# Vulnerabilities published in 2021


- [CVE-2021-31926](https://insights.sbomify.com/CVE-2021-31926/): Missing authorization in cubecoders:amp (medium 6.5)
- [CVE-2021-31925](https://insights.sbomify.com/CVE-2021-31925/): Denial of service in pexip:pexip infinity (high 7.5)
- [CVE-2021-31924](https://insights.sbomify.com/CVE-2021-31924/): Auth bypass in fedoraproject:fedora (medium 6.8)
- [CVE-2021-31923](https://insights.sbomify.com/CVE-2021-31923/): Other in PingAccess (medium 5.3)
- [CVE-2021-31922](https://insights.sbomify.com/CVE-2021-31922/): Other in pulsesecure:virtual traffic manager (high 7.5)
- [CVE-2021-31921](https://insights.sbomify.com/CVE-2021-31921/): Missing authorization in istio:istio (critical 9.8)
- [CVE-2021-31920](https://insights.sbomify.com/CVE-2021-31920/): Auth bypass in istio:istio (medium 6.5)
- [CVE-2021-31919](https://insights.sbomify.com/CVE-2021-31919/): Use of uninitialized buffer in rkyv (high 7.5)
- [CVE-2021-31918](https://insights.sbomify.com/CVE-2021-31918/): Information disclosure in tripleo-ansible (high 7.5)
- [CVE-2021-31917](https://insights.sbomify.com/CVE-2021-31917/): Auth bypass in Red Hat DataGrid and Infinispan (critical 9.8)
- [CVE-2021-31916](https://insights.sbomify.com/CVE-2021-31916/): Memory corruption in kernel (medium 6.7)
- [CVE-2021-31915](https://insights.sbomify.com/CVE-2021-31915/): Command injection in jetbrains:teamcity (critical 9.8)
- [CVE-2021-31914](https://insights.sbomify.com/CVE-2021-31914/): Other in jetbrains:teamcity (critical 9.8)
- [CVE-2021-31913](https://insights.sbomify.com/CVE-2021-31913/): Open redirect in jetbrains:teamcity (high 7.5)
- [CVE-2021-31912](https://insights.sbomify.com/CVE-2021-31912/): Auth bypass in jetbrains:teamcity (high 8.8)
- [CVE-2021-31911](https://insights.sbomify.com/CVE-2021-31911/): Cross-site scripting in jetbrains:teamcity (medium 6.1)
- [CVE-2021-31910](https://insights.sbomify.com/CVE-2021-31910/): Server-side request forgery in jetbrains:teamcity (high 7.5)
- [CVE-2021-3191](https://insights.sbomify.com/CVE-2021-3191/): Auth bypass in hpe:web viewpoint (high 8.8)
- [CVE-2021-31909](https://insights.sbomify.com/CVE-2021-31909/): Command injection in jetbrains:teamcity (critical 9.8)
- [CVE-2021-31908](https://insights.sbomify.com/CVE-2021-31908/): Cross-site scripting in jetbrains:teamcity (medium 5.4)
- [CVE-2021-31907](https://insights.sbomify.com/CVE-2021-31907/): Missing authorization in jetbrains:teamcity (medium 5.3)
- [CVE-2021-31906](https://insights.sbomify.com/CVE-2021-31906/): Other in jetbrains:teamcity (low 2.7)
- [CVE-2021-31905](https://insights.sbomify.com/CVE-2021-31905/): Information disclosure in jetbrains:youtrack (high 7.5)
- [CVE-2021-31904](https://insights.sbomify.com/CVE-2021-31904/): Cross-site scripting in jetbrains:teamcity (medium 6.1)
- [CVE-2021-31903](https://insights.sbomify.com/CVE-2021-31903/): Cross-site scripting in jetbrains:youtrack (medium 6.1)
- [CVE-2021-31902](https://insights.sbomify.com/CVE-2021-31902/): Missing authorization in jetbrains:youtrack (high 7.5)
- [CVE-2021-31901](https://insights.sbomify.com/CVE-2021-31901/): Security feature bypass in jetbrains:hub (high 7.5)
- [CVE-2021-31900](https://insights.sbomify.com/CVE-2021-31900/): Other in jetbrains:code with me (medium 5.3)
- [CVE-2021-3190](https://insights.sbomify.com/CVE-2021-3190/): OS Command Injection in async-git (critical 9.8)
- [CVE-2021-31899](https://insights.sbomify.com/CVE-2021-31899/): Code injection in jetbrains:code with me (high 8.8)
- [CVE-2021-31898](https://insights.sbomify.com/CVE-2021-31898/): Weak cryptography in jetbrains:webstorm (high 7.5)
- [CVE-2021-31897](https://insights.sbomify.com/CVE-2021-31897/): Code injection in jetbrains:webstorm (critical 9.8)
- [CVE-2021-31895](https://insights.sbomify.com/CVE-2021-31895/): Memory corruption in RUGGEDCOM M2100 (high 8.1)
- [CVE-2021-31894](https://insights.sbomify.com/CVE-2021-31894/): Misconfiguration in SIMATIC PCS 7 V8.2 and earlier (high 8.8)
- [CVE-2021-31893](https://insights.sbomify.com/CVE-2021-31893/): Memory corruption in SIMATIC PCS 7 V8.2 and earlier (high 7.8)
- [CVE-2021-31892](https://insights.sbomify.com/CVE-2021-31892/): Security feature bypass in SINUMERIK Analyse MyCondition (high 7.4)
- [CVE-2021-31891](https://insights.sbomify.com/CVE-2021-31891/): Command injection in Desigo CC (critical 10.0)
- [CVE-2021-31890](https://insights.sbomify.com/CVE-2021-31890/): Memory corruption in Capital Embedded AR Classic 431-422 (high 7.5)
- [CVE-2021-3189](https://insights.sbomify.com/CVE-2021-3189/): Open redirect in Slashify (medium 6.1)
- [CVE-2021-31889](https://insights.sbomify.com/CVE-2021-31889/): Integer overflow in Capital Embedded AR Classic 431-422 (high 7.5)
- [CVE-2021-31888](https://insights.sbomify.com/CVE-2021-31888/): Memory corruption in APOGEE MBC (PPC) (BACnet) (high 8.8)
- [CVE-2021-31887](https://insights.sbomify.com/CVE-2021-31887/): Memory corruption in APOGEE MBC (PPC) (BACnet) (high 8.8)
- [CVE-2021-31886](https://insights.sbomify.com/CVE-2021-31886/): Memory corruption in APOGEE MBC (PPC) (BACnet) (critical 9.8)
- [CVE-2021-31885](https://insights.sbomify.com/CVE-2021-31885/): Information disclosure in APOGEE MBC (PPC) (BACnet) (high 7.5)
- [CVE-2021-31884](https://insights.sbomify.com/CVE-2021-31884/): Memory corruption in APOGEE MBC (PPC) (BACnet) (critical 9.8)
- [CVE-2021-31883](https://insights.sbomify.com/CVE-2021-31883/): Memory corruption in Capital Embedded AR Classic 431-422 (high 7.1)
- [CVE-2021-31882](https://insights.sbomify.com/CVE-2021-31882/): Memory corruption in Capital Embedded AR Classic 431-422 (medium 6.5)
- [CVE-2021-31881](https://insights.sbomify.com/CVE-2021-31881/): Memory corruption in Capital Embedded AR Classic 431-422 (high 7.1)
- [CVE-2021-3188](https://insights.sbomify.com/CVE-2021-3188/): Code injection in phplist:phplist (critical 9.8)
- [CVE-2021-31879](https://insights.sbomify.com/CVE-2021-31879/): Information disclosure in broadcom:brocade fabric operating system firmware (medium 6.1)
- [CVE-2021-31878](https://insights.sbomify.com/CVE-2021-31878/): Denial of service in digium:asterisk (medium 6.5)
- [CVE-2021-31876](https://insights.sbomify.com/CVE-2021-31876/): Business logic in bitcoin:bitcoin (medium 6.5)
- [CVE-2021-31875](https://insights.sbomify.com/CVE-2021-31875/): Memory corruption in cesanta:mongooseos mjs (critical 9.8)
- [CVE-2021-31874](https://insights.sbomify.com/CVE-2021-31874/): Information disclosure in zohocorp:manageengine adselfservice plus (medium 5.9)
- [CVE-2021-31873](https://insights.sbomify.com/CVE-2021-31873/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2021-31872](https://insights.sbomify.com/CVE-2021-31872/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2021-31871](https://insights.sbomify.com/CVE-2021-31871/): Integer overflow in debian:debian linux (high 7.5)
- [CVE-2021-31870](https://insights.sbomify.com/CVE-2021-31870/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2021-3187](https://insights.sbomify.com/CVE-2021-3187/): Privilege escalation in beyondtrust:privilege management for mac (high 8.8)
- [CVE-2021-31869](https://insights.sbomify.com/CVE-2021-31869/): Pimcore AdminBundle 'specificID' SQL Injection (medium 6.5)
- [CVE-2021-31868](https://insights.sbomify.com/CVE-2021-31868/): Rapid7 Nexpose Security Console Ticket Access Authentication Vulnerability (medium 4.3)
- [CVE-2021-31867](https://insights.sbomify.com/CVE-2021-31867/): Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection (medium 6.5)
- [CVE-2021-31866](https://insights.sbomify.com/CVE-2021-31866/): Information disclosure in debian:debian linux (medium 5.3)
- [CVE-2021-31865](https://insights.sbomify.com/CVE-2021-31865/): File upload in debian:debian linux (medium 5.3)
- [CVE-2021-31864](https://insights.sbomify.com/CVE-2021-31864/): Missing authorization in debian:debian linux (medium 5.3)
- [CVE-2021-31863](https://insights.sbomify.com/CVE-2021-31863/): Path traversal in debian:debian linux (high 7.5)
- [CVE-2021-31862](https://insights.sbomify.com/CVE-2021-31862/): Cross-site scripting in sysaid:sysaid (medium 6.1)
- [CVE-2021-3186](https://insights.sbomify.com/CVE-2021-3186/): Cross-site scripting in tenda:ac5 firmware (medium 5.4)
- [CVE-2021-31859](https://insights.sbomify.com/CVE-2021-31859/): Privilege escalation in ysoft:safeq (high 7.8)
- [CVE-2021-31858](https://insights.sbomify.com/CVE-2021-31858/): Cross-site scripting in dnnsoftware:dotnetnuke (medium 5.4)
- [CVE-2021-31857](https://insights.sbomify.com/CVE-2021-31857/): Information disclosure in zohocorp:manageengine password manager pro (medium 5.9)
- [CVE-2021-31856](https://insights.sbomify.com/CVE-2021-31856/): SQL injection in layer5:meshery (critical 9.8)
- [CVE-2021-31855](https://insights.sbomify.com/CVE-2021-31855/): Information disclosure in kde:messagelib (medium 6.5)
- [CVE-2021-31854](https://insights.sbomify.com/CVE-2021-31854/): Code injection vulnerability in McAfee Agent (high 7.7)
- [CVE-2021-31853](https://insights.sbomify.com/CVE-2021-31853/): MDE DLL Search Order Hijacking vulnerability (high 7.8)
- [CVE-2021-31852](https://insights.sbomify.com/CVE-2021-31852/): Cross-Site Scripting vulnerability in Policy Auditor (medium 6.1)
- [CVE-2021-31851](https://insights.sbomify.com/CVE-2021-31851/): Cross-Site Scripting vulnerability in Policy Auditor (medium 6.1)
- [CVE-2021-31850](https://insights.sbomify.com/CVE-2021-31850/): Denial of Service in Database Security on Windows (medium 6.1)
- [CVE-2021-3185](https://insights.sbomify.com/CVE-2021-3185/): Memory corruption in gstreamer (critical 9.8)
- [CVE-2021-31849](https://insights.sbomify.com/CVE-2021-31849/): Data Loss Prevention (DLP) ePO extension - SQL injection (high 8.4)
- [CVE-2021-31848](https://insights.sbomify.com/CVE-2021-31848/): Data Loss Prevention (DLP) ePO extension - Cross site scripting (XSS) (high 8.4)
- [CVE-2021-31847](https://insights.sbomify.com/CVE-2021-31847/): Improper privilege management in repair process of MA for Windows (high 8.2)
- [CVE-2021-31845](https://insights.sbomify.com/CVE-2021-31845/): Remote Code Execution in McAfee DLP Discover (high 8.4)
- [CVE-2021-31844](https://insights.sbomify.com/CVE-2021-31844/): Local Privilege Escalation in McAfee DLP Endpoint for Windows (high 8.2)
- [CVE-2021-31843](https://insights.sbomify.com/CVE-2021-31843/): Improper access control vulnerability in McAfee ENS for Windows (high 7.3)
- [CVE-2021-31842](https://insights.sbomify.com/CVE-2021-31842/): XML external entity in McAfee Endpoint Security (ENS) for WIndows (medium 5.0)
- [CVE-2021-31841](https://insights.sbomify.com/CVE-2021-31841/): DLL side loading vulnerability in MA for Windows (high 8.2)
- [CVE-2021-31840](https://insights.sbomify.com/CVE-2021-31840/): DLL preload vulnerability in McAfee Agent for Windows (high 7.3)
- [CVE-2021-3184](https://insights.sbomify.com/CVE-2021-3184/): Cross-site scripting in misp-project:misp (medium 6.1)
- [CVE-2021-31839](https://insights.sbomify.com/CVE-2021-31839/): Incorrect permissions on McAfee Agent for Windows event folder (medium 4.8)
- [CVE-2021-31838](https://insights.sbomify.com/CVE-2021-31838/): Command injection through environment variable in MVISION EDR (high 8.4)
- [CVE-2021-31837](https://insights.sbomify.com/CVE-2021-31837/): Out of bounds write vulnerability in McAfee GetSusp (high 8.8)
- [CVE-2021-31836](https://insights.sbomify.com/CVE-2021-31836/): Improper Privilege Management in MA for Windows (medium 5.6)
- [CVE-2021-31835](https://insights.sbomify.com/CVE-2021-31835/): McAfee ePO Cross-Site Scripting vulnerability (medium 4.8)
- [CVE-2021-31834](https://insights.sbomify.com/CVE-2021-31834/): McAfee ePO Cross-Site Scripting vulnerability (medium 5.4)
- [CVE-2021-31833](https://insights.sbomify.com/CVE-2021-31833/): Security feature bypass in McAfee Application and Change Control (MACC) (high 7.1)
- [CVE-2021-31832](https://insights.sbomify.com/CVE-2021-31832/): Cross site scripting vulnerability in DLP Endpoint for Windows (medium 5.2)
- [CVE-2021-31831](https://insights.sbomify.com/CVE-2021-31831/): Incorrect access to deleted scripts vulnerability in McAfee DBSec (medium 4.9)
- [CVE-2021-31830](https://insights.sbomify.com/CVE-2021-31830/): Cross site Scripting (XSS) vulnerability in McAfee DBSec (medium 5.9)
- [CVE-2021-3183](https://insights.sbomify.com/CVE-2021-3183/): Auth bypass in files:fat client (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/160/