# Vulnerabilities published in 2021


- [CVE-2021-28670](https://insights.sbomify.com/CVE-2021-28670/): Missing authorization in xerox:altalink b8045 firmware (critical 9.1)
- [CVE-2021-28669](https://insights.sbomify.com/CVE-2021-28669/): Missing authorization in xerox:altalink b8045 firmware (high 7.5)
- [CVE-2021-28668](https://insights.sbomify.com/CVE-2021-28668/): SQL injection in xerox:altalink b8045 firmware (critical 9.8)
- [CVE-2021-28667](https://insights.sbomify.com/CVE-2021-28667/): Denial of service in stackstorm:stackstorm (high 7.5)
- [CVE-2021-28665](https://insights.sbomify.com/CVE-2021-28665/): Denial of service in stormshield:network security (high 7.5)
- [CVE-2021-28664](https://insights.sbomify.com/CVE-2021-28664/): Arm Mali Graphics Processing Unit (GPU) Unspecified (high 8.8, exploited in the wild)
- [CVE-2021-28663](https://insights.sbomify.com/CVE-2021-28663/): Arm Mali Graphics Processing Unit (GPU) Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-28662](https://insights.sbomify.com/CVE-2021-28662/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2021-28661](https://insights.sbomify.com/CVE-2021-28661/): SilverStripe GraphQL Server permission checker not inherited by query subclass. (medium 4.3)
- [CVE-2021-28660](https://insights.sbomify.com/CVE-2021-28660/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2021-28658](https://insights.sbomify.com/CVE-2021-28658/): Directory Traversal in Django (medium 5.3)
- [CVE-2021-28657](https://insights.sbomify.com/CVE-2021-28657/): Infinite loop in Apache Tika's MP3 parser (medium 5.5)
- [CVE-2021-28656](https://insights.sbomify.com/CVE-2021-28656/): Apache Zeppelin: CSRF vulnerability in the Credentials page (medium 5.4)
- [CVE-2021-28655](https://insights.sbomify.com/CVE-2021-28655/): Apache Zeppelin: Arbitrary file deletion vulnerability (medium 6.5)
- [CVE-2021-28653](https://insights.sbomify.com/CVE-2021-28653/): Information disclosure in westerndigital:armorlock (medium 6.5)
- [CVE-2021-28652](https://insights.sbomify.com/CVE-2021-28652/): Denial of service in debian:debian linux (medium 4.9)
- [CVE-2021-28651](https://insights.sbomify.com/CVE-2021-28651/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2021-28650](https://insights.sbomify.com/CVE-2021-28650/): Path traversal in fedoraproject:fedora (medium 5.5)
- [CVE-2021-28649](https://insights.sbomify.com/CVE-2021-28649/): Privilege escalation in Trend Micro HouseCall for Home Networks (high 7.3)
- [CVE-2021-28648](https://insights.sbomify.com/CVE-2021-28648/): Privilege escalation in Trend Micro Antivirus for Mac (high 7.8)
- [CVE-2021-28647](https://insights.sbomify.com/CVE-2021-28647/): Other in Trend Micro Password Manager (high 7.8)
- [CVE-2021-28646](https://insights.sbomify.com/CVE-2021-28646/): Misconfiguration in Trend Micro Apex One (medium 5.5)
- [CVE-2021-28645](https://insights.sbomify.com/CVE-2021-28645/): Privilege escalation in Trend Micro Apex One (high 7.8)
- [CVE-2021-28644](https://insights.sbomify.com/CVE-2021-28644/): Adobe Acrobat SpellDictionaryCreate Path Traversal Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28643](https://insights.sbomify.com/CVE-2021-28643/): Adobe Acrobat Pro DC embedDocAsDataObject Type Confusion Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-28642](https://insights.sbomify.com/CVE-2021-28642/): Adobe Acrobat Pro DC Out-of-Bounds Write Arbitrary Code Execution Vulnerability (high 8.8)
- [CVE-2021-28641](https://insights.sbomify.com/CVE-2021-28641/): Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution Vulnerability (high 7.8)
- [CVE-2021-28640](https://insights.sbomify.com/CVE-2021-28640/): Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution Vulnerability (high 7.3)
- [CVE-2021-28639](https://insights.sbomify.com/CVE-2021-28639/): Adobe Acrobat Reader DC setAction Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28638](https://insights.sbomify.com/CVE-2021-28638/): Adobe Acrobat Reader DC PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28637](https://insights.sbomify.com/CVE-2021-28637/): Adobe Acrobat Pro DC PDFLibTool Out-of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28636](https://insights.sbomify.com/CVE-2021-28636/): Adobe Acrobat Reader Unquoted Search Path Vulnerability (high 7.3)
- [CVE-2021-28635](https://insights.sbomify.com/CVE-2021-28635/): Adobe Acrobat Reader Use-After-Free Vulnerability (high 7.8)
- [CVE-2021-28634](https://insights.sbomify.com/CVE-2021-28634/): Adobe Acrobat Reader AcrobatUtils.scpt Extension OS Command Injection Vulnerability (high 8.2)
- [CVE-2021-28633](https://insights.sbomify.com/CVE-2021-28633/): Adobe Creative Cloud Installer Arbitrary File Write (medium 6.1)
- [CVE-2021-28632](https://insights.sbomify.com/CVE-2021-28632/): ZDI-CAN-13471: Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28631](https://insights.sbomify.com/CVE-2021-28631/): Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28630](https://insights.sbomify.com/CVE-2021-28630/): Adobe Animate FLA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-28629](https://insights.sbomify.com/CVE-2021-28629/): Adobe Animate heap corruption vulnerability could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28628](https://insights.sbomify.com/CVE-2021-28628/): Adobe Experience Manager Cross-site Scripting vulnerability in inbox render.jsp (medium 6.3)
- [CVE-2021-28627](https://insights.sbomify.com/CVE-2021-28627/): Adobe Experience Manager Server-side Request Forgery could lead to Security feature bypass (medium 5.4)
- [CVE-2021-28626](https://insights.sbomify.com/CVE-2021-28626/): Adobe Experience Manager Improper Authorization at /content/usergenerated (low 3.7)
- [CVE-2021-28625](https://insights.sbomify.com/CVE-2021-28625/): Adobe Experience Manager Cross-site Scripting vulnerability in inbox workitem.jsp (medium 6.3)
- [CVE-2021-28624](https://insights.sbomify.com/CVE-2021-28624/): Adobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28623](https://insights.sbomify.com/CVE-2021-28623/): Adobe Premiere Elements Privilege Escalation Vulnerability (medium 6.2)
- [CVE-2021-28622](https://insights.sbomify.com/CVE-2021-28622/): Adobe Animate BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28621](https://insights.sbomify.com/CVE-2021-28621/): Adobe Animate FLA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28620](https://insights.sbomify.com/CVE-2021-28620/): Adobe Animate heap corruption vulnerability could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28619](https://insights.sbomify.com/CVE-2021-28619/): Adobe Animate out-of-bounds read vulnerability could lead to sensitive information disclosure (medium 5.5)
- [CVE-2021-28618](https://insights.sbomify.com/CVE-2021-28618/): Adobe Animate out-of-bounds read vulnerability could lead to sensitive information disclosure (medium 5.5)
- [CVE-2021-28617](https://insights.sbomify.com/CVE-2021-28617/): Adobe Animate out-of-bounds read vulnerability could lead to sensitive information disclosure (medium 5.5)
- [CVE-2021-28616](https://insights.sbomify.com/CVE-2021-28616/): Adobe After Effects Out-of-bounds Read vulnerability (medium 6.1)
- [CVE-2021-28615](https://insights.sbomify.com/CVE-2021-28615/): Adobe After Effects Out-of-bounds Read vulnerability could lead to sensitive information disclosure (medium 5.5)
- [CVE-2021-28614](https://insights.sbomify.com/CVE-2021-28614/): Adobe After Effects Out-of-bounds Read vulnerability (medium 6.1)
- [CVE-2021-28613](https://insights.sbomify.com/CVE-2021-28613/): Adobe Creative Cloud Arbitrary File Overwrite Vulnerability (high 7.4)
- [CVE-2021-28612](https://insights.sbomify.com/CVE-2021-28612/): Adobe After Effects Out-of-bounds Read vulnerability (medium 6.1)
- [CVE-2021-28611](https://insights.sbomify.com/CVE-2021-28611/): Adobe After Effects Out-of-bounds Read vulnerability (medium 6.1)
- [CVE-2021-28610](https://insights.sbomify.com/CVE-2021-28610/): Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28609](https://insights.sbomify.com/CVE-2021-28609/): Adobe After Effects Out-of-bounds Read vulnerability could lead to sensitive information disclosure (medium 5.5)
- [CVE-2021-28608](https://insights.sbomify.com/CVE-2021-28608/): Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28607](https://insights.sbomify.com/CVE-2021-28607/): Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28606](https://insights.sbomify.com/CVE-2021-28606/): Adobe After Effects Stack Overflow vulnerability could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28605](https://insights.sbomify.com/CVE-2021-28605/): Adobe After Effects memory corruption could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28604](https://insights.sbomify.com/CVE-2021-28604/): Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28603](https://insights.sbomify.com/CVE-2021-28603/): Adobe After Effects heap corruption vulnerability could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28602](https://insights.sbomify.com/CVE-2021-28602/): Adobe After Effects Memory corruption could lead to code execution vulnerability (high 7.8)
- [CVE-2021-28601](https://insights.sbomify.com/CVE-2021-28601/): Adobe After Effects NULL Pointer Dereference vulnerability (low 3.3)
- [CVE-2021-28600](https://insights.sbomify.com/CVE-2021-28600/): Adobe After Effects Out-of-bounds Read vulnerability could lead to sensitive information disclosure (medium 5.5)
- [CVE-2021-28597](https://insights.sbomify.com/CVE-2021-28597/): Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link (medium 6.2)
- [CVE-2021-28596](https://insights.sbomify.com/CVE-2021-28596/): Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28595](https://insights.sbomify.com/CVE-2021-28595/): Adobe Dimension Uncontrolled Search Path Element Could Lead To Remote Code Execution (high 7.8)
- [CVE-2021-28594](https://insights.sbomify.com/CVE-2021-28594/): Creative Cloud Desktop installer Uncontrolled Search Path element could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28593](https://insights.sbomify.com/CVE-2021-28593/): Adobe Illustrator PostScript Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-28592](https://insights.sbomify.com/CVE-2021-28592/): Adobe Illustrator JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28591](https://insights.sbomify.com/CVE-2021-28591/): Adobe Illustrator PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28590](https://insights.sbomify.com/CVE-2021-28590/): Adobe Media Encoder VOB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-28589](https://insights.sbomify.com/CVE-2021-28589/): Adobe Media Encoder TS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-28588](https://insights.sbomify.com/CVE-2021-28588/): Adobe RoboHelp Server folderId Directory Traversal Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-28587](https://insights.sbomify.com/CVE-2021-28587/): Adobe After Effects TIF file parsing out-of-bounds read information disclosure vulnerability (medium 4.3)
- [CVE-2021-28586](https://insights.sbomify.com/CVE-2021-28586/): Adobe After Effects PDF file parsing out-of-bounds write could lead to remote code execution vulnerability (high 8.8)
- [CVE-2021-28585](https://insights.sbomify.com/CVE-2021-28585/): Magento Commerce improper input validation in customer customer webapi (medium 5.3)
- [CVE-2021-28584](https://insights.sbomify.com/CVE-2021-28584/): Magento Commerce path traversal vulnerability in child theme store creation (medium 5.4)
- [CVE-2021-28583](https://insights.sbomify.com/CVE-2021-28583/): Magento Commerce insecure storage of sensitive documentation (high 7.5)
- [CVE-2021-28581](https://insights.sbomify.com/CVE-2021-28581/): Adobe Creative Cloud Desktop uncontrolled search path element vulnerability could lead to local privilege escalation (high 7.3)
- [CVE-2021-28580](https://insights.sbomify.com/CVE-2021-28580/): Medium by Adobe file parsing buffer overflow vulnerability could lead to arbitrary code execution (high 8.8)
- [CVE-2021-28579](https://insights.sbomify.com/CVE-2021-28579/): Adobe Connect improper access control could lead to privilege escalation (medium 4.3)
- [CVE-2021-28576](https://insights.sbomify.com/CVE-2021-28576/): Adobe Animate out-of-bounds read vulnerability could lead to information exposure (medium 4.3)
- [CVE-2021-28575](https://insights.sbomify.com/CVE-2021-28575/): Adobe Animate out-of-bounds read vulnerability could lead to information exposure (medium 4.3)
- [CVE-2021-28574](https://insights.sbomify.com/CVE-2021-28574/): Adobe Animate out-of-bounds read vulnerability could lead to information exposure (medium 4.3)
- [CVE-2021-28573](https://insights.sbomify.com/CVE-2021-28573/): Adobe Animate out-of-bounds read vulnerability could lead to information exposure (medium 4.3)
- [CVE-2021-28571](https://insights.sbomify.com/CVE-2021-28571/): Adobe After Effects improper neutralization of special elements could lead to remote code execution (high 8.3)
- [CVE-2021-28570](https://insights.sbomify.com/CVE-2021-28570/): Adobe After Effects uncontrolled search path element vulnerability could lead to remote code execution (high 8.3)
- [CVE-2021-28569](https://insights.sbomify.com/CVE-2021-28569/): Adobe Media Encoder VOB file parsing out-of-bounds read could lead to information disclosure vulnerability (medium 4.3)
- [CVE-2021-28568](https://insights.sbomify.com/CVE-2021-28568/): Adobe Genuine Services insecure file permission could lead to privilege escalation (medium 5.8)
- [CVE-2021-28567](https://insights.sbomify.com/CVE-2021-28567/): Magento Commerce improper authorization allows an authenticated user to perform certain functions without permission (medium 5.0)
- [CVE-2021-28566](https://insights.sbomify.com/CVE-2021-28566/): Magento Commerce information disclosure during upload action leveraging a specially crafted file (low 3.7)
- [CVE-2021-28565](https://insights.sbomify.com/CVE-2021-28565/): Adobe Acrobat Reader out-of-bounds read could lead to information exposure (medium 4.3)
- [CVE-2021-28564](https://insights.sbomify.com/CVE-2021-28564/): Adobe Acrobat Reader out-of-bounds write vulnerability could lead to arbitrary code execution (high 8.8)
- [CVE-2021-28563](https://insights.sbomify.com/CVE-2021-28563/): Magento Commerce improper Authorization via the 'Create Customer' endpoint (medium 6.5)
- [CVE-2021-28562](https://insights.sbomify.com/CVE-2021-28562/): Adobe Acrobat Reader use-after-free could lead to arbitrary code execution (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/183/