# Vulnerabilities published in 2021


- [CVE-2021-34341](https://insights.sbomify.com/CVE-2021-34341/): Memory corruption in ming (medium 6.5)
- [CVE-2021-34340](https://insights.sbomify.com/CVE-2021-34340/): Memory corruption in ming (medium 6.5)
- [CVE-2021-3434](https://insights.sbomify.com/CVE-2021-3434/): L2CAP: Stack based buffer overflow in le_ecred_conn_req() (medium 4.9)
- [CVE-2021-34339](https://insights.sbomify.com/CVE-2021-34339/): Memory corruption in ming (medium 6.5)
- [CVE-2021-34338](https://insights.sbomify.com/CVE-2021-34338/): Memory corruption in ming (medium 6.5)
- [CVE-2021-34337](https://insights.sbomify.com/CVE-2021-34337/): Mailman Core vulnerable to timing attacks (medium 6.3)
- [CVE-2021-34335](https://insights.sbomify.com/CVE-2021-34335/): Denial of service due to FPE in Exiv2::Internal::resolveLens0xffff (medium 4.7)
- [CVE-2021-34334](https://insights.sbomify.com/CVE-2021-34334/): Denial of service due to integer overflow in loop counter (medium 5.5)
- [CVE-2021-34333](https://insights.sbomify.com/CVE-2021-34333/): Memory corruption in JT2Go (medium 5.5)
- [CVE-2021-34332](https://insights.sbomify.com/CVE-2021-34332/): Denial of service in JT2Go (medium 5.5)
- [CVE-2021-34331](https://insights.sbomify.com/CVE-2021-34331/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34330](https://insights.sbomify.com/CVE-2021-34330/): Use after free in JT2Go (high 7.8)
- [CVE-2021-3433](https://insights.sbomify.com/CVE-2021-3433/): BT: Invalid channel map in CONNECT_IND results to Deadlock (medium 4.0)
- [CVE-2021-34329](https://insights.sbomify.com/CVE-2021-34329/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34328](https://insights.sbomify.com/CVE-2021-34328/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34327](https://insights.sbomify.com/CVE-2021-34327/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34326](https://insights.sbomify.com/CVE-2021-34326/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34325](https://insights.sbomify.com/CVE-2021-34325/): Memory corruption in JT2Go (medium 5.5)
- [CVE-2021-34324](https://insights.sbomify.com/CVE-2021-34324/): Use after free in JT2Go (high 7.8)
- [CVE-2021-34323](https://insights.sbomify.com/CVE-2021-34323/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34322](https://insights.sbomify.com/CVE-2021-34322/): Memory corruption in JT2Go (medium 5.5)
- [CVE-2021-34321](https://insights.sbomify.com/CVE-2021-34321/): Memory corruption in JT2Go (medium 5.5)
- [CVE-2021-34320](https://insights.sbomify.com/CVE-2021-34320/): Memory corruption in JT2Go (medium 5.5)
- [CVE-2021-3432](https://insights.sbomify.com/CVE-2021-3432/): BT: Invalid interval in CONNECT_IND leads to Division by Zero (medium 4.3)
- [CVE-2021-34319](https://insights.sbomify.com/CVE-2021-34319/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34318](https://insights.sbomify.com/CVE-2021-34318/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34317](https://insights.sbomify.com/CVE-2021-34317/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34316](https://insights.sbomify.com/CVE-2021-34316/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34315](https://insights.sbomify.com/CVE-2021-34315/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34314](https://insights.sbomify.com/CVE-2021-34314/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34313](https://insights.sbomify.com/CVE-2021-34313/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34312](https://insights.sbomify.com/CVE-2021-34312/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34311](https://insights.sbomify.com/CVE-2021-34311/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34310](https://insights.sbomify.com/CVE-2021-34310/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-3431](https://insights.sbomify.com/CVE-2021-3431/): BT: Assertion failure on repeated LL_FEATURE_REQ (medium 4.3)
- [CVE-2021-34309](https://insights.sbomify.com/CVE-2021-34309/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34308](https://insights.sbomify.com/CVE-2021-34308/): Memory corruption in JT2Go (medium 5.5)
- [CVE-2021-34307](https://insights.sbomify.com/CVE-2021-34307/): Memory corruption in JT2Go (medium 5.5)
- [CVE-2021-34306](https://insights.sbomify.com/CVE-2021-34306/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34305](https://insights.sbomify.com/CVE-2021-34305/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34304](https://insights.sbomify.com/CVE-2021-34304/): Memory corruption in JT2Go (medium 5.5)
- [CVE-2021-34303](https://insights.sbomify.com/CVE-2021-34303/): Memory corruption in JT2Go (medium 5.5)
- [CVE-2021-34302](https://insights.sbomify.com/CVE-2021-34302/): Memory corruption in JT2Go (medium 5.5)
- [CVE-2021-34301](https://insights.sbomify.com/CVE-2021-34301/): Use after free in JT2Go (high 7.8)
- [CVE-2021-34300](https://insights.sbomify.com/CVE-2021-34300/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-3430](https://insights.sbomify.com/CVE-2021-3430/): BT: Assertion failure on repeated LL_CONNECTION_PARAM_REQ (medium 6.5)
- [CVE-2021-34299](https://insights.sbomify.com/CVE-2021-34299/): Memory corruption in JT2Go (medium 5.5)
- [CVE-2021-34298](https://insights.sbomify.com/CVE-2021-34298/): Use after free in JT2Go (high 7.8)
- [CVE-2021-34297](https://insights.sbomify.com/CVE-2021-34297/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34296](https://insights.sbomify.com/CVE-2021-34296/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34295](https://insights.sbomify.com/CVE-2021-34295/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34294](https://insights.sbomify.com/CVE-2021-34294/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34293](https://insights.sbomify.com/CVE-2021-34293/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34292](https://insights.sbomify.com/CVE-2021-34292/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-34291](https://insights.sbomify.com/CVE-2021-34291/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-3429](https://insights.sbomify.com/CVE-2021-3429/): sensitive data exposure in cloud-init logs (medium 5.5)
- [CVE-2021-34280](https://insights.sbomify.com/CVE-2021-34280/): Memory corruption in polarisoffice:polaris office (high 7.8)
- [CVE-2021-3428](https://insights.sbomify.com/CVE-2021-3428/): Integer overflow in kernel (medium 5.5)
- [CVE-2021-34273](https://insights.sbomify.com/CVE-2021-34273/): Business logic in b2x project:b2x (high 7.5)
- [CVE-2021-34272](https://insights.sbomify.com/CVE-2021-34272/): Business logic in robotbtc project:robotbtc (high 7.5)
- [CVE-2021-34270](https://insights.sbomify.com/CVE-2021-34270/): Integer overflow in doft:doftcoin (high 7.5)
- [CVE-2021-3427](https://insights.sbomify.com/CVE-2021-3427/): Deluge Web-UI vulnerable to XSS through a crafted torrent file (medium 6.1)
- [CVE-2021-34268](https://insights.sbomify.com/CVE-2021-34268/): Denial of service in st:stm32cube middleware (medium 4.6)
- [CVE-2021-34267](https://insights.sbomify.com/CVE-2021-34267/): Denial of service in st:stm32cube middleware (medium 4.6)
- [CVE-2021-34262](https://insights.sbomify.com/CVE-2021-34262/): Memory corruption in st:stm32cube middleware (medium 6.8)
- [CVE-2021-34261](https://insights.sbomify.com/CVE-2021-34261/): Denial of service in st:stm32cube middleware (medium 4.6)
- [CVE-2021-34260](https://insights.sbomify.com/CVE-2021-34260/): Memory corruption in st:stm32cube middleware (medium 6.8)
- [CVE-2021-3426](https://insights.sbomify.com/CVE-2021-3426/): Information disclosure in python (medium 5.7)
- [CVE-2021-34259](https://insights.sbomify.com/CVE-2021-34259/): Memory corruption in st:stm32cube middleware (medium 6.8)
- [CVE-2021-34257](https://insights.sbomify.com/CVE-2021-34257/): Unrestricted Upload of File with Dangerous Type in WPanel 4 (high 8.8)
- [CVE-2021-34254](https://insights.sbomify.com/CVE-2021-34254/): Open redirect in umbraco:umbraco cms (medium 6.1)
- [CVE-2021-3425](https://insights.sbomify.com/CVE-2021-3425/): Information disclosure in broker (medium 4.4)
- [CVE-2021-34249](https://insights.sbomify.com/CVE-2021-34249/): SQL injection in online book store project:online book store (high 7.5)
- [CVE-2021-34244](https://insights.sbomify.com/CVE-2021-34244/): Cross-site request forgery in icehrm:icehrm (high 8.8)
- [CVE-2021-34243](https://insights.sbomify.com/CVE-2021-34243/): Cross-site scripting in icehrm:icehrm (medium 5.4)
- [CVE-2021-3424](https://insights.sbomify.com/CVE-2021-3424/): Keycloak is vulnerable to IDN homograph attack (medium 5.3)
- [CVE-2021-34236](https://insights.sbomify.com/CVE-2021-34236/): Memory corruption in netgear:r8000 firmware (critical 9.8)
- [CVE-2021-34235](https://insights.sbomify.com/CVE-2021-34235/): SQL injection in tsg-solutions:tokheim profleet dialog (critical 9.8)
- [CVE-2021-3423](https://insights.sbomify.com/CVE-2021-3423/): Privilege escalation in Bitdefender GravityZone Business Security (high 7.8)
- [CVE-2021-34228](https://insights.sbomify.com/CVE-2021-34228/): Cross-site scripting in totolink:a3002r firmware (medium 6.1)
- [CVE-2021-34223](https://insights.sbomify.com/CVE-2021-34223/): Cross-site scripting in totolink:a3002r firmware (medium 6.1)
- [CVE-2021-34220](https://insights.sbomify.com/CVE-2021-34220/): Cross-site scripting in totolink:a3002r firmware (medium 6.1)
- [CVE-2021-3422](https://insights.sbomify.com/CVE-2021-3422/): Indexer denial-of-service via malformed S2S request (high 7.5)
- [CVE-2021-34218](https://insights.sbomify.com/CVE-2021-34218/): Information disclosure in totolink:a3002r firmware (medium 5.3)
- [CVE-2021-34215](https://insights.sbomify.com/CVE-2021-34215/): Cross-site scripting in totolink:a3002r firmware (medium 6.1)
- [CVE-2021-3421](https://insights.sbomify.com/CVE-2021-3421/): Security feature bypass in rpm (medium 5.5)
- [CVE-2021-34207](https://insights.sbomify.com/CVE-2021-34207/): Cross-site scripting in totolink:a3002r firmware (medium 6.1)
- [CVE-2021-34204](https://insights.sbomify.com/CVE-2021-34204/): Hardcoded credentials in dlink:dir-2640-us firmware (medium 6.8)
- [CVE-2021-34203](https://insights.sbomify.com/CVE-2021-34203/): Hardcoded credentials in dlink:dir-2640-us firmware (high 8.1)
- [CVE-2021-34202](https://insights.sbomify.com/CVE-2021-34202/): Memory corruption in dlink:dir-2640-us firmware (high 7.8)
- [CVE-2021-34201](https://insights.sbomify.com/CVE-2021-34201/): Memory corruption in dlink:dir-2640-us firmware (high 7.1)
- [CVE-2021-3420](https://insights.sbomify.com/CVE-2021-3420/): Integer overflow in newlib (critical 9.8)
- [CVE-2021-34193](https://insights.sbomify.com/CVE-2021-34193/): Memory corruption in opensc project:opensc (high 7.5)
- [CVE-2021-34190](https://insights.sbomify.com/CVE-2021-34190/): Cross-site scripting in issabel:pbx (medium 4.8)
- [CVE-2021-34187](https://insights.sbomify.com/CVE-2021-34187/): SQL injection in chamilo:chamilo (critical 9.8)
- [CVE-2021-34185](https://insights.sbomify.com/CVE-2021-34185/): Integer overflow in mackron:miniaudio (high 7.8)
- [CVE-2021-34184](https://insights.sbomify.com/CVE-2021-34184/): Memory corruption in mackron:miniaudio (critical 9.8)
- [CVE-2021-34182](https://insights.sbomify.com/CVE-2021-34182/): Misconfiguration in ttyd project:ttyd (critical 9.8)
- [CVE-2021-34181](https://insights.sbomify.com/CVE-2021-34181/): Cross-site scripting in tomexam:tomexam (medium 6.1)
- [CVE-2021-3418](https://insights.sbomify.com/CVE-2021-3418/): Security feature bypass in grub2 (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/144/