# Vulnerabilities published in 2021


- [CVE-2021-33536](https://insights.sbomify.com/CVE-2021-33536/): WEIDMUELLER: WLAN devices affected by Denial-of-Service vulnerability (high 7.5)
- [CVE-2021-33535](https://insights.sbomify.com/CVE-2021-33535/): WEIDMUELLER: WLAN devices affected by exploitable format string vulnerability (high 8.8)
- [CVE-2021-33534](https://insights.sbomify.com/CVE-2021-33534/): WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability (high 7.2)
- [CVE-2021-33533](https://insights.sbomify.com/CVE-2021-33533/): WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability (high 8.8)
- [CVE-2021-33532](https://insights.sbomify.com/CVE-2021-33532/): WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability (high 8.8)
- [CVE-2021-33531](https://insights.sbomify.com/CVE-2021-33531/): WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability (high 8.8)
- [CVE-2021-33530](https://insights.sbomify.com/CVE-2021-33530/): WEIDMUELLER: WLAN devices affected by OS Command Injection vulnerability (high 8.8)
- [CVE-2021-33529](https://insights.sbomify.com/CVE-2021-33529/): WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability (high 7.5)
- [CVE-2021-33528](https://insights.sbomify.com/CVE-2021-33528/): WEIDMUELLER: WLAN devices affected by privilege escalation vulnerability (high 8.8)
- [CVE-2021-33527](https://insights.sbomify.com/CVE-2021-33527/): OS Command Injection in mbDIALUP <= 3.9R0.0 (critical 9.8)
- [CVE-2021-33526](https://insights.sbomify.com/CVE-2021-33526/): Privilege escalation in mbDIALUP <= 3.9R0.0 (high 7.8)
- [CVE-2021-33525](https://insights.sbomify.com/CVE-2021-33525/): Command injection in eyesofnetwork:eyesofnetwork (high 8.8)
- [CVE-2021-33523](https://insights.sbomify.com/CVE-2021-33523/): File upload in softwareag:mashzone nextgen (high 7.2)
- [CVE-2021-3352](https://insights.sbomify.com/CVE-2021-3352/): Auth bypass in mitel:micontact center business (critical 9.1)
- [CVE-2021-33516](https://insights.sbomify.com/CVE-2021-33516/): Security feature bypass in gnome:gupnp (high 8.1)
- [CVE-2021-33515](https://insights.sbomify.com/CVE-2021-33515/): Command injection in debian:debian linux (medium 4.8)
- [CVE-2021-33514](https://insights.sbomify.com/CVE-2021-33514/): Command injection in netgear:gc108p firmware (high 8.8)
- [CVE-2021-33513](https://insights.sbomify.com/CVE-2021-33513/): Cross-site scripting in Plone (medium 5.4)
- [CVE-2021-33512](https://insights.sbomify.com/CVE-2021-33512/): Cross-site scripting in Plone (medium 5.4)
- [CVE-2021-33511](https://insights.sbomify.com/CVE-2021-33511/): Server-Side Request Forgery in Plone (high 7.5)
- [CVE-2021-33510](https://insights.sbomify.com/CVE-2021-33510/): Server-Side Request Forgery in Plone (medium 4.3)
- [CVE-2021-3351](https://insights.sbomify.com/CVE-2021-3351/): Cross-site scripting in openplcproject:openplc (medium 5.4)
- [CVE-2021-33509](https://insights.sbomify.com/CVE-2021-33509/): Incorrect Permission Assignment for Critical Resource in Plone (critical 9.9)
- [CVE-2021-33508](https://insights.sbomify.com/CVE-2021-33508/): Cross-site scripting in Plone (medium 5.4)
- [CVE-2021-33507](https://insights.sbomify.com/CVE-2021-33507/): Cross-site scripting in Products.CMFCore, Products.PluggableAuthService, Plone (medium 6.1)
- [CVE-2021-33506](https://insights.sbomify.com/CVE-2021-33506/): Misconfiguration in 8x8:jitsi meet (high 7.5)
- [CVE-2021-33505](https://insights.sbomify.com/CVE-2021-33505/): Security feature bypass in falco:falco (high 7.8)
- [CVE-2021-33504](https://insights.sbomify.com/CVE-2021-33504/): Missing authorization in couchbase:couchbase server (medium 4.9)
- [CVE-2021-33503](https://insights.sbomify.com/CVE-2021-33503/): Catastrophic backtracking in URL authority parser when passed URL containing many @ characters (high 7.5)
- [CVE-2021-33502](https://insights.sbomify.com/CVE-2021-33502/): ReDoS in normalize-url (high 7.5)
- [CVE-2021-33501](https://insights.sbomify.com/CVE-2021-33501/): Cross-site scripting in overwolf:overwolf (critical 9.6)
- [CVE-2021-33500](https://insights.sbomify.com/CVE-2021-33500/): Denial of service in putty:putty (high 7.5)
- [CVE-2021-3350](https://insights.sbomify.com/CVE-2021-3350/): Cross-site scripting in delete account project:delete account (medium 6.1)
- [CVE-2021-33499](https://insights.sbomify.com/CVE-2021-33499/): Denial of service in pexip:infinity (high 7.5)
- [CVE-2021-33498](https://insights.sbomify.com/CVE-2021-33498/): Denial of service in pexip:infinity (high 7.5)
- [CVE-2021-33497](https://insights.sbomify.com/CVE-2021-33497/): Path Traversal in Dutchcoders transfer.sh (critical 9.1)
- [CVE-2021-33496](https://insights.sbomify.com/CVE-2021-33496/): Cross-site scripting in Dutchcoders transfer.sh (medium 6.1)
- [CVE-2021-33495](https://insights.sbomify.com/CVE-2021-33495/): Cross-site scripting in open-xchange:ox app suite (medium 6.1)
- [CVE-2021-33494](https://insights.sbomify.com/CVE-2021-33494/): Cross-site scripting in open-xchange:ox app suite (medium 6.1)
- [CVE-2021-33493](https://insights.sbomify.com/CVE-2021-33493/): Code injection in open-xchange:ox app suite (medium 6.0)
- [CVE-2021-33492](https://insights.sbomify.com/CVE-2021-33492/): Cross-site scripting in open-xchange:ox app suite (medium 6.1)
- [CVE-2021-33491](https://insights.sbomify.com/CVE-2021-33491/): Path traversal in open-xchange:ox app suite (medium 6.5)
- [CVE-2021-33490](https://insights.sbomify.com/CVE-2021-33490/): Cross-site scripting in open-xchange:ox app suite (medium 6.1)
- [CVE-2021-3349](https://insights.sbomify.com/CVE-2021-3349/): Security feature bypass in gnome:evolution (low 3.3)
- [CVE-2021-33489](https://insights.sbomify.com/CVE-2021-33489/): Cross-site scripting in open-xchange:ox app suite (medium 6.1)
- [CVE-2021-33488](https://insights.sbomify.com/CVE-2021-33488/): Open redirect in open-xchange:ox app suite (medium 6.1)
- [CVE-2021-33486](https://insights.sbomify.com/CVE-2021-33486/): Other in codesys:runtime toolkit (high 7.5)
- [CVE-2021-33485](https://insights.sbomify.com/CVE-2021-33485/): Memory corruption in codesys:control (critical 9.8)
- [CVE-2021-33484](https://insights.sbomify.com/CVE-2021-33484/): Hardcoded credentials in onyaktech comments pro project:onyaktech comments pro (high 7.5)
- [CVE-2021-33483](https://insights.sbomify.com/CVE-2021-33483/): Cross-site scripting in onyaktech comments pro project:onyaktech comments pro (medium 5.4)
- [CVE-2021-33481](https://insights.sbomify.com/CVE-2021-33481/): Memory corruption in gocr (high 7.8)
- [CVE-2021-33480](https://insights.sbomify.com/CVE-2021-33480/): Use after free in gocr (medium 5.5)
- [CVE-2021-3348](https://insights.sbomify.com/CVE-2021-3348/): Use after free in debian:debian linux (high 7.0)
- [CVE-2021-33479](https://insights.sbomify.com/CVE-2021-33479/): Memory corruption in gocr (high 7.8)
- [CVE-2021-33478](https://insights.sbomify.com/CVE-2021-33478/): Memory corruption in cisco:ip phone 8800 firmware (medium 6.8)
- [CVE-2021-33477](https://insights.sbomify.com/CVE-2021-33477/): Command injection in debian:debian linux (high 8.8)
- [CVE-2021-33473](https://insights.sbomify.com/CVE-2021-33473/): Arbitrary file write in dragonfly (critical 9.1)
- [CVE-2021-33470](https://insights.sbomify.com/CVE-2021-33470/): SQL injection in phpgurukul:covid19 testing management system (critical 9.8)
- [CVE-2021-3347](https://insights.sbomify.com/CVE-2021-3347/): Use after free in debian:debian linux (high 7.8)
- [CVE-2021-33469](https://insights.sbomify.com/CVE-2021-33469/): Cross-site scripting in phpgurukul:covid19 testing management system (medium 4.8)
- [CVE-2021-33468](https://insights.sbomify.com/CVE-2021-33468/): Use after free in tortall:yasm (medium 5.5)
- [CVE-2021-33467](https://insights.sbomify.com/CVE-2021-33467/): Use after free in tortall:yasm (medium 5.5)
- [CVE-2021-33466](https://insights.sbomify.com/CVE-2021-33466/): Null dereference in tortall:yasm (medium 5.5)
- [CVE-2021-33465](https://insights.sbomify.com/CVE-2021-33465/): Null dereference in tortall:yasm (medium 5.5)
- [CVE-2021-33464](https://insights.sbomify.com/CVE-2021-33464/): Memory corruption in tortall:yasm (medium 5.5)
- [CVE-2021-33463](https://insights.sbomify.com/CVE-2021-33463/): Null dereference in tortall:yasm (medium 5.5)
- [CVE-2021-33462](https://insights.sbomify.com/CVE-2021-33462/): Use after free in tortall:yasm (medium 5.5)
- [CVE-2021-33461](https://insights.sbomify.com/CVE-2021-33461/): Use after free in tortall:yasm (medium 5.5)
- [CVE-2021-33460](https://insights.sbomify.com/CVE-2021-33460/): Null dereference in tortall:yasm (medium 5.5)
- [CVE-2021-3346](https://insights.sbomify.com/CVE-2021-3346/): Cross-site scripting in nic:foris (critical 9.8)
- [CVE-2021-33459](https://insights.sbomify.com/CVE-2021-33459/): Null dereference in tortall:yasm (medium 5.5)
- [CVE-2021-33458](https://insights.sbomify.com/CVE-2021-33458/): Null dereference in tortall:yasm (medium 5.5)
- [CVE-2021-33457](https://insights.sbomify.com/CVE-2021-33457/): Null dereference in tortall:yasm (medium 5.5)
- [CVE-2021-33456](https://insights.sbomify.com/CVE-2021-33456/): Null dereference in tortall:yasm (medium 5.5)
- [CVE-2021-33455](https://insights.sbomify.com/CVE-2021-33455/): Null dereference in tortall:yasm (medium 5.5)
- [CVE-2021-33454](https://insights.sbomify.com/CVE-2021-33454/): Null dereference in tortall:yasm (medium 5.5)
- [CVE-2021-33453](https://insights.sbomify.com/CVE-2021-33453/): Use after free in long range zip project:long range zip (high 7.8)
- [CVE-2021-33452](https://insights.sbomify.com/CVE-2021-33452/): Denial of service in nasm:netwide assembler (medium 5.5)
- [CVE-2021-33451](https://insights.sbomify.com/CVE-2021-33451/): Denial of service in long range zip project:long range zip (medium 5.5)
- [CVE-2021-33450](https://insights.sbomify.com/CVE-2021-33450/): Denial of service in nasm:netwide assembler (medium 5.5)
- [CVE-2021-3345](https://insights.sbomify.com/CVE-2021-3345/): Memory corruption in gnupg:libgcrypt (high 7.8)
- [CVE-2021-33449](https://insights.sbomify.com/CVE-2021-33449/): Null dereference in cesanta:mjs (medium 5.5)
- [CVE-2021-33448](https://insights.sbomify.com/CVE-2021-33448/): Memory corruption in cesanta:mjs (medium 5.5)
- [CVE-2021-33447](https://insights.sbomify.com/CVE-2021-33447/): Null dereference in cesanta:mjs (medium 5.5)
- [CVE-2021-33446](https://insights.sbomify.com/CVE-2021-33446/): Null dereference in cesanta:mjs (medium 5.5)
- [CVE-2021-33445](https://insights.sbomify.com/CVE-2021-33445/): Null dereference in cesanta:mjs (medium 5.5)
- [CVE-2021-33444](https://insights.sbomify.com/CVE-2021-33444/): Null dereference in cesanta:mjs (medium 5.5)
- [CVE-2021-33443](https://insights.sbomify.com/CVE-2021-33443/): Memory corruption in cesanta:mjs (medium 5.5)
- [CVE-2021-33442](https://insights.sbomify.com/CVE-2021-33442/): Null dereference in cesanta:mjs (medium 5.5)
- [CVE-2021-33441](https://insights.sbomify.com/CVE-2021-33441/): Null dereference in cesanta:mjs (medium 5.5)
- [CVE-2021-33440](https://insights.sbomify.com/CVE-2021-33440/): Null dereference in cesanta:mjs (medium 5.5)
- [CVE-2021-3344](https://insights.sbomify.com/CVE-2021-3344/): Privilege escalation in openshift/builder (high 8.8)
- [CVE-2021-33439](https://insights.sbomify.com/CVE-2021-33439/): Integer overflow in cesanta:mjs (medium 5.5)
- [CVE-2021-33438](https://insights.sbomify.com/CVE-2021-33438/): Memory corruption in cesanta:mjs (medium 5.5)
- [CVE-2021-33437](https://insights.sbomify.com/CVE-2021-33437/): Denial of service in cesanta:mjs (medium 5.5)
- [CVE-2021-33436](https://insights.sbomify.com/CVE-2021-33436/): Privilege escalation in nomachine:nomachine (high 7.3)
- [CVE-2021-33430](https://insights.sbomify.com/CVE-2021-33430/): NumPy Buffer Overflow (Disputed) (medium 5.3)
- [CVE-2021-33425](https://insights.sbomify.com/CVE-2021-33425/): Cross-site scripting in openwrt:openwrt (medium 5.4)
- [CVE-2021-33420](https://insights.sbomify.com/CVE-2021-33420/): replicator vulnerable to Deserialization of Untrusted Data (critical 9.8)
- [CVE-2021-3342](https://insights.sbomify.com/CVE-2021-3342/): Command injection in eprints:eprints (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/149/