# Vulnerabilities published in 2021


- [CVE-2021-23994](https://insights.sbomify.com/CVE-2021-23994/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-23993](https://insights.sbomify.com/CVE-2021-23993/): Denial of service in Thunderbird (medium 6.5)
- [CVE-2021-23992](https://insights.sbomify.com/CVE-2021-23992/): Security feature bypass in Thunderbird (medium 4.3)
- [CVE-2021-23991](https://insights.sbomify.com/CVE-2021-23991/): Business logic in Thunderbird (medium 6.8)
- [CVE-2021-2399](https://insights.sbomify.com/CVE-2021-2399/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-23988](https://insights.sbomify.com/CVE-2021-23988/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-23987](https://insights.sbomify.com/CVE-2021-23987/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-23986](https://insights.sbomify.com/CVE-2021-23986/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2021-23985](https://insights.sbomify.com/CVE-2021-23985/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2021-23984](https://insights.sbomify.com/CVE-2021-23984/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2021-23983](https://insights.sbomify.com/CVE-2021-23983/): Memory corruption in Firefox (medium 6.5)
- [CVE-2021-23982](https://insights.sbomify.com/CVE-2021-23982/): Information disclosure in Firefox (medium 6.5)
- [CVE-2021-23981](https://insights.sbomify.com/CVE-2021-23981/): Memory corruption in Firefox (high 8.1)
- [CVE-2021-23980](https://insights.sbomify.com/CVE-2021-23980/): Cross-site scripting in Bleach (medium 6.1)
- [CVE-2021-2398](https://insights.sbomify.com/CVE-2021-2398/): Other in Advanced Outbound Telephony (high 8.1)
- [CVE-2021-23979](https://insights.sbomify.com/CVE-2021-23979/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-23978](https://insights.sbomify.com/CVE-2021-23978/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-23977](https://insights.sbomify.com/CVE-2021-23977/): Race condition in Firefox (medium 5.3)
- [CVE-2021-23976](https://insights.sbomify.com/CVE-2021-23976/): Security feature bypass in Firefox (high 8.1)
- [CVE-2021-23975](https://insights.sbomify.com/CVE-2021-23975/): Memory corruption in Firefox (medium 6.5)
- [CVE-2021-23974](https://insights.sbomify.com/CVE-2021-23974/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2021-23973](https://insights.sbomify.com/CVE-2021-23973/): Information disclosure in Firefox (medium 6.5)
- [CVE-2021-23972](https://insights.sbomify.com/CVE-2021-23972/): Security feature bypass in Firefox (high 8.8)
- [CVE-2021-23971](https://insights.sbomify.com/CVE-2021-23971/): Information disclosure in Firefox (medium 6.5)
- [CVE-2021-23970](https://insights.sbomify.com/CVE-2021-23970/): Denial of service in Firefox (medium 6.5)
- [CVE-2021-2397](https://insights.sbomify.com/CVE-2021-2397/): Other in WebLogic Server (critical 9.8)
- [CVE-2021-23969](https://insights.sbomify.com/CVE-2021-23969/): Information disclosure in Firefox (medium 4.3)
- [CVE-2021-23968](https://insights.sbomify.com/CVE-2021-23968/): Information disclosure in Firefox (medium 4.3)
- [CVE-2021-23965](https://insights.sbomify.com/CVE-2021-23965/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-23964](https://insights.sbomify.com/CVE-2021-23964/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-23963](https://insights.sbomify.com/CVE-2021-23963/): Security feature bypass in Firefox (medium 4.3)
- [CVE-2021-23962](https://insights.sbomify.com/CVE-2021-23962/): Use after free in Firefox (high 8.8)
- [CVE-2021-23961](https://insights.sbomify.com/CVE-2021-23961/): Information disclosure in Firefox (high 7.4)
- [CVE-2021-23960](https://insights.sbomify.com/CVE-2021-23960/): Use after free in Firefox (high 8.8)
- [CVE-2021-2396](https://insights.sbomify.com/CVE-2021-2396/): Other in BI Publisher (formerly XML Publisher) (high 8.8)
- [CVE-2021-23959](https://insights.sbomify.com/CVE-2021-23959/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2021-23958](https://insights.sbomify.com/CVE-2021-23958/): Information disclosure in Firefox (medium 6.5)
- [CVE-2021-23957](https://insights.sbomify.com/CVE-2021-23957/): Security feature bypass in Firefox (high 7.4)
- [CVE-2021-23956](https://insights.sbomify.com/CVE-2021-23956/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2021-23955](https://insights.sbomify.com/CVE-2021-23955/): Security feature bypass in Firefox (medium 6.1)
- [CVE-2021-23954](https://insights.sbomify.com/CVE-2021-23954/): Memory corruption in Firefox (high 8.8)
- [CVE-2021-23953](https://insights.sbomify.com/CVE-2021-23953/): Information disclosure in Firefox (medium 4.3)
- [CVE-2021-2395](https://insights.sbomify.com/CVE-2021-2395/): Other in Hospitality Reporting and Analytics (high 8.1)
- [CVE-2021-2394](https://insights.sbomify.com/CVE-2021-2394/): Other in WebLogic Server (critical 9.8)
- [CVE-2021-23937](https://insights.sbomify.com/CVE-2021-23937/): DNS proxy and possible amplification attack (high 7.5)
- [CVE-2021-23936](https://insights.sbomify.com/CVE-2021-23936/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2021-23935](https://insights.sbomify.com/CVE-2021-23935/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2021-23934](https://insights.sbomify.com/CVE-2021-23934/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2021-23933](https://insights.sbomify.com/CVE-2021-23933/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2021-23932](https://insights.sbomify.com/CVE-2021-23932/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2021-23931](https://insights.sbomify.com/CVE-2021-23931/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2021-23930](https://insights.sbomify.com/CVE-2021-23930/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2021-2393](https://insights.sbomify.com/CVE-2021-2393/): Other in E-Records (high 8.1)
- [CVE-2021-23929](https://insights.sbomify.com/CVE-2021-23929/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2021-23928](https://insights.sbomify.com/CVE-2021-23928/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 6.1)
- [CVE-2021-23927](https://insights.sbomify.com/CVE-2021-23927/): Server-side request forgery in open-xchange:open-xchange appsuite (medium 6.4)
- [CVE-2021-23926](https://insights.sbomify.com/CVE-2021-23926/): XMLBeans XML Entity Expansion (critical 9.1)
- [CVE-2021-23925](https://insights.sbomify.com/CVE-2021-23925/): Cross-site scripting in devolutions:devolutions server (medium 6.1)
- [CVE-2021-23924](https://insights.sbomify.com/CVE-2021-23924/): Information disclosure in devolutions:devolutions server (high 7.5)
- [CVE-2021-23923](https://insights.sbomify.com/CVE-2021-23923/): Auth bypass in devolutions:devolutions server (high 8.1)
- [CVE-2021-23922](https://insights.sbomify.com/CVE-2021-23922/): Cross-site scripting in devolutions:remote desktop manager (medium 5.4)
- [CVE-2021-23921](https://insights.sbomify.com/CVE-2021-23921/): Missing authorization in devolutions:devolutions server (critical 9.1)
- [CVE-2021-2392](https://insights.sbomify.com/CVE-2021-2392/): Other in BI Publisher (formerly XML Publisher) (high 8.8)
- [CVE-2021-23910](https://insights.sbomify.com/CVE-2021-23910/): Memory corruption in mercedes-benz:hermes (medium 5.3)
- [CVE-2021-2391](https://insights.sbomify.com/CVE-2021-2391/): Other in BI Publisher (formerly XML Publisher) (high 8.8)
- [CVE-2021-23909](https://insights.sbomify.com/CVE-2021-23909/): Memory corruption in mercedes-benz:hermes (medium 6.3)
- [CVE-2021-23908](https://insights.sbomify.com/CVE-2021-23908/): Memory corruption in mercedes-benz:headunit ntg6 mercedes-benz user experience (low 2.9)
- [CVE-2021-23907](https://insights.sbomify.com/CVE-2021-23907/): Memory corruption in mercedes-benz:headunit ntg6 mercedes-benz user experience (low 2.9)
- [CVE-2021-23906](https://insights.sbomify.com/CVE-2021-23906/): Memory corruption in mercedes-benz:mercedes-benz user experience (low 1.8)
- [CVE-2021-23901](https://insights.sbomify.com/CVE-2021-23901/): An XML external entity (XXE) injection vulnerability exists in the Nutch DmozParser (critical 9.1)
- [CVE-2021-23900](https://insights.sbomify.com/CVE-2021-23900/): Uncaught Exception leading to Denial of Service in json-sanitizer (high 7.5)
- [CVE-2021-2390](https://insights.sbomify.com/CVE-2021-2390/): Integer overflow in MySQL Server (medium 5.9)
- [CVE-2021-23899](https://insights.sbomify.com/CVE-2021-23899/): Arbitrary code injection in json-sanitizer (critical 9.8)
- [CVE-2021-23896](https://insights.sbomify.com/CVE-2021-23896/): Cleartext Transmission of Sensitive Information in McAfee DBSec (low 3.2)
- [CVE-2021-23895](https://insights.sbomify.com/CVE-2021-23895/): Authorized deserialization of untrusted data in McAfee DBSec (critical 9.0)
- [CVE-2021-23894](https://insights.sbomify.com/CVE-2021-23894/): Unauthorized deserialization of untrusted data in McAfee DBSec (critical 9.6)
- [CVE-2021-23893](https://insights.sbomify.com/CVE-2021-23893/): Privilege Escalation vulnerability in McAfee Drive Encryption (MDE) (high 8.8)
- [CVE-2021-23892](https://insights.sbomify.com/CVE-2021-23892/): Race condition in McAfee Endpoint Security (ENS) for Linux (high 8.2)
- [CVE-2021-23891](https://insights.sbomify.com/CVE-2021-23891/): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (high 7.8)
- [CVE-2021-23890](https://insights.sbomify.com/CVE-2021-23890/): McAfee ePO Information Leak vulnerability (medium 6.5)
- [CVE-2021-2389](https://insights.sbomify.com/CVE-2021-2389/): Denial of service in MySQL Server (medium 5.9)
- [CVE-2021-23889](https://insights.sbomify.com/CVE-2021-23889/): McAfee ePO Cross-site Scripting vulnerability (low 3.5)
- [CVE-2021-23888](https://insights.sbomify.com/CVE-2021-23888/): McAfee ePO unvalidated URL redirect vulnerability (medium 6.3)
- [CVE-2021-23887](https://insights.sbomify.com/CVE-2021-23887/): Privilege escalation in McAfee DLP Endpoint for Windows (high 7.8)
- [CVE-2021-23886](https://insights.sbomify.com/CVE-2021-23886/): Local Denial of Service in McAfee DLP Endpoint for Windows (medium 5.5)
- [CVE-2021-23885](https://insights.sbomify.com/CVE-2021-23885/): Privilege escalation vulnerability in McAfee Web Gateway (MWG) UI (critical 9.0)
- [CVE-2021-23884](https://insights.sbomify.com/CVE-2021-23884/): Clear text exposure of password in McAfee CSR ePO extension (medium 4.3)
- [CVE-2021-23883](https://insights.sbomify.com/CVE-2021-23883/): Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) (medium 4.0)
- [CVE-2021-23882](https://insights.sbomify.com/CVE-2021-23882/): Improper Access Control in the ENS installer (high 8.2)
- [CVE-2021-23881](https://insights.sbomify.com/CVE-2021-23881/): Stored Cross Site Scripting in ENS (medium 4.8)
- [CVE-2021-23880](https://insights.sbomify.com/CVE-2021-23880/): Improper Access Control in the ENS installer (medium 6.7)
- [CVE-2021-2388](https://insights.sbomify.com/CVE-2021-2388/): Other in Java SE JDK and JRE (high 7.5)
- [CVE-2021-23879](https://insights.sbomify.com/CVE-2021-23879/): Privilege escalation in Endpoint Product Removal Tool (medium 6.7)
- [CVE-2021-23878](https://insights.sbomify.com/CVE-2021-23878/): Clear text storage of sensitive Information in ENS (high 7.3)
- [CVE-2021-23877](https://insights.sbomify.com/CVE-2021-23877/): McAfee Total Protection (MTP) - Privilege Escalation vulnerability (medium 6.7)
- [CVE-2021-23876](https://insights.sbomify.com/CVE-2021-23876/): McAfee Total Protection (MTP) Bypass Remote Procedure call vulnerability (high 7.8)
- [CVE-2021-23874](https://insights.sbomify.com/CVE-2021-23874/): McAfee Total Protection (MTP) Improper Privilege Management (high 8.2, exploited in the wild)
- [CVE-2021-23873](https://insights.sbomify.com/CVE-2021-23873/): McAfee Total Protection (MTP) privilege escalation vulnerability (high 7.8)
- [CVE-2021-23872](https://insights.sbomify.com/CVE-2021-23872/): Privilege Escalation vulnerability in McAfee Total Protection (MTP) (high 7.8)
- [CVE-2021-2387](https://insights.sbomify.com/CVE-2021-2387/): Denial of service in MySQL Server (medium 4.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/218/