# Vulnerabilities published in 2021


- [CVE-2021-27585](https://insights.sbomify.com/CVE-2021-27585/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-27584](https://insights.sbomify.com/CVE-2021-27584/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 4.3)
- [CVE-2021-27583](https://insights.sbomify.com/CVE-2021-27583/): Information disclosure in rangerstudio:directus (medium 5.3)
- [CVE-2021-27582](https://insights.sbomify.com/CVE-2021-27582/): Autobinding vulnerability in MITREid Connect (critical 9.1)
- [CVE-2021-27581](https://insights.sbomify.com/CVE-2021-27581/): SQL injection in kentico:kentico cms (critical 9.8)
- [CVE-2021-27579](https://insights.sbomify.com/CVE-2021-27579/): Information disclosure in snowsoftware:snow inventory agent (high 7.8)
- [CVE-2021-27578](https://insights.sbomify.com/CVE-2021-27578/): Cross Site Scripting in markdown interpreter (medium 6.1)
- [CVE-2021-27577](https://insights.sbomify.com/CVE-2021-27577/): Incorrect handling of url fragment leads to cache poisoning (high 7.5)
- [CVE-2021-27576](https://insights.sbomify.com/CVE-2021-27576/): Apache OpenMeetings: bandwidth can be overloaded with public web service (high 7.5)
- [CVE-2021-27574](https://insights.sbomify.com/CVE-2021-27574/): Weak cryptography in remotemouse:emote remote mouse (high 8.1)
- [CVE-2021-27573](https://insights.sbomify.com/CVE-2021-27573/): Missing authorization in remotemouse:emote remote mouse (critical 9.8)
- [CVE-2021-27572](https://insights.sbomify.com/CVE-2021-27572/): Auth bypass in remotemouse:emote remote mouse (high 8.1)
- [CVE-2021-27571](https://insights.sbomify.com/CVE-2021-27571/): Information disclosure in remotemouse:emote remote mouse (medium 5.3)
- [CVE-2021-27570](https://insights.sbomify.com/CVE-2021-27570/): Missing authorization in remotemouse:emote remote mouse (medium 5.3)
- [CVE-2021-27569](https://insights.sbomify.com/CVE-2021-27569/): Information disclosure in remotemouse:emote remote mouse (medium 5.3)
- [CVE-2021-27568](https://insights.sbomify.com/CVE-2021-27568/): Improper Check for Unusual or Exceptional Conditions in json-smart (medium 5.9)
- [CVE-2021-27565](https://insights.sbomify.com/CVE-2021-27565/): Denial of service in hcc-embedded:nichestack (high 7.5)
- [CVE-2021-27564](https://insights.sbomify.com/CVE-2021-27564/): Cross-site scripting in appspace:appspace (medium 5.4)
- [CVE-2021-27562](https://insights.sbomify.com/CVE-2021-27562/): Arm Trusted Firmware Out-of-Bounds Write (medium 5.5, exploited in the wild)
- [CVE-2021-27561](https://insights.sbomify.com/CVE-2021-27561/): Yealink Device Management Server-Side Request Forgery (SSRF) (critical 9.8, exploited in the wild)
- [CVE-2021-27559](https://insights.sbomify.com/CVE-2021-27559/): Cross-site scripting in monicahq:monica (medium 5.4)
- [CVE-2021-27558](https://insights.sbomify.com/CVE-2021-27558/): Cross-site scripting in easycorp:zentao (medium 6.1)
- [CVE-2021-27557](https://insights.sbomify.com/CVE-2021-27557/): Cross-site request forgery in easycorp:zentao (medium 4.3)
- [CVE-2021-27556](https://insights.sbomify.com/CVE-2021-27556/): Command injection in easycorp:zentao (high 7.2)
- [CVE-2021-27550](https://insights.sbomify.com/CVE-2021-27550/): Denial of service in polarisoffice:polaris office (medium 5.5)
- [CVE-2021-27549](https://insights.sbomify.com/CVE-2021-27549/): Information disclosure in genymobile:genymotion desktop (medium 5.3)
- [CVE-2021-27548](https://insights.sbomify.com/CVE-2021-27548/): Null dereference in xpdfreader:xpdf (medium 5.5)
- [CVE-2021-27545](https://insights.sbomify.com/CVE-2021-27545/): SQL injection in phpgurukul:beauty parlour management system (medium 6.5)
- [CVE-2021-27544](https://insights.sbomify.com/CVE-2021-27544/): Cross-site scripting in phpgurukul:beauty parlour management system (medium 4.8)
- [CVE-2021-27531](https://insights.sbomify.com/CVE-2021-27531/): Cross-site scripting in dynpg:dynpg (medium 4.8)
- [CVE-2021-27530](https://insights.sbomify.com/CVE-2021-27530/): Cross-site scripting in dynpg:dynpg (medium 4.8)
- [CVE-2021-27529](https://insights.sbomify.com/CVE-2021-27529/): Cross-site scripting in dynpg:dynpg (medium 4.8)
- [CVE-2021-27528](https://insights.sbomify.com/CVE-2021-27528/): Cross-site scripting in dynpg:dynpg (medium 4.8)
- [CVE-2021-27527](https://insights.sbomify.com/CVE-2021-27527/): Cross-site scripting in dynpg:dynpg (medium 4.8)
- [CVE-2021-27526](https://insights.sbomify.com/CVE-2021-27526/): Cross-site scripting in dynpg:dynpg (medium 4.8)
- [CVE-2021-27524](https://insights.sbomify.com/CVE-2021-27524/): Margox Braft-Editor Cross-site Scripting Vulnerability (medium 6.1)
- [CVE-2021-27523](https://insights.sbomify.com/CVE-2021-27523/): Missing authorization in open-falcon:dashboard (critical 9.8)
- [CVE-2021-27522](https://insights.sbomify.com/CVE-2021-27522/): Auth bypass in learnsite project:learnsite (high 8.8)
- [CVE-2021-27520](https://insights.sbomify.com/CVE-2021-27520/): Cross-site scripting in fudforum:fudforum (medium 6.1)
- [CVE-2021-27519](https://insights.sbomify.com/CVE-2021-27519/): Cross-site scripting in fudforum:fudforum (medium 6.1)
- [CVE-2021-27517](https://insights.sbomify.com/CVE-2021-27517/): Cross-site scripting in foxit:phantompdf (medium 6.1)
- [CVE-2021-27516](https://insights.sbomify.com/CVE-2021-27516/): URIjs Hostname spoofing via backslashes in URL (high 7.5)
- [CVE-2021-27515](https://insights.sbomify.com/CVE-2021-27515/): Path traversal in url-parse (medium 5.3)
- [CVE-2021-27514](https://insights.sbomify.com/CVE-2021-27514/): Weak cryptography in eyesofnetwork:eyesofnetwork (critical 9.8)
- [CVE-2021-27513](https://insights.sbomify.com/CVE-2021-27513/): File upload in eyesofnetwork:eyesofnetwork (high 8.8)
- [CVE-2021-27509](https://insights.sbomify.com/CVE-2021-27509/): Missing authorization in visualware:myconnection server (high 7.5)
- [CVE-2021-27506](https://insights.sbomify.com/CVE-2021-27506/): Denial of service in clamav:clamav (medium 5.5)
- [CVE-2021-27505](https://insights.sbomify.com/CVE-2021-27505/): mySCADA myPRO Exposure of Information Through Directory Listing (high 7.5)
- [CVE-2021-27504](https://insights.sbomify.com/CVE-2021-27504/): Texas Instruments FREERTOS Integer Overflow or Wraparound (high 7.4)
- [CVE-2021-27503](https://insights.sbomify.com/CVE-2021-27503/): Hardcoded credentials in Ypsomed mylife Cloud, mylife Mobile Application (medium 4.8)
- [CVE-2021-27502](https://insights.sbomify.com/CVE-2021-27502/): Texas Instruments TI-RTOS Integer Overflow or Wraparound (high 7.4)
- [CVE-2021-27501](https://insights.sbomify.com/CVE-2021-27501/): Philips Vue PACS Improper Adherence to Coding Standards (high 7.5)
- [CVE-2021-27500](https://insights.sbomify.com/CVE-2021-27500/): EIPStackGroup OpENer Ethernet/IP Reachable Assertion (high 7.5)
- [CVE-2021-27499](https://insights.sbomify.com/CVE-2021-27499/): Weak cryptography in Ypsomed mylife Cloud, mylife Mobile Application (medium 5.9)
- [CVE-2021-27498](https://insights.sbomify.com/CVE-2021-27498/): EIPStackGroup OpENer Ethernet/IP Reachable Assertion (high 7.5)
- [CVE-2021-27497](https://insights.sbomify.com/CVE-2021-27497/): Philips Vue PACS Protection Mechanism Failure (medium 6.5)
- [CVE-2021-27496](https://insights.sbomify.com/CVE-2021-27496/): Memory corruption in Datakit Software libraries embedded in Luxion KeyShot software (high 7.8)
- [CVE-2021-27495](https://insights.sbomify.com/CVE-2021-27495/): Information disclosure in Ypsomed mylife Cloud, mylife Mobile Application (high 7.1)
- [CVE-2021-27494](https://insights.sbomify.com/CVE-2021-27494/): Memory corruption in Datakit Software libraries embedded in Luxion KeyShot software (high 7.8)
- [CVE-2021-27493](https://insights.sbomify.com/CVE-2021-27493/): Philips Vue PACS (medium 6.1)
- [CVE-2021-27492](https://insights.sbomify.com/CVE-2021-27492/): XML external entity in Datakit Software libraries embedded in Luxion KeyShot software (medium 5.5)
- [CVE-2021-27491](https://insights.sbomify.com/CVE-2021-27491/): Information disclosure in Ypsomed mylife Cloud, mylife Mobile Application (high 7.5)
- [CVE-2021-27490](https://insights.sbomify.com/CVE-2021-27490/): Memory corruption in Datakit Software libraries embedded in Luxion KeyShot software (high 7.8)
- [CVE-2021-27489](https://insights.sbomify.com/CVE-2021-27489/): File upload in ZOLL Defibrillator Dashboard (high 8.8)
- [CVE-2021-27488](https://insights.sbomify.com/CVE-2021-27488/): Memory corruption in Datakit Software libraries embedded in Luxion KeyShot software (high 7.8)
- [CVE-2021-27487](https://insights.sbomify.com/CVE-2021-27487/): Information disclosure in ZOLL Defibrillator Dashboard (medium 5.5)
- [CVE-2021-27486](https://insights.sbomify.com/CVE-2021-27486/): Integer overflow in FATEK Automation WinProladder (high 7.8)
- [CVE-2021-27485](https://insights.sbomify.com/CVE-2021-27485/): Weak cryptography in ZOLL Defibrillator Dashboard (high 7.5)
- [CVE-2021-27483](https://insights.sbomify.com/CVE-2021-27483/): Privilege escalation in ZOLL Defibrillator Dashboard (high 7.8)
- [CVE-2021-27482](https://insights.sbomify.com/CVE-2021-27482/): EIPStackGroup OpENer Ethernet/IP Out-of-bounds Read (high 7.5)
- [CVE-2021-27481](https://insights.sbomify.com/CVE-2021-27481/): Hardcoded credentials in ZOLL Defibrillator Dashboard (medium 5.5)
- [CVE-2021-27480](https://insights.sbomify.com/CVE-2021-27480/): Memory corruption in Delta Industrial Automation COMMGR (critical 9.8)
- [CVE-2021-27479](https://insights.sbomify.com/CVE-2021-27479/): Cross-site scripting in ZOLL Defibrillator Dashboard (medium 5.4)
- [CVE-2021-27478](https://insights.sbomify.com/CVE-2021-27478/): EIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric Types (high 8.2)
- [CVE-2021-27477](https://insights.sbomify.com/CVE-2021-27477/): Memory corruption in JTEKT Corporation TOYOPUC PLC (high 7.5)
- [CVE-2021-27476](https://insights.sbomify.com/CVE-2021-27476/): Rockwell Automation FactoryTalk AssetCentre OS Command Injection (critical 10.0)
- [CVE-2021-27475](https://insights.sbomify.com/CVE-2021-27475/): Rockwell Automation Connected Components Workbench Deserialization of Untrusted Data (high 8.6)
- [CVE-2021-27474](https://insights.sbomify.com/CVE-2021-27474/): Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous Function (critical 10.0)
- [CVE-2021-27473](https://insights.sbomify.com/CVE-2021-27473/): Rockwell Automation Connected Components Workbench Improper Input Validation (medium 6.1)
- [CVE-2021-27472](https://insights.sbomify.com/CVE-2021-27472/): Rockwell Automation FactoryTalk AssetCentre SQL Injection (critical 10.0)
- [CVE-2021-27471](https://insights.sbomify.com/CVE-2021-27471/): Rockwell Automation Connected Components Workbench Path Traversal (high 7.7)
- [CVE-2021-27470](https://insights.sbomify.com/CVE-2021-27470/): Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data (critical 10.0)
- [CVE-2021-27468](https://insights.sbomify.com/CVE-2021-27468/): Rockwell Automation FactoryTalk AssetCentre SQL Injection (critical 10.0)
- [CVE-2021-27467](https://insights.sbomify.com/CVE-2021-27467/): Other in Emerson Rosemount X-STREAM Gas Analyzer (medium 6.1)
- [CVE-2021-27466](https://insights.sbomify.com/CVE-2021-27466/): Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data (critical 10.0)
- [CVE-2021-27465](https://insights.sbomify.com/CVE-2021-27465/): Cross-site scripting in Emerson Rosemount X-STREAM Gas Analyzer (medium 6.1)
- [CVE-2021-27464](https://insights.sbomify.com/CVE-2021-27464/): Rockwell Automation FactoryTalk AssetCentre SQL Injection (critical 10.0)
- [CVE-2021-27463](https://insights.sbomify.com/CVE-2021-27463/): Information disclosure in Emerson Rosemount X-STREAM Gas Analyzer (medium 5.3)
- [CVE-2021-27462](https://insights.sbomify.com/CVE-2021-27462/): Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data (critical 10.0)
- [CVE-2021-27461](https://insights.sbomify.com/CVE-2021-27461/): Path traversal in Emerson Rosemount X-STREAM Gas Analyzer (high 7.5)
- [CVE-2021-27460](https://insights.sbomify.com/CVE-2021-27460/): Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data (critical 10.0)
- [CVE-2021-27459](https://insights.sbomify.com/CVE-2021-27459/): File upload in Emerson Rosemount X-STREAM Gas Analyzer (critical 9.8)
- [CVE-2021-27458](https://insights.sbomify.com/CVE-2021-27458/): Denial of service in JTEKT Corporation TOYOPUC products (high 7.5)
- [CVE-2021-27457](https://insights.sbomify.com/CVE-2021-27457/): Weak cryptography in Emerson Rosemount X-STREAM Gas Analyzer (high 7.5)
- [CVE-2021-27456](https://insights.sbomify.com/CVE-2021-27456/): Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control (low 2.4)
- [CVE-2021-27455](https://insights.sbomify.com/CVE-2021-27455/): Memory corruption in Delta Electronics DOPSoft (medium 5.5)
- [CVE-2021-27454](https://insights.sbomify.com/CVE-2021-27454/): Privilege escalation in Reason DR60 (high 7.8)
- [CVE-2021-27453](https://insights.sbomify.com/CVE-2021-27453/): Mesa Labs AmegaView authentication bypass (high 7.3)
- [CVE-2021-27452](https://insights.sbomify.com/CVE-2021-27452/): Hardcoded credentials in MU320E (high 7.8)
- [CVE-2021-27451](https://insights.sbomify.com/CVE-2021-27451/): Mesa Labs AmegaView improper authentication (high 7.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/190/