# Vulnerabilities published in 2021


- [CVE-2021-32029](https://insights.sbomify.com/CVE-2021-32029/): Information disclosure in postgresql (medium 6.5)
- [CVE-2021-32028](https://insights.sbomify.com/CVE-2021-32028/): Information disclosure in postgresql (medium 6.5)
- [CVE-2021-32027](https://insights.sbomify.com/CVE-2021-32027/): Memory corruption in postgresql (high 8.8)
- [CVE-2021-32025](https://insights.sbomify.com/CVE-2021-32025/): Privilege escalation in QNX Software Development Platform (SDP), QNX OS for Medical (QOSM), and QNX OS for Safety (QOS) (high 8.1)
- [CVE-2021-32024](https://insights.sbomify.com/CVE-2021-32024/): Memory corruption in QNX Software Development Platform (SDP) (critical 9.8)
- [CVE-2021-32023](https://insights.sbomify.com/CVE-2021-32023/): Privilege escalation in BlackBerry Protect for Windows (high 7.8)
- [CVE-2021-32022](https://insights.sbomify.com/CVE-2021-32022/): Missing authorization in BlackBerry Protect for Windows (medium 5.5)
- [CVE-2021-32021](https://insights.sbomify.com/CVE-2021-32021/): Denial of service in BlackBerry Protect for Windows (high 7.8)
- [CVE-2021-32020](https://insights.sbomify.com/CVE-2021-32020/): Memory corruption in amazon:freertos (critical 9.8)
- [CVE-2021-32019](https://insights.sbomify.com/CVE-2021-32019/): Cross-site scripting in openwrt:openwrt (medium 6.1)
- [CVE-2021-32018](https://insights.sbomify.com/CVE-2021-32018/): Path traversal in jump-technology:asset management (high 8.5)
- [CVE-2021-32017](https://insights.sbomify.com/CVE-2021-32017/): Information disclosure in jump-technology:asset management (critical 9.9)
- [CVE-2021-32016](https://insights.sbomify.com/CVE-2021-32016/): Path traversal in jump-technology:asset management (critical 9.9)
- [CVE-2021-32015](https://insights.sbomify.com/CVE-2021-32015/): Missing authorization in nuvoton:npct75x firmware (medium 6.0)
- [CVE-2021-32014](https://insights.sbomify.com/CVE-2021-32014/): Denial of Service in SheetJS Pro (medium 5.5)
- [CVE-2021-32013](https://insights.sbomify.com/CVE-2021-32013/): Denial of Service in SheetsJS Pro (medium 5.5)
- [CVE-2021-32012](https://insights.sbomify.com/CVE-2021-32012/): Denial of Service in SheetJS Pro (medium 5.5)
- [CVE-2021-32010](https://insights.sbomify.com/CVE-2021-32010/): Clients may connect to a GateManager with TLS 1.0 (medium 5.6)
- [CVE-2021-32009](https://insights.sbomify.com/CVE-2021-32009/): Missing XSS guards on firmware page (medium 5.0)
- [CVE-2021-32008](https://insights.sbomify.com/CVE-2021-32008/): Logged-in Administrator may get unrestricted file system access (critical 9.9)
- [CVE-2021-32007](https://insights.sbomify.com/CVE-2021-32007/): Missing security header: Referrer-Policy URL (low 3.5)
- [CVE-2021-32006](https://insights.sbomify.com/CVE-2021-32006/): GateManager information leak for LinkManager Users (medium 5.0)
- [CVE-2021-32005](https://insights.sbomify.com/CVE-2021-32005/): SiteManager Log View XSS Issue (medium 6.5)
- [CVE-2021-32004](https://insights.sbomify.com/CVE-2021-32004/): GateManager does not enforce strict hostname matching for WEB server (low 3.7)
- [CVE-2021-32003](https://insights.sbomify.com/CVE-2021-32003/): Configuration service port remains open 10 minutes after reboot even when already provisioned (high 8.0)
- [CVE-2021-32002](https://insights.sbomify.com/CVE-2021-32002/): SiteManager troubleshooter allows access without authentication from local network (medium 4.3)
- [CVE-2021-32001](https://insights.sbomify.com/CVE-2021-32001/): K3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a token (medium 6.5)
- [CVE-2021-32000](https://insights.sbomify.com/CVE-2021-32000/): clone-master-clean-up: dangerous file system operations (low 3.2)
- [CVE-2021-3200](https://insights.sbomify.com/CVE-2021-3200/): Memory corruption in opensuse:libsolv (low 3.3)
- [CVE-2021-31999](https://insights.sbomify.com/CVE-2021-31999/): Rancher: Privilege escalation vulnerability via malicious Connection header (high 8.8)
- [CVE-2021-31998](https://insights.sbomify.com/CVE-2021-31998/): inn: %post calls user owned file allowing local privilege escalation to root (medium 6.8)
- [CVE-2021-31997](https://insights.sbomify.com/CVE-2021-31997/): Privilege escalation in Factory (medium 6.8)
- [CVE-2021-31996](https://insights.sbomify.com/CVE-2021-31996/): Double free in algorithmica (high 7.5)
- [CVE-2021-3199](https://insights.sbomify.com/CVE-2021-3199/): ONLYOFFICE Docs Server Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2021-31989](https://insights.sbomify.com/CVE-2021-31989/): Information disclosure in AXIS Device Manager (medium 5.3)
- [CVE-2021-31988](https://insights.sbomify.com/CVE-2021-31988/): Other in AXIS OS (high 8.8)
- [CVE-2021-31987](https://insights.sbomify.com/CVE-2021-31987/): Security feature bypass in AXIS OS (high 7.5)
- [CVE-2021-31986](https://insights.sbomify.com/CVE-2021-31986/): Memory corruption in AXIS OS (medium 6.8)
- [CVE-2021-31985](https://insights.sbomify.com/CVE-2021-31985/): Microsoft Defender Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31984](https://insights.sbomify.com/CVE-2021-31984/): Power BI Remote Code Execution Vulnerability (high 7.6)
- [CVE-2021-31983](https://insights.sbomify.com/CVE-2021-31983/): Paint 3D Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31982](https://insights.sbomify.com/CVE-2021-31982/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (high 8.8)
- [CVE-2021-31980](https://insights.sbomify.com/CVE-2021-31980/): Microsoft Intune Management Extension Remote Code Execution Vulnerability (high 8.1)
- [CVE-2021-3198](https://insights.sbomify.com/CVE-2021-3198/): Ivanti MobileIron Core clish Restricted Shell Escape via OS Command Injection (medium 6.5)
- [CVE-2021-31979](https://insights.sbomify.com/CVE-2021-31979/): Microsoft Windows Kernel Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-31978](https://insights.sbomify.com/CVE-2021-31978/): Microsoft Defender Denial of Service Vulnerability (medium 5.5)
- [CVE-2021-31977](https://insights.sbomify.com/CVE-2021-31977/): Windows Hyper-V Denial of Service Vulnerability (high 8.6)
- [CVE-2021-31976](https://insights.sbomify.com/CVE-2021-31976/): Server for NFS Information Disclosure Vulnerability (high 7.5)
- [CVE-2021-31975](https://insights.sbomify.com/CVE-2021-31975/): Server for NFS Information Disclosure Vulnerability (high 7.5)
- [CVE-2021-31974](https://insights.sbomify.com/CVE-2021-31974/): Server for NFS Denial of Service Vulnerability (high 7.5)
- [CVE-2021-31973](https://insights.sbomify.com/CVE-2021-31973/): Windows GPSVC Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31972](https://insights.sbomify.com/CVE-2021-31972/): Event Tracing for Windows Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-31971](https://insights.sbomify.com/CVE-2021-31971/): Windows HTML Platforms Security Feature Bypass Vulnerability (medium 6.8)
- [CVE-2021-31970](https://insights.sbomify.com/CVE-2021-31970/): Windows TCP/IP Driver Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2021-3197](https://insights.sbomify.com/CVE-2021-3197/): SaltStack Salt is vulnerable to shell injection via ProxyCommand argument (critical 9.8)
- [CVE-2021-31969](https://insights.sbomify.com/CVE-2021-31969/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31968](https://insights.sbomify.com/CVE-2021-31968/): Windows Remote Desktop Services Denial of Service Vulnerability (high 7.5)
- [CVE-2021-31967](https://insights.sbomify.com/CVE-2021-31967/): VP9 Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31966](https://insights.sbomify.com/CVE-2021-31966/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2021-31965](https://insights.sbomify.com/CVE-2021-31965/): Microsoft SharePoint Server Information Disclosure Vulnerability (medium 5.7)
- [CVE-2021-31964](https://insights.sbomify.com/CVE-2021-31964/): Microsoft SharePoint Server Spoofing Vulnerability (high 7.6)
- [CVE-2021-31963](https://insights.sbomify.com/CVE-2021-31963/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.1)
- [CVE-2021-31962](https://insights.sbomify.com/CVE-2021-31962/): Kerberos AppContainer Security Feature Bypass Vulnerability (critical 9.4)
- [CVE-2021-31961](https://insights.sbomify.com/CVE-2021-31961/): Windows InstallService Elevation of Privilege Vulnerability (medium 6.1)
- [CVE-2021-31960](https://insights.sbomify.com/CVE-2021-31960/): Windows Bind Filter Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-3196](https://insights.sbomify.com/CVE-2021-3196/): Auth bypass in hitachi:id bravura security fabric (high 8.8)
- [CVE-2021-31959](https://insights.sbomify.com/CVE-2021-31959/): Scripting Engine Memory Corruption Vulnerability (medium 6.4)
- [CVE-2021-31958](https://insights.sbomify.com/CVE-2021-31958/): Windows NTLM Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2021-31957](https://insights.sbomify.com/CVE-2021-31957/): ASP.NET Core Denial of Service Vulnerability (medium 5.9)
- [CVE-2021-31956](https://insights.sbomify.com/CVE-2021-31956/): Microsoft Windows NTFS Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-31955](https://insights.sbomify.com/CVE-2021-31955/): Microsoft Windows Kernel Information Disclosure (medium 5.5, exploited in the wild)
- [CVE-2021-31954](https://insights.sbomify.com/CVE-2021-31954/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31953](https://insights.sbomify.com/CVE-2021-31953/): Windows Filter Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31952](https://insights.sbomify.com/CVE-2021-31952/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31951](https://insights.sbomify.com/CVE-2021-31951/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31950](https://insights.sbomify.com/CVE-2021-31950/): Microsoft SharePoint Server Spoofing Vulnerability (high 7.6)
- [CVE-2021-3195](https://insights.sbomify.com/CVE-2021-3195/): Path traversal in bitcoin:bitcoin core (high 7.5)
- [CVE-2021-31949](https://insights.sbomify.com/CVE-2021-31949/): Microsoft Outlook Remote Code Execution Vulnerability (high 7.3)
- [CVE-2021-31948](https://insights.sbomify.com/CVE-2021-31948/): Microsoft SharePoint Server Spoofing Vulnerability (high 7.6)
- [CVE-2021-31947](https://insights.sbomify.com/CVE-2021-31947/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31946](https://insights.sbomify.com/CVE-2021-31946/): Paint 3D Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31945](https://insights.sbomify.com/CVE-2021-31945/): Paint 3D Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31944](https://insights.sbomify.com/CVE-2021-31944/): 3D Viewer Information Disclosure Vulnerability (medium 5.0)
- [CVE-2021-31943](https://insights.sbomify.com/CVE-2021-31943/): 3D Viewer Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31942](https://insights.sbomify.com/CVE-2021-31942/): 3D Viewer Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31941](https://insights.sbomify.com/CVE-2021-31941/): Microsoft Office Graphics Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31940](https://insights.sbomify.com/CVE-2021-31940/): Microsoft Office Graphics Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31939](https://insights.sbomify.com/CVE-2021-31939/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31938](https://insights.sbomify.com/CVE-2021-31938/): Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2021-31937](https://insights.sbomify.com/CVE-2021-31937/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2021-31936](https://insights.sbomify.com/CVE-2021-31936/): Microsoft Accessibility Insights for Web Information Disclosure Vulnerability (high 7.4)
- [CVE-2021-31935](https://insights.sbomify.com/CVE-2021-31935/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2021-31934](https://insights.sbomify.com/CVE-2021-31934/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2021-31933](https://insights.sbomify.com/CVE-2021-31933/): File upload in chamilo:chamilo (high 7.2)
- [CVE-2021-31932](https://insights.sbomify.com/CVE-2021-31932/): Auth bypass in nokia:bts trs web console (critical 9.8)
- [CVE-2021-31930](https://insights.sbomify.com/CVE-2021-31930/): Cross-site scripting in concerto-signage:concerto (medium 6.1)
- [CVE-2021-3193](https://insights.sbomify.com/CVE-2021-3193/): Command injection in nagios:nagios xi (critical 9.8)
- [CVE-2021-31929](https://insights.sbomify.com/CVE-2021-31929/): Missing authorization in annexcloud:loyalty experience platform (medium 4.3)
- [CVE-2021-31928](https://insights.sbomify.com/CVE-2021-31928/): Privilege escalation in annexcloud:loyalty experience platform (high 8.8)
- [CVE-2021-31927](https://insights.sbomify.com/CVE-2021-31927/): Missing authorization in annexcloud:loyalty experience platform (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/159/