# Vulnerabilities published in 2021


- [CVE-2021-23380](https://insights.sbomify.com/CVE-2021-23380/): Arbitrary Command Injection (medium 5.6)
- [CVE-2021-2338](https://insights.sbomify.com/CVE-2021-2338/): Cross-site scripting in Siebel Apps - Marketing (medium 6.1)
- [CVE-2021-23379](https://insights.sbomify.com/CVE-2021-23379/): Arbitrary Command Injection (high 7.3)
- [CVE-2021-23378](https://insights.sbomify.com/CVE-2021-23378/): Arbitrary Command Injection (critical 9.8)
- [CVE-2021-23377](https://insights.sbomify.com/CVE-2021-23377/): Arbitrary Command Injection (critical 9.8)
- [CVE-2021-23376](https://insights.sbomify.com/CVE-2021-23376/): Arbitrary Command Injection (critical 9.8)
- [CVE-2021-23375](https://insights.sbomify.com/CVE-2021-23375/): Arbitrary Command Injection (high 7.3)
- [CVE-2021-23374](https://insights.sbomify.com/CVE-2021-23374/): Arbitrary Command Injection (high 7.3)
- [CVE-2021-23373](https://insights.sbomify.com/CVE-2021-23373/): Prototype Pollution (high 7.5)
- [CVE-2021-23372](https://insights.sbomify.com/CVE-2021-23372/): Denial of Service (DoS) (medium 4.4)
- [CVE-2021-23371](https://insights.sbomify.com/CVE-2021-23371/): Regular Expression Denial of Service (ReDoS) (high 7.5)
- [CVE-2021-23370](https://insights.sbomify.com/CVE-2021-23370/): Prototype Pollution (high 7.5)
- [CVE-2021-2337](https://insights.sbomify.com/CVE-2021-2337/): Other in Database - Enterprise Edition (high 7.2)
- [CVE-2021-23369](https://insights.sbomify.com/CVE-2021-23369/): Remote Code Execution (RCE) (medium 5.6)
- [CVE-2021-23368](https://insights.sbomify.com/CVE-2021-23368/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2021-23365](https://insights.sbomify.com/CVE-2021-23365/): Authentication Bypass (medium 4.8)
- [CVE-2021-23364](https://insights.sbomify.com/CVE-2021-23364/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2021-23363](https://insights.sbomify.com/CVE-2021-23363/): Arbitrary Command Injection (medium 6.3)
- [CVE-2021-23362](https://insights.sbomify.com/CVE-2021-23362/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2021-23360](https://insights.sbomify.com/CVE-2021-23360/): Arbitrary Command Injection (high 7.5)
- [CVE-2021-2336](https://insights.sbomify.com/CVE-2021-2336/): Other in Database - Enterprise Edition (low 3.5)
- [CVE-2021-23359](https://insights.sbomify.com/CVE-2021-23359/): Arbitrary Command Injection (high 7.5)
- [CVE-2021-23358](https://insights.sbomify.com/CVE-2021-23358/): Arbitrary Code Injection (low 3.3)
- [CVE-2021-23357](https://insights.sbomify.com/CVE-2021-23357/): Directory Traversal (low 3.3)
- [CVE-2021-23356](https://insights.sbomify.com/CVE-2021-23356/): Arbitrary Command Injection (medium 5.6)
- [CVE-2021-23355](https://insights.sbomify.com/CVE-2021-23355/): Arbitrary Command Injection (medium 5.6)
- [CVE-2021-23354](https://insights.sbomify.com/CVE-2021-23354/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2021-23353](https://insights.sbomify.com/CVE-2021-23353/): Regular Expression Denial of Service (ReDoS) (medium 5.9)
- [CVE-2021-23352](https://insights.sbomify.com/CVE-2021-23352/): Command Injection (high 8.6)
- [CVE-2021-23351](https://insights.sbomify.com/CVE-2021-23351/): Denial of Service (DoS) (medium 4.4)
- [CVE-2021-2335](https://insights.sbomify.com/CVE-2021-2335/): Other in Database - Enterprise Edition (low 3.5)
- [CVE-2021-23348](https://insights.sbomify.com/CVE-2021-23348/): Arbitrary Command Injection (medium 6.3)
- [CVE-2021-23347](https://insights.sbomify.com/CVE-2021-23347/): Cross-site Scripting (XSS) (medium 4.7)
- [CVE-2021-23346](https://insights.sbomify.com/CVE-2021-23346/): Regular Expression Denial of Service (ReDoS) (medium 4.8)
- [CVE-2021-23345](https://insights.sbomify.com/CVE-2021-23345/): Server-side Request Forgery (SSRF) (medium 5.3)
- [CVE-2021-23344](https://insights.sbomify.com/CVE-2021-23344/): Remote Code Execution (RCE) (critical 9.8)
- [CVE-2021-23343](https://insights.sbomify.com/CVE-2021-23343/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2021-23342](https://insights.sbomify.com/CVE-2021-23342/): Cross-site Scripting (XSS) (high 8.6)
- [CVE-2021-23341](https://insights.sbomify.com/CVE-2021-23341/): Regular Expression Denial of Service (ReDoS) (high 7.5)
- [CVE-2021-23340](https://insights.sbomify.com/CVE-2021-23340/): Local File Inclusion (high 7.1)
- [CVE-2021-2334](https://insights.sbomify.com/CVE-2021-2334/): Other in Database - Enterprise Edition (low 3.5)
- [CVE-2021-23339](https://insights.sbomify.com/CVE-2021-23339/): HTTP Request Smuggling (medium 5.0)
- [CVE-2021-23338](https://insights.sbomify.com/CVE-2021-23338/): Deserialization of Untrusted Data (medium 6.6)
- [CVE-2021-23337](https://insights.sbomify.com/CVE-2021-23337/): Command Injection (high 7.2)
- [CVE-2021-23336](https://insights.sbomify.com/CVE-2021-23336/): Web Cache Poisoning (medium 5.9)
- [CVE-2021-23335](https://insights.sbomify.com/CVE-2021-23335/): LDAP Injection (high 7.5)
- [CVE-2021-23331](https://insights.sbomify.com/CVE-2021-23331/): Insecure Temporary File (medium 4.4)
- [CVE-2021-23330](https://insights.sbomify.com/CVE-2021-23330/): Command Injection (critical 9.8)
- [CVE-2021-2333](https://insights.sbomify.com/CVE-2021-2333/): Other in Database - Enterprise Edition (medium 4.9)
- [CVE-2021-23329](https://insights.sbomify.com/CVE-2021-23329/): Prototype Pollution (high 7.5)
- [CVE-2021-23328](https://insights.sbomify.com/CVE-2021-23328/): Prototype Pollution (medium 5.6)
- [CVE-2021-23327](https://insights.sbomify.com/CVE-2021-23327/): Cross-site Scripting (XSS) (medium 6.3)
- [CVE-2021-23326](https://insights.sbomify.com/CVE-2021-23326/): Command Injection (medium 6.3)
- [CVE-2021-2332](https://insights.sbomify.com/CVE-2021-2332/): Other in Database - Enterprise Edition (medium 6.7)
- [CVE-2021-2330](https://insights.sbomify.com/CVE-2021-2330/): Denial of service in Database - Enterprise Edition (medium 4.3)
- [CVE-2021-2329](https://insights.sbomify.com/CVE-2021-2329/): Other in Database - Enterprise Edition (high 7.2)
- [CVE-2021-23288](https://insights.sbomify.com/CVE-2021-23288/): Security issues in Intelligent Power Protector (medium 5.6)
- [CVE-2021-23287](https://insights.sbomify.com/CVE-2021-23287/): Security issues in Intelligent Power Manager (IPM 1) (medium 5.6)
- [CVE-2021-23286](https://insights.sbomify.com/CVE-2021-23286/): Security issues in Eaton Intelligent Power Manager Infrastructure (medium 5.7)
- [CVE-2021-23285](https://insights.sbomify.com/CVE-2021-23285/): Security issues in Eaton Intelligent Power Manager Infrastructure (low 3.1)
- [CVE-2021-23284](https://insights.sbomify.com/CVE-2021-23284/): Security issues in Eaton Intelligent Power Manager Infrastructure (medium 5.7)
- [CVE-2021-23283](https://insights.sbomify.com/CVE-2021-23283/): Security issues in Eaton Intelligent Power Protector (IPP) (medium 5.2)
- [CVE-2021-23282](https://insights.sbomify.com/CVE-2021-23282/): Stored Cross-site Scripting reported in Intelligent Power Manager v1 (medium 5.2)
- [CVE-2021-23281](https://insights.sbomify.com/CVE-2021-23281/): Remote Code execution (critical 10.0)
- [CVE-2021-23280](https://insights.sbomify.com/CVE-2021-23280/): Arbitrary File upload (high 8.0)
- [CVE-2021-2328](https://insights.sbomify.com/CVE-2021-2328/): Other in Text (high 7.2)
- [CVE-2021-23279](https://insights.sbomify.com/CVE-2021-23279/): Arbitrary File delete (high 8.0)
- [CVE-2021-23278](https://insights.sbomify.com/CVE-2021-23278/): Arbitrary File delete (high 8.7)
- [CVE-2021-23277](https://insights.sbomify.com/CVE-2021-23277/): Improper Neutralization of Directives in Dynamically Evaluated Code (high 8.3)
- [CVE-2021-23276](https://insights.sbomify.com/CVE-2021-23276/): Improper Neutralization of Special Elements used in an SQL Command (high 7.1)
- [CVE-2021-23275](https://insights.sbomify.com/CVE-2021-23275/): TIBCO Spotfire Windows Platform Installation vulnerability (high 8.8)
- [CVE-2021-23274](https://insights.sbomify.com/CVE-2021-23274/): TIBCO API Exchange Gateway Clickjack Vulnerability (critical 9.8)
- [CVE-2021-23273](https://insights.sbomify.com/CVE-2021-23273/): TIBCO Spotfire Cross Site Scripting Vulnerability (high 8.0)
- [CVE-2021-23272](https://insights.sbomify.com/CVE-2021-23272/): TIBCO BPM Cross Site Scripting (XSS) (medium 4.6)
- [CVE-2021-23271](https://insights.sbomify.com/CVE-2021-23271/): TIBCO EBX Cross Site Scripting (XSS) (high 8.0)
- [CVE-2021-23270](https://insights.sbomify.com/CVE-2021-23270/): Denial of service in gargoyle-router:gargoyle (high 7.5)
- [CVE-2021-23267](https://insights.sbomify.com/CVE-2021-23267/): Improper Control of Dynamically-Managed Code Resources in Crafter Studio (high 7.6)
- [CVE-2021-23266](https://insights.sbomify.com/CVE-2021-23266/): Improper Output Neutralization for Logs in Crafter Studio (medium 4.3)
- [CVE-2021-23265](https://insights.sbomify.com/CVE-2021-23265/): Improper Privilege Management in Crafter Studio (low 3.5)
- [CVE-2021-23264](https://insights.sbomify.com/CVE-2021-23264/): Exposure of Resource to Wrong Sphere in org.craftercms:crafter-search (high 8.1)
- [CVE-2021-23263](https://insights.sbomify.com/CVE-2021-23263/): Transmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine (medium 5.9)
- [CVE-2021-23262](https://insights.sbomify.com/CVE-2021-23262/): Snakeyaml deserialization vulnerability bypass (medium 4.2)
- [CVE-2021-23261](https://insights.sbomify.com/CVE-2021-23261/): Overriding the system configuration file causes a denial of service (medium 4.5)
- [CVE-2021-23260](https://insights.sbomify.com/CVE-2021-23260/): Stored XSS Vulnerability in File Name of the File Upload function (medium 6.5)
- [CVE-2021-2326](https://insights.sbomify.com/CVE-2021-2326/): Information disclosure in Database - Enterprise Edition (low 2.7)
- [CVE-2021-23259](https://insights.sbomify.com/CVE-2021-23259/): Groovy Sandbox Bypass (medium 4.2)
- [CVE-2021-23258](https://insights.sbomify.com/CVE-2021-23258/): Spring SPEL Expression Language Injection (medium 4.2)
- [CVE-2021-23253](https://insights.sbomify.com/CVE-2021-23253/): Other in Opera Mini for Android (medium 5.3)
- [CVE-2021-23247](https://insights.sbomify.com/CVE-2021-23247/): Command injection in OPPO Quick App (critical 9.8)
- [CVE-2021-23246](https://insights.sbomify.com/CVE-2021-23246/): Information disclosure in ACE2 (high 7.5)
- [CVE-2021-23244](https://insights.sbomify.com/CVE-2021-23244/): Privilege escalation in OPPO Android Phone (high 7.8)
- [CVE-2021-23243](https://insights.sbomify.com/CVE-2021-23243/): Other in OPPO Android Phone with Qualcomm chipset (high 7.8)
- [CVE-2021-23242](https://insights.sbomify.com/CVE-2021-23242/): Path traversal in mercusys:mercury x18g firmware (medium 5.3)
- [CVE-2021-23241](https://insights.sbomify.com/CVE-2021-23241/): Path traversal in mercusys:mercury x18g firmware (medium 5.3)
- [CVE-2021-23240](https://insights.sbomify.com/CVE-2021-23240/): Privilege escalation in fedoraproject:fedora (high 7.8)
- [CVE-2021-2324](https://insights.sbomify.com/CVE-2021-2324/): Other in FLEXCUBE Universal Banking (medium 4.6)
- [CVE-2021-23239](https://insights.sbomify.com/CVE-2021-23239/): Race condition in debian:debian linux (low 2.5)
- [CVE-2021-23236](https://insights.sbomify.com/CVE-2021-23236/): Fresenius Kabi Agilia Connect Infusion System uncontrolled resource consumption (high 7.5)
- [CVE-2021-23233](https://insights.sbomify.com/CVE-2021-23233/): Fresenius Kabi Agilia Connect Infusion System (high 7.3)
- [CVE-2021-23230](https://insights.sbomify.com/CVE-2021-23230/): SQL injection in Command Centre (critical 9.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/221/