# Vulnerabilities published in 2021


- [CVE-2021-33656](https://insights.sbomify.com/CVE-2021-33656/): Memory corruption in openEuler:kernel (medium 6.8)
- [CVE-2021-33655](https://insights.sbomify.com/CVE-2021-33655/): Memory corruption in kernel (medium 6.7)
- [CVE-2021-33654](https://insights.sbomify.com/CVE-2021-33654/): Denial of service in openEuler:mindspore (high 7.5)
- [CVE-2021-33653](https://insights.sbomify.com/CVE-2021-33653/): Denial of service in openEuler:mindspore (high 7.5)
- [CVE-2021-33652](https://insights.sbomify.com/CVE-2021-33652/): Denial of service in openEuler:mindspore (high 7.5)
- [CVE-2021-33651](https://insights.sbomify.com/CVE-2021-33651/): Denial of service in openEuler:mindspore (high 7.5)
- [CVE-2021-33650](https://insights.sbomify.com/CVE-2021-33650/): Memory corruption in openEuler:mindspore (high 7.5)
- [CVE-2021-33649](https://insights.sbomify.com/CVE-2021-33649/): Memory corruption in openEuler:mindspore (high 7.5)
- [CVE-2021-33648](https://insights.sbomify.com/CVE-2021-33648/): Memory corruption in openEuler:mindspore (high 7.5)
- [CVE-2021-33647](https://insights.sbomify.com/CVE-2021-33647/): Memory corruption in openEuler:mindspore (high 7.5)
- [CVE-2021-33646](https://insights.sbomify.com/CVE-2021-33646/): Denial of service in libtar (high 7.5)
- [CVE-2021-33645](https://insights.sbomify.com/CVE-2021-33645/): Denial of service in libtar (high 7.5)
- [CVE-2021-33644](https://insights.sbomify.com/CVE-2021-33644/): Memory corruption in libtar (high 8.1)
- [CVE-2021-33643](https://insights.sbomify.com/CVE-2021-33643/): Memory corruption in libtar (medium 6.5)
- [CVE-2021-33642](https://insights.sbomify.com/CVE-2021-33642/): Denial of service in byacc (medium 5.5)
- [CVE-2021-33641](https://insights.sbomify.com/CVE-2021-33641/): Use after free in byacc (high 7.8)
- [CVE-2021-33640](https://insights.sbomify.com/CVE-2021-33640/): Use after free in openEuler 20.03 LTS SP1 (medium 6.2)
- [CVE-2021-33639](https://insights.sbomify.com/CVE-2021-33639/): Memory corruption in kernel (high 7.5)
- [CVE-2021-33638](https://insights.sbomify.com/CVE-2021-33638/): Run copy with container in a malicious directory may cause container escaping (high 8.4)
- [CVE-2021-33637](https://insights.sbomify.com/CVE-2021-33637/): Export container in a malicious directory may cause process to be hijacked (high 8.4)
- [CVE-2021-33636](https://insights.sbomify.com/CVE-2021-33636/): Load malicious images may cause process to be hijacked (high 8.4)
- [CVE-2021-33635](https://insights.sbomify.com/CVE-2021-33635/): Pull malicious images may cause process to be hijacked (critical 9.8)
- [CVE-2021-33634](https://insights.sbomify.com/CVE-2021-33634/): Malicious image running containers may cause DoS attacks (medium 6.3)
- [CVE-2021-33633](https://insights.sbomify.com/CVE-2021-33633/): Command Injection in aops-ceres (high 7.3)
- [CVE-2021-33632](https://insights.sbomify.com/CVE-2021-33632/): TOCTOU Race Condition problem in iSulad (high 7.0)
- [CVE-2021-33631](https://insights.sbomify.com/CVE-2021-33631/): Kernel crash in EXT4 filesystem (medium 5.5)
- [CVE-2021-33630](https://insights.sbomify.com/CVE-2021-33630/): NULL-ptr-deref in network sched (medium 5.5)
- [CVE-2021-33629](https://insights.sbomify.com/CVE-2021-33629/): Denial of service in openeuler:isula-build (high 7.5)
- [CVE-2021-33627](https://insights.sbomify.com/CVE-2021-33627/): Memory corruption in insyde:insydeh2o (high 8.2)
- [CVE-2021-33626](https://insights.sbomify.com/CVE-2021-33626/): Memory corruption in insyde:insydeh2o (high 7.8)
- [CVE-2021-33625](https://insights.sbomify.com/CVE-2021-33625/): Memory corruption in insyde:insydeh2o (high 7.5)
- [CVE-2021-33624](https://insights.sbomify.com/CVE-2021-33624/): Information disclosure in debian:debian linux (medium 4.7)
- [CVE-2021-33623](https://insights.sbomify.com/CVE-2021-33623/): Uncontrolled Resource Consumption in trim-newlines (high 7.5)
- [CVE-2021-33622](https://insights.sbomify.com/CVE-2021-33622/): Other in sylabs:singularity (critical 9.8)
- [CVE-2021-33621](https://insights.sbomify.com/CVE-2021-33621/): HTTP response splitting in CGI (high 8.8)
- [CVE-2021-33620](https://insights.sbomify.com/CVE-2021-33620/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2021-33618](https://insights.sbomify.com/CVE-2021-33618/): Dolibarr ERP and CRM contain XSS Vulnerability (medium 6.1)
- [CVE-2021-33617](https://insights.sbomify.com/CVE-2021-33617/): Information disclosure in zohocorp:manageengine password manager pro (medium 5.3)
- [CVE-2021-33616](https://insights.sbomify.com/CVE-2021-33616/): Cross-site scripting in rsa:archer (medium 5.4)
- [CVE-2021-33615](https://insights.sbomify.com/CVE-2021-33615/): File upload in rsa:archer (high 7.5)
- [CVE-2021-33611](https://insights.sbomify.com/CVE-2021-33611/): Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14 (medium 6.1)
- [CVE-2021-33609](https://insights.sbomify.com/CVE-2021-33609/): Denial of service in DataCommunicator class in Vaadin 8 (medium 4.3)
- [CVE-2021-33605](https://insights.sbomify.com/CVE-2021-33605/): Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20 (medium 4.3)
- [CVE-2021-33604](https://insights.sbomify.com/CVE-2021-33604/): Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19 (low 2.5)
- [CVE-2021-33603](https://insights.sbomify.com/CVE-2021-33603/): Denial-of-Service (DoS) Vulnerability (medium 5.5)
- [CVE-2021-33602](https://insights.sbomify.com/CVE-2021-33602/): Denial-of-Service (DoS) Vulnerability (medium 5.5)
- [CVE-2021-33601](https://insights.sbomify.com/CVE-2021-33601/): Arbitrary Code Execution in Web Interface of F-Secure Internet Gatekeeper (high 7.6)
- [CVE-2021-33600](https://insights.sbomify.com/CVE-2021-33600/): Denial of Service Vulnerability in Web Interface of F-Secure Internet Gatekeeper (medium 5.4)
- [CVE-2021-33599](https://insights.sbomify.com/CVE-2021-33599/): Denial-of-Service (DoS) Vulnerability (medium 4.6)
- [CVE-2021-33598](https://insights.sbomify.com/CVE-2021-33598/): Denial-of-Service (DoS) Vulnerability (medium 4.6)
- [CVE-2021-33597](https://insights.sbomify.com/CVE-2021-33597/): Denial-of-Service (DoS) Vulnerability (low 3.5)
- [CVE-2021-33596](https://insights.sbomify.com/CVE-2021-33596/): Fake Apple login prompt in F-Secure SAFE browser for iOS (low 3.5)
- [CVE-2021-33595](https://insights.sbomify.com/CVE-2021-33595/): F-Secure Safe browser for iOS vulnerable to Address Bar Spoofing (low 3.5)
- [CVE-2021-33594](https://insights.sbomify.com/CVE-2021-33594/): F-Secure Safe browser for Android vulnerable to Address Bar Spoofing (low 3.5)
- [CVE-2021-33593](https://insights.sbomify.com/CVE-2021-33593/): Other in NAVER Whale browser (medium 5.3)
- [CVE-2021-33592](https://insights.sbomify.com/CVE-2021-33592/): Security feature bypass in NAVER Toolbar (critical 9.8)
- [CVE-2021-33591](https://insights.sbomify.com/CVE-2021-33591/): Misconfiguration in Naver Comic Viewer (high 8.8)
- [CVE-2021-33590](https://insights.sbomify.com/CVE-2021-33590/): Memory corruption in labapart:gattlib (critical 9.8)
- [CVE-2021-33589](https://insights.sbomify.com/CVE-2021-33589/): Weak cryptography in ribose:rnp (high 7.5)
- [CVE-2021-33587](https://insights.sbomify.com/CVE-2021-33587/): Denial of service in css-what (high 7.5)
- [CVE-2021-33586](https://insights.sbomify.com/CVE-2021-33586/): Use after free in inspircd:inspircd (medium 4.3)
- [CVE-2021-33583](https://insights.sbomify.com/CVE-2021-33583/): Hardcoded credentials in reiner-sct:timecard (critical 9.8)
- [CVE-2021-33582](https://insights.sbomify.com/CVE-2021-33582/): Denial of service in cyrus:imap (high 7.5)
- [CVE-2021-33581](https://insights.sbomify.com/CVE-2021-33581/): Server-side request forgery in softwareag:mashzone nextgen (high 7.2)
- [CVE-2021-33580](https://insights.sbomify.com/CVE-2021-33580/): regex injection leading to DoS (high 7.5)
- [CVE-2021-33578](https://insights.sbomify.com/CVE-2021-33578/): SQL injection in echobh:sharecare (critical 9.8)
- [CVE-2021-33577](https://insights.sbomify.com/CVE-2021-33577/): Security feature bypass in cleo:lexicom (medium 5.3)
- [CVE-2021-33576](https://insights.sbomify.com/CVE-2021-33576/): Path traversal in cleo:lexicom (critical 9.8)
- [CVE-2021-33575](https://insights.sbomify.com/CVE-2021-33575/): Remote code execution in ruby-jss (critical 9.8)
- [CVE-2021-33574](https://insights.sbomify.com/CVE-2021-33574/): Use after free in debian:debian linux (critical 9.8)
- [CVE-2021-33572](https://insights.sbomify.com/CVE-2021-33572/): Denial-of-Service (DoS) Vulnerability (low 3.5)
- [CVE-2021-33571](https://insights.sbomify.com/CVE-2021-33571/): Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks (high 7.5)
- [CVE-2021-33570](https://insights.sbomify.com/CVE-2021-33570/): Cross-site scripting in postbird project:postbird (medium 5.4)
- [CVE-2021-33564](https://insights.sbomify.com/CVE-2021-33564/): Dragonfly contains remote code execution vulnerability (critical 9.8)
- [CVE-2021-33563](https://insights.sbomify.com/CVE-2021-33563/): Improper rate limiting in Koel (high 7.5)
- [CVE-2021-33562](https://insights.sbomify.com/CVE-2021-33562/): Cross-site scripting in Shopizer (medium 4.8)
- [CVE-2021-33561](https://insights.sbomify.com/CVE-2021-33561/): Cross-site scripting in Shopizer (medium 4.8)
- [CVE-2021-33560](https://insights.sbomify.com/CVE-2021-33560/): Weak cryptography in debian:debian linux (high 7.5)
- [CVE-2021-33558](https://insights.sbomify.com/CVE-2021-33558/): Information disclosure in boa:boa (high 7.5)
- [CVE-2021-33557](https://insights.sbomify.com/CVE-2021-33557/): MantisBT allows XSS in manage_custom_field_edit_page.php (medium 6.1)
- [CVE-2021-33555](https://insights.sbomify.com/CVE-2021-33555/): A vulnerability may allow remote attackers to read arbitrary files on the server of the WirelessHART-Gateway (high 7.5)
- [CVE-2021-33554](https://insights.sbomify.com/CVE-2021-33554/): UDP Technology/Geutebrück camera devices: Command injection in appfile.filename parameter leading to RCE (high 7.2)
- [CVE-2021-33553](https://insights.sbomify.com/CVE-2021-33553/): UDP Technology/Geutebrück camera devices: Command injection in command parameter leading to RCE (high 7.2)
- [CVE-2021-33552](https://insights.sbomify.com/CVE-2021-33552/): UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE (high 7.2)
- [CVE-2021-33551](https://insights.sbomify.com/CVE-2021-33551/): UDP Technology/Geutebrück camera devices: Command injection in environment.lang parameter leading to RCE (high 7.2)
- [CVE-2021-33550](https://insights.sbomify.com/CVE-2021-33550/): UDP Technology/Geutebrück camera devices: Command injection in date parameter leading to RCE (high 7.2)
- [CVE-2021-3355](https://insights.sbomify.com/CVE-2021-3355/): Cross-site scripting in lightcms project:lightcms (medium 5.4)
- [CVE-2021-33549](https://insights.sbomify.com/CVE-2021-33549/): UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCE (high 7.2)
- [CVE-2021-33548](https://insights.sbomify.com/CVE-2021-33548/): UDP Technology/Geutebrück camera devices: Command injection in preserve parameter leading to RCE (high 7.2)
- [CVE-2021-33547](https://insights.sbomify.com/CVE-2021-33547/): UDP Technology/Geutebrück camera devices: Buffer overflow in profile parameter leading to RCE (high 7.2)
- [CVE-2021-33546](https://insights.sbomify.com/CVE-2021-33546/): UDP Technology/Geutebrück camera devices: Buffer overflow in name parameter leading to RCE (high 7.2)
- [CVE-2021-33545](https://insights.sbomify.com/CVE-2021-33545/): UDP Technology/Geutebrück camera devices: Buffer overflow in counter parameter leading to RCE (high 7.2)
- [CVE-2021-33544](https://insights.sbomify.com/CVE-2021-33544/): UDP Technology/Geutebrück camera devices: command injection leading to RCE (high 7.2)
- [CVE-2021-33543](https://insights.sbomify.com/CVE-2021-33543/): UDP Technology/Geutebrück camera devices: Authentication Bypass (critical 9.8)
- [CVE-2021-33542](https://insights.sbomify.com/CVE-2021-33542/): Phoenix Contact: Automation Worx Software Suite affected by Remote Code Execution (RCE) vulnerability (high 7.8)
- [CVE-2021-33541](https://insights.sbomify.com/CVE-2021-33541/): Phoenix Contact: ILC1x Industrial controllers affected by Denial-of-Service vulnerability (high 7.5)
- [CVE-2021-33540](https://insights.sbomify.com/CVE-2021-33540/): Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices (high 7.3)
- [CVE-2021-33539](https://insights.sbomify.com/CVE-2021-33539/): WEIDMUELLER: WLAN devices affected by authentication bypass vulnerability (high 7.2)
- [CVE-2021-33538](https://insights.sbomify.com/CVE-2021-33538/): WEIDMUELLER: WLAN devices affected by improper access control vulnerability (high 8.8)
- [CVE-2021-33537](https://insights.sbomify.com/CVE-2021-33537/): WEIDMUELLER: WLAN devices affected by Remote Code Execution (RCE) vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/148/