# Vulnerabilities published in 2021


- [CVE-2021-23863](https://insights.sbomify.com/CVE-2021-23863/): Cross-site scripting in bosch:video security (medium 6.1)
- [CVE-2021-23862](https://insights.sbomify.com/CVE-2021-23862/): Authenticated Remote Code Execution (high 7.2)
- [CVE-2021-23861](https://insights.sbomify.com/CVE-2021-23861/): Possible Access to Debug Functions in Bosch VRM / BVMS (medium 6.5)
- [CVE-2021-23860](https://insights.sbomify.com/CVE-2021-23860/): Reflected Cross Site Scripting (XSS) vulnerability in Bosch VRM / BVMS (medium 5.0)
- [CVE-2021-2386](https://insights.sbomify.com/CVE-2021-2386/): Information disclosure in Primavera P6 Enterprise Project Portfolio Management (medium 4.3)
- [CVE-2021-23859](https://insights.sbomify.com/CVE-2021-23859/): Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products (critical 9.1)
- [CVE-2021-23858](https://insights.sbomify.com/CVE-2021-23858/): Information disclosure (high 8.6)
- [CVE-2021-23857](https://insights.sbomify.com/CVE-2021-23857/): Login with hash (critical 10.0)
- [CVE-2021-23856](https://insights.sbomify.com/CVE-2021-23856/): Reflected Cross-Site-Scripting (critical 10.0)
- [CVE-2021-23855](https://insights.sbomify.com/CVE-2021-23855/): Information disclosure (high 8.6)
- [CVE-2021-23854](https://insights.sbomify.com/CVE-2021-23854/): Reflected XSS in page parameter (high 8.3)
- [CVE-2021-23853](https://insights.sbomify.com/CVE-2021-23853/): Improper Input Validation of HTTP Headers (high 8.3)
- [CVE-2021-23852](https://insights.sbomify.com/CVE-2021-23852/): Denial of Service (DoS) due to invalid web parameter (medium 4.9)
- [CVE-2021-23851](https://insights.sbomify.com/CVE-2021-23851/): Buffer Overflow vulnerability in the recovery image web-based interface (medium 6.8)
- [CVE-2021-23850](https://insights.sbomify.com/CVE-2021-23850/): Buffer Overflow vulnerability in the recovery image telnet server (medium 6.8)
- [CVE-2021-2385](https://insights.sbomify.com/CVE-2021-2385/): Other in MySQL Server (medium 5.0)
- [CVE-2021-23849](https://insights.sbomify.com/CVE-2021-23849/): Cross Site Request Forgery (CSRF) vulnerability in web based management interface (high 7.5)
- [CVE-2021-23848](https://insights.sbomify.com/CVE-2021-23848/): Reflected XSS in URL handler (high 8.3)
- [CVE-2021-23847](https://insights.sbomify.com/CVE-2021-23847/): Unauthenticated Information Extraction Vulnerability (critical 9.8)
- [CVE-2021-23846](https://insights.sbomify.com/CVE-2021-23846/): B426 Credential Disclosure (high 8.8)
- [CVE-2021-23845](https://insights.sbomify.com/CVE-2021-23845/): B426 Web Configuration Authentication Bypass (high 8.0)
- [CVE-2021-23843](https://insights.sbomify.com/CVE-2021-23843/): Lack of authentication mechanisms on the device (high 8.8)
- [CVE-2021-23842](https://insights.sbomify.com/CVE-2021-23842/): Use of Hard-coded Cryptographic Key (medium 5.7)
- [CVE-2021-23841](https://insights.sbomify.com/CVE-2021-23841/): Null pointer deref in X509_issuer_and_serial_hash() (medium 5.9)
- [CVE-2021-23840](https://insights.sbomify.com/CVE-2021-23840/): Integer overflow in CipherUpdate (high 7.5)
- [CVE-2021-2384](https://insights.sbomify.com/CVE-2021-2384/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-23839](https://insights.sbomify.com/CVE-2021-23839/): Incorrect SSLv2 rollback protection (low 3.7)
- [CVE-2021-23838](https://insights.sbomify.com/CVE-2021-23838/): Cross-site scripting in flatcore:flatcore (medium 4.8)
- [CVE-2021-23837](https://insights.sbomify.com/CVE-2021-23837/): SQL injection in flatcore:flatcore (medium 6.5)
- [CVE-2021-23836](https://insights.sbomify.com/CVE-2021-23836/): Cross-site scripting in flatcore:flatcore (medium 4.8)
- [CVE-2021-23835](https://insights.sbomify.com/CVE-2021-23835/): Path traversal in flatcore:flatcore (medium 4.9)
- [CVE-2021-2383](https://insights.sbomify.com/CVE-2021-2383/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-23827](https://insights.sbomify.com/CVE-2021-23827/): Information disclosure in keybase:keybase (medium 5.5)
- [CVE-2021-23824](https://insights.sbomify.com/CVE-2021-23824/): Content Injection (medium 6.5)
- [CVE-2021-23820](https://insights.sbomify.com/CVE-2021-23820/): Prototype Pollution (medium 5.6)
- [CVE-2021-2382](https://insights.sbomify.com/CVE-2021-2382/): Other in WebLogic Server (critical 9.8)
- [CVE-2021-23814](https://insights.sbomify.com/CVE-2021-23814/): Unrestricted Upload of File with Dangerous Type in unisharp/laravel-filemanager (medium 6.7)
- [CVE-2021-2381](https://insights.sbomify.com/CVE-2021-2381/): Other in Solaris Operating System (low 3.9)
- [CVE-2021-23807](https://insights.sbomify.com/CVE-2021-23807/): Prototype Pollution (medium 5.6)
- [CVE-2021-23803](https://insights.sbomify.com/CVE-2021-23803/): Access Control Bypass (critical 9.8)
- [CVE-2021-2380](https://insights.sbomify.com/CVE-2021-2380/): Other in Applications Framework (high 7.6)
- [CVE-2021-23797](https://insights.sbomify.com/CVE-2021-23797/): Directory Traversal (high 7.5)
- [CVE-2021-23792](https://insights.sbomify.com/CVE-2021-23792/): XML External Entity (XXE) Injection (high 7.3)
- [CVE-2021-23784](https://insights.sbomify.com/CVE-2021-23784/): Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2021-2378](https://insights.sbomify.com/CVE-2021-2378/): Denial of service in WebLogic Server (high 7.5)
- [CVE-2021-23772](https://insights.sbomify.com/CVE-2021-23772/): Arbitrary File Write (high 7.5)
- [CVE-2021-23771](https://insights.sbomify.com/CVE-2021-23771/): Sandbox Bypass (medium 6.5)
- [CVE-2021-2377](https://insights.sbomify.com/CVE-2021-2377/): Information disclosure in PeopleSoft Enterprise PT PeopleTools (medium 4.3)
- [CVE-2021-23760](https://insights.sbomify.com/CVE-2021-23760/): Prototype Pollution (medium 5.6)
- [CVE-2021-2376](https://insights.sbomify.com/CVE-2021-2376/): Denial of service in WebLogic Server (high 7.5)
- [CVE-2021-23758](https://insights.sbomify.com/CVE-2021-23758/): Ajax.NET Professional Deserialization of Untrusted Data (high 8.1, exploited in the wild)
- [CVE-2021-2375](https://insights.sbomify.com/CVE-2021-2375/): Cross-site scripting in JD Edwards EnterpriseOne Tools (medium 6.1)
- [CVE-2021-2374](https://insights.sbomify.com/CVE-2021-2374/): Other in MySQL Server (medium 4.1)
- [CVE-2021-23732](https://insights.sbomify.com/CVE-2021-23732/): Arbitrary Code Execution (critical 9.0)
- [CVE-2021-2373](https://insights.sbomify.com/CVE-2021-2373/): Other in JD Edwards EnterpriseOne Tools (medium 5.4)
- [CVE-2021-23727](https://insights.sbomify.com/CVE-2021-23727/): Stored Command Injection (high 7.5)
- [CVE-2021-2372](https://insights.sbomify.com/CVE-2021-2372/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2021-23718](https://insights.sbomify.com/CVE-2021-23718/): Server-side Request Forgery (SSRF) (medium 6.5)
- [CVE-2021-2371](https://insights.sbomify.com/CVE-2021-2371/): Denial of service in Coherence (high 7.5)
- [CVE-2021-23702](https://insights.sbomify.com/CVE-2021-23702/): Prototype Pollution (high 7.6)
- [CVE-2021-23700](https://insights.sbomify.com/CVE-2021-23700/): Prototype Pollution (medium 6.5)
- [CVE-2021-2370](https://insights.sbomify.com/CVE-2021-2370/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-2369](https://insights.sbomify.com/CVE-2021-2369/): Other in Java SE JDK and JRE (medium 4.3)
- [CVE-2021-23682](https://insights.sbomify.com/CVE-2021-23682/): Prototype Pollution (high 7.3)
- [CVE-2021-2368](https://insights.sbomify.com/CVE-2021-2368/): Information disclosure in Siebel Core - Server Framework (medium 5.9)
- [CVE-2021-23673](https://insights.sbomify.com/CVE-2021-23673/): Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2021-2367](https://insights.sbomify.com/CVE-2021-2367/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-23664](https://insights.sbomify.com/CVE-2021-23664/): Server-side Request Forgery (SSRF) (high 8.6)
- [CVE-2021-23663](https://insights.sbomify.com/CVE-2021-23663/): Prototype Pollution (medium 6.5)
- [CVE-2021-2366](https://insights.sbomify.com/CVE-2021-2366/): Other in Primavera P6 Enterprise Project Portfolio Management (medium 6.4)
- [CVE-2021-23654](https://insights.sbomify.com/CVE-2021-23654/): Improper Input Validation (medium 5.6)
- [CVE-2021-2365](https://insights.sbomify.com/CVE-2021-2365/): Other in Human Resources (high 8.1)
- [CVE-2021-23648](https://insights.sbomify.com/CVE-2021-23648/): Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2021-2364](https://insights.sbomify.com/CVE-2021-2364/): Other in iSupplier Portal (high 8.1)
- [CVE-2021-23639](https://insights.sbomify.com/CVE-2021-23639/): Remote Code Execution (RCE) (critical 9.8)
- [CVE-2021-23632](https://insights.sbomify.com/CVE-2021-23632/): Remote Code Execution (RCE) (medium 6.6)
- [CVE-2021-23631](https://insights.sbomify.com/CVE-2021-23631/): Directory Traversal (high 7.5)
- [CVE-2021-2363](https://insights.sbomify.com/CVE-2021-2363/): Missing authorization in Public Sector Financials (International) (high 8.1)
- [CVE-2021-23624](https://insights.sbomify.com/CVE-2021-23624/): Prototype Pollution (medium 5.6)
- [CVE-2021-2362](https://insights.sbomify.com/CVE-2021-2362/): Other in Field Service (high 8.1)
- [CVE-2021-2361](https://insights.sbomify.com/CVE-2021-2361/): Other in Advanced Inbound Telephony (high 8.1)
- [CVE-2021-2360](https://insights.sbomify.com/CVE-2021-2360/): Other in Approvals Management (high 8.1)
- [CVE-2021-23597](https://insights.sbomify.com/CVE-2021-23597/): Denial of Service (DoS) (high 7.5)
- [CVE-2021-23594](https://insights.sbomify.com/CVE-2021-23594/): Sandbox Bypass (critical 9.8)
- [CVE-2021-23592](https://insights.sbomify.com/CVE-2021-23592/): Deserialization of Untrusted Data (high 7.7)
- [CVE-2021-2359](https://insights.sbomify.com/CVE-2021-2359/): Other in Marketing (high 8.2)
- [CVE-2021-2358](https://insights.sbomify.com/CVE-2021-2358/): Other in Access Manager (medium 4.9)
- [CVE-2021-23574](https://insights.sbomify.com/CVE-2021-23574/): Prototype Pollution (high 7.5)
- [CVE-2021-2357](https://insights.sbomify.com/CVE-2021-2357/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-23568](https://insights.sbomify.com/CVE-2021-23568/): Prototype Pollution (high 7.3)
- [CVE-2021-23567](https://insights.sbomify.com/CVE-2021-23567/): Denial of Service (DoS) (high 7.5)
- [CVE-2021-23566](https://insights.sbomify.com/CVE-2021-23566/): Information Exposure (medium 4.0)
- [CVE-2021-23562](https://insights.sbomify.com/CVE-2021-23562/): Arbitrary File Upload (medium 4.2)
- [CVE-2021-23561](https://insights.sbomify.com/CVE-2021-23561/): Prototype Pollution (medium 6.5)
- [CVE-2021-2356](https://insights.sbomify.com/CVE-2021-2356/): Other in MySQL Server (medium 5.9)
- [CVE-2021-23558](https://insights.sbomify.com/CVE-2021-23558/): Prototype Pollution (high 7.3)
- [CVE-2021-23556](https://insights.sbomify.com/CVE-2021-23556/): Exposed Dangerous Method or Function (medium 6.4)
- [CVE-2021-23555](https://insights.sbomify.com/CVE-2021-23555/): Sandbox Bypass (critical 9.8)
- [CVE-2021-2355](https://insights.sbomify.com/CVE-2021-2355/): Other in Marketing (critical 9.1)
- [CVE-2021-23543](https://insights.sbomify.com/CVE-2021-23543/): Sandbox Bypass (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/219/