# Vulnerabilities published in 2021


- [CVE-2021-33911](https://insights.sbomify.com/CVE-2021-33911/): Other in zohocorp:manageengine admanager plus (critical 9.8)
- [CVE-2021-33910](https://insights.sbomify.com/CVE-2021-33910/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2021-3391](https://insights.sbomify.com/CVE-2021-3391/): Information disclosure in mobileiron:mobile\@work (medium 5.3)
- [CVE-2021-33909](https://insights.sbomify.com/CVE-2021-33909/): Integer overflow in debian:debian linux (high 7.8)
- [CVE-2021-33907](https://insights.sbomify.com/CVE-2021-33907/): Security feature bypass in Zoom Client for Meetings for Windows (critical 9.8)
- [CVE-2021-33904](https://insights.sbomify.com/CVE-2021-33904/): Cross-site scripting in accela:civic platform (medium 6.1)
- [CVE-2021-33903](https://insights.sbomify.com/CVE-2021-33903/): Auth bypass in lancom-systems:lcos (high 8.8)
- [CVE-2021-33900](https://insights.sbomify.com/CVE-2021-33900/): StartTLS and SASL confidentiality protection bypass (high 7.5)
- [CVE-2021-33898](https://insights.sbomify.com/CVE-2021-33898/): Deserialization in invoiceninja:invoice ninja (high 8.1)
- [CVE-2021-33897](https://insights.sbomify.com/CVE-2021-33897/): Memory corruption in synthesiagame:synthesia (medium 5.5)
- [CVE-2021-33896](https://insights.sbomify.com/CVE-2021-33896/): Path traversal in dino:dino (medium 5.3)
- [CVE-2021-33895](https://insights.sbomify.com/CVE-2021-33895/): Auth bypass in etinet:backbox e4.09 firmware (high 8.1)
- [CVE-2021-33894](https://insights.sbomify.com/CVE-2021-33894/): SQL injection in progress:moveit transfer (high 8.8)
- [CVE-2021-33889](https://insights.sbomify.com/CVE-2021-33889/): Memory corruption in openthread:wpantund (medium 6.8)
- [CVE-2021-33887](https://insights.sbomify.com/CVE-2021-33887/): Security feature bypass in onepeloton:ttr01 firmware (medium 6.8)
- [CVE-2021-33886](https://insights.sbomify.com/CVE-2021-33886/): Command injection in bbraun:spacecom2 (high 8.1)
- [CVE-2021-33885](https://insights.sbomify.com/CVE-2021-33885/): Security feature bypass in bbraun:spacecom2 (critical 10.0)
- [CVE-2021-33884](https://insights.sbomify.com/CVE-2021-33884/): File upload in bbraun:spacecom2 (medium 6.5)
- [CVE-2021-33883](https://insights.sbomify.com/CVE-2021-33883/): Information disclosure in bbraun:spacecom2 (medium 5.9)
- [CVE-2021-33882](https://insights.sbomify.com/CVE-2021-33882/): Missing authorization in bbraun:spacecom2 (medium 6.8)
- [CVE-2021-33881](https://insights.sbomify.com/CVE-2021-33881/): Security feature bypass in nxp:mifare ultralight c firmware (medium 4.2)
- [CVE-2021-33880](https://insights.sbomify.com/CVE-2021-33880/): Observable Timing Discrepancy in aaugustin websockets library (medium 5.9)
- [CVE-2021-33879](https://insights.sbomify.com/CVE-2021-33879/): Supply chain in tencent:gameloop (high 8.1)
- [CVE-2021-33853](https://insights.sbomify.com/CVE-2021-33853/): Cross-site scripting in X2CRM (medium 5.4)
- [CVE-2021-33852](https://insights.sbomify.com/CVE-2021-33852/): Cross-site scripting in WordPress Post Duplicator Plugin (medium 5.4)
- [CVE-2021-33851](https://insights.sbomify.com/CVE-2021-33851/): Cross-site scripting in WordPress Customize Login Image Plugin (medium 5.4)
- [CVE-2021-33850](https://insights.sbomify.com/CVE-2021-33850/): Cross-site scripting in Microsoft Clarity (medium 5.4)
- [CVE-2021-33849](https://insights.sbomify.com/CVE-2021-33849/): Cross-site scripting in Zoho CRM Lead Magnet (medium 5.4)
- [CVE-2021-33848](https://insights.sbomify.com/CVE-2021-33848/): Fresenius Kabi Agilia Connect Infusion System cross site scripting (medium 5.4)
- [CVE-2021-33847](https://insights.sbomify.com/CVE-2021-33847/): Memory corruption in Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products (high 7.8)
- [CVE-2021-33846](https://insights.sbomify.com/CVE-2021-33846/): Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm (medium 5.9)
- [CVE-2021-33845](https://insights.sbomify.com/CVE-2021-33845/): Username enumeration through lockout message in REST API (medium 5.3)
- [CVE-2021-33844](https://insights.sbomify.com/CVE-2021-33844/): Denial of service in SoX (Sound eXchange) (medium 5.5)
- [CVE-2021-33843](https://insights.sbomify.com/CVE-2021-33843/): Fresenius Kabi Agilia Connect Infusion System files or directories accessible to external parties (medium 5.3)
- [CVE-2021-33842](https://insights.sbomify.com/CVE-2021-33842/): Circutor SGE-PLC1000 improper authentication (high 8.8)
- [CVE-2021-33841](https://insights.sbomify.com/CVE-2021-33841/): Circutor SGE-PLC1000 OS command Injection (critical 10.0)
- [CVE-2021-33840](https://insights.sbomify.com/CVE-2021-33840/): Security feature bypass in luca-app:luca (high 7.5)
- [CVE-2021-3384](https://insights.sbomify.com/CVE-2021-3384/): Denial of service in stormshield:stormshield network security (medium 5.3)
- [CVE-2021-33839](https://insights.sbomify.com/CVE-2021-33839/): Information disclosure in luca-app:luca (high 7.5)
- [CVE-2021-33838](https://insights.sbomify.com/CVE-2021-33838/): Information disclosure in luca-app:luca (high 7.5)
- [CVE-2021-33834](https://insights.sbomify.com/CVE-2021-33834/): Memory corruption in insyde:h2offt (high 7.1)
- [CVE-2021-33833](https://insights.sbomify.com/CVE-2021-33833/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2021-33831](https://insights.sbomify.com/CVE-2021-33831/): Denial of service in th-wildau:covid-19 contact tracing (medium 6.5)
- [CVE-2021-33829](https://insights.sbomify.com/CVE-2021-33829/): ckeditor4 vulnerable to cross-site scripting (medium 6.1)
- [CVE-2021-33828](https://insights.sbomify.com/CVE-2021-33828/): Security feature bypass in owncloud:files antivirus (high 8.8)
- [CVE-2021-33827](https://insights.sbomify.com/CVE-2021-33827/): Command injection in owncloud:files antivirus (high 7.2)
- [CVE-2021-33824](https://insights.sbomify.com/CVE-2021-33824/): Denial of service in moxa:mgate mb3180 firmware (high 7.5)
- [CVE-2021-33823](https://insights.sbomify.com/CVE-2021-33823/): Denial of service in moxa:mgate mb3180 firmware (high 7.5)
- [CVE-2021-33822](https://insights.sbomify.com/CVE-2021-33822/): Denial of service in sing4g:4gee router hh70vb firmware (high 7.5)
- [CVE-2021-33820](https://insights.sbomify.com/CVE-2021-33820/): Denial of service in ui:camera g3 flex firmware (high 7.5)
- [CVE-2021-3382](https://insights.sbomify.com/CVE-2021-3382/): Buffer Overflow in gitea (high 7.5)
- [CVE-2021-33818](https://insights.sbomify.com/CVE-2021-33818/): Denial of service in ui:camera g3 flex firmware (high 7.5)
- [CVE-2021-33816](https://insights.sbomify.com/CVE-2021-33816/): Dolibarr remote PHP code execution (critical 9.8)
- [CVE-2021-33815](https://insights.sbomify.com/CVE-2021-33815/): Memory corruption in ffmpeg:ffmpeg (high 8.8)
- [CVE-2021-33813](https://insights.sbomify.com/CVE-2021-33813/): XML External Entity (XXE) Injection in JDOM (high 7.5)
- [CVE-2021-33807](https://insights.sbomify.com/CVE-2021-33807/): Path traversal in gespage:gespage (high 7.5)
- [CVE-2021-33806](https://insights.sbomify.com/CVE-2021-33806/): Deserialization in bdew:bdlib (critical 9.8)
- [CVE-2021-33800](https://insights.sbomify.com/CVE-2021-33800/): Path traversal in Druid (high 7.5)
- [CVE-2021-3380](https://insights.sbomify.com/CVE-2021-3380/): Missing authorization in height8tech:h8 ssrms (medium 6.5)
- [CVE-2021-33798](https://insights.sbomify.com/CVE-2021-33798/): Null dereference in libpano13 (medium 4.7)
- [CVE-2021-33797](https://insights.sbomify.com/CVE-2021-33797/): Integer overflow in mujs (critical 9.8)
- [CVE-2021-33796](https://insights.sbomify.com/CVE-2021-33796/): Use after free in MuJS (critical 10.0)
- [CVE-2021-33795](https://insights.sbomify.com/CVE-2021-33795/): Security feature bypass in foxitsoftware:foxit reader (medium 5.5)
- [CVE-2021-33794](https://insights.sbomify.com/CVE-2021-33794/): Information disclosure in foxitsoftware:foxit reader (critical 9.1)
- [CVE-2021-33793](https://insights.sbomify.com/CVE-2021-33793/): Memory corruption in foxitsoftware:foxit reader (critical 9.8)
- [CVE-2021-33792](https://insights.sbomify.com/CVE-2021-33792/): Memory corruption in foxitsoftware:foxit reader (high 7.8)
- [CVE-2021-33790](https://insights.sbomify.com/CVE-2021-33790/): Deserialization in techreborn:reborncore (critical 9.8)
- [CVE-2021-33788](https://insights.sbomify.com/CVE-2021-33788/): Windows LSA Denial of Service Vulnerability (high 7.5)
- [CVE-2021-33786](https://insights.sbomify.com/CVE-2021-33786/): Windows LSA Security Feature Bypass Vulnerability (high 8.1)
- [CVE-2021-33785](https://insights.sbomify.com/CVE-2021-33785/): Windows AF_UNIX Socket Provider Denial of Service Vulnerability (high 7.5)
- [CVE-2021-33784](https://insights.sbomify.com/CVE-2021-33784/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-33783](https://insights.sbomify.com/CVE-2021-33783/): Windows SMB Information Disclosure Vulnerability (medium 6.5)
- [CVE-2021-33782](https://insights.sbomify.com/CVE-2021-33782/): Windows Authenticode Spoofing Vulnerability (medium 5.5)
- [CVE-2021-33781](https://insights.sbomify.com/CVE-2021-33781/): Azure AD Security Feature Bypass Vulnerability (high 8.1)
- [CVE-2021-33780](https://insights.sbomify.com/CVE-2021-33780/): Windows DNS Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-3378](https://insights.sbomify.com/CVE-2021-3378/): File upload in fortilogger:fortilogger (critical 9.8)
- [CVE-2021-33779](https://insights.sbomify.com/CVE-2021-33779/): Windows AD FS Security Feature Bypass Vulnerability (high 8.1)
- [CVE-2021-33778](https://insights.sbomify.com/CVE-2021-33778/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-33777](https://insights.sbomify.com/CVE-2021-33777/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-33776](https://insights.sbomify.com/CVE-2021-33776/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-33775](https://insights.sbomify.com/CVE-2021-33775/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-33774](https://insights.sbomify.com/CVE-2021-33774/): Windows Event Tracing Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-33773](https://insights.sbomify.com/CVE-2021-33773/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-33772](https://insights.sbomify.com/CVE-2021-33772/): Windows TCP/IP Driver Denial of Service Vulnerability (high 7.5)
- [CVE-2021-33771](https://insights.sbomify.com/CVE-2021-33771/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-3377](https://insights.sbomify.com/CVE-2021-3377/): ansi_up cross-site scripting vulnerability (medium 6.1)
- [CVE-2021-33768](https://insights.sbomify.com/CVE-2021-33768/): Microsoft Exchange Server Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2021-33767](https://insights.sbomify.com/CVE-2021-33767/): Open Enclave SDK Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2021-33766](https://insights.sbomify.com/CVE-2021-33766/): Microsoft Exchange Server Information Disclosure (high 7.3, exploited in the wild)
- [CVE-2021-33765](https://insights.sbomify.com/CVE-2021-33765/): Windows Installer Spoofing Vulnerability (medium 6.2)
- [CVE-2021-33764](https://insights.sbomify.com/CVE-2021-33764/): Windows Key Distribution Center Information Disclosure Vulnerability (medium 5.9)
- [CVE-2021-33763](https://insights.sbomify.com/CVE-2021-33763/): Windows Remote Access Connection Manager Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-33762](https://insights.sbomify.com/CVE-2021-33762/): Azure CycleCloud Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-33761](https://insights.sbomify.com/CVE-2021-33761/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-33760](https://insights.sbomify.com/CVE-2021-33760/): Media Foundation Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-3376](https://insights.sbomify.com/CVE-2021-3376/): Privilege escalation in cuppacms:cuppacms (high 8.8)
- [CVE-2021-33759](https://insights.sbomify.com/CVE-2021-33759/): Windows Desktop Bridge Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-33758](https://insights.sbomify.com/CVE-2021-33758/): Windows Hyper-V Denial of Service Vulnerability (high 7.7)
- [CVE-2021-33757](https://insights.sbomify.com/CVE-2021-33757/): Windows Security Account Manager Remote Protocol Security Feature Bypass Vulnerability (medium 5.3)
- [CVE-2021-33756](https://insights.sbomify.com/CVE-2021-33756/): Windows DNS Snap-in Remote Code Execution Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/146/