# Vulnerabilities published in 2021


- [CVE-2021-28848](https://insights.sbomify.com/CVE-2021-28848/): Denial of service in mintty project:mintty (high 7.5)
- [CVE-2021-28847](https://insights.sbomify.com/CVE-2021-28847/): Denial of service in mobatek:mobaxterm (high 7.5)
- [CVE-2021-28846](https://insights.sbomify.com/CVE-2021-28846/): Memory corruption in trendnet:tew-755ap2kac firmware (medium 6.5)
- [CVE-2021-28845](https://insights.sbomify.com/CVE-2021-28845/): Null dereference in trendnet:tew-755ap2kac firmware (high 7.5)
- [CVE-2021-28844](https://insights.sbomify.com/CVE-2021-28844/): Null dereference in trendnet:tew-755ap2kac firmware (high 7.5)
- [CVE-2021-28843](https://insights.sbomify.com/CVE-2021-28843/): Null dereference in trendnet:tew-755ap2kac firmware (high 7.5)
- [CVE-2021-28842](https://insights.sbomify.com/CVE-2021-28842/): Null dereference in trendnet:tew-755ap2kac firmware (high 7.5)
- [CVE-2021-28841](https://insights.sbomify.com/CVE-2021-28841/): Null dereference in trendnet:tew-755ap2kac firmware (high 7.5)
- [CVE-2021-28840](https://insights.sbomify.com/CVE-2021-28840/): Null dereference in dlink:dap-2310 firmware (high 7.5)
- [CVE-2021-28839](https://insights.sbomify.com/CVE-2021-28839/): Null dereference in dlink:dap-2310 firmware (high 7.5)
- [CVE-2021-28838](https://insights.sbomify.com/CVE-2021-28838/): Null dereference in dlink:dap-2310 firmware (high 7.5)
- [CVE-2021-28835](https://insights.sbomify.com/CVE-2021-28835/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2021-28834](https://insights.sbomify.com/CVE-2021-28834/): Remote code execution in Kramdown (critical 9.8)
- [CVE-2021-28833](https://insights.sbomify.com/CVE-2021-28833/): qiita-markdown Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2021-28832](https://insights.sbomify.com/CVE-2021-28832/): Code injection in vim project:vim (high 7.8)
- [CVE-2021-28831](https://insights.sbomify.com/CVE-2021-28831/): Memory corruption in busybox:busybox (high 7.5)
- [CVE-2021-28830](https://insights.sbomify.com/CVE-2021-28830/): TIBCO Spotfire Windows Platform Artifact Search vulnerability (high 8.8)
- [CVE-2021-28829](https://insights.sbomify.com/CVE-2021-28829/): TIBCO Administrator CSV injection vulnerability (medium 6.5)
- [CVE-2021-28828](https://insights.sbomify.com/CVE-2021-28828/): TIBCO Administrator SQL injection vulnerability (high 7.6)
- [CVE-2021-28827](https://insights.sbomify.com/CVE-2021-28827/): TIBCO Administrator Stored Cross Site Scripting vulnerability (critical 9.6)
- [CVE-2021-28826](https://insights.sbomify.com/CVE-2021-28826/): TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge Windows Platform Installation vulnerability (high 8.8)
- [CVE-2021-28825](https://insights.sbomify.com/CVE-2021-28825/): TIBCO Messaging - Eclipse Mosquitto Distribution - Core Windows Platform Installation vulnerability (high 8.8)
- [CVE-2021-28824](https://insights.sbomify.com/CVE-2021-28824/): TIBCO ActiveSpaces Windows Platform Installation vulnerability (high 8.8)
- [CVE-2021-28823](https://insights.sbomify.com/CVE-2021-28823/): TIBCO eFTL Windows Platform Installation vulnerability (high 8.8)
- [CVE-2021-28822](https://insights.sbomify.com/CVE-2021-28822/): TIBCO Enterprise Message Service Windows Platform Artifact Search vulnerability (high 8.8)
- [CVE-2021-28821](https://insights.sbomify.com/CVE-2021-28821/): TIBCO Enterprise Message Service Windows Platform Installation vulnerability (high 8.8)
- [CVE-2021-28820](https://insights.sbomify.com/CVE-2021-28820/): TIBCO FTL Windows Platform Artifact Search vulnerability (high 8.8)
- [CVE-2021-28819](https://insights.sbomify.com/CVE-2021-28819/): TIBCO FTL Windows Platform Installation vulnerability (high 8.8)
- [CVE-2021-28818](https://insights.sbomify.com/CVE-2021-28818/): TIBCO Rendezvous Windows Platform Artifact Search vulnerability (high 8.8)
- [CVE-2021-28817](https://insights.sbomify.com/CVE-2021-28817/): TIBCO Rendezvous Windows Platform Installation vulnerability (high 8.8)
- [CVE-2021-28816](https://insights.sbomify.com/CVE-2021-28816/): Stack Buffer Overflow Vulnerabilities in QTS, QuTS hero, and QuTScloud (high 7.6)
- [CVE-2021-28815](https://insights.sbomify.com/CVE-2021-28815/): Insecure Storage of Sensitive Information in myQNAPcloud Link (medium 6.0)
- [CVE-2021-28814](https://insights.sbomify.com/CVE-2021-28814/): Improper Access Control Vulnerability in Helpdesk (high 8.8)
- [CVE-2021-28813](https://insights.sbomify.com/CVE-2021-28813/): Insufficiently Protected Credentials Vulnerability in QSW-M2116P-2T2S and QuNetSwitch (critical 9.6)
- [CVE-2021-28812](https://insights.sbomify.com/CVE-2021-28812/): Command Injection Vulnerability in Video Station (high 8.8)
- [CVE-2021-28811](https://insights.sbomify.com/CVE-2021-28811/): Vulnerability in Roon Server (high 7.2)
- [CVE-2021-28810](https://insights.sbomify.com/CVE-2021-28810/): Vulnerability in Roon Server (high 7.5)
- [CVE-2021-28809](https://insights.sbomify.com/CVE-2021-28809/): Missing Authentication for Critical Function in RTRR Server in HBS3 (critical 9.8)
- [CVE-2021-28807](https://insights.sbomify.com/CVE-2021-28807/): Post-Authentication Reflected XSS Vulnerability in Q'center (high 7.7)
- [CVE-2021-28806](https://insights.sbomify.com/CVE-2021-28806/): DOM-Based XSS Vulnerability in QTS and QuTS hero (medium 5.7)
- [CVE-2021-28805](https://insights.sbomify.com/CVE-2021-28805/): Inclusion of Sensitive Information in QSS (high 7.8)
- [CVE-2021-28804](https://insights.sbomify.com/CVE-2021-28804/): Command Injection Vulnerabilities in QTS and QuTS hero (critical 9.8)
- [CVE-2021-28803](https://insights.sbomify.com/CVE-2021-28803/): Stored XSS Vulnerability in Q'center (medium 5.4)
- [CVE-2021-28802](https://insights.sbomify.com/CVE-2021-28802/): Command Injection Vulnerabilities in QTS and QuTS hero (critical 9.8)
- [CVE-2021-28801](https://insights.sbomify.com/CVE-2021-28801/): Out-of-Bounds Read Vulnerability in QSS (low 3.1)
- [CVE-2021-28800](https://insights.sbomify.com/CVE-2021-28800/): Command Injection Vulnerability in QTS (high 8.1)
- [CVE-2021-28799](https://insights.sbomify.com/CVE-2021-28799/): QNAP NAS Improper Authorization (critical 10.0, exploited in the wild)
- [CVE-2021-28798](https://insights.sbomify.com/CVE-2021-28798/): Relative Path Traversal Vulnerability in QTS and QuTS hero (high 8.8)
- [CVE-2021-28797](https://insights.sbomify.com/CVE-2021-28797/): Stack Buffer Overflow in Surveillance Station (critical 9.8)
- [CVE-2021-28796](https://insights.sbomify.com/CVE-2021-28796/): Cross-Site Scripting in Qiita-Markdown (medium 6.1)
- [CVE-2021-28794](https://insights.sbomify.com/CVE-2021-28794/): Code injection in shellcheck project:shellcheck (critical 9.8)
- [CVE-2021-28793](https://insights.sbomify.com/CVE-2021-28793/): Code injection in lextudio:restructuredtext (critical 9.8)
- [CVE-2021-28792](https://insights.sbomify.com/CVE-2021-28792/): Code injection in swift development environment project:swift development environment (high 7.8)
- [CVE-2021-28791](https://insights.sbomify.com/CVE-2021-28791/): Code injection in swiftformat project:swiftformat (high 7.8)
- [CVE-2021-28790](https://insights.sbomify.com/CVE-2021-28790/): Code injection in swiftlint project:swiftlint (high 7.8)
- [CVE-2021-28789](https://insights.sbomify.com/CVE-2021-28789/): Code injection in apple-swift-format project:apple-swift-format (high 7.8)
- [CVE-2021-28715](https://insights.sbomify.com/CVE-2021-28715/): Denial of service in Linux (medium 6.5)
- [CVE-2021-28714](https://insights.sbomify.com/CVE-2021-28714/): Denial of service in Linux (medium 6.5)
- [CVE-2021-28713](https://insights.sbomify.com/CVE-2021-28713/): Denial of service in Linux (medium 6.5)
- [CVE-2021-28712](https://insights.sbomify.com/CVE-2021-28712/): Denial of service in Linux (medium 6.5)
- [CVE-2021-28711](https://insights.sbomify.com/CVE-2021-28711/): Denial of service in Linux (medium 6.5)
- [CVE-2021-28710](https://insights.sbomify.com/CVE-2021-28710/): Privilege escalation in xen (high 8.8)
- [CVE-2021-28709](https://insights.sbomify.com/CVE-2021-28709/): Other in xen (high 7.8)
- [CVE-2021-28708](https://insights.sbomify.com/CVE-2021-28708/): Memory corruption in xen (high 8.8)
- [CVE-2021-28707](https://insights.sbomify.com/CVE-2021-28707/): Memory corruption in xen (high 8.8)
- [CVE-2021-28706](https://insights.sbomify.com/CVE-2021-28706/): Integer overflow in xen (high 8.6)
- [CVE-2021-28705](https://insights.sbomify.com/CVE-2021-28705/): Other in xen (high 7.8)
- [CVE-2021-28704](https://insights.sbomify.com/CVE-2021-28704/): Memory corruption in xen (high 8.8)
- [CVE-2021-28703](https://insights.sbomify.com/CVE-2021-28703/): Use after free in Xen (high 7.0)
- [CVE-2021-28702](https://insights.sbomify.com/CVE-2021-28702/): Use after free in xen (high 7.6)
- [CVE-2021-28701](https://insights.sbomify.com/CVE-2021-28701/): Race condition in xen (high 7.8)
- [CVE-2021-28700](https://insights.sbomify.com/CVE-2021-28700/): Denial of service in xen (medium 4.9)
- [CVE-2021-28699](https://insights.sbomify.com/CVE-2021-28699/): Memory corruption in xen (medium 5.5)
- [CVE-2021-28698](https://insights.sbomify.com/CVE-2021-28698/): Denial of service in xen (medium 5.5)
- [CVE-2021-28697](https://insights.sbomify.com/CVE-2021-28697/): Use after free in xen (high 7.8)
- [CVE-2021-28696](https://insights.sbomify.com/CVE-2021-28696/): Security feature bypass in xen (medium 6.8)
- [CVE-2021-28695](https://insights.sbomify.com/CVE-2021-28695/): Memory corruption in xen (medium 6.8)
- [CVE-2021-28694](https://insights.sbomify.com/CVE-2021-28694/): Memory corruption in xen (medium 6.8)
- [CVE-2021-28693](https://insights.sbomify.com/CVE-2021-28693/): Information disclosure in xen (medium 5.5)
- [CVE-2021-28692](https://insights.sbomify.com/CVE-2021-28692/): Other in xen (high 7.1)
- [CVE-2021-28691](https://insights.sbomify.com/CVE-2021-28691/): Use after free in Linux (high 7.8)
- [CVE-2021-28690](https://insights.sbomify.com/CVE-2021-28690/): Security feature bypass in xen (medium 6.5)
- [CVE-2021-28689](https://insights.sbomify.com/CVE-2021-28689/): Information disclosure in Xen (medium 5.5)
- [CVE-2021-28688](https://insights.sbomify.com/CVE-2021-28688/): Other in Linux (medium 6.5)
- [CVE-2021-28687](https://insights.sbomify.com/CVE-2021-28687/): Denial of service in xen (medium 5.5)
- [CVE-2021-28686](https://insights.sbomify.com/CVE-2021-28686/): Memory corruption in asus:gputweak ii (medium 5.5)
- [CVE-2021-28685](https://insights.sbomify.com/CVE-2021-28685/): Privilege escalation in asus:gputweak ii (high 7.8)
- [CVE-2021-28684](https://insights.sbomify.com/CVE-2021-28684/): XML external entity in powerarchiver:powerarchiver (medium 4.3)
- [CVE-2021-28683](https://insights.sbomify.com/CVE-2021-28683/): Null dereference in envoyproxy:envoy (high 7.5)
- [CVE-2021-28682](https://insights.sbomify.com/CVE-2021-28682/): Integer overflow in envoyproxy:envoy (high 7.5)
- [CVE-2021-28681](https://insights.sbomify.com/CVE-2021-28681/): In github.com/pion/webrtc, failed DTLS certificate verification doesn't stop data channel communication (medium 5.3)
- [CVE-2021-28680](https://insights.sbomify.com/CVE-2021-28680/): Improper Privilege Management in devise_masquerade (high 8.1)
- [CVE-2021-28678](https://insights.sbomify.com/CVE-2021-28678/): Insufficient Verification of Data Authenticity in Pillow (medium 5.5)
- [CVE-2021-28677](https://insights.sbomify.com/CVE-2021-28677/): Uncontrolled Resource Consumption in Pillow (high 7.5)
- [CVE-2021-28676](https://insights.sbomify.com/CVE-2021-28676/): Potential infinite loop in Pillow (high 7.5)
- [CVE-2021-28675](https://insights.sbomify.com/CVE-2021-28675/): Pillow denial of service (medium 5.5)
- [CVE-2021-28674](https://insights.sbomify.com/CVE-2021-28674/): Missing authorization in solarwinds:orion platform (medium 5.4)
- [CVE-2021-28673](https://insights.sbomify.com/CVE-2021-28673/): Command injection in xerox:phaser 6510 firmware (critical 9.8)
- [CVE-2021-28672](https://insights.sbomify.com/CVE-2021-28672/): Memory corruption in xerox:phaser 6510 firmware (critical 9.8)
- [CVE-2021-28671](https://insights.sbomify.com/CVE-2021-28671/): Command injection in xerox:phaser 6510 firmware (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/182/