CVE-2021-34359](https://insights.sbomify.com/CVE-2021-34359/): Stored XSS Vulnerability in Proxy Server (medium 6.9)
- [CVE-2021-34358](https://insights.sbomify.com/CVE-2021-34358/): CSRF Vulnerability in QmailAgent (medium 6.8)
- [CVE-2021-34357](https://insights.sbomify.com/CVE-2021-34357/): Reflected XSS Vulnerability in QmailAgent (medium 6.9)
- [CVE-2021-34356](https://insights.sbomify.com/CVE-2021-34356/): Stored XSS Vulnerability in Photo Station (high 7.6)
- [CVE-2021-34355](https://insights.sbomify.com/CVE-2021-34355/): Stored XSS Vulnerability in Photo Station (high 7.6)
- [CVE-2021-34354](https://insights.sbomify.com/CVE-2021-34354/): Stored Cross-site Scripting Vulnerability in Photo Station (high 7.6)
- [CVE-2021-34352](https://insights.sbomify.com/CVE-2021-34352/): Command Injection Vulnerability in QVR (high 7.2)
- [CVE-2021-34351](https://insights.sbomify.com/CVE-2021-34351/): Command Injection Vulnerability in QVR (critical 9.8)
- [CVE-2021-3435](https://insights.sbomify.com/CVE-2021-3435/): L2CAP: Information leakage in le_ecred_conn_req() (medium 4.0)
- [CVE-2021-34349](https://insights.sbomify.com/CVE-2021-34349/): Command Injection Vulnerability in QVR (high 7.2)
- [CVE-2021-34348](https://insights.sbomify.com/CVE-2021-34348/): Command Injection Vulnerability in QVR (critical 9.8)
- [CVE-2021-34346](https://insights.sbomify.com/CVE-2021-34346/): Stack Based Overflow Vulnerability in NVR Storage Expansion (critical 9.8)
- [CVE-2021-34345](https://insights.sbomify.com/CVE-2021-34345/): Stack Based Overflow Vulnerability in NVR Storage Expansion (critical 9.8)
- [CVE-2021-34344](https://insights.sbomify.com/CVE-2021-34344/): Stack Buffer Overflow Vulnerability in QUSBCam2 (critical 9.8)
- [CVE-2021-34343](https://insights.sbomify.com/CVE-2021-34343/): Buffer Overflow Vulnerability in QTS, QuTS hero, and QuTScloud (medium 6.0)
- [CVE-2021-34342](https://insights.sbomify.com/CVE-2021-34342/): Memory corruption in ming (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/143/