# Vulnerabilities published in 2021


- [CVE-2021-30498](https://insights.sbomify.com/CVE-2021-30498/): Memory corruption in libcaca (high 7.8)
- [CVE-2021-30497](https://insights.sbomify.com/CVE-2021-30497/): Path traversal in ivanti:avalanche (high 7.5)
- [CVE-2021-30496](https://insights.sbomify.com/CVE-2021-30496/): Memory corruption in telegram:telegram (medium 5.7)
- [CVE-2021-30494](https://insights.sbomify.com/CVE-2021-30494/): Privilege escalation in razer:synapse (medium 5.5)
- [CVE-2021-30493](https://insights.sbomify.com/CVE-2021-30493/): Privilege escalation in razer:synapse (medium 5.5)
- [CVE-2021-30490](https://insights.sbomify.com/CVE-2021-30490/): Misconfiguration in power-software-download:viewpower (high 7.8)
- [CVE-2021-3049](https://insights.sbomify.com/CVE-2021-3049/): Cortex XSOAR: Improper Authorization of Incident Investigations Vulnerability (low 2.6)
- [CVE-2021-30487](https://insights.sbomify.com/CVE-2021-30487/): Missing authorization in zulip:zulip server (low 2.7)
- [CVE-2021-30486](https://insights.sbomify.com/CVE-2021-30486/): SQL injection in sysaid:sysaid (high 8.8)
- [CVE-2021-30485](https://insights.sbomify.com/CVE-2021-30485/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2021-30483](https://insights.sbomify.com/CVE-2021-30483/): Directory Traversal in isomorphic-git (medium 5.3)
- [CVE-2021-30482](https://insights.sbomify.com/CVE-2021-30482/): Auth bypass in jetbrains:upsource (high 7.5)
- [CVE-2021-30481](https://insights.sbomify.com/CVE-2021-30481/): Memory corruption in valvesoftware:steam client (high 8.0)
- [CVE-2021-30480](https://insights.sbomify.com/CVE-2021-30480/): Other in zoom:chat (high 8.5)
- [CVE-2021-3048](https://insights.sbomify.com/CVE-2021-3048/): PAN-OS: Invalid URLs in an External Dynamic List (EDL) can Lead to Firewall Outage (medium 5.9)
- [CVE-2021-30479](https://insights.sbomify.com/CVE-2021-30479/): Missing authorization in zulip:zulip server (medium 5.3)
- [CVE-2021-30478](https://insights.sbomify.com/CVE-2021-30478/): Privilege escalation in zulip:zulip server (medium 4.3)
- [CVE-2021-30477](https://insights.sbomify.com/CVE-2021-30477/): Missing authorization in zulip:zulip server (medium 4.3)
- [CVE-2021-30476](https://insights.sbomify.com/CVE-2021-30476/): Misconfiguration in hashicorp:terraform provider (critical 9.8)
- [CVE-2021-30475](https://insights.sbomify.com/CVE-2021-30475/): Memory corruption in aomedia:aomedia (critical 9.8)
- [CVE-2021-30474](https://insights.sbomify.com/CVE-2021-30474/): Use after free in aomedia:aomedia (critical 9.8)
- [CVE-2021-30473](https://insights.sbomify.com/CVE-2021-30473/): Memory corruption in aomedia:aomedia (critical 9.8)
- [CVE-2021-30472](https://insights.sbomify.com/CVE-2021-30472/): Memory corruption in podofo (high 7.8)
- [CVE-2021-30471](https://insights.sbomify.com/CVE-2021-30471/): Denial of service in podofo (medium 5.5)
- [CVE-2021-30470](https://insights.sbomify.com/CVE-2021-30470/): Denial of service in podofo (medium 5.5)
- [CVE-2021-3047](https://insights.sbomify.com/CVE-2021-3047/): PAN-OS: Weak Cryptography Used in Web Interface Authentication (medium 4.2)
- [CVE-2021-30469](https://insights.sbomify.com/CVE-2021-30469/): Use after free in podofo (medium 5.5)
- [CVE-2021-30468](https://insights.sbomify.com/CVE-2021-30468/): Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter (high 7.5)
- [CVE-2021-30465](https://insights.sbomify.com/CVE-2021-30465/): mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs (high 8.5)
- [CVE-2021-30464](https://insights.sbomify.com/CVE-2021-30464/): Denial of service in omicronenergy:stationguard (high 7.5)
- [CVE-2021-30463](https://insights.sbomify.com/CVE-2021-30463/): Privilege escalation in vestacp:control panel (high 7.8)
- [CVE-2021-30462](https://insights.sbomify.com/CVE-2021-30462/): Privilege escalation in vestacp:vesta control panel (high 7.2)
- [CVE-2021-30461](https://insights.sbomify.com/CVE-2021-30461/): Code injection in voipmonitor:voipmonitor (critical 9.8)
- [CVE-2021-3046](https://insights.sbomify.com/CVE-2021-3046/): PAN-OS: Improper SAML Authentication Vulnerability in GlobalProtect Portal (medium 6.8)
- [CVE-2021-30459](https://insights.sbomify.com/CVE-2021-30459/): SQL Injection via in django-debug-toolbar (critical 9.8)
- [CVE-2021-30458](https://insights.sbomify.com/CVE-2021-30458/): Wikimedia Parsoid vulnerable to Cross-site Scripting (XSS) (medium 6.1)
- [CVE-2021-30457](https://insights.sbomify.com/CVE-2021-30457/): Double-free in id-map (critical 9.8)
- [CVE-2021-30456](https://insights.sbomify.com/CVE-2021-30456/): Double-free in id-map (critical 9.8)
- [CVE-2021-30455](https://insights.sbomify.com/CVE-2021-30455/): Double-free in id-map (critical 9.8)
- [CVE-2021-30454](https://insights.sbomify.com/CVE-2021-30454/): Uninitialized memory access in outer_cgi (critical 9.8)
- [CVE-2021-3045](https://insights.sbomify.com/CVE-2021-3045/): PAN-OS: OS Command Argument Injection in Web Interface (medium 4.9)
- [CVE-2021-3044](https://insights.sbomify.com/CVE-2021-3044/): Cortex XSOAR: Unauthorized Usage of the REST API (critical 9.8)
- [CVE-2021-3043](https://insights.sbomify.com/CVE-2021-3043/): Prisma Cloud: Cross-Site Scripting (XSS) Vulnerability in Prisma Cloud Compute Web Console (high 7.5)
- [CVE-2021-3042](https://insights.sbomify.com/CVE-2021-3042/): Cortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege Escalation (high 7.8)
- [CVE-2021-3041](https://insights.sbomify.com/CVE-2021-3041/): Cortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation (high 7.8)
- [CVE-2021-3040](https://insights.sbomify.com/CVE-2021-3040/): Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution (medium 6.7)
- [CVE-2021-3039](https://insights.sbomify.com/CVE-2021-3039/): Prisma Cloud Compute: User role authorization secret for Console leaked through log file export (low 3.8)
- [CVE-2021-3038](https://insights.sbomify.com/CVE-2021-3038/): GlobalProtect App: Windows VPN kernel driver denial of service (DoS) (medium 5.5)
- [CVE-2021-3037](https://insights.sbomify.com/CVE-2021-3037/): PAN-OS: Secrets for scheduled configuration exports are logged in system logs (low 2.3)
- [CVE-2021-30361](https://insights.sbomify.com/CVE-2021-30361/): Command injection in Check Point Gaia Portal (medium 6.7)
- [CVE-2021-30360](https://insights.sbomify.com/CVE-2021-30360/): Privilege escalation in Check Point Remote Access Client (high 7.8)
- [CVE-2021-3036](https://insights.sbomify.com/CVE-2021-3036/): PAN-OS: Administrator secrets are logged in web server logs when using the PAN-OS XML API incorrectly (medium 4.4)
- [CVE-2021-30359](https://insights.sbomify.com/CVE-2021-30359/): Privilege escalation in Check Point Harmony Browse and SandBlast Agent for Browsers (high 7.8)
- [CVE-2021-30358](https://insights.sbomify.com/CVE-2021-30358/): Command injection in Check Point Mobile Access Portal Agent (high 7.2)
- [CVE-2021-30357](https://insights.sbomify.com/CVE-2021-30357/): Information disclosure in SSL Network Extender Client for Linux (medium 5.3)
- [CVE-2021-30356](https://insights.sbomify.com/CVE-2021-30356/): Path traversal in Check Point Identity Agent (high 8.1)
- [CVE-2021-30355](https://insights.sbomify.com/CVE-2021-30355/): Privilege escalation in Amazon Kindle e-reader (high 8.6)
- [CVE-2021-30354](https://insights.sbomify.com/CVE-2021-30354/): Integer overflow in Amazon Kindle e-reader (high 8.6)
- [CVE-2021-30353](https://insights.sbomify.com/CVE-2021-30353/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5)
- [CVE-2021-30351](https://insights.sbomify.com/CVE-2021-30351/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.8)
- [CVE-2021-30350](https://insights.sbomify.com/CVE-2021-30350/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables (high 8.4)
- [CVE-2021-3035](https://insights.sbomify.com/CVE-2021-3035/): Bridgecrew Checkov: Unsafe deserialization of Terraform files allows code execution (medium 6.7)
- [CVE-2021-30349](https://insights.sbomify.com/CVE-2021-30349/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 8.2)
- [CVE-2021-30348](https://insights.sbomify.com/CVE-2021-30348/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (medium 6.5)
- [CVE-2021-30347](https://insights.sbomify.com/CVE-2021-30347/): Race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (critical 9.1)
- [CVE-2021-30346](https://insights.sbomify.com/CVE-2021-30346/): Misconfiguration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 6.5)
- [CVE-2021-30345](https://insights.sbomify.com/CVE-2021-30345/): Misconfiguration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 6.5)
- [CVE-2021-30344](https://insights.sbomify.com/CVE-2021-30344/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5)
- [CVE-2021-30343](https://insights.sbomify.com/CVE-2021-30343/): Race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (critical 9.1)
- [CVE-2021-30342](https://insights.sbomify.com/CVE-2021-30342/): Race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables (critical 9.1)
- [CVE-2021-30341](https://insights.sbomify.com/CVE-2021-30341/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables (critical 9.8)
- [CVE-2021-30340](https://insights.sbomify.com/CVE-2021-30340/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-3034](https://insights.sbomify.com/CVE-2021-3034/): Cortex XSOAR: Secrets for SAML single sign-on (SSO) integration may be logged in system logs (medium 5.1)
- [CVE-2021-30339](https://insights.sbomify.com/CVE-2021-30339/): Weak cryptography in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (critical 9.0)
- [CVE-2021-30338](https://insights.sbomify.com/CVE-2021-30338/): Information disclosure in Snapdragon Compute (high 7.1)
- [CVE-2021-30337](https://insights.sbomify.com/CVE-2021-30337/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 8.4)
- [CVE-2021-30336](https://insights.sbomify.com/CVE-2021-30336/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables (high 8.4)
- [CVE-2021-30335](https://insights.sbomify.com/CVE-2021-30335/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 8.4)
- [CVE-2021-30334](https://insights.sbomify.com/CVE-2021-30334/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2021-30333](https://insights.sbomify.com/CVE-2021-30333/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2021-30332](https://insights.sbomify.com/CVE-2021-30332/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-30331](https://insights.sbomify.com/CVE-2021-30331/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (medium 5.5)
- [CVE-2021-30330](https://insights.sbomify.com/CVE-2021-30330/): Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5)
- [CVE-2021-3033](https://insights.sbomify.com/CVE-2021-3033/): Prisma Cloud Compute: SAML Authentication Bypass Vulnerability in Console (critical 9.1)
- [CVE-2021-30329](https://insights.sbomify.com/CVE-2021-30329/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-30328](https://insights.sbomify.com/CVE-2021-30328/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-30327](https://insights.sbomify.com/CVE-2021-30327/): Memory corruption in Snapdragon Mobile, Snapdragon Compute, Snapdragon Auto, Snapdragon IOT, Snapdragon Connectivity, Snapdragon Voice & Music (high 7.5)
- [CVE-2021-30326](https://insights.sbomify.com/CVE-2021-30326/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-30325](https://insights.sbomify.com/CVE-2021-30325/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 6.7)
- [CVE-2021-30324](https://insights.sbomify.com/CVE-2021-30324/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 6.7)
- [CVE-2021-30323](https://insights.sbomify.com/CVE-2021-30323/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2021-30322](https://insights.sbomify.com/CVE-2021-30322/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2021-30321](https://insights.sbomify.com/CVE-2021-30321/): Memory corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity (critical 9.8)
- [CVE-2021-3032](https://insights.sbomify.com/CVE-2021-3032/): PAN-OS: Configuration secrets for log forwarding may be logged in system logs (medium 4.4)
- [CVE-2021-30319](https://insights.sbomify.com/CVE-2021-30319/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (high 7.8)
- [CVE-2021-30318](https://insights.sbomify.com/CVE-2021-30318/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2021-30317](https://insights.sbomify.com/CVE-2021-30317/): Security feature bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (critical 9.3)
- [CVE-2021-30316](https://insights.sbomify.com/CVE-2021-30316/): Memory corruption in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2021-30315](https://insights.sbomify.com/CVE-2021-30315/): Use after free in Snapdragon Auto (high 8.4)
- [CVE-2021-30314](https://insights.sbomify.com/CVE-2021-30314/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (medium 6.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/171/