# Vulnerabilities published in 2021


- [CVE-2021-31274](https://insights.sbomify.com/CVE-2021-31274/): Cross-site Scripting in LibreNMS (medium 5.4)
- [CVE-2021-31272](https://insights.sbomify.com/CVE-2021-31272/): Path traversal in serenityos:serenityos (critical 9.8)
- [CVE-2021-3127](https://insights.sbomify.com/CVE-2021-3127/): nats-io/jwt not enforcing checking of Import token permissions (high 7.5)
- [CVE-2021-31262](https://insights.sbomify.com/CVE-2021-31262/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-31261](https://insights.sbomify.com/CVE-2021-31261/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2021-31260](https://insights.sbomify.com/CVE-2021-31260/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-31259](https://insights.sbomify.com/CVE-2021-31259/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-31258](https://insights.sbomify.com/CVE-2021-31258/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-31257](https://insights.sbomify.com/CVE-2021-31257/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-31256](https://insights.sbomify.com/CVE-2021-31256/): Denial of service in gpac:gpac (medium 5.5)
- [CVE-2021-31255](https://insights.sbomify.com/CVE-2021-31255/): Memory corruption in gpac:gpac (high 7.8)
- [CVE-2021-31254](https://insights.sbomify.com/CVE-2021-31254/): Memory corruption in gpac:gpac (high 7.8)
- [CVE-2021-31252](https://insights.sbomify.com/CVE-2021-31252/): Open redirect in chiyu-tech:bf-430 firmware (medium 6.1)
- [CVE-2021-31251](https://insights.sbomify.com/CVE-2021-31251/): Auth bypass in chiyu-tech:bf-430 firmware (critical 9.8)
- [CVE-2021-31250](https://insights.sbomify.com/CVE-2021-31250/): Cross-site scripting in chiyu-tech:bf-430 firmware (medium 5.4)
- [CVE-2021-3125](https://insights.sbomify.com/CVE-2021-3125/): Denial of service in tp-link:tl-xdr1850 firmware (high 7.5)
- [CVE-2021-31249](https://insights.sbomify.com/CVE-2021-31249/): Other in chiyu-tech:bf-430 firmware (medium 6.5)
- [CVE-2021-31245](https://insights.sbomify.com/CVE-2021-31245/): Auth bypass in openmptcprouter:openmptcprouter (medium 5.9)
- [CVE-2021-31240](https://insights.sbomify.com/CVE-2021-31240/): Memory corruption in libming:libming (high 7.8)
- [CVE-2021-3124](https://insights.sbomify.com/CVE-2021-3124/): Cross-site scripting in newtarget:custom global variables (medium 5.4)
- [CVE-2021-31239](https://insights.sbomify.com/CVE-2021-31239/): Memory corruption in sqlite:sqlite (high 7.5)
- [CVE-2021-31233](https://insights.sbomify.com/CVE-2021-31233/): SQL injection in fighting cock information system project:fighting cock information system (high 7.5)
- [CVE-2021-31232](https://insights.sbomify.com/CVE-2021-31232/): Improper input validation in CNCF Cortex (medium 5.5)
- [CVE-2021-31231](https://insights.sbomify.com/CVE-2021-31231/): Information disclosure in grafana:enterprise metrics (medium 5.5)
- [CVE-2021-31229](https://insights.sbomify.com/CVE-2021-31229/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2021-31228](https://insights.sbomify.com/CVE-2021-31228/): Weak cryptography in hcc-embedded:nichestack (high 7.5)
- [CVE-2021-31227](https://insights.sbomify.com/CVE-2021-31227/): Memory corruption in hcc-embedded:nichestack (high 7.5)
- [CVE-2021-31226](https://insights.sbomify.com/CVE-2021-31226/): Memory corruption in hcc-embedded:interniche (critical 9.8)
- [CVE-2021-31225](https://insights.sbomify.com/CVE-2021-31225/): Other in stormshield:endpoint security (high 7.3)
- [CVE-2021-31224](https://insights.sbomify.com/CVE-2021-31224/): Missing authorization in stormshield:endpoint security (low 3.5)
- [CVE-2021-31223](https://insights.sbomify.com/CVE-2021-31223/): Information disclosure in stormshield:endpoint security (medium 5.7)
- [CVE-2021-31222](https://insights.sbomify.com/CVE-2021-31222/): Missing authorization in stormshield:endpoint security (medium 5.7)
- [CVE-2021-31221](https://insights.sbomify.com/CVE-2021-31221/): Missing authorization in stormshield:endpoint security (medium 5.7)
- [CVE-2021-31220](https://insights.sbomify.com/CVE-2021-31220/): Missing authorization in stormshield:endpoint security (medium 5.2)
- [CVE-2021-3122](https://insights.sbomify.com/CVE-2021-3122/): Command injection in ncr:command center agent (critical 9.8)
- [CVE-2021-31217](https://insights.sbomify.com/CVE-2021-31217/): Misconfiguration in solarwinds:dameware mini remote control (critical 9.1)
- [CVE-2021-31216](https://insights.sbomify.com/CVE-2021-31216/): Server-side request forgery in siren:investigate (high 8.1)
- [CVE-2021-31215](https://insights.sbomify.com/CVE-2021-31215/): Code injection in debian:debian linux (high 8.8)
- [CVE-2021-31214](https://insights.sbomify.com/CVE-2021-31214/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31213](https://insights.sbomify.com/CVE-2021-31213/): Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31211](https://insights.sbomify.com/CVE-2021-31211/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-3121](https://insights.sbomify.com/CVE-2021-3121/): Improper Input Validation in GoGo Protobuf (high 8.6)
- [CVE-2021-31209](https://insights.sbomify.com/CVE-2021-31209/): Microsoft Exchange Server Spoofing Vulnerability (medium 6.5)
- [CVE-2021-31208](https://insights.sbomify.com/CVE-2021-31208/): Windows Container Manager Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31207](https://insights.sbomify.com/CVE-2021-31207/): Microsoft Exchange Server Security Feature Bypass (medium 6.6, exploited in the wild)
- [CVE-2021-31206](https://insights.sbomify.com/CVE-2021-31206/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 7.6)
- [CVE-2021-31205](https://insights.sbomify.com/CVE-2021-31205/): Windows SMB Client Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2021-31204](https://insights.sbomify.com/CVE-2021-31204/): .NET and Visual Studio Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2021-31201](https://insights.sbomify.com/CVE-2021-31201/): Microsoft Enhanced Cryptographic Provider Privilege Escalation (medium 5.2, exploited in the wild)
- [CVE-2021-31200](https://insights.sbomify.com/CVE-2021-31200/): Common Utilities Remote Code Execution Vulnerability (high 7.2)
- [CVE-2021-3120](https://insights.sbomify.com/CVE-2021-3120/): File upload in yithemes:yith woocommerce gift cards (critical 9.8)
- [CVE-2021-31199](https://insights.sbomify.com/CVE-2021-31199/): Microsoft Enhanced Cryptographic Provider Privilege Escalation (medium 5.2, exploited in the wild)
- [CVE-2021-31198](https://insights.sbomify.com/CVE-2021-31198/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31196](https://insights.sbomify.com/CVE-2021-31196/): Microsoft Exchange Server Information Disclosure (high 7.2, exploited in the wild)
- [CVE-2021-31195](https://insights.sbomify.com/CVE-2021-31195/): Microsoft Exchange Server Remote Code Execution Vulnerability (medium 6.5)
- [CVE-2021-31194](https://insights.sbomify.com/CVE-2021-31194/): OLE Automation Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-31193](https://insights.sbomify.com/CVE-2021-31193/): Windows SSDP Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31192](https://insights.sbomify.com/CVE-2021-31192/): Windows Media Foundation Core Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31191](https://insights.sbomify.com/CVE-2021-31191/): Windows Projected File System FS Filter Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-31190](https://insights.sbomify.com/CVE-2021-31190/): Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-3119](https://insights.sbomify.com/CVE-2021-3119/): Null dereference in zetetic:sqlcipher (high 7.5)
- [CVE-2021-31188](https://insights.sbomify.com/CVE-2021-31188/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31187](https://insights.sbomify.com/CVE-2021-31187/): Windows WalletService Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31186](https://insights.sbomify.com/CVE-2021-31186/): Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability (high 7.4)
- [CVE-2021-31185](https://insights.sbomify.com/CVE-2021-31185/): Windows Desktop Bridge Denial of Service Vulnerability (medium 5.5)
- [CVE-2021-31184](https://insights.sbomify.com/CVE-2021-31184/): Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-31183](https://insights.sbomify.com/CVE-2021-31183/): Windows TCP/IP Driver Denial of Service Vulnerability (high 7.5)
- [CVE-2021-31182](https://insights.sbomify.com/CVE-2021-31182/): Microsoft Bluetooth Driver Spoofing Vulnerability (high 7.1)
- [CVE-2021-31181](https://insights.sbomify.com/CVE-2021-31181/): Microsoft SharePoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-31180](https://insights.sbomify.com/CVE-2021-31180/): Microsoft Office Graphics Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-3118](https://insights.sbomify.com/CVE-2021-3118/): SQL injection in medicalexpo:ecs imaging (critical 9.8)
- [CVE-2021-31179](https://insights.sbomify.com/CVE-2021-31179/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31178](https://insights.sbomify.com/CVE-2021-31178/): Microsoft Office Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-31177](https://insights.sbomify.com/CVE-2021-31177/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31176](https://insights.sbomify.com/CVE-2021-31176/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31175](https://insights.sbomify.com/CVE-2021-31175/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-31174](https://insights.sbomify.com/CVE-2021-31174/): Microsoft Excel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-31173](https://insights.sbomify.com/CVE-2021-31173/): Microsoft SharePoint Server Information Disclosure Vulnerability (medium 5.3)
- [CVE-2021-31172](https://insights.sbomify.com/CVE-2021-31172/): Microsoft SharePoint Server Spoofing Vulnerability (high 7.1)
- [CVE-2021-31171](https://insights.sbomify.com/CVE-2021-31171/): Microsoft SharePoint Information Disclosure Vulnerability (medium 4.1)
- [CVE-2021-31170](https://insights.sbomify.com/CVE-2021-31170/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31169](https://insights.sbomify.com/CVE-2021-31169/): Windows Container Manager Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31168](https://insights.sbomify.com/CVE-2021-31168/): Windows Container Manager Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31167](https://insights.sbomify.com/CVE-2021-31167/): Windows Container Manager Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31166](https://insights.sbomify.com/CVE-2021-31166/): Microsoft HTTP Protocol Stack Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-31165](https://insights.sbomify.com/CVE-2021-31165/): Windows Container Manager Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-31164](https://insights.sbomify.com/CVE-2021-31164/): Apache Unomi log injection (high 7.5)
- [CVE-2021-31162](https://insights.sbomify.com/CVE-2021-31162/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2021-31160](https://insights.sbomify.com/CVE-2021-31160/): Information disclosure in zohocorp:manageengine servicedesk plus (high 7.5)
- [CVE-2021-3116](https://insights.sbomify.com/CVE-2021-3116/): Logic error in authentication in proxy.py (high 7.5)
- [CVE-2021-31159](https://insights.sbomify.com/CVE-2021-31159/): Information disclosure in zohocorp:manageengine servicedesk plus msp (medium 5.3)
- [CVE-2021-31158](https://insights.sbomify.com/CVE-2021-31158/): Missing authorization in couchbase:couchbase server (medium 6.5)
- [CVE-2021-31156](https://insights.sbomify.com/CVE-2021-31156/): Allied Telesis AT-S115 1.2.0 devices before 1.00.024 with Boot Loader 1.00.006 allow Directory Traversal to achieve partial access to data. (high 7.5)
- [CVE-2021-31155](https://insights.sbomify.com/CVE-2021-31155/): Permissions bypass in pleaser (high 7.8)
- [CVE-2021-31154](https://insights.sbomify.com/CVE-2021-31154/): Permissions bypass in pleaser (high 7.8)
- [CVE-2021-31153](https://insights.sbomify.com/CVE-2021-31153/): File exposure in pleaser (low 3.3)
- [CVE-2021-31152](https://insights.sbomify.com/CVE-2021-31152/): Cross-site request forgery in multilaser:ac1200 re018 firmware (high 8.8)
- [CVE-2021-3115](https://insights.sbomify.com/CVE-2021-3115/): Command injection in fedoraproject:fedora (high 7.5)
- [CVE-2021-3114](https://insights.sbomify.com/CVE-2021-3114/): Weak cryptography in debian:debian linux (medium 6.5)
- [CVE-2021-3113](https://insights.sbomify.com/CVE-2021-3113/): Information disclosure in netsia:seba\+ (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/165/