# Vulnerabilities published in 2021 - [CVE-2021-27708](https://insights.sbomify.com/CVE-2021-27708/): Command injection in totolink:a720r firmware (critical 9.8) - [CVE-2021-27707](https://insights.sbomify.com/CVE-2021-27707/): Memory corruption in tenda:g1 firmware (critical 9.8) - [CVE-2021-27706](https://insights.sbomify.com/CVE-2021-27706/): Memory corruption in tenda:g1 firmware (critical 9.8) - [CVE-2021-27705](https://insights.sbomify.com/CVE-2021-27705/): Memory corruption in tenda:g1 firmware (critical 9.8) - [CVE-2021-27704](https://insights.sbomify.com/CVE-2021-27704/): Cross-site request forgery in appspace:appspace (medium 6.5) - [CVE-2021-27703](https://insights.sbomify.com/CVE-2021-27703/): Sercomm Model Etisalat Model S3- AC2100 is affected by Cross Site Scripting (XSS) via the firmware update page. (medium 5.4) - [CVE-2021-27702](https://insights.sbomify.com/CVE-2021-27702/): Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard. (high 7.3) - [CVE-2021-27701](https://insights.sbomify.com/CVE-2021-27701/): SOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery (CSRF) via the Socifi wifi portal. (medium 4.7) - [CVE-2021-27700](https://insights.sbomify.com/CVE-2021-27700/): SOCIFI Socifi Guest wifi as SAAS wifi portal is affected by Insecure Permissions. (high 7.6) - [CVE-2021-27698](https://insights.sbomify.com/CVE-2021-27698/): Memory corruption in riot-os:riot (critical 9.8) - [CVE-2021-27697](https://insights.sbomify.com/CVE-2021-27697/): Memory corruption in riot-os:riot (critical 9.8) - [CVE-2021-27695](https://insights.sbomify.com/CVE-2021-27695/): Cross-site scripting in openmaint:openmaint (medium 6.1) - [CVE-2021-27693](https://insights.sbomify.com/CVE-2021-27693/): Server-side request forgery in publiccms:publiccms (critical 9.8) - [CVE-2021-27692](https://insights.sbomify.com/CVE-2021-27692/): Command injection in tendacn:g1 firmware (critical 9.8) - [CVE-2021-27691](https://insights.sbomify.com/CVE-2021-27691/): Command injection in tendacn:g0 firmware (critical 9.8) - [CVE-2021-27679](https://insights.sbomify.com/CVE-2021-27679/): Cross-site scripting in batflat:batflat (medium 5.4) - [CVE-2021-27678](https://insights.sbomify.com/CVE-2021-27678/): Cross-site scripting in batflat:batflat (medium 5.4) - [CVE-2021-27677](https://insights.sbomify.com/CVE-2021-27677/): Cross-site scripting in batflat:batflat (medium 5.4) - [CVE-2021-27676](https://insights.sbomify.com/CVE-2021-27676/): Cross-site scripting in Centreon (medium 5.4) - [CVE-2021-27673](https://insights.sbomify.com/CVE-2021-27673/): reflected XSS in tribalsystems/zenario (medium 4.8) - [CVE-2021-27672](https://insights.sbomify.com/CVE-2021-27672/): SQL Injection in tribalsystems/zenario (medium 4.9) - [CVE-2021-27671](https://insights.sbomify.com/CVE-2021-27671/): Cross site scripting in comrak (medium 6.1) - [CVE-2021-27670](https://insights.sbomify.com/CVE-2021-27670/): Server-side request forgery in appspace:appspace (critical 9.8) - [CVE-2021-27668](https://insights.sbomify.com/CVE-2021-27668/): Missing authorization in hashicorp:vault (medium 5.3) - [CVE-2021-27665](https://insights.sbomify.com/CVE-2021-27665/): exacqVision Server 32-bit (high 7.5) - [CVE-2021-27664](https://insights.sbomify.com/CVE-2021-27664/): exacqVision Web Service (critical 9.8) - [CVE-2021-27663](https://insights.sbomify.com/CVE-2021-27663/): CEM Systems AC2000 (high 8.2) - [CVE-2021-27662](https://insights.sbomify.com/CVE-2021-27662/): KT-1 Capture-replay (high 8.6) - [CVE-2021-27661](https://insights.sbomify.com/CVE-2021-27661/): Facility Explorer (high 8.8) - [CVE-2021-27660](https://insights.sbomify.com/CVE-2021-27660/): C-CURE 9000 (high 8.8) - [CVE-2021-27659](https://insights.sbomify.com/CVE-2021-27659/): exacqVision Web Service CSS (medium 5.3) - [CVE-2021-27658](https://insights.sbomify.com/CVE-2021-27658/): exacqVision Enterprise Manager CSS (medium 4.3) - [CVE-2021-27657](https://insights.sbomify.com/CVE-2021-27657/): Metasys Improper Privilege Management (high 8.8) - [CVE-2021-27656](https://insights.sbomify.com/CVE-2021-27656/): exacqVision Web Services - Information Exposure (medium 5.3) - [CVE-2021-27654](https://insights.sbomify.com/CVE-2021-27654/): Auth bypass in Pega Infinity (high 8.8) - [CVE-2021-27653](https://insights.sbomify.com/CVE-2021-27653/): Misconfiguration in Pega Infinity (medium 6.6) - [CVE-2021-27651](https://insights.sbomify.com/CVE-2021-27651/): Auth bypass in Pega Infinity (critical 9.8) - [CVE-2021-27649](https://insights.sbomify.com/CVE-2021-27649/): Use after free in DiskStation Manager (DSM) (critical 9.8) - [CVE-2021-27648](https://insights.sbomify.com/CVE-2021-27648/): Privilege escalation in Synology Antivirus Essential (critical 9.0) - [CVE-2021-27647](https://insights.sbomify.com/CVE-2021-27647/): Memory corruption in Synology DiskStation Manager (DSM) (critical 9.8) - [CVE-2021-27646](https://insights.sbomify.com/CVE-2021-27646/): Use after free in Synology DiskStation Manager (DSM) (critical 9.8) - [CVE-2021-27645](https://insights.sbomify.com/CVE-2021-27645/): Memory corruption in debian:debian linux (low 2.5) - [CVE-2021-27644](https://insights.sbomify.com/CVE-2021-27644/): DolphinScheduler mysql jdbc connector parameters deserialize remote code execution (high 8.8) - [CVE-2021-27643](https://insights.sbomify.com/CVE-2021-27643/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27642](https://insights.sbomify.com/CVE-2021-27642/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27641](https://insights.sbomify.com/CVE-2021-27641/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27640](https://insights.sbomify.com/CVE-2021-27640/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27639](https://insights.sbomify.com/CVE-2021-27639/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27638](https://insights.sbomify.com/CVE-2021-27638/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27637](https://insights.sbomify.com/CVE-2021-27637/): Information disclosure in SAP Enable Now (SAP Workforce Performance Builder - Manager) (medium 5.9) - [CVE-2021-27635](https://insights.sbomify.com/CVE-2021-27635/): XML external entity in SAP NetWeaver AS for JAVA (critical 9.0) - [CVE-2021-27634](https://insights.sbomify.com/CVE-2021-27634/): Memory corruption in SAP NetWeaver AS for ABAP (RFC Gateway) (high 7.5) - [CVE-2021-27633](https://insights.sbomify.com/CVE-2021-27633/): Memory corruption in SAP NetWeaver AS for ABAP (RFC Gateway) (high 7.5) - [CVE-2021-27632](https://insights.sbomify.com/CVE-2021-27632/): Null dereference in SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) (high 7.5) - [CVE-2021-27631](https://insights.sbomify.com/CVE-2021-27631/): Null dereference in SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) (high 7.5) - [CVE-2021-27630](https://insights.sbomify.com/CVE-2021-27630/): Null dereference in SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) (high 7.5) - [CVE-2021-27629](https://insights.sbomify.com/CVE-2021-27629/): Denial of service in SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) (high 7.5) - [CVE-2021-27628](https://insights.sbomify.com/CVE-2021-27628/): Memory corruption in SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher) (high 7.5) - [CVE-2021-27627](https://insights.sbomify.com/CVE-2021-27627/): Memory corruption in SAP Internet Graphics Service (medium 5.9) - [CVE-2021-27626](https://insights.sbomify.com/CVE-2021-27626/): Memory corruption in SAP Internet Graphics Service (medium 5.9) - [CVE-2021-27625](https://insights.sbomify.com/CVE-2021-27625/): Memory corruption in SAP Internet Graphics Service (medium 5.9) - [CVE-2021-27624](https://insights.sbomify.com/CVE-2021-27624/): Memory corruption in SAP Internet Graphics Service (medium 5.9) - [CVE-2021-27623](https://insights.sbomify.com/CVE-2021-27623/): Memory corruption in SAP Internet Graphics Service (medium 5.9) - [CVE-2021-27622](https://insights.sbomify.com/CVE-2021-27622/): Memory corruption in SAP Internet Graphics Service (medium 5.9) - [CVE-2021-27621](https://insights.sbomify.com/CVE-2021-27621/): Information disclosure in SAP NetWeaver AS for Java (UserAdmin) (medium 5.5) - [CVE-2021-27620](https://insights.sbomify.com/CVE-2021-27620/): Memory corruption in SAP Internet Graphics Service (medium 5.9) - [CVE-2021-27619](https://insights.sbomify.com/CVE-2021-27619/): Information disclosure in SAP Commerce (Backoffice Search) (medium 6.5) - [CVE-2021-27618](https://insights.sbomify.com/CVE-2021-27618/): File upload in SAP Process Integration (Integration Builder Framework) (medium 4.9) - [CVE-2021-27617](https://insights.sbomify.com/CVE-2021-27617/): Denial of service in SAP Process Integration (Integration Builder Framework) (medium 4.9) - [CVE-2021-27616](https://insights.sbomify.com/CVE-2021-27616/): Information disclosure in SAP Business One, version for SAP HANA (Cookbooks) (high 7.8) - [CVE-2021-27615](https://insights.sbomify.com/CVE-2021-27615/): Misconfiguration in SAP Manufacturing Execution (medium 5.4) - [CVE-2021-27614](https://insights.sbomify.com/CVE-2021-27614/): Code injection in SAP Business One, version for SAP HANA (Cookbooks) (high 7.3) - [CVE-2021-27613](https://insights.sbomify.com/CVE-2021-27613/): Information disclosure in SAP Business One (Cookbooks) (high 7.8) - [CVE-2021-27612](https://insights.sbomify.com/CVE-2021-27612/): Open redirect in SAP GUI for Windows (low 3.4) - [CVE-2021-27611](https://insights.sbomify.com/CVE-2021-27611/): Code injection in SAP NetWeaver AS ABAP (high 8.2) - [CVE-2021-27610](https://insights.sbomify.com/CVE-2021-27610/): Auth bypass in SAP NetWeaver AS ABAP and ABAP Platform (critical 9.0) - [CVE-2021-27609](https://insights.sbomify.com/CVE-2021-27609/): Missing authorization in SAP Focused RUN (medium 4.6) - [CVE-2021-27608](https://insights.sbomify.com/CVE-2021-27608/): Privilege escalation in SAP Setup (high 7.5) - [CVE-2021-27607](https://insights.sbomify.com/CVE-2021-27607/): Null dereference in SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher) (high 7.5) - [CVE-2021-27606](https://insights.sbomify.com/CVE-2021-27606/): Memory corruption in SAP NetWeaver ABAP Server and ABAP Platform (Enqueue Server) (high 7.5) - [CVE-2021-27605](https://insights.sbomify.com/CVE-2021-27605/): Missing authorization in SAP Fiori Apps 2.0 for Travel Management in SAP ERP (medium 4.3) - [CVE-2021-27604](https://insights.sbomify.com/CVE-2021-27604/): XML external entity in SAP Process Integration (Enterprise Service Repository JAVA Mappings) (high 7.7) - [CVE-2021-27603](https://insights.sbomify.com/CVE-2021-27603/): Denial of service in SAP NetWeaver AS for ABAP (medium 6.5) - [CVE-2021-27602](https://insights.sbomify.com/CVE-2021-27602/): Code injection in SAP Commerce (critical 9.9) - [CVE-2021-27601](https://insights.sbomify.com/CVE-2021-27601/): Cross-site scripting in SAP NetWeaver AS for Java (Applications based on HTMLB for Java) (medium 5.4) - [CVE-2021-27600](https://insights.sbomify.com/CVE-2021-27600/): Cross-site scripting in SAP Manufacturing Execution (System Rules) (medium 6.4) - [CVE-2021-27599](https://insights.sbomify.com/CVE-2021-27599/): Information disclosure in SAP Process Integration (Integration Builder Framework) (medium 6.5) - [CVE-2021-27598](https://insights.sbomify.com/CVE-2021-27598/): Missing authorization in SAP NetWeaver AS for JAVA (Customer Usage Provisioning Servlet) (medium 6.5) - [CVE-2021-27597](https://insights.sbomify.com/CVE-2021-27597/): Memory corruption in SAP NetWeaver AS for ABAP (RFC Gateway) (high 7.5) - [CVE-2021-27596](https://insights.sbomify.com/CVE-2021-27596/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27595](https://insights.sbomify.com/CVE-2021-27595/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27594](https://insights.sbomify.com/CVE-2021-27594/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27593](https://insights.sbomify.com/CVE-2021-27593/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27592](https://insights.sbomify.com/CVE-2021-27592/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27591](https://insights.sbomify.com/CVE-2021-27591/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27590](https://insights.sbomify.com/CVE-2021-27590/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27589](https://insights.sbomify.com/CVE-2021-27589/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27588](https://insights.sbomify.com/CVE-2021-27588/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27587](https://insights.sbomify.com/CVE-2021-27587/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) - [CVE-2021-27586](https://insights.sbomify.com/CVE-2021-27586/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/189/