# Vulnerabilities published in 2021


- [CVE-2021-32522](https://insights.sbomify.com/CVE-2021-32522/): QSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication Attempts (critical 9.8)
- [CVE-2021-32521](https://insights.sbomify.com/CVE-2021-32521/): QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password (high 7.3)
- [CVE-2021-32520](https://insights.sbomify.com/CVE-2021-32520/): QSAN Storage Manager - Use of Hard-coded Cryptographic Key (critical 9.8)
- [CVE-2021-3252](https://insights.sbomify.com/CVE-2021-3252/): Information disclosure in kaco-newenergy:xp100u firmware (high 7.5)
- [CVE-2021-32519](https://insights.sbomify.com/CVE-2021-32519/): QSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational Effort (critical 9.8)
- [CVE-2021-32518](https://insights.sbomify.com/CVE-2021-32518/): QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following (high 7.5)
- [CVE-2021-32517](https://insights.sbomify.com/CVE-2021-32517/): QSAN Storage Manager - Improper Access Control (high 7.5)
- [CVE-2021-32516](https://insights.sbomify.com/CVE-2021-32516/): QSAN Storage Manager - Path Traversal (high 7.5)
- [CVE-2021-32515](https://insights.sbomify.com/CVE-2021-32515/): QSAN Storage Manager - Exposure of Information Through Directory Listing (medium 5.3)
- [CVE-2021-32514](https://insights.sbomify.com/CVE-2021-32514/): QSAN Storage Manager - Improper Access Control Following via FirwareUpgrade function (high 7.5)
- [CVE-2021-32513](https://insights.sbomify.com/CVE-2021-32513/): QSAN Storage Manager - Command Injection Following via QsanTorture function (critical 9.8)
- [CVE-2021-32512](https://insights.sbomify.com/CVE-2021-32512/): QSAN Storage Manager - Command Injection Following via QuickInstall function (critical 9.8)
- [CVE-2021-32511](https://insights.sbomify.com/CVE-2021-32511/): QSAN Storage Manager - Exposure of Information Through Directory Listing Following via ViewBroserList function (medium 4.3)
- [CVE-2021-32510](https://insights.sbomify.com/CVE-2021-32510/): QSAN Storage Manager - Exposure of Information Through Directory Listing Following via Antivirus function (medium 4.3)
- [CVE-2021-32509](https://insights.sbomify.com/CVE-2021-32509/): QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileviewDoc function (medium 6.5)
- [CVE-2021-32508](https://insights.sbomify.com/CVE-2021-32508/): QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileStreaming function (medium 6.5)
- [CVE-2021-32507](https://insights.sbomify.com/CVE-2021-32507/): QSAN Storage Manager - Absolute Path Traversal via FileDownload function (medium 6.5)
- [CVE-2021-32506](https://insights.sbomify.com/CVE-2021-32506/): QSAN Storage Manager - Absolute Path Traversal via GetImage function (medium 6.5)
- [CVE-2021-32504](https://insights.sbomify.com/CVE-2021-32504/): Missing authorization in SICK FTMg (medium 5.3)
- [CVE-2021-32503](https://insights.sbomify.com/CVE-2021-32503/): Missing authorization in SICK FTMg (medium 4.9)
- [CVE-2021-32499](https://insights.sbomify.com/CVE-2021-32499/): Command injection in SICK SOPAS ET (high 7.5)
- [CVE-2021-32498](https://insights.sbomify.com/CVE-2021-32498/): Path traversal in SICK SOPAS ET (high 8.6)
- [CVE-2021-32497](https://insights.sbomify.com/CVE-2021-32497/): Code injection in SICK SOPAS ET (high 8.6)
- [CVE-2021-32496](https://insights.sbomify.com/CVE-2021-32496/): Weak cryptography in SICK Visionary-S CX (medium 5.3)
- [CVE-2021-32495](https://insights.sbomify.com/CVE-2021-32495/): Use after free in radare2 (critical 10.0)
- [CVE-2021-32494](https://insights.sbomify.com/CVE-2021-32494/): Denial of service in radare2 (critical 10.0)
- [CVE-2021-32493](https://insights.sbomify.com/CVE-2021-32493/): Memory corruption in djvulibre (high 7.8)
- [CVE-2021-32492](https://insights.sbomify.com/CVE-2021-32492/): Memory corruption in djvulibre (high 7.8)
- [CVE-2021-32491](https://insights.sbomify.com/CVE-2021-32491/): Integer overflow in djvulibre (high 7.8)
- [CVE-2021-32490](https://insights.sbomify.com/CVE-2021-32490/): Memory corruption in djvulibre (high 7.8)
- [CVE-2021-32489](https://insights.sbomify.com/CVE-2021-32489/): Integer overflow in yubico:yubihsm-shell (medium 4.4)
- [CVE-2021-32487](https://insights.sbomify.com/CVE-2021-32487/): Memory corruption in mediatek:modem (high 7.5)
- [CVE-2021-32486](https://insights.sbomify.com/CVE-2021-32486/): Memory corruption in mediatek:modem (high 7.5)
- [CVE-2021-32485](https://insights.sbomify.com/CVE-2021-32485/): Memory corruption in mediatek:modem (high 7.5)
- [CVE-2021-32484](https://insights.sbomify.com/CVE-2021-32484/): Memory corruption in mediatek:modem (high 7.5)
- [CVE-2021-32483](https://insights.sbomify.com/CVE-2021-32483/): Missing authorization in cloudera:cloudera manager (medium 5.3)
- [CVE-2021-32482](https://insights.sbomify.com/CVE-2021-32482/): Cross-site scripting in cloudera:cloudera manager (medium 6.1)
- [CVE-2021-32481](https://insights.sbomify.com/CVE-2021-32481/): Cross-site scripting in cloudera:hue (medium 6.1)
- [CVE-2021-32478](https://insights.sbomify.com/CVE-2021-32478/): Moodle reflected XSS (medium 6.1)
- [CVE-2021-32477](https://insights.sbomify.com/CVE-2021-32477/): Moodle Exposure of Sensitive Information to an Unauthorized Actor (medium 4.3)
- [CVE-2021-32476](https://insights.sbomify.com/CVE-2021-32476/): Moodle denial-of-service risk in the draft files area (high 7.5)
- [CVE-2021-32475](https://insights.sbomify.com/CVE-2021-32475/): Moodle stored Cross-site Scripting (medium 5.4)
- [CVE-2021-32474](https://insights.sbomify.com/CVE-2021-32474/): Moodle Blind SQL injection possible via MNet authentication (high 7.2)
- [CVE-2021-32473](https://insights.sbomify.com/CVE-2021-32473/): Moodle Information Disclosure vulnerability (medium 5.3)
- [CVE-2021-32472](https://insights.sbomify.com/CVE-2021-32472/): Moodle Exposure of Sensitive Information to an Unauthorized Actor (medium 4.3)
- [CVE-2021-32471](https://insights.sbomify.com/CVE-2021-32471/): Other in mit:universal turing machine (high 7.8)
- [CVE-2021-32470](https://insights.sbomify.com/CVE-2021-32470/): Craft CMS Cross-site Scripting Vulnerability (medium 6.1)
- [CVE-2021-32469](https://insights.sbomify.com/CVE-2021-32469/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-32468](https://insights.sbomify.com/CVE-2021-32468/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-32467](https://insights.sbomify.com/CVE-2021-32467/): Memory corruption in mediatek:mt7603e firmware (high 8.2)
- [CVE-2021-32466](https://insights.sbomify.com/CVE-2021-32466/): Privilege escalation in Trend Micro HouseCall for Home Networks (high 7.0)
- [CVE-2021-32465](https://insights.sbomify.com/CVE-2021-32465/): Auth bypass in Trend Micro Apex One (high 8.8)
- [CVE-2021-32464](https://insights.sbomify.com/CVE-2021-32464/): Privilege escalation in Trend Micro Apex One (high 7.8)
- [CVE-2021-32463](https://insights.sbomify.com/CVE-2021-32463/): Privilege escalation in Trend Micro Apex One (high 7.8)
- [CVE-2021-32462](https://insights.sbomify.com/CVE-2021-32462/): Privilege escalation in Trend Micro Password Manager (high 8.8)
- [CVE-2021-32461](https://insights.sbomify.com/CVE-2021-32461/): Integer overflow in Trend Micro Password Manager (high 7.8)
- [CVE-2021-32460](https://insights.sbomify.com/CVE-2021-32460/): Privilege escalation in Trend Micro Maxmium Security (Consumer) (high 7.8)
- [CVE-2021-3246](https://insights.sbomify.com/CVE-2021-3246/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2021-32459](https://insights.sbomify.com/CVE-2021-32459/): Hardcoded credentials in Trend Micro Home Network Security (medium 6.5)
- [CVE-2021-32458](https://insights.sbomify.com/CVE-2021-32458/): Memory corruption in Trend Micro Home Network Security (high 7.8)
- [CVE-2021-32457](https://insights.sbomify.com/CVE-2021-32457/): Memory corruption in Trend Micro Home Network Security (high 7.8)
- [CVE-2021-32456](https://insights.sbomify.com/CVE-2021-32456/): SITEL CAP/PRX cleartext transmission of sensitive information (medium 6.5)
- [CVE-2021-32455](https://insights.sbomify.com/CVE-2021-32455/): SITEL CAP/PRX vulnerable to a denial of service attack (medium 6.8)
- [CVE-2021-32454](https://insights.sbomify.com/CVE-2021-32454/): SITEL CAP/PRX hardcoded credentials (critical 9.6)
- [CVE-2021-32453](https://insights.sbomify.com/CVE-2021-32453/): SITEL CAP/PRX information exposure (medium 6.5)
- [CVE-2021-32441](https://insights.sbomify.com/CVE-2021-32441/): SQL injection in exponentcms:exponent cms (high 7.5)
- [CVE-2021-32440](https://insights.sbomify.com/CVE-2021-32440/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-32439](https://insights.sbomify.com/CVE-2021-32439/): Memory corruption in gpac:gpac (high 7.8)
- [CVE-2021-32438](https://insights.sbomify.com/CVE-2021-32438/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-32437](https://insights.sbomify.com/CVE-2021-32437/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-32436](https://insights.sbomify.com/CVE-2021-32436/): Memory corruption in abcm2ps project:abcm2ps (medium 6.5)
- [CVE-2021-32435](https://insights.sbomify.com/CVE-2021-32435/): Memory corruption in abcm2ps project:abcm2ps (medium 5.5)
- [CVE-2021-32434](https://insights.sbomify.com/CVE-2021-32434/): Memory corruption in abcm2ps project:abcm2ps (medium 5.5)
- [CVE-2021-3243](https://insights.sbomify.com/CVE-2021-3243/): Cross-site scripting in wfiltericf:wfilter internet content filter (medium 6.1)
- [CVE-2021-32428](https://insights.sbomify.com/CVE-2021-32428/): SQL injection in viaviweb:ebook (critical 9.8)
- [CVE-2021-32426](https://insights.sbomify.com/CVE-2021-32426/): Cross-site scripting in trendnet:tw100-s4w1ca firmware (medium 6.1)
- [CVE-2021-32424](https://insights.sbomify.com/CVE-2021-32424/): Cross-site request forgery in trendnet:tw100-s4w1ca firmware (high 8.8)
- [CVE-2021-32422](https://insights.sbomify.com/CVE-2021-32422/): Memory corruption in dpic project:dpic (high 7.5)
- [CVE-2021-32421](https://insights.sbomify.com/CVE-2021-32421/): Use after free in dpic project:dpic (high 7.5)
- [CVE-2021-32420](https://insights.sbomify.com/CVE-2021-32420/): Memory corruption in dpic project:dpic (high 7.5)
- [CVE-2021-3242](https://insights.sbomify.com/CVE-2021-3242/): SQL injection in duxcms project:duxcms (critical 9.8)
- [CVE-2021-32419](https://insights.sbomify.com/CVE-2021-32419/): Memory corruption in schismtracker:schism tracker (medium 5.3)
- [CVE-2021-32415](https://insights.sbomify.com/CVE-2021-32415/): Privilege escalation in msi:wrapper (high 7.8)
- [CVE-2021-32403](https://insights.sbomify.com/CVE-2021-32403/): Cross-site request forgery in intelbras:rf 301k firmware (high 8.8)
- [CVE-2021-32402](https://insights.sbomify.com/CVE-2021-32402/): Cross-site request forgery in intelbras:rf 301k firmware (high 8.8)
- [CVE-2021-32399](https://insights.sbomify.com/CVE-2021-32399/): Race condition in debian:debian linux (high 7.0)
- [CVE-2021-3239](https://insights.sbomify.com/CVE-2021-3239/): SQL injection in e-learning system project:e-learning system (critical 9.8)
- [CVE-2021-3236](https://insights.sbomify.com/CVE-2021-3236/): Null dereference in vim:vim (medium 5.5)
- [CVE-2021-32305](https://insights.sbomify.com/CVE-2021-32305/): Command injection in websvn:websvn (critical 9.8)
- [CVE-2021-32302](https://insights.sbomify.com/CVE-2021-32302/): Cross-site scripting in irz:ruh2 firmware (medium 6.1)
- [CVE-2021-32299](https://insights.sbomify.com/CVE-2021-32299/): Memory corruption in pbrt project:pbrt (high 7.8)
- [CVE-2021-32298](https://insights.sbomify.com/CVE-2021-32298/): Memory corruption in libiff project:libiff (high 8.8)
- [CVE-2021-32297](https://insights.sbomify.com/CVE-2021-32297/): LIEF heap-buffer-overflow (high 8.8)
- [CVE-2021-32294](https://insights.sbomify.com/CVE-2021-32294/): Memory corruption in linuxsampler:libgig (high 8.8)
- [CVE-2021-32292](https://insights.sbomify.com/CVE-2021-32292/): Memory corruption in json-c:json-c (critical 9.8)
- [CVE-2021-3229](https://insights.sbomify.com/CVE-2021-3229/): Denial of service in asus:rt-ax3000 firmware (high 7.5)
- [CVE-2021-32289](https://insights.sbomify.com/CVE-2021-32289/): Null dereference in nokia:heif (medium 5.5)
- [CVE-2021-32288](https://insights.sbomify.com/CVE-2021-32288/): Memory corruption in nokia:heif (high 7.8)
- [CVE-2021-32287](https://insights.sbomify.com/CVE-2021-32287/): Memory corruption in nokia:heif (high 7.8)
- [CVE-2021-32286](https://insights.sbomify.com/CVE-2021-32286/): Memory corruption in hcxtools project:hcxtoold (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/157/