# Vulnerabilities published in 2021


- [CVE-2021-30045](https://insights.sbomify.com/CVE-2021-30045/): Memory corruption in serenityos:serenityos (critical 9.1)
- [CVE-2021-30044](https://insights.sbomify.com/CVE-2021-30044/): Cross-site scripting in remoteclinic:remote clinic (medium 5.4)
- [CVE-2021-30042](https://insights.sbomify.com/CVE-2021-30042/): Cross-site scripting in remoteclinic:remote clinic (medium 5.4)
- [CVE-2021-3004](https://insights.sbomify.com/CVE-2021-3004/): Business logic in stableyieldcredit project:stableyieldcredit (high 7.5)
- [CVE-2021-30039](https://insights.sbomify.com/CVE-2021-30039/): Cross-site scripting in remoteclinic:remote clinic (medium 5.4)
- [CVE-2021-30034](https://insights.sbomify.com/CVE-2021-30034/): Cross-site scripting in remoteclinic:remote clinic (medium 5.4)
- [CVE-2021-30030](https://insights.sbomify.com/CVE-2021-30030/): Cross-site scripting in remoteclinic:remote clinic (medium 5.4)
- [CVE-2021-3003](https://insights.sbomify.com/CVE-2021-3003/): Weak cryptography in agenziaentrate:desktop telematico (medium 5.3)
- [CVE-2021-30028](https://insights.sbomify.com/CVE-2021-30028/): Hardcoded credentials in sooteway wi-fi range extender project:sooteway wi-fi range extender (high 7.2)
- [CVE-2021-30027](https://insights.sbomify.com/CVE-2021-30027/): Memory corruption in md4c project:md4c (medium 5.5)
- [CVE-2021-30022](https://insights.sbomify.com/CVE-2021-30022/): Integer overflow in gpac:gpac (medium 5.5)
- [CVE-2021-30020](https://insights.sbomify.com/CVE-2021-30020/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2021-3002](https://insights.sbomify.com/CVE-2021-3002/): Cross-site scripting in seopanel:seo panel (medium 6.1)
- [CVE-2021-30019](https://insights.sbomify.com/CVE-2021-30019/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2021-30015](https://insights.sbomify.com/CVE-2021-30015/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-30014](https://insights.sbomify.com/CVE-2021-30014/): Integer overflow in gpac:gpac (medium 5.5)
- [CVE-2021-30006](https://insights.sbomify.com/CVE-2021-30006/): XML external entity in jetbrains:intellij idea (high 7.5)
- [CVE-2021-30005](https://insights.sbomify.com/CVE-2021-30005/): Code injection in jetbrains:pycharm (high 7.8)
- [CVE-2021-30004](https://insights.sbomify.com/CVE-2021-30004/): Weak cryptography in w1.fi:hostapd (medium 4.3)
- [CVE-2021-30003](https://insights.sbomify.com/CVE-2021-30003/): Cross-site scripting in nokia:g-120w-f firmware (medium 4.8)
- [CVE-2021-30002](https://insights.sbomify.com/CVE-2021-30002/): Denial of service in debian:debian linux (medium 6.2)
- [CVE-2021-30000](https://insights.sbomify.com/CVE-2021-30000/): SQL injection in latrix project:latrix (critical 9.8)
- [CVE-2021-29999](https://insights.sbomify.com/CVE-2021-29999/): Memory corruption in windriver:vxworks (critical 9.8)
- [CVE-2021-29998](https://insights.sbomify.com/CVE-2021-29998/): Memory corruption in siemens:ruggedcom win subscriber station firmware (critical 9.8)
- [CVE-2021-29997](https://insights.sbomify.com/CVE-2021-29997/): Memory corruption in windriver:vxworks (medium 5.3)
- [CVE-2021-29996](https://insights.sbomify.com/CVE-2021-29996/): Cross-site scripting in marktext:marktext (critical 9.6)
- [CVE-2021-29995](https://insights.sbomify.com/CVE-2021-29995/): Cross-site request forgery in cloverdx:cloverdx (high 8.8)
- [CVE-2021-29994](https://insights.sbomify.com/CVE-2021-29994/): Cloudera Hue 4.6.0 allows XSS. (medium 6.1)
- [CVE-2021-29993](https://insights.sbomify.com/CVE-2021-29993/): Other in Firefox (high 8.1)
- [CVE-2021-29991](https://insights.sbomify.com/CVE-2021-29991/): Other in Firefox (high 8.1)
- [CVE-2021-29990](https://insights.sbomify.com/CVE-2021-29990/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-29989](https://insights.sbomify.com/CVE-2021-29989/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-29988](https://insights.sbomify.com/CVE-2021-29988/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-29987](https://insights.sbomify.com/CVE-2021-29987/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2021-29986](https://insights.sbomify.com/CVE-2021-29986/): Race condition in Firefox (high 8.1)
- [CVE-2021-29985](https://insights.sbomify.com/CVE-2021-29985/): Use after free in Firefox (high 8.8)
- [CVE-2021-29984](https://insights.sbomify.com/CVE-2021-29984/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-29983](https://insights.sbomify.com/CVE-2021-29983/): Other in Firefox (medium 6.5)
- [CVE-2021-29982](https://insights.sbomify.com/CVE-2021-29982/): Information disclosure in Firefox (medium 6.5)
- [CVE-2021-29981](https://insights.sbomify.com/CVE-2021-29981/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-29980](https://insights.sbomify.com/CVE-2021-29980/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-29979](https://insights.sbomify.com/CVE-2021-29979/): Cross-site scripting in Hubs Cloud (medium 6.1)
- [CVE-2021-29978](https://insights.sbomify.com/CVE-2021-29978/): Other in Mozilla VPN (critical 9.8)
- [CVE-2021-29977](https://insights.sbomify.com/CVE-2021-29977/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-29976](https://insights.sbomify.com/CVE-2021-29976/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-29975](https://insights.sbomify.com/CVE-2021-29975/): Other in Firefox (medium 6.5)
- [CVE-2021-29974](https://insights.sbomify.com/CVE-2021-29974/): Security feature bypass in Firefox (medium 4.3)
- [CVE-2021-29973](https://insights.sbomify.com/CVE-2021-29973/): Security feature bypass in Firefox (high 8.8)
- [CVE-2021-29972](https://insights.sbomify.com/CVE-2021-29972/): Use after free in Firefox (high 8.8)
- [CVE-2021-29971](https://insights.sbomify.com/CVE-2021-29971/): Security feature bypass in Firefox (critical 9.8)
- [CVE-2021-29970](https://insights.sbomify.com/CVE-2021-29970/): Use after free in Firefox (high 8.8)
- [CVE-2021-29969](https://insights.sbomify.com/CVE-2021-29969/): Security feature bypass in Thunderbird (medium 5.9)
- [CVE-2021-29968](https://insights.sbomify.com/CVE-2021-29968/): Memory corruption in Firefox (high 8.1)
- [CVE-2021-29967](https://insights.sbomify.com/CVE-2021-29967/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-29966](https://insights.sbomify.com/CVE-2021-29966/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-29965](https://insights.sbomify.com/CVE-2021-29965/): Security feature bypass in Firefox (medium 5.3)
- [CVE-2021-29964](https://insights.sbomify.com/CVE-2021-29964/): Memory corruption in Firefox (high 7.1)
- [CVE-2021-29963](https://insights.sbomify.com/CVE-2021-29963/): Information disclosure in Firefox (medium 4.3)
- [CVE-2021-29962](https://insights.sbomify.com/CVE-2021-29962/): Denial of service in Firefox (medium 4.3)
- [CVE-2021-29961](https://insights.sbomify.com/CVE-2021-29961/): Security feature bypass in Firefox (medium 4.3)
- [CVE-2021-29960](https://insights.sbomify.com/CVE-2021-29960/): Information disclosure in Firefox (medium 4.3)
- [CVE-2021-29959](https://insights.sbomify.com/CVE-2021-29959/): Security feature bypass in Firefox (medium 4.3)
- [CVE-2021-29958](https://insights.sbomify.com/CVE-2021-29958/): Information disclosure in Firefox for iOS (medium 4.3)
- [CVE-2021-29957](https://insights.sbomify.com/CVE-2021-29957/): Security feature bypass in Thunderbird (medium 4.3)
- [CVE-2021-29956](https://insights.sbomify.com/CVE-2021-29956/): Information disclosure in Thunderbird (medium 4.3)
- [CVE-2021-29955](https://insights.sbomify.com/CVE-2021-29955/): Memory corruption in Firefox (medium 5.3)
- [CVE-2021-29954](https://insights.sbomify.com/CVE-2021-29954/): Server-side request forgery in Hubs Cloud (critical 9.8)
- [CVE-2021-29953](https://insights.sbomify.com/CVE-2021-29953/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2021-29952](https://insights.sbomify.com/CVE-2021-29952/): Race condition in Firefox (high 7.5)
- [CVE-2021-29951](https://insights.sbomify.com/CVE-2021-29951/): Misconfiguration in Firefox (medium 6.5)
- [CVE-2021-29950](https://insights.sbomify.com/CVE-2021-29950/): Information disclosure in Thunderbird (high 7.5)
- [CVE-2021-29949](https://insights.sbomify.com/CVE-2021-29949/): Other in Thunderbird (high 7.8)
- [CVE-2021-29948](https://insights.sbomify.com/CVE-2021-29948/): Race condition in Thunderbird (low 2.5)
- [CVE-2021-29947](https://insights.sbomify.com/CVE-2021-29947/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-29946](https://insights.sbomify.com/CVE-2021-29946/): Integer overflow in Firefox (high 8.8)
- [CVE-2021-29945](https://insights.sbomify.com/CVE-2021-29945/): Null dereference in Firefox (medium 6.5)
- [CVE-2021-29944](https://insights.sbomify.com/CVE-2021-29944/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2021-29943](https://insights.sbomify.com/CVE-2021-29943/): Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections (critical 9.1)
- [CVE-2021-29942](https://insights.sbomify.com/CVE-2021-29942/): Out of bounds write in reorder (high 7.3)
- [CVE-2021-29941](https://insights.sbomify.com/CVE-2021-29941/): Out of bounds write in reorder (high 7.3)
- [CVE-2021-29940](https://insights.sbomify.com/CVE-2021-29940/): Double free in through (critical 9.8)
- [CVE-2021-29939](https://insights.sbomify.com/CVE-2021-29939/): Out of bounds write in stackvector (high 7.3)
- [CVE-2021-29938](https://insights.sbomify.com/CVE-2021-29938/): Double free in slice-deque (high 7.5)
- [CVE-2021-29937](https://insights.sbomify.com/CVE-2021-29937/): Free of uninitialized memory in telemetry (critical 9.8)
- [CVE-2021-29936](https://insights.sbomify.com/CVE-2021-29936/): Free of uninitialized memory in adtensor (critical 9.8)
- [CVE-2021-29935](https://insights.sbomify.com/CVE-2021-29935/): Use after free in Rocket (high 7.3)
- [CVE-2021-29934](https://insights.sbomify.com/CVE-2021-29934/): Out of bounds read in uu_od (high 7.3)
- [CVE-2021-29933](https://insights.sbomify.com/CVE-2021-29933/): Double free in insert_many (high 7.5)
- [CVE-2021-29932](https://insights.sbomify.com/CVE-2021-29932/): Uncontrolled Resource Consumption in parse_duration (high 7.5)
- [CVE-2021-29931](https://insights.sbomify.com/CVE-2021-29931/): Double free in arenavec (high 7.5)
- [CVE-2021-29930](https://insights.sbomify.com/CVE-2021-29930/): Out of bounds write in arenavec (high 7.5)
- [CVE-2021-29929](https://insights.sbomify.com/CVE-2021-29929/): Double free in endian_trait (high 7.5)
- [CVE-2021-29923](https://insights.sbomify.com/CVE-2021-29923/): Security feature bypass in fedoraproject:fedora (high 7.5)
- [CVE-2021-29922](https://insights.sbomify.com/CVE-2021-29922/): Security feature bypass in rust-lang:rust (critical 9.1)
- [CVE-2021-29921](https://insights.sbomify.com/CVE-2021-29921/): Security feature bypass in oracle:communications cloud native core automated test suite (critical 9.8)
- [CVE-2021-29913](https://insights.sbomify.com/CVE-2021-29913/): IBM Security Verify Privilege improper input validation (medium 6.5)
- [CVE-2021-29912](https://insights.sbomify.com/CVE-2021-29912/): Cross-site scripting in Cloud Pak for Security (medium 5.4)
- [CVE-2021-29908](https://insights.sbomify.com/CVE-2021-29908/): Auth bypass in Virtualization Engine TS7700 3957-VEC (critical 9.1)
- [CVE-2021-29907](https://insights.sbomify.com/CVE-2021-29907/): File upload in OpenPages with Watson (high 8.8)
- [CVE-2021-29906](https://insights.sbomify.com/CVE-2021-29906/): Information disclosure in App Connect Enterprise Certified Container (medium 5.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/174/