# Vulnerabilities published in 2021


- [CVE-2021-32285](https://insights.sbomify.com/CVE-2021-32285/): Null dereference in creolabs:gravity (medium 5.5)
- [CVE-2021-32284](https://insights.sbomify.com/CVE-2021-32284/): Null dereference in creolabs:gravity (high 7.8)
- [CVE-2021-32283](https://insights.sbomify.com/CVE-2021-32283/): Null dereference in creolabs:gravity (medium 5.5)
- [CVE-2021-32282](https://insights.sbomify.com/CVE-2021-32282/): Null dereference in creolabs:gravity (medium 5.5)
- [CVE-2021-32281](https://insights.sbomify.com/CVE-2021-32281/): Memory corruption in creolabs:gravity (high 7.8)
- [CVE-2021-32280](https://insights.sbomify.com/CVE-2021-32280/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2021-32278](https://insights.sbomify.com/CVE-2021-32278/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-32277](https://insights.sbomify.com/CVE-2021-32277/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-32276](https://insights.sbomify.com/CVE-2021-32276/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2021-32275](https://insights.sbomify.com/CVE-2021-32275/): Null dereference in grame:faust (medium 5.5)
- [CVE-2021-32274](https://insights.sbomify.com/CVE-2021-32274/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-32273](https://insights.sbomify.com/CVE-2021-32273/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-32272](https://insights.sbomify.com/CVE-2021-32272/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-32271](https://insights.sbomify.com/CVE-2021-32271/): Memory corruption in gpac:gpac (high 7.8)
- [CVE-2021-32270](https://insights.sbomify.com/CVE-2021-32270/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-32269](https://insights.sbomify.com/CVE-2021-32269/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-32268](https://insights.sbomify.com/CVE-2021-32268/): Memory corruption in gpac:gpac (high 7.8)
- [CVE-2021-32265](https://insights.sbomify.com/CVE-2021-32265/): Memory corruption in axiosys:bento4 (high 8.8)
- [CVE-2021-32263](https://insights.sbomify.com/CVE-2021-32263/): Memory corruption in ok-file-formats project:ok-file-formats (high 7.8)
- [CVE-2021-32256](https://insights.sbomify.com/CVE-2021-32256/): Memory corruption in gnu:binutils (medium 6.5)
- [CVE-2021-32245](https://insights.sbomify.com/CVE-2021-32245/): Cross-site scripting in PageKit (medium 5.4)
- [CVE-2021-32244](https://insights.sbomify.com/CVE-2021-32244/): Moodle Cross Site Scripting (XSS) (medium 5.4)
- [CVE-2021-32243](https://insights.sbomify.com/CVE-2021-32243/): File upload in fogproject:fogproject (high 8.8)
- [CVE-2021-3224](https://insights.sbomify.com/CVE-2021-3224/): Cross-site scripting in cszcms:csz cms (medium 5.4)
- [CVE-2021-32238](https://insights.sbomify.com/CVE-2021-32238/): Memory corruption in psyonix:rocket league (high 7.8)
- [CVE-2021-32234](https://insights.sbomify.com/CVE-2021-32234/): Other in smartertools:smartermail (critical 9.8)
- [CVE-2021-32233](https://insights.sbomify.com/CVE-2021-32233/): Cross-site scripting in smartertools:smartermail (medium 6.1)
- [CVE-2021-3223](https://insights.sbomify.com/CVE-2021-3223/): Path traversal in Node-RED-Dashboard (high 7.5)
- [CVE-2021-32202](https://insights.sbomify.com/CVE-2021-32202/): Cross-site scripting in cs-cart:cs-cart (medium 6.1)
- [CVE-2021-32198](https://insights.sbomify.com/CVE-2021-32198/): Denial of service in emtec:zoc (critical 9.8)
- [CVE-2021-32172](https://insights.sbomify.com/CVE-2021-32172/): Missing authorization in maianscriptworld:maian cart (critical 9.8)
- [CVE-2021-32163](https://insights.sbomify.com/CVE-2021-32163/): Privilege escalation in MOSN (critical 9.8)
- [CVE-2021-32162](https://insights.sbomify.com/CVE-2021-32162/): Cross-site request forgery in webmin:webmin (high 8.8)
- [CVE-2021-32161](https://insights.sbomify.com/CVE-2021-32161/): Cross-site scripting in webmin:webmin (medium 6.1)
- [CVE-2021-32160](https://insights.sbomify.com/CVE-2021-32160/): Cross-site scripting in webmin:webmin (medium 6.1)
- [CVE-2021-32159](https://insights.sbomify.com/CVE-2021-32159/): Cross-site request forgery in webmin:webmin (high 8.8)
- [CVE-2021-32158](https://insights.sbomify.com/CVE-2021-32158/): Cross-site scripting in webmin:webmin (medium 6.1)
- [CVE-2021-32157](https://insights.sbomify.com/CVE-2021-32157/): Cross-site scripting in webmin:webmin (critical 9.6)
- [CVE-2021-32156](https://insights.sbomify.com/CVE-2021-32156/): Cross-site request forgery in webmin:webmin (high 8.8)
- [CVE-2021-32142](https://insights.sbomify.com/CVE-2021-32142/): Memory corruption in libraw:libraw (high 7.8)
- [CVE-2021-32139](https://insights.sbomify.com/CVE-2021-32139/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-32138](https://insights.sbomify.com/CVE-2021-32138/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-32137](https://insights.sbomify.com/CVE-2021-32137/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2021-32136](https://insights.sbomify.com/CVE-2021-32136/): Memory corruption in gpac:gpac (high 7.8)
- [CVE-2021-32135](https://insights.sbomify.com/CVE-2021-32135/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-32134](https://insights.sbomify.com/CVE-2021-32134/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-32132](https://insights.sbomify.com/CVE-2021-32132/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-32122](https://insights.sbomify.com/CVE-2021-32122/): Cross-site request forgery in netgear:ex3700 firmware (critical 9.8)
- [CVE-2021-32106](https://insights.sbomify.com/CVE-2021-32106/): Cross-site scripting in ICEcoder (medium 5.4)
- [CVE-2021-32104](https://insights.sbomify.com/CVE-2021-32104/): SQL injection in open-emr:openemr (high 8.8)
- [CVE-2021-32103](https://insights.sbomify.com/CVE-2021-32103/): Cross-site scripting in open-emr:openemr (medium 4.8)
- [CVE-2021-32102](https://insights.sbomify.com/CVE-2021-32102/): SQL injection in open-emr:openemr (high 8.8)
- [CVE-2021-32101](https://insights.sbomify.com/CVE-2021-32101/): Missing authorization in open-emr:openemr (high 8.2)
- [CVE-2021-32100](https://insights.sbomify.com/CVE-2021-32100/): Code injection in artica:pandora fms (medium 6.5)
- [CVE-2021-3210](https://insights.sbomify.com/CVE-2021-3210/): Cross-site scripting in bloodhound project:bloodhound (critical 9.6)
- [CVE-2021-32099](https://insights.sbomify.com/CVE-2021-32099/): SQL injection in artica:pandora fms (critical 9.8)
- [CVE-2021-32098](https://insights.sbomify.com/CVE-2021-32098/): Deserialization in artica:pandora fms (critical 9.8)
- [CVE-2021-32096](https://insights.sbomify.com/CVE-2021-32096/): Cross-site request forgery in nsa:emissary (high 8.8)
- [CVE-2021-32095](https://insights.sbomify.com/CVE-2021-32095/): Missing authorization in nsa:emissary (high 8.1)
- [CVE-2021-32094](https://insights.sbomify.com/CVE-2021-32094/): File upload in nsa:emissary (high 8.8)
- [CVE-2021-32093](https://insights.sbomify.com/CVE-2021-32093/): Path traversal in nsa:emissary (medium 6.5)
- [CVE-2021-32092](https://insights.sbomify.com/CVE-2021-32092/): Cross-site scripting in nsa:emissary (medium 6.1)
- [CVE-2021-32091](https://insights.sbomify.com/CVE-2021-32091/): Cross-site scripting in LocalStack (medium 6.1)
- [CVE-2021-32090](https://insights.sbomify.com/CVE-2021-32090/): Command injection in LocalStack (critical 9.8)
- [CVE-2021-32089](https://insights.sbomify.com/CVE-2021-32089/): File upload in zebra:fx9500 firmware (critical 9.8)
- [CVE-2021-32088](https://insights.sbomify.com/CVE-2021-32088/): Security feature bypass in quest:kace systems management appliance (critical 9.8)
- [CVE-2021-32087](https://insights.sbomify.com/CVE-2021-32087/): Hardcoded credentials in quest:kace systems management appliance (high 8.8)
- [CVE-2021-32086](https://insights.sbomify.com/CVE-2021-32086/): Hardcoded credentials in quest:kace systems management appliance (critical 9.8)
- [CVE-2021-32085](https://insights.sbomify.com/CVE-2021-32085/): Hardcoded credentials in quest:kace systems management appliance (high 8.8)
- [CVE-2021-32084](https://insights.sbomify.com/CVE-2021-32084/): Security feature bypass in quest:kace systems management appliance (critical 9.8)
- [CVE-2021-32078](https://insights.sbomify.com/CVE-2021-32078/): Memory corruption in linux:linux kernel (high 7.1)
- [CVE-2021-32077](https://insights.sbomify.com/CVE-2021-32077/): Information disclosure in veritystream:msow solutions (high 7.5)
- [CVE-2021-32076](https://insights.sbomify.com/CVE-2021-32076/): Access Restriction bypass vulnerability via referrer spoof - Business Logic Bypass (medium 5.3)
- [CVE-2021-32075](https://insights.sbomify.com/CVE-2021-32075/): Deserialization in re-logic:terraria (critical 9.8)
- [CVE-2021-32074](https://insights.sbomify.com/CVE-2021-32074/): Vault GitHub Action did not correctly mask multi-line secrets in output (high 7.5)
- [CVE-2021-32073](https://insights.sbomify.com/CVE-2021-32073/): Cross-site request forgery in dedecms:dedecms (high 8.8)
- [CVE-2021-32072](https://insights.sbomify.com/CVE-2021-32072/): Information disclosure in mitel:micollab (medium 6.5)
- [CVE-2021-32071](https://insights.sbomify.com/CVE-2021-32071/): Missing authorization in mitel:micollab (critical 9.8)
- [CVE-2021-32070](https://insights.sbomify.com/CVE-2021-32070/): Other in mitel:micollab (medium 5.4)
- [CVE-2021-32069](https://insights.sbomify.com/CVE-2021-32069/): Weak cryptography in mitel:micollab (medium 4.8)
- [CVE-2021-32068](https://insights.sbomify.com/CVE-2021-32068/): Security feature bypass in mitel:micollab (low 3.7)
- [CVE-2021-32067](https://insights.sbomify.com/CVE-2021-32067/): Information disclosure in mitel:micollab (medium 6.5)
- [CVE-2021-32066](https://insights.sbomify.com/CVE-2021-32066/): Security feature bypass in oracle:jd edwards enterpriseone tools (high 7.4)
- [CVE-2021-32062](https://insights.sbomify.com/CVE-2021-32062/): Path traversal in fedoraproject:fedora (medium 5.3)
- [CVE-2021-32061](https://insights.sbomify.com/CVE-2021-32061/): S3Scanner allows Directory Traversal (medium 5.3)
- [CVE-2021-32056](https://insights.sbomify.com/CVE-2021-32056/): Security feature bypass in cyrus:imap (medium 4.3)
- [CVE-2021-32055](https://insights.sbomify.com/CVE-2021-32055/): Memory corruption in mutt:mutt (critical 9.1)
- [CVE-2021-32054](https://insights.sbomify.com/CVE-2021-32054/): Cross-site scripting in fire.ly:spark (medium 6.1)
- [CVE-2021-32053](https://insights.sbomify.com/CVE-2021-32053/): Uncontrolled Resource Consumption in JPA Server in HAPI FHIR (medium 5.3)
- [CVE-2021-32052](https://insights.sbomify.com/CVE-2021-32052/): Header injection possible in Django (medium 6.1)
- [CVE-2021-32051](https://insights.sbomify.com/CVE-2021-32051/): SQL injection in hexagon:intergraph g\!nius (high 7.5)
- [CVE-2021-32050](https://insights.sbomify.com/CVE-2021-32050/): MongoDB Driver may publish events containing authentication-related data (medium 4.2)
- [CVE-2021-32040](https://insights.sbomify.com/CVE-2021-32040/): Large aggregation pipelines with a specific stage can crash mongod under default configuration (medium 6.5)
- [CVE-2021-3204](https://insights.sbomify.com/CVE-2021-3204/): Server-side request forgery in webware:webdesktop (medium 6.5)
- [CVE-2021-32039](https://insights.sbomify.com/CVE-2021-32039/): MongoDB Extension for VS Code may unexpectedly store credentials locally in clear text (medium 5.5)
- [CVE-2021-32037](https://insights.sbomify.com/CVE-2021-32037/): User may trigger invariant when allowed to send commands directly to shards (medium 6.5)
- [CVE-2021-32036](https://insights.sbomify.com/CVE-2021-32036/): Denial of Service and Data Integrity vulnerability in features command (medium 5.4)
- [CVE-2021-32033](https://insights.sbomify.com/CVE-2021-32033/): Weak cryptography in protectimus:slim nfc 70 firmware (medium 4.6)
- [CVE-2021-32032](https://insights.sbomify.com/CVE-2021-32032/): Denial of service in trustedfirmware:trusted firmware-m (high 7.5)
- [CVE-2021-32030](https://insights.sbomify.com/CVE-2021-32030/): ASUS Routers Improper Authentication (critical 9.8, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/158/