# Vulnerabilities published in 2021 - [CVE-2021-25398](https://insights.sbomify.com/CVE-2021-25398/): Missing authorization in Bixby Voice (low 3.3) - [CVE-2021-25397](https://insights.sbomify.com/CVE-2021-25397/): Missing authorization in Samsung Mobile Devices (medium 6.8) - [CVE-2021-25396](https://insights.sbomify.com/CVE-2021-25396/): Memory corruption in Samsung Mobile Devices (medium 6.7) - [CVE-2021-25395](https://insights.sbomify.com/CVE-2021-25395/): Samsung Mobile Devices Race Condition (medium 6.4, exploited in the wild) - [CVE-2021-25394](https://insights.sbomify.com/CVE-2021-25394/): Samsung Mobile Devices Race Condition (medium 6.4, exploited in the wild) - [CVE-2021-25393](https://insights.sbomify.com/CVE-2021-25393/): Privilege escalation in Samsung Mobile Devices (medium 6.6) - [CVE-2021-25392](https://insights.sbomify.com/CVE-2021-25392/): Information disclosure in Samsung Mobile Devices (medium 4.0) - [CVE-2021-25391](https://insights.sbomify.com/CVE-2021-25391/): Privilege escalation in Samsung Mobile Devices (medium 4.0) - [CVE-2021-25390](https://insights.sbomify.com/CVE-2021-25390/): Privilege escalation in Samsung Mobile Devices (medium 4.0) - [CVE-2021-25389](https://insights.sbomify.com/CVE-2021-25389/): Auth bypass in Samsung Mobile Devices (low 2.3) - [CVE-2021-25388](https://insights.sbomify.com/CVE-2021-25388/): Missing authorization in Samsung Mobile Devices (high 7.1) - [CVE-2021-25387](https://insights.sbomify.com/CVE-2021-25387/): Memory corruption in Samsung Mobile Devices (critical 9.0) - [CVE-2021-25386](https://insights.sbomify.com/CVE-2021-25386/): Memory corruption in Samsung Mobile Devices (critical 9.0) - [CVE-2021-25385](https://insights.sbomify.com/CVE-2021-25385/): Memory corruption in Samsung Mobile Devices (critical 9.0) - [CVE-2021-25384](https://insights.sbomify.com/CVE-2021-25384/): Memory corruption in Samsung Mobile Devices (critical 9.0) - [CVE-2021-25383](https://insights.sbomify.com/CVE-2021-25383/): Memory corruption in Samsung Mobile Devices (critical 9.0) - [CVE-2021-25382](https://insights.sbomify.com/CVE-2021-25382/): Missing authorization in Samsung Mobile Devices (medium 6.1) - [CVE-2021-25381](https://insights.sbomify.com/CVE-2021-25381/): Missing authorization in Samsung Account (medium 5.5) - [CVE-2021-25380](https://insights.sbomify.com/CVE-2021-25380/): Security feature bypass in Bixby (medium 5.8) - [CVE-2021-25379](https://insights.sbomify.com/CVE-2021-25379/): Privilege escalation in Gallery (medium 4.0) - [CVE-2021-25378](https://insights.sbomify.com/CVE-2021-25378/): Denial of service in SmartThings (medium 4.3) - [CVE-2021-25377](https://insights.sbomify.com/CVE-2021-25377/): Privilege escalation in Samsung Experience Service (low 3.3) - [CVE-2021-25376](https://insights.sbomify.com/CVE-2021-25376/): Information disclosure in Samsung Email (low 3.1) - [CVE-2021-25375](https://insights.sbomify.com/CVE-2021-25375/): Information disclosure in Samsung Email (medium 6.5) - [CVE-2021-25374](https://insights.sbomify.com/CVE-2021-25374/): Missing authorization in Samsung Members (high 8.6) - [CVE-2021-25373](https://insights.sbomify.com/CVE-2021-25373/): Missing authorization in Customization Service (medium 5.5) - [CVE-2021-25372](https://insights.sbomify.com/CVE-2021-25372/): Samsung Mobile Devices Improper Boundary Check (medium 6.1, exploited in the wild) - [CVE-2021-25371](https://insights.sbomify.com/CVE-2021-25371/): Samsung Mobile Devices Unspecified (medium 6.1, exploited in the wild) - [CVE-2021-25370](https://insights.sbomify.com/CVE-2021-25370/): Samsung Mobile Devices Memory Corruption (medium 6.1, exploited in the wild) - [CVE-2021-25369](https://insights.sbomify.com/CVE-2021-25369/): Samsung Mobile Devices Improper Access Control (medium 6.2, exploited in the wild) - [CVE-2021-25368](https://insights.sbomify.com/CVE-2021-25368/): Auth bypass in Samsung Cloud (low 3.3) - [CVE-2021-25367](https://insights.sbomify.com/CVE-2021-25367/): Path traversal in Samsung Notes (low 3.7) - [CVE-2021-25366](https://insights.sbomify.com/CVE-2021-25366/): Auth bypass in Samsung Internet (low 3.2) - [CVE-2021-25365](https://insights.sbomify.com/CVE-2021-25365/): Missing authorization in Samsung Mobile Devices (medium 5.9) - [CVE-2021-25364](https://insights.sbomify.com/CVE-2021-25364/): Information disclosure in Samsung Mobile Devices (medium 4.0) - [CVE-2021-25363](https://insights.sbomify.com/CVE-2021-25363/): Missing authorization in Samsung Mobile Devices (medium 6.8) - [CVE-2021-25362](https://insights.sbomify.com/CVE-2021-25362/): Privilege escalation in Samsung Mobile Devices (medium 6.8) - [CVE-2021-25361](https://insights.sbomify.com/CVE-2021-25361/): Path traversal in Samsung Mobile Devices (high 7.9) - [CVE-2021-25360](https://insights.sbomify.com/CVE-2021-25360/): Memory corruption in Samsung Mobile Devices (critical 9.0) - [CVE-2021-25359](https://insights.sbomify.com/CVE-2021-25359/): Misconfiguration in Samsung Mobile Devices (medium 4.0) - [CVE-2021-25358](https://insights.sbomify.com/CVE-2021-25358/): Information disclosure in Samsung Mobile Devices (medium 4.0) - [CVE-2021-25357](https://insights.sbomify.com/CVE-2021-25357/): Information disclosure in Samsung Mobile Devices (medium 5.6) - [CVE-2021-25356](https://insights.sbomify.com/CVE-2021-25356/): Missing authorization in Samsung Mobile Devices (high 7.1) - [CVE-2021-25355](https://insights.sbomify.com/CVE-2021-25355/): Missing authorization in Samsung Notes (medium 5.5) - [CVE-2021-25354](https://insights.sbomify.com/CVE-2021-25354/): Security feature bypass in Samsung Internet (low 3.3) - [CVE-2021-25353](https://insights.sbomify.com/CVE-2021-25353/): Missing authorization in Galaxy Themes (medium 5.5) - [CVE-2021-25352](https://insights.sbomify.com/CVE-2021-25352/): Privilege escalation in Bixby Voice (medium 5.5) - [CVE-2021-25351](https://insights.sbomify.com/CVE-2021-25351/): Missing authorization in Samsung Account (low 3.2) - [CVE-2021-25350](https://insights.sbomify.com/CVE-2021-25350/): Information disclosure in Samsung Account (low 2.0) - [CVE-2021-25349](https://insights.sbomify.com/CVE-2021-25349/): Missing authorization in Slow Motion Editor (medium 5.5) - [CVE-2021-25348](https://insights.sbomify.com/CVE-2021-25348/): Missing authorization in Samsung Internet (low 2.1) - [CVE-2021-25347](https://insights.sbomify.com/CVE-2021-25347/): Auth bypass in Samsung Mobile Devices (medium 5.3) - [CVE-2021-25346](https://insights.sbomify.com/CVE-2021-25346/): Memory corruption in Samsung Mobile Devices (high 7.1) - [CVE-2021-25345](https://insights.sbomify.com/CVE-2021-25345/): Denial of service in Samsung Mobile Devices (medium 4.0) - [CVE-2021-25344](https://insights.sbomify.com/CVE-2021-25344/): Missing authorization in Samsung Mobile Devices (medium 6.2) - [CVE-2021-25343](https://insights.sbomify.com/CVE-2021-25343/): Missing authorization in Samsung Members (medium 4.0) - [CVE-2021-25342](https://insights.sbomify.com/CVE-2021-25342/): Auth bypass in SMP sdk (medium 4.0) - [CVE-2021-25341](https://insights.sbomify.com/CVE-2021-25341/): Auth bypass in S Assistant (medium 4.0) - [CVE-2021-25340](https://insights.sbomify.com/CVE-2021-25340/): Missing authorization in Samsung Mobile Devices (medium 5.1) - [CVE-2021-25339](https://insights.sbomify.com/CVE-2021-25339/): Memory corruption in Samsung Mobile Devices (medium 4.4) - [CVE-2021-25338](https://insights.sbomify.com/CVE-2021-25338/): Memory corruption in Samsung Mobile Devices (medium 4.4) - [CVE-2021-25337](https://insights.sbomify.com/CVE-2021-25337/): Samsung Mobile Devices Improper Access Control (medium 4.4, exploited in the wild) - [CVE-2021-25336](https://insights.sbomify.com/CVE-2021-25336/): Missing authorization in Samsung Mobile Devices (low 2.8) - [CVE-2021-25335](https://insights.sbomify.com/CVE-2021-25335/): Security feature bypass in Samsung Mobile Devices (low 2.5) - [CVE-2021-25334](https://insights.sbomify.com/CVE-2021-25334/): Denial of service in Samsung Mobile Devices (medium 5.5) - [CVE-2021-25333](https://insights.sbomify.com/CVE-2021-25333/): Missing authorization in Samsung Pay Mini (low 3.2) - [CVE-2021-25332](https://insights.sbomify.com/CVE-2021-25332/): Information disclosure in Samsung Pay Mini (low 3.2) - [CVE-2021-25331](https://insights.sbomify.com/CVE-2021-25331/): Information disclosure in Samsung Pay Mini (low 3.2) - [CVE-2021-25330](https://insights.sbomify.com/CVE-2021-25330/): Missing authorization in Samsung Mobile Devices (high 7.5) - [CVE-2021-25329](https://insights.sbomify.com/CVE-2021-25329/): Incomplete fix for CVE-2020-9484 (high 7.0) - [CVE-2021-25328](https://insights.sbomify.com/CVE-2021-25328/): Memory corruption in skyworthdigital:rn510 firmware (high 8.8) - [CVE-2021-25327](https://insights.sbomify.com/CVE-2021-25327/): Cross-site request forgery in skyworthdigital:rn510 firmware (medium 6.5) - [CVE-2021-25326](https://insights.sbomify.com/CVE-2021-25326/): Information disclosure in skyworthdigital:rn510 firmware (medium 5.4) - [CVE-2021-25325](https://insights.sbomify.com/CVE-2021-25325/): Cross-site scripting in misp-project:misp (medium 6.1) - [CVE-2021-25324](https://insights.sbomify.com/CVE-2021-25324/): Cross-site scripting in misp-project:misp (medium 6.1) - [CVE-2021-25323](https://insights.sbomify.com/CVE-2021-25323/): Security feature bypass in misp-project:misp (critical 9.1) - [CVE-2021-25322](https://insights.sbomify.com/CVE-2021-25322/): Privilege escalation in Factory (medium 6.8) - [CVE-2021-25321](https://insights.sbomify.com/CVE-2021-25321/): arpwatch: Local privilege escalation from runtime user to root (high 7.8) - [CVE-2021-25320](https://insights.sbomify.com/CVE-2021-25320/): Rancher: Cloud credentials can be used through proxy API by users without access (critical 9.9) - [CVE-2021-25319](https://insights.sbomify.com/CVE-2021-25319/): virtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group (high 7.8) - [CVE-2021-25318](https://insights.sbomify.com/CVE-2021-25318/): rancher: API group not properly specified when creating Kubernetes RBAC resources (high 8.8) - [CVE-2021-25317](https://insights.sbomify.com/CVE-2021-25317/): cups: ownership of /var/log/cups allows the lp user to create files as root (low 3.3) - [CVE-2021-25316](https://insights.sbomify.com/CVE-2021-25316/): Local DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-tools (low 3.3) - [CVE-2021-25315](https://insights.sbomify.com/CVE-2021-25315/): salt-api unauthenticated remote code execution (critical 9.8) - [CVE-2021-25314](https://insights.sbomify.com/CVE-2021-25314/): hawk: Insecure file permissions (high 7.8) - [CVE-2021-25313](https://insights.sbomify.com/CVE-2021-25313/): Rancher: XSS on /v3/cluster/ (high 7.1) - [CVE-2021-25312](https://insights.sbomify.com/CVE-2021-25312/): Auth bypass in wisc:htcondor (high 8.8) - [CVE-2021-25311](https://insights.sbomify.com/CVE-2021-25311/): Path traversal in wisc:htcondor (critical 9.9) - [CVE-2021-25310](https://insights.sbomify.com/CVE-2021-25310/): Command injection in belkin:linksys wrt160nl firmware (high 8.8) - [CVE-2021-25309](https://insights.sbomify.com/CVE-2021-25309/): Auth bypass in gigaset:dx600a firmware (critical 9.8) - [CVE-2021-25306](https://insights.sbomify.com/CVE-2021-25306/): Memory corruption in gigaset:dx600a firmware (high 7.5) - [CVE-2021-25299](https://insights.sbomify.com/CVE-2021-25299/): Cross-site scripting in nagios:nagios xi (medium 6.1) - [CVE-2021-25298](https://insights.sbomify.com/CVE-2021-25298/): Nagios XI OS Command Injection (high 8.8, exploited in the wild) - [CVE-2021-25297](https://insights.sbomify.com/CVE-2021-25297/): Nagios XI OS Command Injection (high 8.8, exploited in the wild) - [CVE-2021-25296](https://insights.sbomify.com/CVE-2021-25296/): Nagios XI OS Command Injection (high 8.8, exploited in the wild) - [CVE-2021-25295](https://insights.sbomify.com/CVE-2021-25295/): Cross-site scripting in opencats:opencats (medium 6.1) - [CVE-2021-25294](https://insights.sbomify.com/CVE-2021-25294/): Deserialization in opencats:opencats (critical 9.8) - [CVE-2021-25293](https://insights.sbomify.com/CVE-2021-25293/): Out of bounds read in Pillow (high 7.5) - [CVE-2021-25292](https://insights.sbomify.com/CVE-2021-25292/): Regular Expression Denial of Service (ReDoS) in Pillow (medium 6.5) - [CVE-2021-25291](https://insights.sbomify.com/CVE-2021-25291/): Out of bounds read in Pillow (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/204/