# Vulnerabilities published in 2021 - [CVE-2021-27190](https://insights.sbomify.com/CVE-2021-27190/): Cross-site scripting in peel:peel shopping (medium 5.4) - [CVE-2021-27189](https://insights.sbomify.com/CVE-2021-27189/): Security feature bypass in cira:canadian shield (medium 5.9) - [CVE-2021-27188](https://insights.sbomify.com/CVE-2021-27188/): Denial of service in xn--b1agzlht:fx aggregator terminal client (high 7.5) - [CVE-2021-27187](https://insights.sbomify.com/CVE-2021-27187/): Information disclosure in xn--b1agzlht:fx aggregator terminal client (high 7.5) - [CVE-2021-27186](https://insights.sbomify.com/CVE-2021-27186/): Null dereference in treasuredata:fluent bit (high 7.5) - [CVE-2021-27185](https://insights.sbomify.com/CVE-2021-27185/): Command injection in samba-client (critical 9.8) - [CVE-2021-27184](https://insights.sbomify.com/CVE-2021-27184/): XML external entity in pelco:digital sentry server (high 7.5) - [CVE-2021-27183](https://insights.sbomify.com/CVE-2021-27183/): Path traversal in altn:mdaemon (high 7.2) - [CVE-2021-27182](https://insights.sbomify.com/CVE-2021-27182/): Other in altn:mdaemon (high 8.8) - [CVE-2021-27181](https://insights.sbomify.com/CVE-2021-27181/): Cross-site request forgery in altn:mdaemon (high 8.8) - [CVE-2021-27180](https://insights.sbomify.com/CVE-2021-27180/): Cross-site scripting in altn:mdaemon (medium 6.1) - [CVE-2021-27179](https://insights.sbomify.com/CVE-2021-27179/): Denial of service in fiberhome:hg6245d firmware (high 7.5) - [CVE-2021-27178](https://insights.sbomify.com/CVE-2021-27178/): Information disclosure in fiberhome:hg6245d firmware (high 7.5) - [CVE-2021-27177](https://insights.sbomify.com/CVE-2021-27177/): Auth bypass in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27176](https://insights.sbomify.com/CVE-2021-27176/): Information disclosure in fiberhome:hg6245d firmware (high 7.5) - [CVE-2021-27175](https://insights.sbomify.com/CVE-2021-27175/): Information disclosure in fiberhome:hg6245d firmware (high 7.5) - [CVE-2021-27174](https://insights.sbomify.com/CVE-2021-27174/): Information disclosure in fiberhome:hg6245d firmware (high 7.5) - [CVE-2021-27173](https://insights.sbomify.com/CVE-2021-27173/): Hardcoded credentials in fiberhome:hg6245d firmware (high 7.5) - [CVE-2021-27172](https://insights.sbomify.com/CVE-2021-27172/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27171](https://insights.sbomify.com/CVE-2021-27171/): Command injection in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27170](https://insights.sbomify.com/CVE-2021-27170/): Misconfiguration in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27169](https://insights.sbomify.com/CVE-2021-27169/): Hardcoded credentials in fiberhome:an5506-04-fa firmware (critical 9.8) - [CVE-2021-27168](https://insights.sbomify.com/CVE-2021-27168/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27167](https://insights.sbomify.com/CVE-2021-27167/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27166](https://insights.sbomify.com/CVE-2021-27166/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27165](https://insights.sbomify.com/CVE-2021-27165/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27164](https://insights.sbomify.com/CVE-2021-27164/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27163](https://insights.sbomify.com/CVE-2021-27163/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27162](https://insights.sbomify.com/CVE-2021-27162/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27161](https://insights.sbomify.com/CVE-2021-27161/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27160](https://insights.sbomify.com/CVE-2021-27160/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27159](https://insights.sbomify.com/CVE-2021-27159/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27158](https://insights.sbomify.com/CVE-2021-27158/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27157](https://insights.sbomify.com/CVE-2021-27157/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27156](https://insights.sbomify.com/CVE-2021-27156/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27155](https://insights.sbomify.com/CVE-2021-27155/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27154](https://insights.sbomify.com/CVE-2021-27154/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27153](https://insights.sbomify.com/CVE-2021-27153/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27152](https://insights.sbomify.com/CVE-2021-27152/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27151](https://insights.sbomify.com/CVE-2021-27151/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27150](https://insights.sbomify.com/CVE-2021-27150/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27149](https://insights.sbomify.com/CVE-2021-27149/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27148](https://insights.sbomify.com/CVE-2021-27148/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27147](https://insights.sbomify.com/CVE-2021-27147/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27146](https://insights.sbomify.com/CVE-2021-27146/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27145](https://insights.sbomify.com/CVE-2021-27145/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27144](https://insights.sbomify.com/CVE-2021-27144/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27143](https://insights.sbomify.com/CVE-2021-27143/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27142](https://insights.sbomify.com/CVE-2021-27142/): Hardcoded credentials in fiberhome:hg6245d firmware (high 7.5) - [CVE-2021-27141](https://insights.sbomify.com/CVE-2021-27141/): Hardcoded credentials in fiberhome:hg6245d firmware (critical 9.8) - [CVE-2021-27140](https://insights.sbomify.com/CVE-2021-27140/): Information disclosure in fiberhome:hg6245d firmware (high 7.5) - [CVE-2021-27139](https://insights.sbomify.com/CVE-2021-27139/): Information disclosure in fiberhome:hg6245d firmware (high 7.5) - [CVE-2021-27138](https://insights.sbomify.com/CVE-2021-27138/): Security feature bypass in denx:u-boot (high 7.8) - [CVE-2021-27137](https://insights.sbomify.com/CVE-2021-27137/): DD-WRT Stack-Based Buffer Overflow (high 8.1, exploited in the wild) - [CVE-2021-27135](https://insights.sbomify.com/CVE-2021-27135/): Memory corruption in debian:debian linux (critical 9.8) - [CVE-2021-27132](https://insights.sbomify.com/CVE-2021-27132/): Other in sercomm:agcombo vd625 firmware (critical 9.8) - [CVE-2021-27131](https://insights.sbomify.com/CVE-2021-27131/): Moodle vulnerable to stored Cross-site Scripting (medium 5.4) - [CVE-2021-27130](https://insights.sbomify.com/CVE-2021-27130/): SQL injection in janobe:online reviewer system (critical 9.8) - [CVE-2021-27129](https://insights.sbomify.com/CVE-2021-27129/): Cross-site scripting in casap automated enrollment system project:casap automated enrollment system (medium 5.4) - [CVE-2021-27124](https://insights.sbomify.com/CVE-2021-27124/): SQL injection in doctor appointment system project:doctor appointment system (medium 6.5) - [CVE-2021-27117](https://insights.sbomify.com/CVE-2021-27117/): Privilege escalation in beego (high 7.8) - [CVE-2021-27116](https://insights.sbomify.com/CVE-2021-27116/): Privilege escalation in beego (high 7.8) - [CVE-2021-27114](https://insights.sbomify.com/CVE-2021-27114/): Memory corruption in dlink:dir-816 firmware (critical 9.8) - [CVE-2021-27113](https://insights.sbomify.com/CVE-2021-27113/): Command injection in dlink:dir-816 firmware (critical 9.8) - [CVE-2021-27112](https://insights.sbomify.com/CVE-2021-27112/): Code injection in lightcms project:lightcms (critical 9.8) - [CVE-2021-27104](https://insights.sbomify.com/CVE-2021-27104/): Accellion FTA OS Command Injection (critical 9.8, exploited in the wild) - [CVE-2021-27103](https://insights.sbomify.com/CVE-2021-27103/): Accellion FTA Server-Side Request Forgery (SSRF) (critical 9.8, exploited in the wild) - [CVE-2021-27102](https://insights.sbomify.com/CVE-2021-27102/): Accellion FTA OS Command Injection (high 7.8, exploited in the wild) - [CVE-2021-27101](https://insights.sbomify.com/CVE-2021-27101/): Accellion FTA SQL Injection (critical 9.8, exploited in the wild) - [CVE-2021-27099](https://insights.sbomify.com/CVE-2021-27099/): Security feature bypass in cncf:spire (medium 6.8) - [CVE-2021-27098](https://insights.sbomify.com/CVE-2021-27098/): Legacy Node API Allows Impersonation in github.com/spiffe/spire/pkg/server/endpoints/node (high 8.1) - [CVE-2021-27097](https://insights.sbomify.com/CVE-2021-27097/): Security feature bypass in denx:u-boot (high 7.8) - [CVE-2021-27096](https://insights.sbomify.com/CVE-2021-27096/): NTFS Elevation of Privilege Vulnerability (high 7.8) - [CVE-2021-27095](https://insights.sbomify.com/CVE-2021-27095/): Windows Media Video Decoder Remote Code Execution Vulnerability (high 7.8) - [CVE-2021-27094](https://insights.sbomify.com/CVE-2021-27094/): Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability (medium 4.4) - [CVE-2021-27093](https://insights.sbomify.com/CVE-2021-27093/): Windows Kernel Information Disclosure Vulnerability (medium 5.5) - [CVE-2021-27092](https://insights.sbomify.com/CVE-2021-27092/): Azure AD Web Sign-in Security Feature Bypass Vulnerability (medium 6.8) - [CVE-2021-27091](https://insights.sbomify.com/CVE-2021-27091/): RPC Endpoint Mapper Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2021-27090](https://insights.sbomify.com/CVE-2021-27090/): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (high 7.8) - [CVE-2021-27089](https://insights.sbomify.com/CVE-2021-27089/): Microsoft Internet Messaging API Remote Code Execution Vulnerability (high 7.8) - [CVE-2021-27088](https://insights.sbomify.com/CVE-2021-27088/): Windows Event Tracing Elevation of Privilege Vulnerability (high 7.8) - [CVE-2021-27086](https://insights.sbomify.com/CVE-2021-27086/): Windows Services and Controller App Elevation of Privilege Vulnerability (high 7.8) - [CVE-2021-27085](https://insights.sbomify.com/CVE-2021-27085/): Microsoft Internet Explorer Remote Code Execution (high 8.8, exploited in the wild) - [CVE-2021-27084](https://insights.sbomify.com/CVE-2021-27084/): Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability (high 7.8) - [CVE-2021-27083](https://insights.sbomify.com/CVE-2021-27083/): Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability (high 7.8) - [CVE-2021-27082](https://insights.sbomify.com/CVE-2021-27082/): Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability (high 7.8) - [CVE-2021-27081](https://insights.sbomify.com/CVE-2021-27081/): Visual Studio Code ESLint Extension Remote Code Execution Vulnerability (high 7.8) - [CVE-2021-27080](https://insights.sbomify.com/CVE-2021-27080/): Azure Sphere Unsigned Code Execution Vulnerability (critical 9.3) - [CVE-2021-27079](https://insights.sbomify.com/CVE-2021-27079/): Windows Media Photo Codec Information Disclosure Vulnerability (medium 5.7) - [CVE-2021-27078](https://insights.sbomify.com/CVE-2021-27078/): Microsoft Exchange Server Remote Code Execution Vulnerability (critical 9.1) - [CVE-2021-27077](https://insights.sbomify.com/CVE-2021-27077/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8) - [CVE-2021-27076](https://insights.sbomify.com/CVE-2021-27076/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8) - [CVE-2021-27075](https://insights.sbomify.com/CVE-2021-27075/): Azure Virtual Machine Information Disclosure Vulnerability (medium 6.8) - [CVE-2021-27074](https://insights.sbomify.com/CVE-2021-27074/): Azure Sphere Unsigned Code Execution Vulnerability (medium 6.2) - [CVE-2021-27072](https://insights.sbomify.com/CVE-2021-27072/): Win32k Elevation of Privilege Vulnerability (high 7.0) - [CVE-2021-27070](https://insights.sbomify.com/CVE-2021-27070/): Windows 10 Update Assistant Elevation of Privilege Vulnerability (high 7.3) - [CVE-2021-27068](https://insights.sbomify.com/CVE-2021-27068/): Visual Studio Remote Code Execution Vulnerability (high 8.8) - [CVE-2021-27067](https://insights.sbomify.com/CVE-2021-27067/): Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability (medium 6.5) - [CVE-2021-27066](https://insights.sbomify.com/CVE-2021-27066/): Windows Admin Center Security Feature Bypass Vulnerability (medium 4.3) - [CVE-2021-27065](https://insights.sbomify.com/CVE-2021-27065/): Microsoft Exchange Server Remote Code Execution (high 7.8, exploited in the wild) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/193/