# Vulnerabilities published in 2021


- [CVE-2021-26932](https://insights.sbomify.com/CVE-2021-26932/): Other in debian:debian linux (medium 5.5)
- [CVE-2021-26931](https://insights.sbomify.com/CVE-2021-26931/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2021-26930](https://insights.sbomify.com/CVE-2021-26930/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-26929](https://insights.sbomify.com/CVE-2021-26929/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2021-26928](https://insights.sbomify.com/CVE-2021-26928/): Auth bypass in nic:bird (medium 6.8)
- [CVE-2021-26927](https://insights.sbomify.com/CVE-2021-26927/): Null dereference in jasper (medium 5.5)
- [CVE-2021-26926](https://insights.sbomify.com/CVE-2021-26926/): Memory corruption in jasper (high 7.1)
- [CVE-2021-26925](https://insights.sbomify.com/CVE-2021-26925/): Cross-site scripting in fedoraproject:fedora (medium 5.4)
- [CVE-2021-26924](https://insights.sbomify.com/CVE-2021-26924/): Misconfiguration in argoproj:argo cd (medium 6.1)
- [CVE-2021-26923](https://insights.sbomify.com/CVE-2021-26923/): Information disclosure in argoproj:argo cd (high 7.5)
- [CVE-2021-26921](https://insights.sbomify.com/CVE-2021-26921/): Auth bypass in argoproj:argo cd (medium 6.5)
- [CVE-2021-26920](https://insights.sbomify.com/CVE-2021-26920/): Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (medium 6.5)
- [CVE-2021-26919](https://insights.sbomify.com/CVE-2021-26919/): Apache Druid Authenticated users can execute arbitrary code from malicious MySQL database systems. (high 8.8)
- [CVE-2021-26918](https://insights.sbomify.com/CVE-2021-26918/): File upload in probot:bot (critical 9.8)
- [CVE-2021-26917](https://insights.sbomify.com/CVE-2021-26917/): Path traversal in bitmessage:pybitmessage (medium 5.5)
- [CVE-2021-26916](https://insights.sbomify.com/CVE-2021-26916/): Cross-site scripting in nopcommerce:nopcommerce (medium 6.1)
- [CVE-2021-26915](https://insights.sbomify.com/CVE-2021-26915/): Deserialization in netmotionsoftware:netmotion mobility (high 8.1)
- [CVE-2021-26914](https://insights.sbomify.com/CVE-2021-26914/): Deserialization in netmotionsoftware:netmotion mobility (high 8.1)
- [CVE-2021-26913](https://insights.sbomify.com/CVE-2021-26913/): Deserialization in netmotionsoftware:netmotion mobility (high 8.1)
- [CVE-2021-26912](https://insights.sbomify.com/CVE-2021-26912/): Deserialization in netmotionsoftware:netmotion mobility (high 8.1)
- [CVE-2021-26911](https://insights.sbomify.com/CVE-2021-26911/): Security feature bypass in canarymail:canary mail (high 7.4)
- [CVE-2021-26910](https://insights.sbomify.com/CVE-2021-26910/): Race condition in debian:debian linux (high 7.8)
- [CVE-2021-26909](https://insights.sbomify.com/CVE-2021-26909/): Automox Agent Guessable S3 Bucket Endpoint (low 3.7)
- [CVE-2021-26908](https://insights.sbomify.com/CVE-2021-26908/): Automox Agent Sensitive Log Information Disclosure (low 3.3)
- [CVE-2021-26906](https://insights.sbomify.com/CVE-2021-26906/): Denial of service in digium:asterisk (medium 5.9)
- [CVE-2021-26905](https://insights.sbomify.com/CVE-2021-26905/): Information disclosure in 1password:scim bridge (medium 6.5)
- [CVE-2021-26904](https://insights.sbomify.com/CVE-2021-26904/): SQL injection in isida:retriever (critical 9.8)
- [CVE-2021-26903](https://insights.sbomify.com/CVE-2021-26903/): Cross-site scripting in isida:retriever (medium 6.1)
- [CVE-2021-26902](https://insights.sbomify.com/CVE-2021-26902/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-26901](https://insights.sbomify.com/CVE-2021-26901/): Windows Event Tracing Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26900](https://insights.sbomify.com/CVE-2021-26900/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26899](https://insights.sbomify.com/CVE-2021-26899/): Windows UPnP Device Host Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26898](https://insights.sbomify.com/CVE-2021-26898/): Windows Event Tracing Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26897](https://insights.sbomify.com/CVE-2021-26897/): Windows DNS Server Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-26896](https://insights.sbomify.com/CVE-2021-26896/): Windows DNS Server Denial of Service Vulnerability (high 7.5)
- [CVE-2021-26895](https://insights.sbomify.com/CVE-2021-26895/): Windows DNS Server Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-26894](https://insights.sbomify.com/CVE-2021-26894/): Windows DNS Server Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-26893](https://insights.sbomify.com/CVE-2021-26893/): Windows DNS Server Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-26892](https://insights.sbomify.com/CVE-2021-26892/): Windows Extensible Firmware Interface Security Feature Bypass Vulnerability (medium 6.2)
- [CVE-2021-26891](https://insights.sbomify.com/CVE-2021-26891/): Windows Container Execution Agent Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26890](https://insights.sbomify.com/CVE-2021-26890/): Application Virtualization Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-26889](https://insights.sbomify.com/CVE-2021-26889/): Windows Update Stack Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26887](https://insights.sbomify.com/CVE-2021-26887/): Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26886](https://insights.sbomify.com/CVE-2021-26886/): User Profile Service Denial of Service Vulnerability (medium 6.1)
- [CVE-2021-26885](https://insights.sbomify.com/CVE-2021-26885/): Windows WalletService Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26884](https://insights.sbomify.com/CVE-2021-26884/): Windows Media Photo Codec Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-26882](https://insights.sbomify.com/CVE-2021-26882/): Remote Access API Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26881](https://insights.sbomify.com/CVE-2021-26881/): Microsoft Windows Media Foundation Remote Code Execution Vulnerability (high 7.5)
- [CVE-2021-26880](https://insights.sbomify.com/CVE-2021-26880/): Windows Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26879](https://insights.sbomify.com/CVE-2021-26879/): Windows Network Address Translation (NAT) Denial of Service Vulnerability (high 7.5)
- [CVE-2021-26878](https://insights.sbomify.com/CVE-2021-26878/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26877](https://insights.sbomify.com/CVE-2021-26877/): Windows DNS Server Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2021-26876](https://insights.sbomify.com/CVE-2021-26876/): OpenType Font Parsing Remote Code Execution Vulnerability (high 8.8)
- [CVE-2021-26875](https://insights.sbomify.com/CVE-2021-26875/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26874](https://insights.sbomify.com/CVE-2021-26874/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26873](https://insights.sbomify.com/CVE-2021-26873/): Windows User Profile Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-26872](https://insights.sbomify.com/CVE-2021-26872/): Windows Event Tracing Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26871](https://insights.sbomify.com/CVE-2021-26871/): Windows WalletService Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26870](https://insights.sbomify.com/CVE-2021-26870/): Windows Projected File System Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26869](https://insights.sbomify.com/CVE-2021-26869/): Windows ActiveX Installer Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-26868](https://insights.sbomify.com/CVE-2021-26868/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26867](https://insights.sbomify.com/CVE-2021-26867/): Windows Hyper-V Remote Code Execution Vulnerability (critical 9.9)
- [CVE-2021-26866](https://insights.sbomify.com/CVE-2021-26866/): Windows Update Service Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2021-26865](https://insights.sbomify.com/CVE-2021-26865/): Windows Container Execution Agent Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2021-26864](https://insights.sbomify.com/CVE-2021-26864/): Windows Virtual Registry Provider Elevation of Privilege Vulnerability (high 8.4)
- [CVE-2021-26863](https://insights.sbomify.com/CVE-2021-26863/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-26862](https://insights.sbomify.com/CVE-2021-26862/): Windows Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2021-26861](https://insights.sbomify.com/CVE-2021-26861/): Windows Graphics Component Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-26860](https://insights.sbomify.com/CVE-2021-26860/): Windows App-V Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-26859](https://insights.sbomify.com/CVE-2021-26859/): Microsoft Power BI Information Disclosure Vulnerability (high 7.7)
- [CVE-2021-26858](https://insights.sbomify.com/CVE-2021-26858/): Microsoft Exchange Server Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2021-26857](https://insights.sbomify.com/CVE-2021-26857/): Microsoft Exchange Server Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2021-26855](https://insights.sbomify.com/CVE-2021-26855/): Microsoft Exchange Server Remote Code Execution (critical 9.1, exploited in the wild)
- [CVE-2021-26854](https://insights.sbomify.com/CVE-2021-26854/): Microsoft Exchange Server Remote Code Execution Vulnerability (medium 6.6)
- [CVE-2021-26845](https://insights.sbomify.com/CVE-2021-26845/): eSOMS Report Function Vulnerability (high 7.5)
- [CVE-2021-26844](https://insights.sbomify.com/CVE-2021-26844/): Cross-site scripting in poweradmin:pa server monitor (medium 5.4)
- [CVE-2021-26843](https://insights.sbomify.com/CVE-2021-26843/): Memory corruption in sthttpd project:sthttpd (high 7.5)
- [CVE-2021-26837](https://insights.sbomify.com/CVE-2021-26837/): SQL injection in fortra:delivernow (critical 9.8)
- [CVE-2021-26835](https://insights.sbomify.com/CVE-2021-26835/): Cross-site scripting in zettlr:zettlr (medium 6.1)
- [CVE-2021-26834](https://insights.sbomify.com/CVE-2021-26834/): Cross-site scripting in znote:znote (medium 5.4)
- [CVE-2021-26833](https://insights.sbomify.com/CVE-2021-26833/): Information disclosure in timelybills:timelybills (medium 5.9)
- [CVE-2021-26832](https://insights.sbomify.com/CVE-2021-26832/): Cross-site scripting in priority-software:priority enterprise management system (medium 6.1)
- [CVE-2021-26830](https://insights.sbomify.com/CVE-2021-26830/): SQL Injection in tribalsystems/zenario (critical 9.1)
- [CVE-2021-26829](https://insights.sbomify.com/CVE-2021-26829/): OpenPLC ScadaBR Cross-site Scripting (medium 5.4, exploited in the wild)
- [CVE-2021-26828](https://insights.sbomify.com/CVE-2021-26828/): OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type (high 8.8, exploited in the wild)
- [CVE-2021-26827](https://insights.sbomify.com/CVE-2021-26827/): Memory corruption in tp-link:tl-wr2041\+ firmware (high 7.5)
- [CVE-2021-26826](https://insights.sbomify.com/CVE-2021-26826/): Memory corruption in godotengine:godot engine (high 7.8)
- [CVE-2021-26825](https://insights.sbomify.com/CVE-2021-26825/): Integer overflow in godotengine:godot engine (high 7.8)
- [CVE-2021-26824](https://insights.sbomify.com/CVE-2021-26824/): Auth bypass in dm fingertool project:dm fingertool (high 7.1)
- [CVE-2021-26822](https://insights.sbomify.com/CVE-2021-26822/): SQL injection in phpgurukul:teachers record management system (critical 9.8)
- [CVE-2021-26814](https://insights.sbomify.com/CVE-2021-26814/): Improper Input Validation (RCE) (high 8.8)
- [CVE-2021-26813](https://insights.sbomify.com/CVE-2021-26813/): markdown2 Regular Expression Denial of Service (high 7.5)
- [CVE-2021-26812](https://insights.sbomify.com/CVE-2021-26812/): Cross-site scripting in jitsi:meet (medium 6.1)
- [CVE-2021-26810](https://insights.sbomify.com/CVE-2021-26810/): Command injection in dlink:dir-816 firmware (critical 9.8)
- [CVE-2021-26809](https://insights.sbomify.com/CVE-2021-26809/): File upload in phpgurukul:car rental portal (critical 9.8)
- [CVE-2021-26807](https://insights.sbomify.com/CVE-2021-26807/): Other in gog:galaxy (high 7.8)
- [CVE-2021-26805](https://insights.sbomify.com/CVE-2021-26805/): Memory corruption in tsmuxer project:tsmuxer (medium 5.5)
- [CVE-2021-26804](https://insights.sbomify.com/CVE-2021-26804/): File upload in centreon:centreon web (medium 6.5)
- [CVE-2021-26800](https://insights.sbomify.com/CVE-2021-26800/): Cross-site request forgery in user management system in php stored procedure project:user management system in php stored procedure (medium 6.5)
- [CVE-2021-26799](https://insights.sbomify.com/CVE-2021-26799/): Cross-site scripting in omeka:omeka (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/195/