# Vulnerabilities published in 2021


- [CVE-2021-30313](https://insights.sbomify.com/CVE-2021-30313/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 6.7)
- [CVE-2021-30312](https://insights.sbomify.com/CVE-2021-30312/): Auth bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.5)
- [CVE-2021-30311](https://insights.sbomify.com/CVE-2021-30311/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2021-30310](https://insights.sbomify.com/CVE-2021-30310/): Memory corruption in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music (high 7.5)
- [CVE-2021-3031](https://insights.sbomify.com/CVE-2021-3031/): PAN-OS: Information exposure in Ethernet data frame construction (Etherleak) (medium 4.3)
- [CVE-2021-30309](https://insights.sbomify.com/CVE-2021-30309/): Memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2021-30308](https://insights.sbomify.com/CVE-2021-30308/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2021-30307](https://insights.sbomify.com/CVE-2021-30307/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT (high 7.5)
- [CVE-2021-30306](https://insights.sbomify.com/CVE-2021-30306/): Memory corruption in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2021-30305](https://insights.sbomify.com/CVE-2021-30305/): Memory corruption in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2021-30304](https://insights.sbomify.com/CVE-2021-30304/): Memory corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity (high 7.5)
- [CVE-2021-30303](https://insights.sbomify.com/CVE-2021-30303/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2021-30302](https://insights.sbomify.com/CVE-2021-30302/): Auth bypass in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (high 7.5)
- [CVE-2021-30301](https://insights.sbomify.com/CVE-2021-30301/): Denial of service in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-30300](https://insights.sbomify.com/CVE-2021-30300/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5)
- [CVE-2021-3030](https://insights.sbomify.com/CVE-2021-3030/): Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colorpicker_more.aspx. (medium 6.1)
- [CVE-2021-30299](https://insights.sbomify.com/CVE-2021-30299/): Improper Input Validation in Audio (medium 6.7)
- [CVE-2021-30298](https://insights.sbomify.com/CVE-2021-30298/): Memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 6.7)
- [CVE-2021-30297](https://insights.sbomify.com/CVE-2021-30297/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables (high 8.4)
- [CVE-2021-30295](https://insights.sbomify.com/CVE-2021-30295/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2021-30294](https://insights.sbomify.com/CVE-2021-30294/): Null dereference in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2021-30293](https://insights.sbomify.com/CVE-2021-30293/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT (high 7.5)
- [CVE-2021-30292](https://insights.sbomify.com/CVE-2021-30292/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables (high 8.4)
- [CVE-2021-30291](https://insights.sbomify.com/CVE-2021-30291/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables (high 8.4)
- [CVE-2021-30290](https://insights.sbomify.com/CVE-2021-30290/): Race condition in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2021-3029](https://insights.sbomify.com/CVE-2021-3029/): Command injection in evolucare:ecs imaging (critical 9.8)
- [CVE-2021-30289](https://insights.sbomify.com/CVE-2021-30289/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2021-30288](https://insights.sbomify.com/CVE-2021-30288/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 8.4)
- [CVE-2021-30287](https://insights.sbomify.com/CVE-2021-30287/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.5)
- [CVE-2021-30285](https://insights.sbomify.com/CVE-2021-30285/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (critical 9.3)
- [CVE-2021-30284](https://insights.sbomify.com/CVE-2021-30284/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5)
- [CVE-2021-30283](https://insights.sbomify.com/CVE-2021-30283/): Denial of service in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.1)
- [CVE-2021-30282](https://insights.sbomify.com/CVE-2021-30282/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 8.4)
- [CVE-2021-30281](https://insights.sbomify.com/CVE-2021-30281/): Security feature bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 8.4)
- [CVE-2021-3028](https://insights.sbomify.com/CVE-2021-3028/): git-big-picture Code Execution (critical 9.8)
- [CVE-2021-30279](https://insights.sbomify.com/CVE-2021-30279/): Missing authorization in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2021-30278](https://insights.sbomify.com/CVE-2021-30278/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.1)
- [CVE-2021-30276](https://insights.sbomify.com/CVE-2021-30276/): Missing authorization in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wired Infrastructure and Networking (critical 9.3)
- [CVE-2021-30275](https://insights.sbomify.com/CVE-2021-30275/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (critical 9.3)
- [CVE-2021-30274](https://insights.sbomify.com/CVE-2021-30274/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 8.4)
- [CVE-2021-30273](https://insights.sbomify.com/CVE-2021-30273/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables (high 7.5)
- [CVE-2021-30272](https://insights.sbomify.com/CVE-2021-30272/): Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.3)
- [CVE-2021-30271](https://insights.sbomify.com/CVE-2021-30271/): Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.3)
- [CVE-2021-30270](https://insights.sbomify.com/CVE-2021-30270/): Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.3)
- [CVE-2021-3027](https://insights.sbomify.com/CVE-2021-3027/): Other in librit:passhport (medium 6.5)
- [CVE-2021-30269](https://insights.sbomify.com/CVE-2021-30269/): Null dereference in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 7.3)
- [CVE-2021-30268](https://insights.sbomify.com/CVE-2021-30268/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2021-30267](https://insights.sbomify.com/CVE-2021-30267/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2021-30266](https://insights.sbomify.com/CVE-2021-30266/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (medium 6.7)
- [CVE-2021-30265](https://insights.sbomify.com/CVE-2021-30265/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (medium 6.7)
- [CVE-2021-30264](https://insights.sbomify.com/CVE-2021-30264/): Use after free in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 6.7)
- [CVE-2021-30263](https://insights.sbomify.com/CVE-2021-30263/): Race condition in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (medium 6.7)
- [CVE-2021-30262](https://insights.sbomify.com/CVE-2021-30262/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2021-30261](https://insights.sbomify.com/CVE-2021-30261/): Integer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2021-30260](https://insights.sbomify.com/CVE-2021-30260/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking (high 8.4)
- [CVE-2021-3026](https://insights.sbomify.com/CVE-2021-3026/): Cross-site scripting in invisioncommunity:ips community suite (medium 6.1)
- [CVE-2021-30259](https://insights.sbomify.com/CVE-2021-30259/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.8)
- [CVE-2021-30258](https://insights.sbomify.com/CVE-2021-30258/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables (high 8.4)
- [CVE-2021-30257](https://insights.sbomify.com/CVE-2021-30257/): Memory corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT (high 8.4)
- [CVE-2021-30256](https://insights.sbomify.com/CVE-2021-30256/): Memory corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT (high 8.4)
- [CVE-2021-30255](https://insights.sbomify.com/CVE-2021-30255/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2021-30254](https://insights.sbomify.com/CVE-2021-30254/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.8)
- [CVE-2021-3025](https://insights.sbomify.com/CVE-2021-3025/): SQL injection in invisioncommunity:ips community suite (high 8.8)
- [CVE-2021-30246](https://insights.sbomify.com/CVE-2021-30246/): RSA signature validation vulnerability on maleable encoded message in jsrsasign (critical 9.1)
- [CVE-2021-30245](https://insights.sbomify.com/CVE-2021-30245/): Code execution in Apache OpenOffice via non-http(s) schemes in Hyperlinks (high 8.8)
- [CVE-2021-3024](https://insights.sbomify.com/CVE-2021-3024/): Information disclosure in hashicorp:vault (medium 5.3)
- [CVE-2021-30234](https://insights.sbomify.com/CVE-2021-30234/): Command injection in chinamobile:an lianbao wf-1 firmware (critical 9.8)
- [CVE-2021-30233](https://insights.sbomify.com/CVE-2021-30233/): Command injection in chinamobile:an lianbao wf-1 firmware (critical 9.8)
- [CVE-2021-30232](https://insights.sbomify.com/CVE-2021-30232/): Command injection in chinamobile:an lianbao wf-1 firmware (critical 9.8)
- [CVE-2021-30231](https://insights.sbomify.com/CVE-2021-30231/): Command injection in chinamobile:an lianbao wf-1 firmware (critical 9.8)
- [CVE-2021-30230](https://insights.sbomify.com/CVE-2021-30230/): Command injection in chinamobile:an lianbao wf-1 firmware (critical 9.8)
- [CVE-2021-30229](https://insights.sbomify.com/CVE-2021-30229/): Command injection in chinamobile:an lianbao wf-1 firmware (high 8.8)
- [CVE-2021-30228](https://insights.sbomify.com/CVE-2021-30228/): Command injection in chinamobile:an lianbao wf-1 firmware (critical 9.8)
- [CVE-2021-30227](https://insights.sbomify.com/CVE-2021-30227/): Cross-site scripting in emlog:emlog (medium 6.1)
- [CVE-2021-30224](https://insights.sbomify.com/CVE-2021-30224/): Cross-site request forgery in rukovoditel:rukovoditel (high 8.8)
- [CVE-2021-3022](https://insights.sbomify.com/CVE-2021-3022/): Misconfiguration in google:android (medium 5.5)
- [CVE-2021-30219](https://insights.sbomify.com/CVE-2021-30219/): Null dereference in samurai project:samurai (medium 5.5)
- [CVE-2021-30218](https://insights.sbomify.com/CVE-2021-30218/): Null dereference in samurai project:samurai (medium 5.5)
- [CVE-2021-30214](https://insights.sbomify.com/CVE-2021-30214/): Code injection in eng:knowage (medium 5.4)
- [CVE-2021-30213](https://insights.sbomify.com/CVE-2021-30213/): Cross-site scripting in eng:knowage (medium 6.1)
- [CVE-2021-30212](https://insights.sbomify.com/CVE-2021-30212/): Cross-site scripting in eng:knowage (medium 5.4)
- [CVE-2021-30211](https://insights.sbomify.com/CVE-2021-30211/): Cross-site scripting in eng:knowage (medium 5.4)
- [CVE-2021-3021](https://insights.sbomify.com/CVE-2021-3021/): SQL injection in ispconfig:ispconfig (critical 9.8)
- [CVE-2021-30209](https://insights.sbomify.com/CVE-2021-30209/): File upload in textpattern:textpattern (medium 6.5)
- [CVE-2021-30205](https://insights.sbomify.com/CVE-2021-30205/): Missing authorization in dzzoffice:dzzoffice (medium 5.3)
- [CVE-2021-30203](https://insights.sbomify.com/CVE-2021-30203/): Cross-site scripting in dzzoffice:dzzoffice (medium 6.1)
- [CVE-2021-30201](https://insights.sbomify.com/CVE-2021-30201/): Unauthenticated XML External Entity vulnerability in Kaseya VSA < v9.5.6 (high 7.5)
- [CVE-2021-3020](https://insights.sbomify.com/CVE-2021-3020/): Privilege escalation in clusterlabs:hawk (high 8.8)
- [CVE-2021-30199](https://insights.sbomify.com/CVE-2021-30199/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-30195](https://insights.sbomify.com/CVE-2021-30195/): Memory corruption in codesys:plcwinnt (high 7.5)
- [CVE-2021-30194](https://insights.sbomify.com/CVE-2021-30194/): Memory corruption in codesys:v2 web server (critical 9.1)
- [CVE-2021-30193](https://insights.sbomify.com/CVE-2021-30193/): Memory corruption in codesys:v2 web server (critical 9.8)
- [CVE-2021-30192](https://insights.sbomify.com/CVE-2021-30192/): Security feature bypass in codesys:v2 web server (critical 9.8)
- [CVE-2021-30191](https://insights.sbomify.com/CVE-2021-30191/): Memory corruption in codesys:v2 web server (high 7.5)
- [CVE-2021-30190](https://insights.sbomify.com/CVE-2021-30190/): Missing authorization in codesys:v2 web server (critical 9.8)
- [CVE-2021-3019](https://insights.sbomify.com/CVE-2021-3019/): Path traversal in lanproxy project:lanproxy (high 7.5)
- [CVE-2021-30189](https://insights.sbomify.com/CVE-2021-30189/): Memory corruption in codesys:v2 web server (critical 9.8)
- [CVE-2021-30188](https://insights.sbomify.com/CVE-2021-30188/): Memory corruption in codesys:v2 runtime system sp (critical 9.8)
- [CVE-2021-30187](https://insights.sbomify.com/CVE-2021-30187/): Command injection in codesys:runtime toolkit (medium 5.3)
- [CVE-2021-30186](https://insights.sbomify.com/CVE-2021-30186/): Memory corruption in codesys:plcwinnt (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/172/