# Vulnerabilities published in 2021


- [CVE-2021-34174](https://insights.sbomify.com/CVE-2021-34174/): Denial of service in broadcom:bcm4352 firmware (medium 4.6)
- [CVE-2021-34173](https://insights.sbomify.com/CVE-2021-34173/): Denial of service in espressif:esp32 firmware (high 7.5)
- [CVE-2021-34170](https://insights.sbomify.com/CVE-2021-34170/): Other in fromsoftware:dark souls iii (critical 9.8)
- [CVE-2021-3417](https://insights.sbomify.com/CVE-2021-3417/): Information disclosure in XClarity Orchestrator (medium 4.9)
- [CVE-2021-34167](https://insights.sbomify.com/CVE-2021-34167/): Cross-site request forgery in taogogo:taocms (high 8.8)
- [CVE-2021-34166](https://insights.sbomify.com/CVE-2021-34166/): SQL injection in simple food website project:simple food website (critical 9.8)
- [CVE-2021-34165](https://insights.sbomify.com/CVE-2021-34165/): SQL injection in basic shopping cart project:basic shopping cart (critical 9.8)
- [CVE-2021-34164](https://insights.sbomify.com/CVE-2021-34164/): Command injection in lizhifaka project:lizhifaka (high 8.8)
- [CVE-2021-3416](https://insights.sbomify.com/CVE-2021-3416/): Denial of service in QEMU (medium 6.0)
- [CVE-2021-34150](https://insights.sbomify.com/CVE-2021-34150/): Denial of service in bluetrum:ab5301a firmware (medium 6.5)
- [CVE-2021-34149](https://insights.sbomify.com/CVE-2021-34149/): Denial of service in ti:cc256xcqfn-em firmware (medium 6.5)
- [CVE-2021-34148](https://insights.sbomify.com/CVE-2021-34148/): Denial of service in cypress:wireless internet connectivity for embedded devices (medium 6.5)
- [CVE-2021-34147](https://insights.sbomify.com/CVE-2021-34147/): Denial of service in cypress:wireless internet connectivity for embedded devices (medium 6.5)
- [CVE-2021-34146](https://insights.sbomify.com/CVE-2021-34146/): Denial of service in cypress:cyw20735b1 firmware (medium 6.5)
- [CVE-2021-34145](https://insights.sbomify.com/CVE-2021-34145/): Denial of service in cypress:wireless internet connectivity for embedded devices (medium 5.3)
- [CVE-2021-34144](https://insights.sbomify.com/CVE-2021-34144/): Denial of service in zh-jieli:fw-ac63 bt sdk (medium 6.5)
- [CVE-2021-34143](https://insights.sbomify.com/CVE-2021-34143/): Denial of service in zh-jieli:fw-ac63 bt sdk (medium 6.5)
- [CVE-2021-34141](https://insights.sbomify.com/CVE-2021-34141/): Incorrect Comparison in NumPy (medium 5.3)
- [CVE-2021-3414](https://insights.sbomify.com/CVE-2021-3414/): Privilege escalation in satellite (high 8.1)
- [CVE-2021-3413](https://insights.sbomify.com/CVE-2021-3413/): Information disclosure in Satellite (medium 6.3)
- [CVE-2021-34129](https://insights.sbomify.com/CVE-2021-34129/): Path traversal in laiketui:laiketui (high 8.1)
- [CVE-2021-34128](https://insights.sbomify.com/CVE-2021-34128/): File upload in laiketui:laiketui (high 8.8)
- [CVE-2021-34125](https://insights.sbomify.com/CVE-2021-34125/): Information disclosure in dronecode:px4 drone autopilot (high 7.5)
- [CVE-2021-34123](https://insights.sbomify.com/CVE-2021-34123/): Memory corruption in atasm project:atasm (critical 9.8)
- [CVE-2021-34122](https://insights.sbomify.com/CVE-2021-34122/): Null dereference in rockcarry:ffjpeg (medium 5.5)
- [CVE-2021-34121](https://insights.sbomify.com/CVE-2021-34121/): Memory corruption in htmldoc project:htmldoc (high 7.8)
- [CVE-2021-3412](https://insights.sbomify.com/CVE-2021-3412/): Auth bypass in 3Scale (high 7.3)
- [CVE-2021-34119](https://insights.sbomify.com/CVE-2021-34119/): Memory corruption in htmldoc project:htmldoc (high 7.8)
- [CVE-2021-34117](https://insights.sbomify.com/CVE-2021-34117/): SQL injection in seopanel:seo panel (high 7.5)
- [CVE-2021-34111](https://insights.sbomify.com/CVE-2021-34111/): Command injection in thecus:n4800eco firmware (critical 9.8)
- [CVE-2021-34110](https://insights.sbomify.com/CVE-2021-34110/): Misconfiguration in nica:winwaste.net (high 7.8)
- [CVE-2021-3411](https://insights.sbomify.com/CVE-2021-3411/): Memory corruption in Linux kernel (medium 6.7)
- [CVE-2021-3410](https://insights.sbomify.com/CVE-2021-3410/): Memory corruption in libcaca (high 7.8)
- [CVE-2021-3409](https://insights.sbomify.com/CVE-2021-3409/): Memory corruption in QEMU (medium 5.7)
- [CVE-2021-34087](https://insights.sbomify.com/CVE-2021-34087/): Other in ultimaker:ultimaker 3 firmware (high 7.1)
- [CVE-2021-34086](https://insights.sbomify.com/CVE-2021-34086/): Cross-site request forgery in ultimaker:ultimaker 3 firmware (high 8.8)
- [CVE-2021-34085](https://insights.sbomify.com/CVE-2021-34085/): Memory corruption in glensawyer:mp3gain (critical 9.8)
- [CVE-2021-34084](https://insights.sbomify.com/CVE-2021-34084/): OS Command Injection in s3-uploader (critical 9.8)
- [CVE-2021-34083](https://insights.sbomify.com/CVE-2021-34083/): Command injection in google-it (high 8.1)
- [CVE-2021-34082](https://insights.sbomify.com/CVE-2021-34082/): OS Command Injection in proctree (critical 9.8)
- [CVE-2021-34081](https://insights.sbomify.com/CVE-2021-34081/): OS Command Injection in gitsome (high 8.8)
- [CVE-2021-34080](https://insights.sbomify.com/CVE-2021-34080/): OS Command injection in ssl-utils (critical 9.8)
- [CVE-2021-34079](https://insights.sbomify.com/CVE-2021-34079/): Command injection in docker-tester (critical 9.8)
- [CVE-2021-34078](https://insights.sbomify.com/CVE-2021-34078/): OS Command Injection in lifion-verify-deps (high 8.8)
- [CVE-2021-34076](https://insights.sbomify.com/CVE-2021-34076/): File upload in phpok:phpok (high 8.8)
- [CVE-2021-34075](https://insights.sbomify.com/CVE-2021-34075/): Information disclosure in artica:pandora fms (medium 5.9)
- [CVE-2021-34074](https://insights.sbomify.com/CVE-2021-34074/): File upload in pandorafms:pandora fms (critical 9.8)
- [CVE-2021-34073](https://insights.sbomify.com/CVE-2021-34073/): Cross-site scripting in gadget works online ordering system project:gadget works online ordering system (medium 5.4)
- [CVE-2021-34071](https://insights.sbomify.com/CVE-2021-34071/): Memory corruption in tsmuxer project:tsmuxer (medium 5.5)
- [CVE-2021-34070](https://insights.sbomify.com/CVE-2021-34070/): Memory corruption in tsmuxer project:tsmuxer (medium 5.5)
- [CVE-2021-3407](https://insights.sbomify.com/CVE-2021-3407/): Memory corruption in mupdf (high 7.8)
- [CVE-2021-34069](https://insights.sbomify.com/CVE-2021-34069/): Denial of service in tsmuxer project:tsmuxer (medium 5.5)
- [CVE-2021-34068](https://insights.sbomify.com/CVE-2021-34068/): Memory corruption in tsmuxer project:tsmuxer (medium 5.5)
- [CVE-2021-34067](https://insights.sbomify.com/CVE-2021-34067/): Memory corruption in tsmuxer project:tsmuxer (medium 5.5)
- [CVE-2021-34066](https://insights.sbomify.com/CVE-2021-34066/): Deserialization in edgegallery:developer-be (critical 9.8)
- [CVE-2021-3406](https://insights.sbomify.com/CVE-2021-3406/): Security feature bypass in keylime (critical 9.8)
- [CVE-2021-34055](https://insights.sbomify.com/CVE-2021-34055/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-3405](https://insights.sbomify.com/CVE-2021-3405/): Memory corruption in libebml (medium 6.5)
- [CVE-2021-3404](https://insights.sbomify.com/CVE-2021-3404/): Memory corruption in ytnef (high 7.8)
- [CVE-2021-3403](https://insights.sbomify.com/CVE-2021-3403/): Memory corruption in ytnef (high 7.8)
- [CVE-2021-3402](https://insights.sbomify.com/CVE-2021-3402/): Integer overflow in libyara (critical 9.1)
- [CVE-2021-3401](https://insights.sbomify.com/CVE-2021-3401/): Command injection in bitcoin:bitcoin (critical 9.8)
- [CVE-2021-33990](https://insights.sbomify.com/CVE-2021-33990/): File upload in liferay:liferay portal (critical 9.8)
- [CVE-2021-33988](https://insights.sbomify.com/CVE-2021-33988/): Cross Site Scripting in Microweber (medium 6.1)
- [CVE-2021-33983](https://insights.sbomify.com/CVE-2021-33983/): Memory corruption in flatcc project:flatcc (high 7.8)
- [CVE-2021-33982](https://insights.sbomify.com/CVE-2021-33982/): Auth bypass in myfwc:fish \| hunt fl (high 7.5)
- [CVE-2021-33981](https://insights.sbomify.com/CVE-2021-33981/): Missing authorization in myfwc:fish \| hunt fl (medium 4.3)
- [CVE-2021-3398](https://insights.sbomify.com/CVE-2021-3398/): Integer overflow in stormshield:stormshield network security (medium 5.8)
- [CVE-2021-33975](https://insights.sbomify.com/CVE-2021-33975/): Memory corruption in browser.360:safe browser (critical 10.0)
- [CVE-2021-33974](https://insights.sbomify.com/CVE-2021-33974/): Memory corruption in 360:total security (high 8.8)
- [CVE-2021-33973](https://insights.sbomify.com/CVE-2021-33973/): Memory corruption in 360totalsecurity:360 total security (high 7.8)
- [CVE-2021-33972](https://insights.sbomify.com/CVE-2021-33972/): Memory corruption in browser.360:safe browser (critical 10.0)
- [CVE-2021-33971](https://insights.sbomify.com/CVE-2021-33971/): Memory corruption in 360:total security (high 7.8)
- [CVE-2021-33970](https://insights.sbomify.com/CVE-2021-33970/): Memory corruption in browser.360:chrome (critical 10.0)
- [CVE-2021-33966](https://insights.sbomify.com/CVE-2021-33966/): Cross-site scripting in spotweb project:spotweb (medium 5.4)
- [CVE-2021-33965](https://insights.sbomify.com/CVE-2021-33965/): Command injection in chinamobile:an lianbao wf-1 firmware (high 8.8)
- [CVE-2021-33964](https://insights.sbomify.com/CVE-2021-33964/): Command injection in chinamobile:an lianbao wf-1 firmware (high 8.8)
- [CVE-2021-33963](https://insights.sbomify.com/CVE-2021-33963/): Command injection in chinamobile:an lianbao wf-1 firmware (critical 9.8)
- [CVE-2021-33962](https://insights.sbomify.com/CVE-2021-33962/): Command injection in chinamobileltd:an lianbao wf firmware-1 (critical 9.8)
- [CVE-2021-33961](https://insights.sbomify.com/CVE-2021-33961/): Cross-site scripting in enhanced-github project:enhanced-github (medium 6.1)
- [CVE-2021-3396](https://insights.sbomify.com/CVE-2021-3396/): OpenNMS Horizon RCE via JEXL2 expression (high 8.8)
- [CVE-2021-33959](https://insights.sbomify.com/CVE-2021-33959/): Server-side request forgery in plex:media server (high 7.5)
- [CVE-2021-33950](https://insights.sbomify.com/CVE-2021-33950/): XML external entity in openkm:openkm (high 7.5)
- [CVE-2021-3395](https://insights.sbomify.com/CVE-2021-3395/): Cross-site scripting in pryaniki:pryaniki (medium 5.4)
- [CVE-2021-33949](https://insights.sbomify.com/CVE-2021-33949/): Code injection in wms project:wms (critical 9.8)
- [CVE-2021-33948](https://insights.sbomify.com/CVE-2021-33948/): SQL injection in hotels server project:hotels server (critical 9.8)
- [CVE-2021-33945](https://insights.sbomify.com/CVE-2021-33945/): Memory corruption in ricoh:aficio sp 3500sf firmware (critical 9.8)
- [CVE-2021-3394](https://insights.sbomify.com/CVE-2021-3394/): Misconfiguration in millewin:millewin (high 8.8)
- [CVE-2021-33938](https://insights.sbomify.com/CVE-2021-33938/): Memory corruption in opensuse:libsolv (high 7.5)
- [CVE-2021-33930](https://insights.sbomify.com/CVE-2021-33930/): Memory corruption in opensuse:libsolv (high 7.5)
- [CVE-2021-3393](https://insights.sbomify.com/CVE-2021-3393/): Generation of Error Message Containing Sensitive Information in postgresql (medium 4.3)
- [CVE-2021-33929](https://insights.sbomify.com/CVE-2021-33929/): Memory corruption in opensuse:libsolv (high 7.5)
- [CVE-2021-33928](https://insights.sbomify.com/CVE-2021-33928/): Memory corruption in opensuse:libsolv (high 7.5)
- [CVE-2021-33926](https://insights.sbomify.com/CVE-2021-33926/): Server-Side Request Forgery in Plone CMS (high 8.8)
- [CVE-2021-33925](https://insights.sbomify.com/CVE-2021-33925/): SQL injection in cms-corephp project:cms-corephp (critical 9.8)
- [CVE-2021-33924](https://insights.sbomify.com/CVE-2021-33924/): Missing authorization in confluent:ansible (critical 9.8)
- [CVE-2021-33923](https://insights.sbomify.com/CVE-2021-33923/): Misconfiguration in confluent:cp-ansible (medium 5.5)
- [CVE-2021-3392](https://insights.sbomify.com/CVE-2021-3392/): Use after free in QEMU (low 3.2)
- [CVE-2021-33913](https://insights.sbomify.com/CVE-2021-33913/): Memory corruption in libspf2 project:libspf2 (critical 9.8)
- [CVE-2021-33912](https://insights.sbomify.com/CVE-2021-33912/): Memory corruption in debian:debian linux (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/145/