# Vulnerabilities published in 2021


- [CVE-2021-27450](https://insights.sbomify.com/CVE-2021-27450/): Misconfiguration in MU320E (high 7.8)
- [CVE-2021-27449](https://insights.sbomify.com/CVE-2021-27449/): Mesa Labs AmegaView Command Injection (critical 9.9)
- [CVE-2021-27448](https://insights.sbomify.com/CVE-2021-27448/): Privilege escalation in MU320E (high 7.8)
- [CVE-2021-27447](https://insights.sbomify.com/CVE-2021-27447/): Mesa Labs AmegaView command injection (critical 10.0)
- [CVE-2021-27446](https://insights.sbomify.com/CVE-2021-27446/): Weintek EasyWeb cMT Code Injection (critical 10.0)
- [CVE-2021-27445](https://insights.sbomify.com/CVE-2021-27445/): Mesa Labs AmegaView Improper Privilege Management (high 7.8)
- [CVE-2021-27444](https://insights.sbomify.com/CVE-2021-27444/): Weintek EasyWeb cMT Improper Access Control (critical 9.8)
- [CVE-2021-27442](https://insights.sbomify.com/CVE-2021-27442/): Weintek EasyWeb cMT Cross-site Scripting (critical 9.4)
- [CVE-2021-27440](https://insights.sbomify.com/CVE-2021-27440/): Hardcoded credentials in Reason DR60 (critical 9.8)
- [CVE-2021-27439](https://insights.sbomify.com/CVE-2021-27439/): TencentOS-tiny Integer Overflow or Wraparound (high 7.3)
- [CVE-2021-27438](https://insights.sbomify.com/CVE-2021-27438/): Hardcoded credentials in Reason DR60 (high 8.8)
- [CVE-2021-27437](https://insights.sbomify.com/CVE-2021-27437/): Hardcoded credentials in WISE-PaaS/RMM (critical 9.1)
- [CVE-2021-27436](https://insights.sbomify.com/CVE-2021-27436/): Cross-site scripting in Advantech WebAccess/SCADA (medium 6.1)
- [CVE-2021-27435](https://insights.sbomify.com/CVE-2021-27435/): ARM mbed Integer Overflow or Wraparound (high 7.3)
- [CVE-2021-27434](https://insights.sbomify.com/CVE-2021-27434/): Denial of service in OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5 (high 7.5)
- [CVE-2021-27433](https://insights.sbomify.com/CVE-2021-27433/): ARM mbed-ualloc memory library Integer Overflow or Wraparound (high 7.3)
- [CVE-2021-27432](https://insights.sbomify.com/CVE-2021-27432/): Denial of service in OPC Foundation OPC UA .NET Standard and OPC UA .NET Legacy (high 7.5)
- [CVE-2021-27431](https://insights.sbomify.com/CVE-2021-27431/): ARM CMSIS RTOS2 Integer Overflow or Wraparound (high 7.3)
- [CVE-2021-27430](https://insights.sbomify.com/CVE-2021-27430/): GE UR family hardcoded credentials (high 8.4)
- [CVE-2021-27429](https://insights.sbomify.com/CVE-2021-27429/): Texas Instruments TI-RTOS Integer Overflow or Wraparound (high 7.4)
- [CVE-2021-27428](https://insights.sbomify.com/CVE-2021-27428/): GE UR family Unrestricted Upload of File with Dangerous Type (critical 9.8)
- [CVE-2021-27427](https://insights.sbomify.com/CVE-2021-27427/): RIOT OS Integer Overflow or Wraparound (high 7.3)
- [CVE-2021-27426](https://insights.sbomify.com/CVE-2021-27426/): GE UR family insecure default variable initialization (critical 9.8)
- [CVE-2021-27425](https://insights.sbomify.com/CVE-2021-27425/): Cesanta Software Mongoose-OS Integer Overflow or Wraparound (high 7.3)
- [CVE-2021-27424](https://insights.sbomify.com/CVE-2021-27424/): GE UR family exposure of sensitive information to an unauthorized actor (medium 5.3)
- [CVE-2021-27422](https://insights.sbomify.com/CVE-2021-27422/): GE UR family exposure of sensitive information to an unauthorized actor (high 7.5)
- [CVE-2021-27421](https://insights.sbomify.com/CVE-2021-27421/): NXP MCUXpresso SDK Integer Overflow or Wraparound (high 7.3)
- [CVE-2021-27420](https://insights.sbomify.com/CVE-2021-27420/): GE UR family input validation (medium 5.3)
- [CVE-2021-27419](https://insights.sbomify.com/CVE-2021-27419/): uClibc-ng Integer Overflow or Wraparound (high 7.3)
- [CVE-2021-27418](https://insights.sbomify.com/CVE-2021-27418/): GE UR family input validation (medium 5.3)
- [CVE-2021-27417](https://insights.sbomify.com/CVE-2021-27417/): eCosCentric eCosPro RTOS Integer Overflow or Wraparound (medium 4.6)
- [CVE-2021-27416](https://insights.sbomify.com/CVE-2021-27416/): Cross-site scripting in Hitachi ABB Power Grids Ellipse EAM (medium 5.5)
- [CVE-2021-27414](https://insights.sbomify.com/CVE-2021-27414/): User interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM (medium 5.5)
- [CVE-2021-27413](https://insights.sbomify.com/CVE-2021-27413/): Memory corruption in Omron CX-One (high 7.8)
- [CVE-2021-27412](https://insights.sbomify.com/CVE-2021-27412/): Memory corruption in Delta Electronics DOPSoft (high 7.8)
- [CVE-2021-27411](https://insights.sbomify.com/CVE-2021-27411/): Micrium OS Integer Overflow or Wraparound (medium 6.5)
- [CVE-2021-27410](https://insights.sbomify.com/CVE-2021-27410/): Memory corruption in Welch Allyn medical device management tools (critical 9.8)
- [CVE-2021-27408](https://insights.sbomify.com/CVE-2021-27408/): Memory corruption in Welch Allyn medical device management tools (high 7.5)
- [CVE-2021-27406](https://insights.sbomify.com/CVE-2021-27406/): PerFact OpenVPN-Client (high 8.8)
- [CVE-2021-27405](https://insights.sbomify.com/CVE-2021-27405/): Regular expression Denial of Service in @progfay/scrapbox-parser (high 7.5)
- [CVE-2021-27404](https://insights.sbomify.com/CVE-2021-27404/): Open redirect in asus:askey rtf8115vw firmware (medium 6.1)
- [CVE-2021-27403](https://insights.sbomify.com/CVE-2021-27403/): Cross-site scripting in asus:askey rtf8115vw firmware (medium 6.1)
- [CVE-2021-27402](https://insights.sbomify.com/CVE-2021-27402/): Path traversal in mitel:micollab (medium 6.5)
- [CVE-2021-27401](https://insights.sbomify.com/CVE-2021-27401/): Cross-site scripting in mitel:micollab (medium 6.1)
- [CVE-2021-27400](https://insights.sbomify.com/CVE-2021-27400/): Security feature bypass in hashicorp:vault (high 7.5)
- [CVE-2021-27399](https://insights.sbomify.com/CVE-2021-27399/): Memory corruption in Simcenter Femap 2020.2 (high 7.8)
- [CVE-2021-27398](https://insights.sbomify.com/CVE-2021-27398/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2021-27397](https://insights.sbomify.com/CVE-2021-27397/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2021-27396](https://insights.sbomify.com/CVE-2021-27396/): Memory corruption in Tecnomatix Plant Simulation (high 7.8)
- [CVE-2021-27395](https://insights.sbomify.com/CVE-2021-27395/): Missing authorization in SIMATIC Process Historian 2013 and earlier (high 8.1)
- [CVE-2021-27394](https://insights.sbomify.com/CVE-2021-27394/): Privilege escalation in Mendix Applications using Mendix 7 (high 8.8)
- [CVE-2021-27393](https://insights.sbomify.com/CVE-2021-27393/): Weak cryptography in Nucleus NET (medium 5.3)
- [CVE-2021-27392](https://insights.sbomify.com/CVE-2021-27392/): Hardcoded credentials in Siveillance Video Open Network Bridge (high 8.8)
- [CVE-2021-27391](https://insights.sbomify.com/CVE-2021-27391/): Memory corruption in APOGEE MBC (PPC) (P2 Ethernet) (critical 9.8)
- [CVE-2021-27390](https://insights.sbomify.com/CVE-2021-27390/): Memory corruption in JT2Go (high 7.8)
- [CVE-2021-27389](https://insights.sbomify.com/CVE-2021-27389/): Hardcoded credentials in Opcenter Quality (critical 9.8)
- [CVE-2021-27388](https://insights.sbomify.com/CVE-2021-27388/): Other in SINAMICS Medium Voltage Products, Remote Access (critical 9.8)
- [CVE-2021-27387](https://insights.sbomify.com/CVE-2021-27387/): Memory corruption in Simcenter Femap 2020.2 (high 7.8)
- [CVE-2021-27386](https://insights.sbomify.com/CVE-2021-27386/): Denial of service in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (high 7.5)
- [CVE-2021-27385](https://insights.sbomify.com/CVE-2021-27385/): Denial of service in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (high 7.5)
- [CVE-2021-27384](https://insights.sbomify.com/CVE-2021-27384/): Memory corruption in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (critical 9.8)
- [CVE-2021-27383](https://insights.sbomify.com/CVE-2021-27383/): Denial of service in SIMATIC HMI Comfort Outdoor Panels V15 7\" & 15\" (incl. SIPLUS variants) (high 7.5)
- [CVE-2021-27382](https://insights.sbomify.com/CVE-2021-27382/): Memory corruption in Solid Edge SE2020 (high 7.8)
- [CVE-2021-27381](https://insights.sbomify.com/CVE-2021-27381/): Memory corruption in Solid Edge SE2020 (high 7.8)
- [CVE-2021-27380](https://insights.sbomify.com/CVE-2021-27380/): Memory corruption in Solid Edge SE2020 (high 7.8)
- [CVE-2021-27379](https://insights.sbomify.com/CVE-2021-27379/): Other in debian:debian linux (high 7.8)
- [CVE-2021-27378](https://insights.sbomify.com/CVE-2021-27378/): Incorrect check on buffer length in rand_core (critical 9.8)
- [CVE-2021-27377](https://insights.sbomify.com/CVE-2021-27377/): Use-after-free in yottadb (critical 9.8)
- [CVE-2021-27376](https://insights.sbomify.com/CVE-2021-27376/): nb-connect invalidly assumes the memory layout of std::net::SocketAddr (critical 9.8)
- [CVE-2021-27375](https://insights.sbomify.com/CVE-2021-27375/): Security feature bypass in containous:traefik (medium 5.3)
- [CVE-2021-27374](https://insights.sbomify.com/CVE-2021-27374/): Other in vertigis:weboffice (high 7.5)
- [CVE-2021-27372](https://insights.sbomify.com/CVE-2021-27372/): Information disclosure in realtek:xpon rtl9601d software development kit (critical 9.8)
- [CVE-2021-27371](https://insights.sbomify.com/CVE-2021-27371/): Cross-site scripting in monicahq:monica (medium 5.4)
- [CVE-2021-27370](https://insights.sbomify.com/CVE-2021-27370/): Cross-site scripting in monicahq:monica (medium 5.4)
- [CVE-2021-27369](https://insights.sbomify.com/CVE-2021-27369/): Cross-site scripting in monicahq:monica (medium 5.4)
- [CVE-2021-27368](https://insights.sbomify.com/CVE-2021-27368/): Cross-site scripting in monicahq:monica (medium 5.4)
- [CVE-2021-27367](https://insights.sbomify.com/CVE-2021-27367/): Path traversal in bolt/core (high 7.5)
- [CVE-2021-27365](https://insights.sbomify.com/CVE-2021-27365/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-27364](https://insights.sbomify.com/CVE-2021-27364/): Memory corruption in canonical:ubuntu linux (high 7.1)
- [CVE-2021-27363](https://insights.sbomify.com/CVE-2021-27363/): Information disclosure in debian:debian linux (medium 4.4)
- [CVE-2021-27362](https://insights.sbomify.com/CVE-2021-27362/): Memory corruption in irfanview:wpg (critical 9.8)
- [CVE-2021-27358](https://insights.sbomify.com/CVE-2021-27358/): Denial of service in Grafana (high 7.5)
- [CVE-2021-27357](https://insights.sbomify.com/CVE-2021-27357/): Memory corruption in riot-os:riot (critical 9.8)
- [CVE-2021-27352](https://insights.sbomify.com/CVE-2021-27352/): Open redirect in ilch:ilch cms (medium 5.4)
- [CVE-2021-27351](https://insights.sbomify.com/CVE-2021-27351/): Security feature bypass in telegram:telegram (medium 5.3)
- [CVE-2021-27349](https://insights.sbomify.com/CVE-2021-27349/): Cross-site scripting in algolplus:advanced order export for woocommerce (medium 6.1)
- [CVE-2021-27347](https://insights.sbomify.com/CVE-2021-27347/): Use after free in debian:debian linux (medium 5.5)
- [CVE-2021-27345](https://insights.sbomify.com/CVE-2021-27345/): Null dereference in debian:debian linux (medium 5.5)
- [CVE-2021-27343](https://insights.sbomify.com/CVE-2021-27343/): Memory corruption in serenityos:serenityos (high 7.5)
- [CVE-2021-27342](https://insights.sbomify.com/CVE-2021-27342/): Security feature bypass in dlink:dir-842e firmware (medium 5.9)
- [CVE-2021-27341](https://insights.sbomify.com/CVE-2021-27341/): Path traversal in os4ed:opensis (critical 9.8)
- [CVE-2021-27340](https://insights.sbomify.com/CVE-2021-27340/): Cross-site scripting in os4ed:opensis (medium 6.1)
- [CVE-2021-27338](https://insights.sbomify.com/CVE-2021-27338/): Cross-site scripting in faraday:edge (medium 5.4)
- [CVE-2021-27335](https://insights.sbomify.com/CVE-2021-27335/): Deserialization in kollectapp:kollect (critical 9.8)
- [CVE-2021-27332](https://insights.sbomify.com/CVE-2021-27332/): Cross-site scripting in casap automated enrollment system project:casap automated enrollment system (medium 6.1)
- [CVE-2021-27330](https://insights.sbomify.com/CVE-2021-27330/): Cross-site scripting in triconsole:datepicker calendar (medium 6.1)
- [CVE-2021-27329](https://insights.sbomify.com/CVE-2021-27329/): Server-side request forgery in frendi:frendica (critical 10.0)
- [CVE-2021-27328](https://insights.sbomify.com/CVE-2021-27328/): Path traversal in yeastar:neogate tg400 firmware (medium 6.5)
- [CVE-2021-27320](https://insights.sbomify.com/CVE-2021-27320/): SQL injection in doctor appointment system project:doctor appointment system (high 7.5)
- [CVE-2021-27319](https://insights.sbomify.com/CVE-2021-27319/): SQL injection in doctor appointment system project:doctor appointment system (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/191/