# Vulnerabilities published in 2021


- [CVE-2021-33755](https://insights.sbomify.com/CVE-2021-33755/): Windows Hyper-V Denial of Service Vulnerability (medium 6.3)
- [CVE-2021-33754](https://insights.sbomify.com/CVE-2021-33754/): Windows DNS Server Remote Code Execution Vulnerability (high 8.0)
- [CVE-2021-33753](https://insights.sbomify.com/CVE-2021-33753/): Microsoft Bing Search Spoofing Vulnerability (medium 4.7)
- [CVE-2021-33752](https://insights.sbomify.com/CVE-2021-33752/): Windows DNS Snap-in Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-33751](https://insights.sbomify.com/CVE-2021-33751/): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-33750](https://insights.sbomify.com/CVE-2021-33750/): Windows DNS Snap-in Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-3375](https://insights.sbomify.com/CVE-2021-3375/): Memory corruption in atomisystems:activepresenter (critical 9.8)
- [CVE-2021-33749](https://insights.sbomify.com/CVE-2021-33749/): Windows DNS Snap-in Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-33746](https://insights.sbomify.com/CVE-2021-33746/): Windows DNS Server Remote Code Execution Vulnerability (high 8.0)
- [CVE-2021-33745](https://insights.sbomify.com/CVE-2021-33745/): Windows DNS Server Denial of Service Vulnerability (medium 6.5)
- [CVE-2021-33744](https://insights.sbomify.com/CVE-2021-33744/): Windows Secure Kernel Mode Security Feature Bypass Vulnerability (medium 5.3)
- [CVE-2021-33743](https://insights.sbomify.com/CVE-2021-33743/): Windows Projected File System Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-33742](https://insights.sbomify.com/CVE-2021-33742/): Microsoft Windows MSHTML Platform Remote Code Execution (high 7.5, exploited in the wild)
- [CVE-2021-33741](https://insights.sbomify.com/CVE-2021-33741/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2021-33740](https://insights.sbomify.com/CVE-2021-33740/): Windows Media Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-3374](https://insights.sbomify.com/CVE-2021-3374/): Path traversal in rstudio:shiny server (medium 5.3)
- [CVE-2021-33739](https://insights.sbomify.com/CVE-2021-33739/): Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation (high 8.4, exploited in the wild)
- [CVE-2021-33738](https://insights.sbomify.com/CVE-2021-33738/): Memory corruption in JT2Go (low 3.3)
- [CVE-2021-33737](https://insights.sbomify.com/CVE-2021-33737/): Memory corruption in SIMATIC CP 343-1 (incl. SIPLUS variants) (high 7.5)
- [CVE-2021-33736](https://insights.sbomify.com/CVE-2021-33736/): SQL injection in SINEC NMS (high 7.2)
- [CVE-2021-33735](https://insights.sbomify.com/CVE-2021-33735/): SQL injection in SINEC NMS (high 7.2)
- [CVE-2021-33734](https://insights.sbomify.com/CVE-2021-33734/): SQL injection in SINEC NMS (high 7.2)
- [CVE-2021-33733](https://insights.sbomify.com/CVE-2021-33733/): SQL injection in SINEC NMS (high 7.2)
- [CVE-2021-33732](https://insights.sbomify.com/CVE-2021-33732/): SQL injection in SINEC NMS (high 7.2)
- [CVE-2021-33731](https://insights.sbomify.com/CVE-2021-33731/): SQL injection in SINEC NMS (high 7.2)
- [CVE-2021-33730](https://insights.sbomify.com/CVE-2021-33730/): SQL injection in SINEC NMS (high 7.2)
- [CVE-2021-33729](https://insights.sbomify.com/CVE-2021-33729/): SQL injection in SINEC NMS (high 8.8)
- [CVE-2021-33728](https://insights.sbomify.com/CVE-2021-33728/): Deserialization in SINEC NMS (high 7.2)
- [CVE-2021-33727](https://insights.sbomify.com/CVE-2021-33727/): Information disclosure in SINEC NMS (medium 6.5)
- [CVE-2021-33726](https://insights.sbomify.com/CVE-2021-33726/): Path traversal in SINEC NMS (high 7.5)
- [CVE-2021-33725](https://insights.sbomify.com/CVE-2021-33725/): Path traversal in SINEC NMS (critical 9.1)
- [CVE-2021-33724](https://insights.sbomify.com/CVE-2021-33724/): Path traversal in SINEC NMS (critical 9.1)
- [CVE-2021-33723](https://insights.sbomify.com/CVE-2021-33723/): Missing authorization in SINEC NMS (medium 6.5)
- [CVE-2021-33722](https://insights.sbomify.com/CVE-2021-33722/): Path traversal in SINEC NMS (medium 4.9)
- [CVE-2021-33721](https://insights.sbomify.com/CVE-2021-33721/): Command injection in SINEC NMS (high 7.2)
- [CVE-2021-33720](https://insights.sbomify.com/CVE-2021-33720/): Memory corruption in SIPROTEC 5 relays with CPU variants CP050 (high 7.5)
- [CVE-2021-33719](https://insights.sbomify.com/CVE-2021-33719/): Memory corruption in SIPROTEC 5 relays with CPU variants CP050 (critical 9.8)
- [CVE-2021-33718](https://insights.sbomify.com/CVE-2021-33718/): Missing authorization in Mendix Applications using Mendix 7 (medium 5.3)
- [CVE-2021-33717](https://insights.sbomify.com/CVE-2021-33717/): Null dereference in JT2Go (medium 5.5)
- [CVE-2021-33716](https://insights.sbomify.com/CVE-2021-33716/): Information disclosure in SIMATIC CP 1543-1 (incl. SIPLUS variants) (medium 6.5)
- [CVE-2021-33715](https://insights.sbomify.com/CVE-2021-33715/): Null dereference in JT Utilities (medium 5.5)
- [CVE-2021-33714](https://insights.sbomify.com/CVE-2021-33714/): Null dereference in JT Utilities (medium 5.5)
- [CVE-2021-33713](https://insights.sbomify.com/CVE-2021-33713/): Denial of service in JT Utilities (medium 5.5)
- [CVE-2021-33712](https://insights.sbomify.com/CVE-2021-33712/): Privilege escalation in Mendix SAML Module (high 8.8)
- [CVE-2021-33711](https://insights.sbomify.com/CVE-2021-33711/): Information disclosure in Teamcenter Active Workspace V4 (medium 5.3)
- [CVE-2021-33710](https://insights.sbomify.com/CVE-2021-33710/): Cross-site scripting in Teamcenter Active Workspace V4 (medium 6.1)
- [CVE-2021-33709](https://insights.sbomify.com/CVE-2021-33709/): Information disclosure in Teamcenter Active Workspace V4 (medium 4.3)
- [CVE-2021-33708](https://insights.sbomify.com/CVE-2021-33708/): Privilege escalation in Kyma (high 7.6)
- [CVE-2021-33707](https://insights.sbomify.com/CVE-2021-33707/): Open redirect in SAP NetWeaver (Knowledge Management) (medium 6.1)
- [CVE-2021-33706](https://insights.sbomify.com/CVE-2021-33706/): Other in InfraBox (medium 4.3)
- [CVE-2021-33705](https://insights.sbomify.com/CVE-2021-33705/): Server-side request forgery in SAP NetWeaver Enterprise Portal (high 8.1)
- [CVE-2021-33704](https://insights.sbomify.com/CVE-2021-33704/): Missing authorization in SAP Business One (medium 6.3)
- [CVE-2021-33703](https://insights.sbomify.com/CVE-2021-33703/): Cross-site scripting in SAP NetWeaver Enterprise Portal (Application Extensions) (high 8.3)
- [CVE-2021-33702](https://insights.sbomify.com/CVE-2021-33702/): Cross-site scripting in SAP NetWeaver Enterprise Portal (high 8.3)
- [CVE-2021-33701](https://insights.sbomify.com/CVE-2021-33701/): SQL injection in DMIS Mobile Plug-In (critical 9.1)
- [CVE-2021-33700](https://insights.sbomify.com/CVE-2021-33700/): Auth bypass in SAP Business One (high 7.0)
- [CVE-2021-3370](https://insights.sbomify.com/CVE-2021-3370/): Cross-site scripting in douco:douphp (medium 6.1)
- [CVE-2021-33699](https://insights.sbomify.com/CVE-2021-33699/): Misconfiguration in SAP Fiori Client Native Mobile for Android (high 7.6)
- [CVE-2021-33698](https://insights.sbomify.com/CVE-2021-33698/): File upload in SAP Business One (critical 9.9)
- [CVE-2021-33697](https://insights.sbomify.com/CVE-2021-33697/): Open redirect in SAP BusinessObjects Business Intelligence Platform (SAPUI5) (medium 4.7)
- [CVE-2021-33696](https://insights.sbomify.com/CVE-2021-33696/): Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (Crystal Report) (medium 5.4)
- [CVE-2021-33695](https://insights.sbomify.com/CVE-2021-33695/): Weak cryptography in SAP Cloud Connector (medium 6.8)
- [CVE-2021-33694](https://insights.sbomify.com/CVE-2021-33694/): Cross-site scripting in SAP Cloud Connector (medium 5.9)
- [CVE-2021-33693](https://insights.sbomify.com/CVE-2021-33693/): Code injection in SAP Cloud Connector (medium 5.7)
- [CVE-2021-33692](https://insights.sbomify.com/CVE-2021-33692/): Path traversal in SAP Cloud Connector (medium 5.2)
- [CVE-2021-33691](https://insights.sbomify.com/CVE-2021-33691/): Cross-site scripting in SAP NetWeaver Development Infrastructure (Notification Service) (medium 6.9)
- [CVE-2021-33690](https://insights.sbomify.com/CVE-2021-33690/): Server-side request forgery in SAP NetWeaver Development Infrastructure (Component Build Service) (critical 9.9)
- [CVE-2021-33689](https://insights.sbomify.com/CVE-2021-33689/): Other in SAP NetWeaver AS JAVA (Administrator applications) (low 3.5)
- [CVE-2021-33688](https://insights.sbomify.com/CVE-2021-33688/): SQL injection in SAP Business One (medium 4.3)
- [CVE-2021-33687](https://insights.sbomify.com/CVE-2021-33687/): Information disclosure in SAP NetWeaver AS JAVA (Enterprise Portal) (medium 4.5)
- [CVE-2021-33686](https://insights.sbomify.com/CVE-2021-33686/): Information disclosure in SAP Business One (medium 5.3)
- [CVE-2021-33685](https://insights.sbomify.com/CVE-2021-33685/): Path traversal in SAP Business One (medium 6.5)
- [CVE-2021-33684](https://insights.sbomify.com/CVE-2021-33684/): Memory corruption in SAP NetWeaver AS ABAP and ABAP Platform (medium 5.3)
- [CVE-2021-33683](https://insights.sbomify.com/CVE-2021-33683/): Other in SAP Web Dispatcher and Internet Communication Manager (medium 5.4)
- [CVE-2021-33682](https://insights.sbomify.com/CVE-2021-33682/): Cross-site scripting in SAP Lumira Server (medium 5.4)
- [CVE-2021-33681](https://insights.sbomify.com/CVE-2021-33681/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-33680](https://insights.sbomify.com/CVE-2021-33680/): Memory corruption in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-33679](https://insights.sbomify.com/CVE-2021-33679/): Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (BI Workspace) (medium 5.4)
- [CVE-2021-33678](https://insights.sbomify.com/CVE-2021-33678/): Code injection in SAP NetWeaver AS ABAP (Reconciliation Framework) (medium 6.5)
- [CVE-2021-33677](https://insights.sbomify.com/CVE-2021-33677/): Information disclosure in SAP NetWeaver AS ABAP and ABAP Platform (medium 6.5)
- [CVE-2021-33676](https://insights.sbomify.com/CVE-2021-33676/): Missing authorization in SAP CRM (medium 6.8)
- [CVE-2021-33675](https://insights.sbomify.com/CVE-2021-33675/): Cross-site scripting in SAP Contact Center (medium 6.1)
- [CVE-2021-33674](https://insights.sbomify.com/CVE-2021-33674/): Cross-site scripting in SAP Contact Center (medium 6.5)
- [CVE-2021-33673](https://insights.sbomify.com/CVE-2021-33673/): Cross-site scripting in SAP Contact Center (high 8.3)
- [CVE-2021-33672](https://insights.sbomify.com/CVE-2021-33672/): Cross-site scripting in SAP Contact Center (critical 9.6)
- [CVE-2021-33671](https://insights.sbomify.com/CVE-2021-33671/): Missing authorization in SAP NetWeaver Guided Procedures (Administration Workset) (high 7.6)
- [CVE-2021-33670](https://insights.sbomify.com/CVE-2021-33670/): Denial of service in SAP NetWeaver AS for Java (Http Service) (high 7.5)
- [CVE-2021-33669](https://insights.sbomify.com/CVE-2021-33669/): Other in SAP Mobile SDK Certificate Provider (high 7.8)
- [CVE-2021-33668](https://insights.sbomify.com/CVE-2021-33668/): Other in SAP InfraBox (medium 5.3)
- [CVE-2021-33667](https://insights.sbomify.com/CVE-2021-33667/): Information disclosure in SAP Business Objects Web Intelligence (BI Launchpad) (medium 4.3)
- [CVE-2021-33666](https://insights.sbomify.com/CVE-2021-33666/): Cross-site scripting in SAP Commerce Cloud (medium 4.7)
- [CVE-2021-33665](https://insights.sbomify.com/CVE-2021-33665/): Cross-site scripting in SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML) (medium 5.4)
- [CVE-2021-33664](https://insights.sbomify.com/CVE-2021-33664/): Cross-site scripting in SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP) (medium 5.4)
- [CVE-2021-33663](https://insights.sbomify.com/CVE-2021-33663/): Other in SAP NetWeaver AS ABAP (medium 5.8)
- [CVE-2021-33662](https://insights.sbomify.com/CVE-2021-33662/): Information disclosure in SAP Business One (medium 6.7)
- [CVE-2021-33661](https://insights.sbomify.com/CVE-2021-33661/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-33660](https://insights.sbomify.com/CVE-2021-33660/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-33659](https://insights.sbomify.com/CVE-2021-33659/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-33658](https://insights.sbomify.com/CVE-2021-33658/): Auth bypass in atune (high 7.8)
- [CVE-2021-33657](https://insights.sbomify.com/CVE-2021-33657/): Memory corruption in SDL2 (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/147/