# Vulnerabilities published in 2021


- [CVE-2021-31829](https://insights.sbomify.com/CVE-2021-31829/): Information disclosure in debian:debian linux (medium 5.5)
- [CVE-2021-31828](https://insights.sbomify.com/CVE-2021-31828/): Server-side request forgery in amazon:open distro (high 7.1)
- [CVE-2021-31827](https://insights.sbomify.com/CVE-2021-31827/): SQL injection in progress:moveit transfer (high 8.8)
- [CVE-2021-31826](https://insights.sbomify.com/CVE-2021-31826/): Null dereference in shibboleth:service provider (high 7.5)
- [CVE-2021-31822](https://insights.sbomify.com/CVE-2021-31822/): Misconfiguration in Octopus Tentacle (high 7.8)
- [CVE-2021-31821](https://insights.sbomify.com/CVE-2021-31821/): Information disclosure in Octopus Tentacle (medium 5.5)
- [CVE-2021-31820](https://insights.sbomify.com/CVE-2021-31820/): Information disclosure in Octopus Server (high 7.5)
- [CVE-2021-3182](https://insights.sbomify.com/CVE-2021-3182/): Memory corruption in dlink:dcs-5220 firmware (high 8.0)
- [CVE-2021-31819](https://insights.sbomify.com/CVE-2021-31819/): Remote Code Execution in Halibut (critical 9.8)
- [CVE-2021-31818](https://insights.sbomify.com/CVE-2021-31818/): SQL injection in Octopus Server (medium 4.3)
- [CVE-2021-31817](https://insights.sbomify.com/CVE-2021-31817/): Information disclosure in Octopus Server (high 7.5)
- [CVE-2021-31816](https://insights.sbomify.com/CVE-2021-31816/): Information disclosure in Octopus Server (high 7.5)
- [CVE-2021-31815](https://insights.sbomify.com/CVE-2021-31815/): Information disclosure in google:google\/apple exposure notifications (low 3.3)
- [CVE-2021-31814](https://insights.sbomify.com/CVE-2021-31814/): Auth bypass in stormshield:stormshield network security (medium 6.1)
- [CVE-2021-31813](https://insights.sbomify.com/CVE-2021-31813/): Cross-site scripting in zohocorp:manageengine applications manager (medium 5.4)
- [CVE-2021-31812](https://insights.sbomify.com/CVE-2021-31812/): A carefully crafted PDF file can trigger an infinite loop while loading the file (medium 5.5)
- [CVE-2021-31811](https://insights.sbomify.com/CVE-2021-31811/): A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file (medium 5.5)
- [CVE-2021-31810](https://insights.sbomify.com/CVE-2021-31810/): Server-side request forgery in debian:debian linux (medium 5.8)
- [CVE-2021-3181](https://insights.sbomify.com/CVE-2021-3181/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2021-31808](https://insights.sbomify.com/CVE-2021-31808/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2021-31807](https://insights.sbomify.com/CVE-2021-31807/): Integer overflow in fedoraproject:fedora (medium 6.5)
- [CVE-2021-31806](https://insights.sbomify.com/CVE-2021-31806/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2021-31805](https://insights.sbomify.com/CVE-2021-31805/): Forced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE. (critical 9.8)
- [CVE-2021-31804](https://insights.sbomify.com/CVE-2021-31804/): Use after free in leocad:leocad (medium 5.5)
- [CVE-2021-31803](https://insights.sbomify.com/CVE-2021-31803/): Cross-site scripting in cpanel:cpanel (medium 6.1)
- [CVE-2021-31802](https://insights.sbomify.com/CVE-2021-31802/): Memory corruption in netgear:r7000 firmware (high 8.8)
- [CVE-2021-31800](https://insights.sbomify.com/CVE-2021-31800/): Path traversal in impacket (critical 9.8)
- [CVE-2021-31799](https://insights.sbomify.com/CVE-2021-31799/): Arbitrary Code Execution in Rdoc (high 7.0)
- [CVE-2021-31798](https://insights.sbomify.com/CVE-2021-31798/): Weak cryptography in cyberark:credential provider (medium 4.4)
- [CVE-2021-31797](https://insights.sbomify.com/CVE-2021-31797/): Race condition in cyberark:credential provider (medium 5.1)
- [CVE-2021-31796](https://insights.sbomify.com/CVE-2021-31796/): Weak cryptography in cyberark:credential provider (high 7.5)
- [CVE-2021-31795](https://insights.sbomify.com/CVE-2021-31795/): Memory corruption in pvrsrvkm.ko project:pvrsrvkm.ko (high 7.0)
- [CVE-2021-31794](https://insights.sbomify.com/CVE-2021-31794/): Cross-site scripting in directum:directum (medium 6.1)
- [CVE-2021-31793](https://insights.sbomify.com/CVE-2021-31793/): Missing authorization in nightowlsp:wdb-20 firmware (high 7.5)
- [CVE-2021-31792](https://insights.sbomify.com/CVE-2021-31792/): Cross-site scripting in salesagility:suitecrm (medium 5.4)
- [CVE-2021-31791](https://insights.sbomify.com/CVE-2021-31791/): Information disclosure in sentrysoftware:hardware sentry km for bmc patrol (high 7.5)
- [CVE-2021-3179](https://insights.sbomify.com/CVE-2021-3179/): Weak cryptography in gglocker project:gglocker (medium 5.5)
- [CVE-2021-31787](https://insights.sbomify.com/CVE-2021-31787/): Denial of service in actions-semi:ats2815 firmware (medium 6.5)
- [CVE-2021-31786](https://insights.sbomify.com/CVE-2021-31786/): Denial of service in actions-semi:ats2815 firmware (medium 6.5)
- [CVE-2021-31785](https://insights.sbomify.com/CVE-2021-31785/): Denial of service in actions-semi:ats2815 firmware (medium 6.5)
- [CVE-2021-31784](https://insights.sbomify.com/CVE-2021-31784/): Memory corruption in opendesign:drawings sdk (high 7.8)
- [CVE-2021-31783](https://insights.sbomify.com/CVE-2021-31783/): Path traversal in piwigo:localfiles editor (high 7.5)
- [CVE-2021-31780](https://insights.sbomify.com/CVE-2021-31780/): Information disclosure in misp-project:misp (high 7.5)
- [CVE-2021-3178](https://insights.sbomify.com/CVE-2021-3178/): Path traversal in debian:debian linux (medium 6.5)
- [CVE-2021-31779](https://insights.sbomify.com/CVE-2021-31779/): Server-Side Request Forgery in yoast_seo (medium 6.4)
- [CVE-2021-31778](https://insights.sbomify.com/CVE-2021-31778/): Cross-site scripting in media2click (medium 5.4)
- [CVE-2021-31777](https://insights.sbomify.com/CVE-2021-31777/): SQL Injection in t3/dce (medium 4.9)
- [CVE-2021-31776](https://insights.sbomify.com/CVE-2021-31776/): Privilege escalation in aviatrix:vpn client (high 7.8)
- [CVE-2021-3177](https://insights.sbomify.com/CVE-2021-3177/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2021-31769](https://insights.sbomify.com/CVE-2021-31769/): Command injection in myq-solution:myq server (high 8.8)
- [CVE-2021-31762](https://insights.sbomify.com/CVE-2021-31762/): Cross-site request forgery in webmin:webmin (high 8.8)
- [CVE-2021-31761](https://insights.sbomify.com/CVE-2021-31761/): Cross-site scripting in webmin:webmin (critical 9.6)
- [CVE-2021-31760](https://insights.sbomify.com/CVE-2021-31760/): Cross-site request forgery in webmin:webmin (high 8.8)
- [CVE-2021-3176](https://insights.sbomify.com/CVE-2021-3176/): Other in mitel:businesscti enterprise (high 8.0)
- [CVE-2021-31758](https://insights.sbomify.com/CVE-2021-31758/): Memory corruption in tenda:ac11 firmware (critical 9.8)
- [CVE-2021-31757](https://insights.sbomify.com/CVE-2021-31757/): Memory corruption in tenda:ac11 firmware (critical 9.8)
- [CVE-2021-31756](https://insights.sbomify.com/CVE-2021-31756/): Memory corruption in tenda:ac11 firmware (critical 9.8)
- [CVE-2021-31755](https://insights.sbomify.com/CVE-2021-31755/): Tenda AC11 Router Stack Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2021-31747](https://insights.sbomify.com/CVE-2021-31747/): Security feature bypass in pluck-cms:pluck (medium 4.8)
- [CVE-2021-31746](https://insights.sbomify.com/CVE-2021-31746/): Path traversal in pluck-cms:pluck (critical 9.8)
- [CVE-2021-31745](https://insights.sbomify.com/CVE-2021-31745/): Auth bypass in pluck-cms:pluck (high 7.5)
- [CVE-2021-31740](https://insights.sbomify.com/CVE-2021-31740/): Cross-site scripting in seppmail:seppmail (medium 6.1)
- [CVE-2021-31739](https://insights.sbomify.com/CVE-2021-31739/): Cross-site scripting in seppmail:seppmail (medium 6.1)
- [CVE-2021-31738](https://insights.sbomify.com/CVE-2021-31738/): Cross-site scripting in adiscon:loganalyzer (medium 6.1)
- [CVE-2021-31737](https://insights.sbomify.com/CVE-2021-31737/): File upload in emlog:emlog (critical 9.8)
- [CVE-2021-31731](https://insights.sbomify.com/CVE-2021-31731/): Path traversal in kitesky:kitecms (medium 6.5)
- [CVE-2021-31728](https://insights.sbomify.com/CVE-2021-31728/): Privilege escalation in malwarefox:antimalware (high 7.8)
- [CVE-2021-31727](https://insights.sbomify.com/CVE-2021-31727/): Privilege escalation in malwarefox:antimalware (high 7.8)
- [CVE-2021-31726](https://insights.sbomify.com/CVE-2021-31726/): Command injection in akuvox:c315 firmware (critical 9.8)
- [CVE-2021-31721](https://insights.sbomify.com/CVE-2021-31721/): Cross-site scripting in chevereto:chevereto (medium 6.1)
- [CVE-2021-3172](https://insights.sbomify.com/CVE-2021-3172/): Denial of service in php-fusion:php-fusion (high 8.1)
- [CVE-2021-31718](https://insights.sbomify.com/CVE-2021-31718/): Security feature bypass in npupnp project:npupnp (high 8.8)
- [CVE-2021-31712](https://insights.sbomify.com/CVE-2021-31712/): Cross-site Scripting in React Draft Wysiwyg (medium 5.4)
- [CVE-2021-31711](https://insights.sbomify.com/CVE-2021-31711/): Cross-site scripting in responsivefilemanager:responsivefilemanager (medium 5.4)
- [CVE-2021-31707](https://insights.sbomify.com/CVE-2021-31707/): File upload in kitesky:kitecms (critical 9.8)
- [CVE-2021-31703](https://insights.sbomify.com/CVE-2021-31703/): File upload in frontiersoftware:ichris (critical 9.8)
- [CVE-2021-31702](https://insights.sbomify.com/CVE-2021-31702/): Denial of service in frontiersoftware:ichris (high 7.5)
- [CVE-2021-31701](https://insights.sbomify.com/CVE-2021-31701/): Other in mintty project:mintty (high 7.5)
- [CVE-2021-31698](https://insights.sbomify.com/CVE-2021-31698/): Command injection in quectel:eg25-g firmware (critical 9.8)
- [CVE-2021-31693](https://insights.sbomify.com/CVE-2021-31693/): Cross-site scripting in 10web:photo gallery (medium 6.1)
- [CVE-2021-3169](https://insights.sbomify.com/CVE-2021-3169/): Missing authorization in jumpserver:jumpserver (critical 9.8)
- [CVE-2021-31684](https://insights.sbomify.com/CVE-2021-31684/): Out of bounds read in json-smart (high 7.5)
- [CVE-2021-31682](https://insights.sbomify.com/CVE-2021-31682/): Cross-site scripting in automatedlogic:webctrl (medium 6.1)
- [CVE-2021-31681](https://insights.sbomify.com/CVE-2021-31681/): Deserialization in ultralytics:yolov3 (high 7.8)
- [CVE-2021-31680](https://insights.sbomify.com/CVE-2021-31680/): Deserialization in ultralytics:yolov5 (high 7.8)
- [CVE-2021-31679](https://insights.sbomify.com/CVE-2021-31679/): Cross-site request forgery in pescms:pescms team (medium 6.5)
- [CVE-2021-31678](https://insights.sbomify.com/CVE-2021-31678/): Cross-site request forgery in pescms:pescms team (medium 6.5)
- [CVE-2021-31677](https://insights.sbomify.com/CVE-2021-31677/): Cross-site request forgery in pescms:pescms team (medium 6.5)
- [CVE-2021-31676](https://insights.sbomify.com/CVE-2021-31676/): Cross-site scripting in pescms:pescms team (medium 6.1)
- [CVE-2021-31674](https://insights.sbomify.com/CVE-2021-31674/): Cross-site scripting in cyclos:cyclos (medium 6.1)
- [CVE-2021-31673](https://insights.sbomify.com/CVE-2021-31673/): Cross-site scripting in cyclos:cyclos (medium 6.1)
- [CVE-2021-31671](https://insights.sbomify.com/CVE-2021-31671/): Pgsync Contains Cleartext Transmission of Sensitive Information (high 7.5)
- [CVE-2021-3167](https://insights.sbomify.com/CVE-2021-3167/): Information disclosure in cloudera:data engineering (medium 6.5)
- [CVE-2021-31664](https://insights.sbomify.com/CVE-2021-31664/): Memory corruption in riot-os:riot (high 7.5)
- [CVE-2021-31663](https://insights.sbomify.com/CVE-2021-31663/): Memory corruption in riot-os:riot (high 7.5)
- [CVE-2021-31662](https://insights.sbomify.com/CVE-2021-31662/): Memory corruption in riot-os:riot (high 7.5)
- [CVE-2021-31661](https://insights.sbomify.com/CVE-2021-31661/): Memory corruption in riot-os:riot (high 7.5)
- [CVE-2021-31660](https://insights.sbomify.com/CVE-2021-31660/): Memory corruption in riot-os:riot (high 7.5)
- [CVE-2021-3166](https://insights.sbomify.com/CVE-2021-3166/): File upload in asus:dsl-n14u b1 firmware (high 7.5)
- [CVE-2021-31659](https://insights.sbomify.com/CVE-2021-31659/): Cross-site request forgery in tp-link:tl-sg2005 firmware (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/161/