# Vulnerabilities published in 2021


- [CVE-2021-28561](https://insights.sbomify.com/CVE-2021-28561/): Adobe Acrobat Reader memory corruption vulnerability could lead to remote code execution (high 8.8)
- [CVE-2021-28560](https://insights.sbomify.com/CVE-2021-28560/): Adobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code execution (high 8.8)
- [CVE-2021-28559](https://insights.sbomify.com/CVE-2021-28559/): Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalation (medium 5.3)
- [CVE-2021-28558](https://insights.sbomify.com/CVE-2021-28558/): Adobe Acrobat Reader heap-based buffer overflow could lead to arbitrary code execution (high 8.8)
- [CVE-2021-28557](https://insights.sbomify.com/CVE-2021-28557/): Adobe Acrobat Reader out-of-bounds read in PDFLibTool could lead to information exposure (medium 4.3)
- [CVE-2021-28556](https://insights.sbomify.com/CVE-2021-28556/): Magento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution (medium 6.9)
- [CVE-2021-28555](https://insights.sbomify.com/CVE-2021-28555/): Adobe Acrobat Reader out-of-bounds Read could lead to information disclosure (medium 6.5)
- [CVE-2021-28554](https://insights.sbomify.com/CVE-2021-28554/): Adobe Acrobat Reader DC Path Parsing Out-Of-Bounds Read could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28553](https://insights.sbomify.com/CVE-2021-28553/): Adobe Acrobat Reader use-after-free vulnerability could lead to arbitrary code execution (high 8.8)
- [CVE-2021-28552](https://insights.sbomify.com/CVE-2021-28552/): Adobe Acrobat Reader DC XFA Template Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28551](https://insights.sbomify.com/CVE-2021-28551/): Adobe Acrobat Pro DC JPEG2000 Editing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28550](https://insights.sbomify.com/CVE-2021-28550/): Adobe Acrobat and Reader Use-After-Free (critical 9.6, exploited in the wild)
- [CVE-2021-28549](https://insights.sbomify.com/CVE-2021-28549/): Adobe Photoshop parsing JS buffer overflow vulnerability could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28548](https://insights.sbomify.com/CVE-2021-28548/): Adobe Photoshop parsing JS buffer overflow vulnerability could lead to arbitrary code execution (high 7.8)
- [CVE-2021-28547](https://insights.sbomify.com/CVE-2021-28547/): Adobe Creative Cloud for macOS Privilege Escalation Vulnerability (high 7.8)
- [CVE-2021-28546](https://insights.sbomify.com/CVE-2021-28546/): Acrobat Reader DC Missing Support for Integrity Check (medium 6.5)
- [CVE-2021-28545](https://insights.sbomify.com/CVE-2021-28545/): Acrobat Reader DC Missing Support for Integrity Check (high 8.1)
- [CVE-2021-28544](https://insights.sbomify.com/CVE-2021-28544/): Apache Subversion SVN authz protected copyfrom paths regression (medium 4.3)
- [CVE-2021-28543](https://insights.sbomify.com/CVE-2021-28543/): Null dereference in fedoraproject:fedora (medium 4.0)
- [CVE-2021-28511](https://insights.sbomify.com/CVE-2021-28511/): Security feature bypass in EOS (medium 5.8)
- [CVE-2021-28510](https://insights.sbomify.com/CVE-2021-28510/): Denial of service in EOS (medium 5.3)
- [CVE-2021-28509](https://insights.sbomify.com/CVE-2021-28509/): TerminAttr streams MACsec sensitive data in clear text to other authorized users in CVP (medium 6.1)
- [CVE-2021-28508](https://insights.sbomify.com/CVE-2021-28508/): TerminAttr streams IPsec sensitive data in clear text to other authorized users in CVP (medium 6.8)
- [CVE-2021-28507](https://insights.sbomify.com/CVE-2021-28507/): Security feature bypass in EOS (medium 5.5)
- [CVE-2021-28506](https://insights.sbomify.com/CVE-2021-28506/): Missing authorization in EOS (critical 9.1)
- [CVE-2021-28505](https://insights.sbomify.com/CVE-2021-28505/): Security feature bypass in EOS (high 7.5)
- [CVE-2021-28504](https://insights.sbomify.com/CVE-2021-28504/): Security feature bypass in EOS (high 7.5)
- [CVE-2021-28503](https://insights.sbomify.com/CVE-2021-28503/): Auth bypass in Arista EOS (high 7.4)
- [CVE-2021-28501](https://insights.sbomify.com/CVE-2021-28501/): Auth bypass in Terminattr (critical 9.1)
- [CVE-2021-28500](https://insights.sbomify.com/CVE-2021-28500/): Auth bypass in Arista EOS (critical 9.1)
- [CVE-2021-28499](https://insights.sbomify.com/CVE-2021-28499/): Information disclosure in Metamako Operating System (medium 6.3)
- [CVE-2021-28498](https://insights.sbomify.com/CVE-2021-28498/): Information disclosure in Metamako Operating System (high 8.7)
- [CVE-2021-28497](https://insights.sbomify.com/CVE-2021-28497/): Privilege escalation in Metamako Operating System (medium 4.4)
- [CVE-2021-28496](https://insights.sbomify.com/CVE-2021-28496/): Information disclosure in Arista EOS (medium 5.7)
- [CVE-2021-28495](https://insights.sbomify.com/CVE-2021-28495/): Auth bypass in Metamako Operating System (high 7.2)
- [CVE-2021-28494](https://insights.sbomify.com/CVE-2021-28494/): Auth bypass in Metamako Operating System (critical 9.6)
- [CVE-2021-28493](https://insights.sbomify.com/CVE-2021-28493/): Privilege escalation in Metamako Operating System (high 8.4)
- [CVE-2021-28492](https://insights.sbomify.com/CVE-2021-28492/): Weak cryptography in unisys:stealth (medium 4.9)
- [CVE-2021-28490](https://insights.sbomify.com/CVE-2021-28490/): Cross-Site Request Forgery in OWASP CSRFGuard (high 8.8)
- [CVE-2021-28488](https://insights.sbomify.com/CVE-2021-28488/): Missing authorization in ericsson:network manager (medium 6.5)
- [CVE-2021-28485](https://insights.sbomify.com/CVE-2021-28485/): Path traversal in ericsson:mobile switching center server bc 18a firmware (medium 4.3)
- [CVE-2021-28484](https://insights.sbomify.com/CVE-2021-28484/): Infinite loop in Yubico yubihsm-connector (high 7.5)
- [CVE-2021-28483](https://insights.sbomify.com/CVE-2021-28483/): Microsoft Exchange Server Remote Code Execution Vulnerability (critical 9.0)
- [CVE-2021-28482](https://insights.sbomify.com/CVE-2021-28482/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-28481](https://insights.sbomify.com/CVE-2021-28481/): Microsoft Exchange Server Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-28480](https://insights.sbomify.com/CVE-2021-28480/): Microsoft Exchange Server Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-28479](https://insights.sbomify.com/CVE-2021-28479/): Windows CSC Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-28478](https://insights.sbomify.com/CVE-2021-28478/): Microsoft SharePoint Server Spoofing Vulnerability (high 7.6)
- [CVE-2021-28477](https://insights.sbomify.com/CVE-2021-28477/): Visual Studio Code Remote Code Execution Vulnerability (high 7.0)
- [CVE-2021-28476](https://insights.sbomify.com/CVE-2021-28476/): Windows Hyper-V Remote Code Execution Vulnerability (critical 9.9)
- [CVE-2021-28475](https://insights.sbomify.com/CVE-2021-28475/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28474](https://insights.sbomify.com/CVE-2021-28474/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-28473](https://insights.sbomify.com/CVE-2021-28473/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28472](https://insights.sbomify.com/CVE-2021-28472/): Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28471](https://insights.sbomify.com/CVE-2021-28471/): Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28470](https://insights.sbomify.com/CVE-2021-28470/): Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28469](https://insights.sbomify.com/CVE-2021-28469/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28468](https://insights.sbomify.com/CVE-2021-28468/): Raw Image Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28466](https://insights.sbomify.com/CVE-2021-28466/): Raw Image Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28465](https://insights.sbomify.com/CVE-2021-28465/): Web Media Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28464](https://insights.sbomify.com/CVE-2021-28464/): VP9 Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28461](https://insights.sbomify.com/CVE-2021-28461/): Dynamics Finance and Operations Cross-site Scripting Vulnerability (medium 6.1)
- [CVE-2021-28460](https://insights.sbomify.com/CVE-2021-28460/): Azure Sphere Unsigned Code Execution Vulnerability (high 8.1)
- [CVE-2021-28459](https://insights.sbomify.com/CVE-2021-28459/): Azure DevOps Server Spoofing Vulnerability (medium 6.1)
- [CVE-2021-28458](https://insights.sbomify.com/CVE-2021-28458/): Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-28457](https://insights.sbomify.com/CVE-2021-28457/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28456](https://insights.sbomify.com/CVE-2021-28456/): Microsoft Excel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-28455](https://insights.sbomify.com/CVE-2021-28455/): Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-28454](https://insights.sbomify.com/CVE-2021-28454/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28453](https://insights.sbomify.com/CVE-2021-28453/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28452](https://insights.sbomify.com/CVE-2021-28452/): Microsoft Outlook Memory Corruption Vulnerability (high 7.1)
- [CVE-2021-28451](https://insights.sbomify.com/CVE-2021-28451/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28450](https://insights.sbomify.com/CVE-2021-28450/): Microsoft SharePoint Denial of Service Vulnerability (medium 5.0)
- [CVE-2021-28449](https://insights.sbomify.com/CVE-2021-28449/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28448](https://insights.sbomify.com/CVE-2021-28448/): Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-28447](https://insights.sbomify.com/CVE-2021-28447/): Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability (medium 4.4)
- [CVE-2021-28446](https://insights.sbomify.com/CVE-2021-28446/): Windows Portmapping Information Disclosure Vulnerability (high 7.1)
- [CVE-2021-28445](https://insights.sbomify.com/CVE-2021-28445/): Windows Network File System Remote Code Execution Vulnerability (high 8.1)
- [CVE-2021-28444](https://insights.sbomify.com/CVE-2021-28444/): Windows Hyper-V Security Feature Bypass Vulnerability (medium 5.7)
- [CVE-2021-28443](https://insights.sbomify.com/CVE-2021-28443/): Windows Console Driver Denial of Service Vulnerability (medium 5.5)
- [CVE-2021-28442](https://insights.sbomify.com/CVE-2021-28442/): Windows TCP/IP Information Disclosure Vulnerability (medium 6.5)
- [CVE-2021-28441](https://insights.sbomify.com/CVE-2021-28441/): Windows Hyper-V Information Disclosure Vulnerability (medium 6.5)
- [CVE-2021-28440](https://insights.sbomify.com/CVE-2021-28440/): Windows Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-28439](https://insights.sbomify.com/CVE-2021-28439/): Windows TCP/IP Driver Denial of Service Vulnerability (high 7.5)
- [CVE-2021-28438](https://insights.sbomify.com/CVE-2021-28438/): Windows Console Driver Denial of Service Vulnerability (medium 5.5)
- [CVE-2021-28437](https://insights.sbomify.com/CVE-2021-28437/): Windows Installer Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-28436](https://insights.sbomify.com/CVE-2021-28436/): Windows Speech Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-28435](https://insights.sbomify.com/CVE-2021-28435/): Windows Event Tracing Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-28434](https://insights.sbomify.com/CVE-2021-28434/): Remote Procedure Call Runtime Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-28429](https://insights.sbomify.com/CVE-2021-28429/): Integer overflow in ffmpeg:ffmpeg (medium 5.5)
- [CVE-2021-28428](https://insights.sbomify.com/CVE-2021-28428/): File upload in horizontcms project:horizontcms (critical 9.8)
- [CVE-2021-28427](https://insights.sbomify.com/CVE-2021-28427/): Memory corruption in xnview:xnview (high 7.8)
- [CVE-2021-28424](https://insights.sbomify.com/CVE-2021-28424/): Cross-site scripting in phpgurukul:teachers record management system (medium 5.4)
- [CVE-2021-28423](https://insights.sbomify.com/CVE-2021-28423/): SQL injection in phpgurukul:teachers record management system (high 8.8)
- [CVE-2021-28420](https://insights.sbomify.com/CVE-2021-28420/): Cross-site scripting in seopanel:seo panel (medium 4.8)
- [CVE-2021-28419](https://insights.sbomify.com/CVE-2021-28419/): SQL injection in seopanel:seo panel (high 7.2)
- [CVE-2021-28418](https://insights.sbomify.com/CVE-2021-28418/): Cross-site scripting in seopanel:seo panel (medium 4.8)
- [CVE-2021-28417](https://insights.sbomify.com/CVE-2021-28417/): Cross-site scripting in seopanel:seo panel (medium 4.8)
- [CVE-2021-28411](https://insights.sbomify.com/CVE-2021-28411/): Privilege escalation in ruoyi:ruoyi (critical 9.8)
- [CVE-2021-28399](https://insights.sbomify.com/CVE-2021-28399/): Information disclosure in orangehrm:orangehrm (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/184/