# Vulnerabilities published in 2021


- [CVE-2021-33212](https://insights.sbomify.com/CVE-2021-33212/): Cross-site scripting in element-it:http commander (medium 5.4)
- [CVE-2021-33211](https://insights.sbomify.com/CVE-2021-33211/): Path traversal in element-it:http commander (medium 6.5)
- [CVE-2021-33210](https://insights.sbomify.com/CVE-2021-33210/): Auth bypass in fimer:aurora vision (medium 4.3)
- [CVE-2021-3321](https://insights.sbomify.com/CVE-2021-3321/): Integer Underflow in Zephyr in IEEE 802154 Fragment Reassembly Header Removal (high 7.5)
- [CVE-2021-33209](https://insights.sbomify.com/CVE-2021-33209/): Information disclosure in fimer:aurora vision (medium 5.3)
- [CVE-2021-33208](https://insights.sbomify.com/CVE-2021-33208/): XML external entity in softwareag:mashzone nextgen (high 7.2)
- [CVE-2021-33207](https://insights.sbomify.com/CVE-2021-33207/): Deserialization in softwareag:mashzone nextgen (critical 9.8)
- [CVE-2021-33205](https://insights.sbomify.com/CVE-2021-33205/): Privilege escalation in westerndigital:edgerover (high 8.8)
- [CVE-2021-33204](https://insights.sbomify.com/CVE-2021-33204/): Privilege escalation in pgxn:pg partman (critical 9.8)
- [CVE-2021-33203](https://insights.sbomify.com/CVE-2021-33203/): Path Traversal in Django (medium 4.9)
- [CVE-2021-33200](https://insights.sbomify.com/CVE-2021-33200/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2021-3320](https://insights.sbomify.com/CVE-2021-3320/): Type Confusion in 802154 ACK Frames Handling (medium 5.9)
- [CVE-2021-33199](https://insights.sbomify.com/CVE-2021-33199/): Path traversal in expressionengine:expressionengine (critical 9.8)
- [CVE-2021-33198](https://insights.sbomify.com/CVE-2021-33198/): Denial of service in golang:go (high 7.5)
- [CVE-2021-33197](https://insights.sbomify.com/CVE-2021-33197/): Missing authorization in golang:go (medium 5.3)
- [CVE-2021-33196](https://insights.sbomify.com/CVE-2021-33196/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2021-33195](https://insights.sbomify.com/CVE-2021-33195/): Other in golang:go (high 7.3)
- [CVE-2021-33194](https://insights.sbomify.com/CVE-2021-33194/): golang.org/x/net/html Infinite Loop vulnerability (high 7.5)
- [CVE-2021-33193](https://insights.sbomify.com/CVE-2021-33193/): Request splitting via HTTP/2 method injection and mod_proxy (high 7.5)
- [CVE-2021-33192](https://insights.sbomify.com/CVE-2021-33192/): Display information UI XSS (medium 6.1)
- [CVE-2021-33191](https://insights.sbomify.com/CVE-2021-33191/): MiNiFi CPP arbitrary script execution is possible on the agent's host machine through the c2 protocol (critical 9.8)
- [CVE-2021-33190](https://insights.sbomify.com/CVE-2021-33190/): Bypass network access control (medium 5.3)
- [CVE-2021-3319](https://insights.sbomify.com/CVE-2021-3319/): DOS: Incorrect 802154 Frame Validation for Omitted Source / Dest Addresses (medium 6.5)
- [CVE-2021-33186](https://insights.sbomify.com/CVE-2021-33186/): Memory corruption in serenityos:serenityos (high 7.5)
- [CVE-2021-33185](https://insights.sbomify.com/CVE-2021-33185/): Memory corruption in serenityos:serenityos (high 7.5)
- [CVE-2021-33184](https://insights.sbomify.com/CVE-2021-33184/): Server-side request forgery in Synology Download Station (high 7.7)
- [CVE-2021-33183](https://insights.sbomify.com/CVE-2021-33183/): Path traversal in Synology Docker (high 7.9)
- [CVE-2021-33182](https://insights.sbomify.com/CVE-2021-33182/): Path traversal in Synology DiskStation Manager (DSM) (medium 5.0)
- [CVE-2021-33181](https://insights.sbomify.com/CVE-2021-33181/): Server-side request forgery in Synology Video Station (medium 6.6)
- [CVE-2021-33180](https://insights.sbomify.com/CVE-2021-33180/): SQL injection in Synology Media Server (high 7.3)
- [CVE-2021-3318](https://insights.sbomify.com/CVE-2021-3318/): Cross-site scripting in dzzoffice:dzzoffice (medium 6.1)
- [CVE-2021-33179](https://insights.sbomify.com/CVE-2021-33179/): Cross-site scripting in Nagios XI (medium 6.1)
- [CVE-2021-33178](https://insights.sbomify.com/CVE-2021-33178/): Path traversal in NagVis (medium 6.5)
- [CVE-2021-33177](https://insights.sbomify.com/CVE-2021-33177/): SQL injection in Nagios XI (high 8.8)
- [CVE-2021-33176](https://insights.sbomify.com/CVE-2021-33176/): Denial of service in vernemq (high 7.5)
- [CVE-2021-33175](https://insights.sbomify.com/CVE-2021-33175/): Denial of service in EMQ X Broker (high 7.5)
- [CVE-2021-3317](https://insights.sbomify.com/CVE-2021-3317/): Command injection in klogserver:klog server (high 8.8)
- [CVE-2021-33166](https://insights.sbomify.com/CVE-2021-33166/): Misconfiguration in version (medium 5.5)
- [CVE-2021-33164](https://insights.sbomify.com/CVE-2021-33164/): Privilege escalation in Intel(R) NUCs (high 8.2)
- [CVE-2021-33162](https://insights.sbomify.com/CVE-2021-33162/): Privilege escalation in Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware (high 8.4)
- [CVE-2021-33161](https://insights.sbomify.com/CVE-2021-33161/): Privilege escalation in Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware (high 7.2)
- [CVE-2021-33159](https://insights.sbomify.com/CVE-2021-33159/): Auth bypass in Intel(R) AMT (high 7.4)
- [CVE-2021-33158](https://insights.sbomify.com/CVE-2021-33158/): Privilege escalation in Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware (high 7.2)
- [CVE-2021-33157](https://insights.sbomify.com/CVE-2021-33157/): Privilege escalation in Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware (high 7.2)
- [CVE-2021-33155](https://insights.sbomify.com/CVE-2021-33155/): Denial of service in Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products (medium 5.7)
- [CVE-2021-33150](https://insights.sbomify.com/CVE-2021-33150/): Security feature bypass in Intel(R) Trace Hub instances which (medium 6.8)
- [CVE-2021-3315](https://insights.sbomify.com/CVE-2021-3315/): Cross-site scripting in jetbrains:teamcity (medium 5.4)
- [CVE-2021-33149](https://insights.sbomify.com/CVE-2021-33149/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2021-33147](https://insights.sbomify.com/CVE-2021-33147/): Information disclosure in Intel(R) IPP Crypto library (medium 5.5)
- [CVE-2021-33146](https://insights.sbomify.com/CVE-2021-33146/): Information disclosure in Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware (medium 5.3)
- [CVE-2021-33145](https://insights.sbomify.com/CVE-2021-33145/): Privilege escalation in Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware (high 7.2)
- [CVE-2021-33142](https://insights.sbomify.com/CVE-2021-33142/): Denial of service in Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware (medium 6.0)
- [CVE-2021-33141](https://insights.sbomify.com/CVE-2021-33141/): Denial of service in Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware (high 8.6)
- [CVE-2021-3314](https://insights.sbomify.com/CVE-2021-3314/): Cross-site scripting in oracle:glassfish server (medium 6.1)
- [CVE-2021-33139](https://insights.sbomify.com/CVE-2021-33139/): Denial of service in Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products (medium 5.7)
- [CVE-2021-33137](https://insights.sbomify.com/CVE-2021-33137/): Memory corruption in Intel(R) Kernelflinger project (high 7.8)
- [CVE-2021-33135](https://insights.sbomify.com/CVE-2021-33135/): Denial of service in Intel(R) SGX (medium 5.5)
- [CVE-2021-33130](https://insights.sbomify.com/CVE-2021-33130/): Information disclosure in Intel(R) RealSense(TM) ID Solution F450 (medium 4.6)
- [CVE-2021-3313](https://insights.sbomify.com/CVE-2021-3313/): Plone XSS in User Fullname Property and File Upload (medium 5.4)
- [CVE-2021-33129](https://insights.sbomify.com/CVE-2021-33129/): Misconfiguration in Intel(R) Advisor (high 7.8)
- [CVE-2021-33128](https://insights.sbomify.com/CVE-2021-33128/): Missing authorization in Intel(R) E810 Ethernet Controllers (medium 4.4)
- [CVE-2021-33126](https://insights.sbomify.com/CVE-2021-33126/): Missing authorization in Intel(R) 700 and 722 Series Ethernet Controllers and Adapters (medium 4.4)
- [CVE-2021-33124](https://insights.sbomify.com/CVE-2021-33124/): Memory corruption in Intel(R) Processors (medium 6.7)
- [CVE-2021-33123](https://insights.sbomify.com/CVE-2021-33123/): Privilege escalation in Intel(R) Processors (high 7.8)
- [CVE-2021-33122](https://insights.sbomify.com/CVE-2021-33122/): Privilege escalation in Intel(R) Processors (high 7.8)
- [CVE-2021-33120](https://insights.sbomify.com/CVE-2021-33120/): Memory corruption in Intel Atom(R) Processors (medium 5.4)
- [CVE-2021-3312](https://insights.sbomify.com/CVE-2021-3312/): XML External Entity Reference in org.opencms:opencms-core (medium 6.5)
- [CVE-2021-33119](https://insights.sbomify.com/CVE-2021-33119/): Missing authorization in Intel(R) RealSense(TM) DCM (medium 5.5)
- [CVE-2021-33118](https://insights.sbomify.com/CVE-2021-33118/): Privilege escalation in Intel(R) Serial IO driver for Intel(R) NUC 11 Gen (high 7.8)
- [CVE-2021-33117](https://insights.sbomify.com/CVE-2021-33117/): Missing authorization in Intel(R) Xeon(R) Scalable Processors (medium 5.5)
- [CVE-2021-33115](https://insights.sbomify.com/CVE-2021-33115/): Other in Intel(R) PROSet/Wireless WiFi in UEFI (high 8.8)
- [CVE-2021-33114](https://insights.sbomify.com/CVE-2021-33114/): Denial of service in Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 (medium 5.7)
- [CVE-2021-33113](https://insights.sbomify.com/CVE-2021-33113/): Other in Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 (high 8.1)
- [CVE-2021-33110](https://insights.sbomify.com/CVE-2021-33110/): Denial of service in Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 (medium 6.5)
- [CVE-2021-3311](https://insights.sbomify.com/CVE-2021-3311/): October CMS Session ID not invalidated after logout (critical 9.8)
- [CVE-2021-33108](https://insights.sbomify.com/CVE-2021-33108/): Privilege escalation in Intel(R) In-Band Manageability software (medium 6.7)
- [CVE-2021-33107](https://insights.sbomify.com/CVE-2021-33107/): Information disclosure in Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx (medium 4.6)
- [CVE-2021-33106](https://insights.sbomify.com/CVE-2021-33106/): Integer overflow in Intel(R) Safestring Library (high 7.8)
- [CVE-2021-33105](https://insights.sbomify.com/CVE-2021-33105/): Memory corruption in Intel® Core™ Processors with Radeon™ RX Vega M GL Graphics Advisory (medium 5.5)
- [CVE-2021-33104](https://insights.sbomify.com/CVE-2021-33104/): Missing authorization in Intel(R) OFU software (medium 6.5)
- [CVE-2021-33103](https://insights.sbomify.com/CVE-2021-33103/): Privilege escalation in Intel(R) Processors (medium 6.7)
- [CVE-2021-33101](https://insights.sbomify.com/CVE-2021-33101/): Privilege escalation in Intel(R) GPA software (high 7.8)
- [CVE-2021-3310](https://insights.sbomify.com/CVE-2021-3310/): Path traversal in westerndigital:my cloud os (high 7.8)
- [CVE-2021-33098](https://insights.sbomify.com/CVE-2021-33098/): Denial of service in Intel(R) Ethernet ixgbe driver for Linux (medium 5.5)
- [CVE-2021-33097](https://insights.sbomify.com/CVE-2021-33097/): Race condition in Intel(R) SGX (medium 6.6)
- [CVE-2021-33096](https://insights.sbomify.com/CVE-2021-33096/): Denial of service in Intel(R) 82599 Ethernet Controllers and Adapters (medium 5.5)
- [CVE-2021-33095](https://insights.sbomify.com/CVE-2021-33095/): Privilege escalation in Intel(R) NUC M15 Laptop Kit Keyboard LED Service driver pack (high 7.8)
- [CVE-2021-33094](https://insights.sbomify.com/CVE-2021-33094/): Privilege escalation in Intel(R) NUC M15 Laptop Kit Keyboard LED Service driver pack (high 7.8)
- [CVE-2021-33093](https://insights.sbomify.com/CVE-2021-33093/): Privilege escalation in Intel(R) NUC M15 Laptop Kit Serial IO driver pack (high 7.8)
- [CVE-2021-33092](https://insights.sbomify.com/CVE-2021-33092/): Misconfiguration in Intel(R) NUC M15 Laptop Kit HID Event Filter driver pack (high 7.8)
- [CVE-2021-33091](https://insights.sbomify.com/CVE-2021-33091/): Privilege escalation in Intel(R) NUC M15 Laptop Kit audio driver pack (high 7.8)
- [CVE-2021-33090](https://insights.sbomify.com/CVE-2021-33090/): Misconfiguration in Intel(R) NUC HDMI Firmware Update Tool for NUC10i3FN, NUC10i5FN, NUC10i7FN (high 7.8)
- [CVE-2021-3309](https://insights.sbomify.com/CVE-2021-3309/): Security feature bypass in wekan project:wekan (high 8.1)
- [CVE-2021-33089](https://insights.sbomify.com/CVE-2021-33089/): Privilege escalation in Intel(R) NUC HDMI Firmware Update Tool for NUC8i3BE, NUC8i5BE, NUC8i7BE (high 7.8)
- [CVE-2021-33088](https://insights.sbomify.com/CVE-2021-33088/): Misconfiguration in Intel(R) NUC M15 Laptop Kit Integrated Sensor Hub driver pack (high 7.8)
- [CVE-2021-33087](https://insights.sbomify.com/CVE-2021-33087/): Auth bypass in Intel(R) NUC M15 Laptop Kit Management Engine driver pack (medium 5.5)
- [CVE-2021-33086](https://insights.sbomify.com/CVE-2021-33086/): Memory corruption in Intel(R) NUCs (medium 5.5)
- [CVE-2021-33083](https://insights.sbomify.com/CVE-2021-33083/): Auth bypass in Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products (medium 4.4)
- [CVE-2021-33082](https://insights.sbomify.com/CVE-2021-33082/): Information disclosure in Intel(R) SSD and Intel(R) Optane(TM) SSD Products (medium 4.6)
- [CVE-2021-33081](https://insights.sbomify.com/CVE-2021-33081/): Security feature bypass in Intel(R) SSD DC (high 7.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/151/