# Vulnerabilities published in 2021


- [CVE-2021-27318](https://insights.sbomify.com/CVE-2021-27318/): Cross-site scripting in doctor appointment system project:doctor appointment system (medium 6.1)
- [CVE-2021-27317](https://insights.sbomify.com/CVE-2021-27317/): Cross-site scripting in doctor appointment system project:doctor appointment system (medium 6.1)
- [CVE-2021-27316](https://insights.sbomify.com/CVE-2021-27316/): SQL injection in doctor appointment system project:doctor appointment system (high 7.5)
- [CVE-2021-27315](https://insights.sbomify.com/CVE-2021-27315/): SQL injection in doctor appointment system project:doctor appointment system (high 7.5)
- [CVE-2021-27314](https://insights.sbomify.com/CVE-2021-27314/): SQL injection in doctor appointment system project:doctor appointment system (critical 9.8)
- [CVE-2021-27312](https://insights.sbomify.com/CVE-2021-27312/): Gleez Cms Server Side Request Forgery (SSRF) vulnerability (critical 9.4)
- [CVE-2021-27310](https://insights.sbomify.com/CVE-2021-27310/): Cross-site scripting in csphere:clansphere (medium 6.1)
- [CVE-2021-27309](https://insights.sbomify.com/CVE-2021-27309/): Cross-site scripting in csphere:clansphere (medium 6.1)
- [CVE-2021-27308](https://insights.sbomify.com/CVE-2021-27308/): Cross-site scripting in 4homepages:4images (medium 4.8)
- [CVE-2021-27306](https://insights.sbomify.com/CVE-2021-27306/): Auth bypass in konghq:kong gateway (high 7.5)
- [CVE-2021-27293](https://insights.sbomify.com/CVE-2021-27293/): Incorrect Regular Expression in RestSharp (high 7.5)
- [CVE-2021-27292](https://insights.sbomify.com/CVE-2021-27292/): Regular Expression Denial of Service (ReDoS) in ua-parser-js (high 7.5)
- [CVE-2021-27291](https://insights.sbomify.com/CVE-2021-27291/): Pygments vulnerable to Regular Expression Denial of Service (ReDoS) (high 7.5)
- [CVE-2021-27290](https://insights.sbomify.com/CVE-2021-27290/): Regular Expression Denial of Service (ReDoS) (high 7.5)
- [CVE-2021-27289](https://insights.sbomify.com/CVE-2021-27289/): A replay attack vulnerability was discovered in a Zigbee smart home kit manufactured by Ksix (Zigbee Gateway Module = v1.0.3, Door Sensor = (critical 9.1)
- [CVE-2021-27288](https://insights.sbomify.com/CVE-2021-27288/): Cross-site scripting in x2engine:x2crm (medium 6.1)
- [CVE-2021-27285](https://insights.sbomify.com/CVE-2021-27285/): Privilege escalation in inspur:clusterengine (high 8.4)
- [CVE-2021-27280](https://insights.sbomify.com/CVE-2021-27280/): Command injection in mblog project:mblog (high 7.8)
- [CVE-2021-27279](https://insights.sbomify.com/CVE-2021-27279/): Cross-site scripting in mybb:mybb (medium 5.4)
- [CVE-2021-27278](https://insights.sbomify.com/CVE-2021-27278/): Path traversal in Desktop (high 8.2)
- [CVE-2021-27277](https://insights.sbomify.com/CVE-2021-27277/): Deserialization in Orion Virtual Infrastructure Monitor (high 7.8)
- [CVE-2021-27276](https://insights.sbomify.com/CVE-2021-27276/): Path traversal in ProSAFE Network Management System (high 7.1)
- [CVE-2021-27275](https://insights.sbomify.com/CVE-2021-27275/): Path traversal in ProSAFE Network Management System (high 8.3)
- [CVE-2021-27274](https://insights.sbomify.com/CVE-2021-27274/): File upload in ProSAFE Network Management System (critical 9.8)
- [CVE-2021-27273](https://insights.sbomify.com/CVE-2021-27273/): Command injection in ProSAFE Network Management System (high 8.8)
- [CVE-2021-27272](https://insights.sbomify.com/CVE-2021-27272/): Path traversal in ProSAFE Network Management System (high 7.1)
- [CVE-2021-27271](https://insights.sbomify.com/CVE-2021-27271/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2021-27270](https://insights.sbomify.com/CVE-2021-27270/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2021-27269](https://insights.sbomify.com/CVE-2021-27269/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2021-27268](https://insights.sbomify.com/CVE-2021-27268/): Use after free in PhantomPDF (high 7.8)
- [CVE-2021-27267](https://insights.sbomify.com/CVE-2021-27267/): Use after free in PhantomPDF (high 7.8)
- [CVE-2021-27266](https://insights.sbomify.com/CVE-2021-27266/): Memory corruption in PhantomPDF (low 3.3)
- [CVE-2021-27265](https://insights.sbomify.com/CVE-2021-27265/): Memory corruption in PhantomPDF (low 3.3)
- [CVE-2021-27264](https://insights.sbomify.com/CVE-2021-27264/): Memory corruption in PhantomPDF (low 3.3)
- [CVE-2021-27263](https://insights.sbomify.com/CVE-2021-27263/): Memory corruption in PhantomPDF (low 3.3)
- [CVE-2021-27262](https://insights.sbomify.com/CVE-2021-27262/): Memory corruption in PhantomPDF (low 3.3)
- [CVE-2021-27261](https://insights.sbomify.com/CVE-2021-27261/): Memory corruption in PhantomPDF (high 7.8)
- [CVE-2021-27260](https://insights.sbomify.com/CVE-2021-27260/): Memory corruption in Desktop (low 3.2)
- [CVE-2021-27259](https://insights.sbomify.com/CVE-2021-27259/): Integer overflow in Desktop (high 7.8)
- [CVE-2021-27258](https://insights.sbomify.com/CVE-2021-27258/): Privilege escalation in Orion Platform (critical 9.8)
- [CVE-2021-27257](https://insights.sbomify.com/CVE-2021-27257/): Security feature bypass in R7800 (medium 6.5)
- [CVE-2021-27256](https://insights.sbomify.com/CVE-2021-27256/): Command injection in R7800 (high 8.8)
- [CVE-2021-27255](https://insights.sbomify.com/CVE-2021-27255/): Missing authorization in R7800 (medium 6.3)
- [CVE-2021-27254](https://insights.sbomify.com/CVE-2021-27254/): Hardcoded credentials in R7800 (medium 6.3)
- [CVE-2021-27253](https://insights.sbomify.com/CVE-2021-27253/): Command injection in R7800 (high 8.8)
- [CVE-2021-27252](https://insights.sbomify.com/CVE-2021-27252/): Command injection in R7800 (high 8.8)
- [CVE-2021-27251](https://insights.sbomify.com/CVE-2021-27251/): Weak cryptography in R7800 (high 8.8)
- [CVE-2021-27250](https://insights.sbomify.com/CVE-2021-27250/): Path traversal in DAP-2020 (medium 6.5)
- [CVE-2021-27249](https://insights.sbomify.com/CVE-2021-27249/): Command injection in DAP-2020 (high 8.8)
- [CVE-2021-27248](https://insights.sbomify.com/CVE-2021-27248/): Memory corruption in DAP-2020 (high 8.8)
- [CVE-2021-27247](https://insights.sbomify.com/CVE-2021-27247/): Memory corruption in WeChat (medium 6.5)
- [CVE-2021-27246](https://insights.sbomify.com/CVE-2021-27246/): Memory corruption in AC1750 (high 8.0)
- [CVE-2021-27245](https://insights.sbomify.com/CVE-2021-27245/): Security feature bypass in Archer A7 (high 8.1)
- [CVE-2021-27244](https://insights.sbomify.com/CVE-2021-27244/): Memory corruption in Desktop (medium 6.5)
- [CVE-2021-27243](https://insights.sbomify.com/CVE-2021-27243/): Integer overflow in Desktop (high 8.8)
- [CVE-2021-27242](https://insights.sbomify.com/CVE-2021-27242/): Memory corruption in Desktop (high 8.8)
- [CVE-2021-27241](https://insights.sbomify.com/CVE-2021-27241/): Path traversal in Premium Security (medium 6.1)
- [CVE-2021-27240](https://insights.sbomify.com/CVE-2021-27240/): Deserialization in Patch Manager (high 7.8)
- [CVE-2021-27239](https://insights.sbomify.com/CVE-2021-27239/): Memory corruption in Multiple Routers (high 8.8)
- [CVE-2021-27237](https://insights.sbomify.com/CVE-2021-27237/): Cross-site scripting in blackcat-cms:blackcat cms (medium 4.8)
- [CVE-2021-27236](https://insights.sbomify.com/CVE-2021-27236/): Path traversal in mutare:voice (critical 9.8)
- [CVE-2021-27235](https://insights.sbomify.com/CVE-2021-27235/): Missing authorization in mutare:voice (medium 4.9)
- [CVE-2021-27234](https://insights.sbomify.com/CVE-2021-27234/): SQL injection in mutare:voice (critical 9.8)
- [CVE-2021-27233](https://insights.sbomify.com/CVE-2021-27233/): Information disclosure in mutare:voice (medium 4.9)
- [CVE-2021-27232](https://insights.sbomify.com/CVE-2021-27232/): Memory corruption in pelco:digital sentry server (high 8.8)
- [CVE-2021-27231](https://insights.sbomify.com/CVE-2021-27231/): Missing authorization in hestiacp:control panel (medium 5.4)
- [CVE-2021-27230](https://insights.sbomify.com/CVE-2021-27230/): Code injection in expressionengine:expressionengine (high 8.8)
- [CVE-2021-27229](https://insights.sbomify.com/CVE-2021-27229/): Code injection in debian:debian linux (high 8.8)
- [CVE-2021-27228](https://insights.sbomify.com/CVE-2021-27228/): Auth bypass in shinobi:shinobi pro (critical 9.8)
- [CVE-2021-27225](https://insights.sbomify.com/CVE-2021-27225/): Missing authorization in dataiku:data science studio (medium 5.4)
- [CVE-2021-27224](https://insights.sbomify.com/CVE-2021-27224/): Memory corruption in irfanview:wpg (high 7.5)
- [CVE-2021-27223](https://insights.sbomify.com/CVE-2021-27223/): Denial of service in Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security (medium 5.5)
- [CVE-2021-27222](https://insights.sbomify.com/CVE-2021-27222/): Cross-site scripting in obss:time in status (medium 5.4)
- [CVE-2021-27221](https://insights.sbomify.com/CVE-2021-27221/): Path traversal in mikrotik:routeros (high 8.1)
- [CVE-2021-27220](https://insights.sbomify.com/CVE-2021-27220/): Information disclosure in paessler:prtg network monitor (medium 5.3)
- [CVE-2021-27219](https://insights.sbomify.com/CVE-2021-27219/): Integer overflow in broadcom:brocade fabric operating system firmware (high 7.5)
- [CVE-2021-27218](https://insights.sbomify.com/CVE-2021-27218/): Integer overflow in broadcom:brocade fabric operating system firmware (high 7.5)
- [CVE-2021-27217](https://insights.sbomify.com/CVE-2021-27217/): Memory corruption in yubico:yubihsm-shell (medium 4.4)
- [CVE-2021-27216](https://insights.sbomify.com/CVE-2021-27216/): Race condition in exim:exim (medium 6.3)
- [CVE-2021-27215](https://insights.sbomify.com/CVE-2021-27215/): Auth bypass in genua:genuagate (critical 9.8)
- [CVE-2021-27214](https://insights.sbomify.com/CVE-2021-27214/): Server-side request forgery in zohocorp:manageengine adselfservice plus (medium 6.1)
- [CVE-2021-27213](https://insights.sbomify.com/CVE-2021-27213/): Deserialization in pystemon project:pystemon (critical 9.8)
- [CVE-2021-27212](https://insights.sbomify.com/CVE-2021-27212/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2021-27211](https://insights.sbomify.com/CVE-2021-27211/): Weak cryptography in steghide project:steghide (high 7.5)
- [CVE-2021-27210](https://insights.sbomify.com/CVE-2021-27210/): Information disclosure in tp-link:archer c5v firmware (medium 6.5)
- [CVE-2021-27209](https://insights.sbomify.com/CVE-2021-27209/): Weak cryptography in tp-link:archer c5v firmware (high 7.1)
- [CVE-2021-27208](https://insights.sbomify.com/CVE-2021-27208/): Memory corruption in xilinx:zynq-7000 firmware (medium 6.8)
- [CVE-2021-27205](https://insights.sbomify.com/CVE-2021-27205/): Information disclosure in telegram:telegram (medium 5.5)
- [CVE-2021-27204](https://insights.sbomify.com/CVE-2021-27204/): Information disclosure in telegram:telegram (medium 5.5)
- [CVE-2021-27203](https://insights.sbomify.com/CVE-2021-27203/): Null dereference in dekart:private disk (medium 5.5)
- [CVE-2021-27201](https://insights.sbomify.com/CVE-2021-27201/): Command injection in endian:firewall community (high 8.8)
- [CVE-2021-27200](https://insights.sbomify.com/CVE-2021-27200/): Weak cryptography in wowonder:wowonder (critical 9.8)
- [CVE-2021-27198](https://insights.sbomify.com/CVE-2021-27198/): File upload in visualware:myconnection server (critical 9.8)
- [CVE-2021-27197](https://insights.sbomify.com/CVE-2021-27197/): Other in pelco:digital sentry server (high 8.1)
- [CVE-2021-27196](https://insights.sbomify.com/CVE-2021-27196/): Specially Crafted IEC 61850 Protocol Sequence Vulnerability (high 7.5)
- [CVE-2021-27195](https://insights.sbomify.com/CVE-2021-27195/): Auth bypass in netop:vision pro (medium 5.9)
- [CVE-2021-27194](https://insights.sbomify.com/CVE-2021-27194/): Information disclosure in netop:vision pro (high 8.8)
- [CVE-2021-27193](https://insights.sbomify.com/CVE-2021-27193/): Misconfiguration in netop:vision pro (critical 9.8)
- [CVE-2021-27192](https://insights.sbomify.com/CVE-2021-27192/): Privilege escalation in netop:vision pro (high 7.8)
- [CVE-2021-27191](https://insights.sbomify.com/CVE-2021-27191/): Denial of Service in get-ip-range (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/192/