# Vulnerabilities published in 2021


- [CVE-2021-33080](https://insights.sbomify.com/CVE-2021-33080/): Information disclosure in Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products (medium 6.8)
- [CVE-2021-3308](https://insights.sbomify.com/CVE-2021-3308/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2021-33079](https://insights.sbomify.com/CVE-2021-33079/): Security feature bypass in Intel(R) SSD DC (medium 4.1)
- [CVE-2021-33078](https://insights.sbomify.com/CVE-2021-33078/): Race condition in Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products (medium 4.7)
- [CVE-2021-33077](https://insights.sbomify.com/CVE-2021-33077/): Privilege escalation in Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products (medium 6.8)
- [CVE-2021-33076](https://insights.sbomify.com/CVE-2021-33076/): Auth bypass in Intel(R) SSD DC (medium 5.3)
- [CVE-2021-33075](https://insights.sbomify.com/CVE-2021-33075/): Race condition in Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products (medium 4.7)
- [CVE-2021-33074](https://insights.sbomify.com/CVE-2021-33074/): Security feature bypass in Intel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD Products (medium 4.6)
- [CVE-2021-33073](https://insights.sbomify.com/CVE-2021-33073/): Denial of service in Intel(R) Distribution of OpenVINOâ„¢ Toolkit (medium 5.5)
- [CVE-2021-33071](https://insights.sbomify.com/CVE-2021-33071/): Misconfiguration in Intel(R) oneAPI Rendering Toolkit (high 7.8)
- [CVE-2021-33069](https://insights.sbomify.com/CVE-2021-33069/): Denial of service in Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC (medium 5.5)
- [CVE-2021-33068](https://insights.sbomify.com/CVE-2021-33068/): Null dereference in Intel(R) AMT (medium 6.5)
- [CVE-2021-33064](https://insights.sbomify.com/CVE-2021-33064/): Privilege escalation in Intel(R) System Studio (medium 6.7)
- [CVE-2021-33063](https://insights.sbomify.com/CVE-2021-33063/): Privilege escalation in Intel(R) RealSense(TM) D400 Series UWP driver for Windows 10 (high 7.8)
- [CVE-2021-33062](https://insights.sbomify.com/CVE-2021-33062/): Misconfiguration in Intel(R) VTune(TM) Profiler (high 7.8)
- [CVE-2021-33061](https://insights.sbomify.com/CVE-2021-33061/): Denial of service in Intel(R) 82599 Ethernet Controllers and Adapters (medium 5.5)
- [CVE-2021-33060](https://insights.sbomify.com/CVE-2021-33060/): Memory corruption in Intel(R) Processors (high 7.8)
- [CVE-2021-33059](https://insights.sbomify.com/CVE-2021-33059/): Privilege escalation in Intel(R) Administrative Tools for Intel(R) Network Adapters (medium 6.7)
- [CVE-2021-33058](https://insights.sbomify.com/CVE-2021-33058/): Privilege escalation in version (high 7.8)
- [CVE-2021-33057](https://insights.sbomify.com/CVE-2021-33057/): Missing authorization in tencent:qq (high 7.5)
- [CVE-2021-33056](https://insights.sbomify.com/CVE-2021-33056/): Denial of service in linphone:belle-sip (high 7.5)
- [CVE-2021-33055](https://insights.sbomify.com/CVE-2021-33055/): Command injection in zohocorp:manageengine adselfservice plus (critical 9.8)
- [CVE-2021-33054](https://insights.sbomify.com/CVE-2021-33054/): Auth bypass in debian:debian linux (high 7.5)
- [CVE-2021-3305](https://insights.sbomify.com/CVE-2021-3305/): Other in feishu:feishu (high 7.8)
- [CVE-2021-33046](https://insights.sbomify.com/CVE-2021-33046/): Auth bypass in Access control vulnerability found in some Dahua products (critical 9.8)
- [CVE-2021-33045](https://insights.sbomify.com/CVE-2021-33045/): Dahua IP Camera Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2021-33044](https://insights.sbomify.com/CVE-2021-33044/): Dahua IP Camera Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2021-33041](https://insights.sbomify.com/CVE-2021-33041/): Cross-site Scripting in vmd (medium 6.1)
- [CVE-2021-33040](https://insights.sbomify.com/CVE-2021-33040/): Cross-site Scripting in epubjs (medium 6.1)
- [CVE-2021-3304](https://insights.sbomify.com/CVE-2021-3304/): Memory corruption in sagemcom:f\@st 3686 firmware (critical 9.8)
- [CVE-2021-33038](https://insights.sbomify.com/CVE-2021-33038/): Exposure of sensitive information to an unauthorized actor in HyperKitty (high 7.5)
- [CVE-2021-33037](https://insights.sbomify.com/CVE-2021-33037/): Incorrect Transfer-Encoding handling with HTTP/1.0 (medium 5.3)
- [CVE-2021-33036](https://insights.sbomify.com/CVE-2021-33036/): Apache Hadoop Privilege escalation vulnerability (high 8.8)
- [CVE-2021-33035](https://insights.sbomify.com/CVE-2021-33035/): Buffer overflow from a crafted DBF file (high 7.8)
- [CVE-2021-33034](https://insights.sbomify.com/CVE-2021-33034/): Use after free in debian:debian linux (high 7.8)
- [CVE-2021-33033](https://insights.sbomify.com/CVE-2021-33033/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2021-33032](https://insights.sbomify.com/CVE-2021-33032/): Command injection in eq-3:homematic ccu2 firmware (critical 10.0)
- [CVE-2021-33031](https://insights.sbomify.com/CVE-2021-33031/): Missing authorization in labcup:labcup (low 3.1)
- [CVE-2021-33027](https://insights.sbomify.com/CVE-2021-33027/): Weak cryptography in sylabs:singularity (critical 9.8)
- [CVE-2021-33026](https://insights.sbomify.com/CVE-2021-33026/): Deserialization of Untrusted Data in Flask-Caching (critical 9.8)
- [CVE-2021-33025](https://insights.sbomify.com/CVE-2021-33025/): xArrow SCADA Path Traversal (medium 5.6)
- [CVE-2021-33024](https://insights.sbomify.com/CVE-2021-33024/): Philips Vue PACS Insufficiently Protected Credentials (low 3.7)
- [CVE-2021-33023](https://insights.sbomify.com/CVE-2021-33023/): Advantech WebAccess (critical 9.8)
- [CVE-2021-33022](https://insights.sbomify.com/CVE-2021-33022/): Philips Vue PACS Cleartext Transmission of Sensitive Information (high 7.5)
- [CVE-2021-33021](https://insights.sbomify.com/CVE-2021-33021/): xArrow SCADA Cross-site Scripting (medium 6.1)
- [CVE-2021-33020](https://insights.sbomify.com/CVE-2021-33020/): Philips Vue PACS Use of a Key Past its Expiration Date (high 8.2)
- [CVE-2021-33019](https://insights.sbomify.com/CVE-2021-33019/): Memory corruption in Delta Electronics DOPSoft (high 7.8)
- [CVE-2021-33018](https://insights.sbomify.com/CVE-2021-33018/): Philips Vue PACS Use of a Broken or Risky Cryptographic Algorithm (high 7.5)
- [CVE-2021-33017](https://insights.sbomify.com/CVE-2021-33017/): Philips IntelliBridge EC 40 and EC 80 Hub Authentication Bypass Using an Alternate Path or Channel (high 8.1)
- [CVE-2021-33016](https://insights.sbomify.com/CVE-2021-33016/): KUKA KR C4 - Use of Hard-Coded Credentials (critical 9.8)
- [CVE-2021-33015](https://insights.sbomify.com/CVE-2021-33015/): Memory corruption in Cscape (high 7.8)
- [CVE-2021-33014](https://insights.sbomify.com/CVE-2021-33014/): KUKA KR C4 - Use of Hard-Coded Credentials (high 8.8)
- [CVE-2021-33013](https://insights.sbomify.com/CVE-2021-33013/): mySCADA myPRO Improper Access Control (high 8.2)
- [CVE-2021-33012](https://insights.sbomify.com/CVE-2021-33012/): Denial of service in Rockwell Automation MicroLogix 1100 (high 7.5)
- [CVE-2021-33011](https://insights.sbomify.com/CVE-2021-33011/): Denial of service in JTEKT Corporation TOYOPUC products (medium 4.3)
- [CVE-2021-33010](https://insights.sbomify.com/CVE-2021-33010/): AVEVA System Platform Uncaught Exception (high 7.5)
- [CVE-2021-33009](https://insights.sbomify.com/CVE-2021-33009/): mySCADA myPRO Unrestricted Upload of File with Dangerous Type (high 7.5)
- [CVE-2021-33008](https://insights.sbomify.com/CVE-2021-33008/): AVEVA System Platform Missing Authentication for Critical Function (high 8.8)
- [CVE-2021-33007](https://insights.sbomify.com/CVE-2021-33007/): Memory corruption in Delta Electronics TPEditor (high 7.8)
- [CVE-2021-33005](https://insights.sbomify.com/CVE-2021-33005/): mySCADA myPRO Path Traversal (high 7.5)
- [CVE-2021-33004](https://insights.sbomify.com/CVE-2021-33004/): Memory corruption in WebAccess HMI Designer (high 7.8)
- [CVE-2021-33003](https://insights.sbomify.com/CVE-2021-33003/): Weak cryptography in Delta Electronics DIAEnergie (medium 5.5)
- [CVE-2021-33002](https://insights.sbomify.com/CVE-2021-33002/): Memory corruption in WebAccess HMI Designer (high 7.8)
- [CVE-2021-33001](https://insights.sbomify.com/CVE-2021-33001/): xArrow SCADA Cross-site Scripting (medium 6.1)
- [CVE-2021-33000](https://insights.sbomify.com/CVE-2021-33000/): Memory corruption in WebAccess HMI Designer (high 7.8)
- [CVE-2021-32999](https://insights.sbomify.com/CVE-2021-32999/): AVEVA SuiteLink Server Improper Handling of Exceptional Conditions (high 7.5)
- [CVE-2021-32998](https://insights.sbomify.com/CVE-2021-32998/): Memory corruption in R-30iA, R-30iA Mate (high 7.4)
- [CVE-2021-32997](https://insights.sbomify.com/CVE-2021-32997/): Baker Hughes Bently Nevada 3500 - Use of Password Hash with Insufficient Computational Effort (high 8.2)
- [CVE-2021-32996](https://insights.sbomify.com/CVE-2021-32996/): Integer overflow in R-30iA, R-30iA Mate (high 7.5)
- [CVE-2021-32995](https://insights.sbomify.com/CVE-2021-32995/): Memory corruption in Cscape (high 7.8)
- [CVE-2021-32994](https://insights.sbomify.com/CVE-2021-32994/): Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer (high 7.5)
- [CVE-2021-32993](https://insights.sbomify.com/CVE-2021-32993/): Philips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials (high 8.1)
- [CVE-2021-32992](https://insights.sbomify.com/CVE-2021-32992/): Memory corruption in FATEK Automation WinProladder (critical 9.8)
- [CVE-2021-32991](https://insights.sbomify.com/CVE-2021-32991/): Cross-site request forgery in Delta Electronics DIAEnergie (medium 4.3)
- [CVE-2021-32990](https://insights.sbomify.com/CVE-2021-32990/): Memory corruption in FATEK Automation WinProladder (critical 9.8)
- [CVE-2021-32989](https://insights.sbomify.com/CVE-2021-32989/): LCDS LAquis SCADA - Cross-site Scripting (critical 9.3)
- [CVE-2021-32988](https://insights.sbomify.com/CVE-2021-32988/): Memory corruption in FATEK Automation WinProladder (critical 9.8)
- [CVE-2021-32987](https://insights.sbomify.com/CVE-2021-32987/): AVEVA SuiteLink Server Null Pointer Dereference (high 7.5)
- [CVE-2021-32986](https://insights.sbomify.com/CVE-2021-32986/): Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel (critical 9.8)
- [CVE-2021-32985](https://insights.sbomify.com/CVE-2021-32985/): AVEVA System Platform Origin Validation Error (high 7.2)
- [CVE-2021-32984](https://insights.sbomify.com/CVE-2021-32984/): Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel (critical 9.8)
- [CVE-2021-32983](https://insights.sbomify.com/CVE-2021-32983/): SQL injection in Delta Electronics DIAEnergie (critical 9.8)
- [CVE-2021-32982](https://insights.sbomify.com/CVE-2021-32982/): Automation Direct CLICK PLC CPU Modules Cleartext Transmission of Sensitive Information (high 7.5)
- [CVE-2021-32981](https://insights.sbomify.com/CVE-2021-32981/): AVEVA System Platform Path Traversal (high 7.2)
- [CVE-2021-32980](https://insights.sbomify.com/CVE-2021-32980/): Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel (critical 9.8)
- [CVE-2021-3298](https://insights.sbomify.com/CVE-2021-3298/): Cross-site scripting in o-dyn:collabtive (medium 5.4)
- [CVE-2021-32979](https://insights.sbomify.com/CVE-2021-32979/): AVEVA SuiteLink Server Null Pointer Dereference (high 7.5)
- [CVE-2021-32978](https://insights.sbomify.com/CVE-2021-32978/): Automation Direct CLICK PLC CPU Modules Plaintext Storage of a Password (high 7.5)
- [CVE-2021-32977](https://insights.sbomify.com/CVE-2021-32977/): AVEVA System Platform Improper Verification of Cryptographic Signature (high 7.2)
- [CVE-2021-32976](https://insights.sbomify.com/CVE-2021-32976/): Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow (critical 9.8)
- [CVE-2021-32975](https://insights.sbomify.com/CVE-2021-32975/): Memory corruption in Cscape (high 7.8)
- [CVE-2021-32974](https://insights.sbomify.com/CVE-2021-32974/): Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation (critical 9.8)
- [CVE-2021-32972](https://insights.sbomify.com/CVE-2021-32972/): XML external entity in Panasonic FPWIN Pro (medium 5.5)
- [CVE-2021-32971](https://insights.sbomify.com/CVE-2021-32971/): AVEVA SuiteLink Server Null Pointer Dereference (high 7.5)
- [CVE-2021-32970](https://insights.sbomify.com/CVE-2021-32970/): Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation (high 7.5)
- [CVE-2021-3297](https://insights.sbomify.com/CVE-2021-3297/): Auth bypass in zyxel:nbg2105 firmware (high 7.8)
- [CVE-2021-32969](https://insights.sbomify.com/CVE-2021-32969/): Delta Electronics DIAScreen - Type Confusion, Out-of-bounds Write (high 7.8)
- [CVE-2021-32968](https://insights.sbomify.com/CVE-2021-32968/): Moxa NPort IAW5000A-I/O Series Serial Device Server Classic Buffer Overflow (high 7.5)
- [CVE-2021-32967](https://insights.sbomify.com/CVE-2021-32967/): Auth bypass in Delta Electronics DIAEnergie (critical 9.8)
- [CVE-2021-32966](https://insights.sbomify.com/CVE-2021-32966/): Philips Interoperability Solution XDS - Clear Text Transmission of Sensitive Information (low 3.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/152/