# Vulnerabilities published in 2021


- [CVE-2021-2323](https://insights.sbomify.com/CVE-2021-2323/): Information disclosure in FLEXCUBE Universal Banking (medium 5.9)
- [CVE-2021-23228](https://insights.sbomify.com/CVE-2021-23228/): Delta Electronics DIAEnergie (Update A) (high 7.5)
- [CVE-2021-23227](https://insights.sbomify.com/CVE-2021-23227/): WordPress PHP Everywhere Plugin <= 2.0.2 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2021-23225](https://insights.sbomify.com/CVE-2021-23225/): Cross-site scripting in Cacti (medium 5.4)
- [CVE-2021-23223](https://insights.sbomify.com/CVE-2021-23223/): Privilege escalation in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products (high 7.8)
- [CVE-2021-23222](https://insights.sbomify.com/CVE-2021-23222/): Security feature bypass in postgresql (medium 5.9)
- [CVE-2021-2322](https://insights.sbomify.com/CVE-2021-2322/): Server-side request forgery in OpenGrok (high 8.8)
- [CVE-2021-23219](https://insights.sbomify.com/CVE-2021-23219/): Information disclosure in NVIDIA GPU and Tegra hardware (medium 4.1)
- [CVE-2021-23218](https://insights.sbomify.com/CVE-2021-23218/): Memory Leak in Mirantis Container Runtime (MCR) running in FIPS mode causes a Denial of Service (medium 5.3)
- [CVE-2021-23217](https://insights.sbomify.com/CVE-2021-23217/): Memory corruption in NVIDIA GPU and Tegra hardware (high 7.5)
- [CVE-2021-23215](https://insights.sbomify.com/CVE-2021-23215/): Integer overflow in OpenEXR (medium 5.5)
- [CVE-2021-23214](https://insights.sbomify.com/CVE-2021-23214/): SQL injection in postgresql (high 8.1)
- [CVE-2021-23211](https://insights.sbomify.com/CVE-2021-23211/): Information disclosure in Command Centre (medium 6.0)
- [CVE-2021-23210](https://insights.sbomify.com/CVE-2021-23210/): Denial of service in SoX (Sound eXchange) (medium 5.5)
- [CVE-2021-2321](https://insights.sbomify.com/CVE-2021-2321/): Memory corruption in VM VirtualBox (medium 6.0)
- [CVE-2021-23209](https://insights.sbomify.com/CVE-2021-23209/): Cross-site scripting in AMP for WP – Accelerated Mobile Pages (WordPress plugin) (medium 4.8)
- [CVE-2021-23207](https://insights.sbomify.com/CVE-2021-23207/): Fresenius Kabi Agilia Connect Infusion System plaintext storage of a password (medium 6.5)
- [CVE-2021-23206](https://insights.sbomify.com/CVE-2021-23206/): Memory corruption in htmldoc (high 7.8)
- [CVE-2021-23205](https://insights.sbomify.com/CVE-2021-23205/): Privilege escalation in Command Centre (high 8.1)
- [CVE-2021-23204](https://insights.sbomify.com/CVE-2021-23204/): Information disclosure in Command Centre (high 8.1)
- [CVE-2021-23203](https://insights.sbomify.com/CVE-2021-23203/): Missing authorization in Odoo Community (high 7.5)
- [CVE-2021-23201](https://insights.sbomify.com/CVE-2021-23201/): Security feature bypass in NVIDIA GPU and Tegra hardware (high 7.5)
- [CVE-2021-2320](https://insights.sbomify.com/CVE-2021-2320/): Other in Cloud Infrastructure (critical 9.1)
- [CVE-2021-23198](https://insights.sbomify.com/CVE-2021-23198/): mySCADA myPRO (critical 10.0)
- [CVE-2021-23197](https://insights.sbomify.com/CVE-2021-23197/): Privilege escalation in Command Centre (medium 5.2)
- [CVE-2021-23196](https://insights.sbomify.com/CVE-2021-23196/): Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials (high 7.3)
- [CVE-2021-23195](https://insights.sbomify.com/CVE-2021-23195/): Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listing (medium 5.3)
- [CVE-2021-23193](https://insights.sbomify.com/CVE-2021-23193/): Privilege escalation in Command Centre (high 8.1)
- [CVE-2021-23192](https://insights.sbomify.com/CVE-2021-23192/): Security feature bypass in samba (high 7.5)
- [CVE-2021-23191](https://insights.sbomify.com/CVE-2021-23191/): Null dereference in htmldoc (high 7.8)
- [CVE-2021-2319](https://insights.sbomify.com/CVE-2021-2319/): Other in Cloud Infrastructure (critical 9.1)
- [CVE-2021-23188](https://insights.sbomify.com/CVE-2021-23188/): Missing authorization in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products (low 3.3)
- [CVE-2021-23186](https://insights.sbomify.com/CVE-2021-23186/): Security feature bypass in Odoo Community (high 8.7)
- [CVE-2021-23182](https://insights.sbomify.com/CVE-2021-23182/): Information disclosure in Command Centre (medium 6.0)
- [CVE-2021-23180](https://insights.sbomify.com/CVE-2021-23180/): Null dereference in htmldoc (high 7.8)
- [CVE-2021-2318](https://insights.sbomify.com/CVE-2021-2318/): Other in Cloud Infrastructure (critical 9.1)
- [CVE-2021-23179](https://insights.sbomify.com/CVE-2021-23179/): Memory corruption in Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products (high 7.1)
- [CVE-2021-23178](https://insights.sbomify.com/CVE-2021-23178/): Business logic in Odoo Community (high 7.5)
- [CVE-2021-23177](https://insights.sbomify.com/CVE-2021-23177/): Path traversal in libarchive (high 7.8)
- [CVE-2021-23176](https://insights.sbomify.com/CVE-2021-23176/): Missing authorization in Odoo Community (medium 6.5)
- [CVE-2021-23175](https://insights.sbomify.com/CVE-2021-23175/): Missing authorization in NVIDIA GeForce Experience Software (high 8.2)
- [CVE-2021-23174](https://insights.sbomify.com/CVE-2021-23174/): WordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability (low 3.4)
- [CVE-2021-23173](https://insights.sbomify.com/CVE-2021-23173/): ICSMA-22-006-01 Philips Engage Software (low 2.6)
- [CVE-2021-23172](https://insights.sbomify.com/CVE-2021-23172/): Memory corruption in SoX (Sound eXchange) (medium 5.5)
- [CVE-2021-2317](https://insights.sbomify.com/CVE-2021-2317/): Other in Cloud Infrastructure (critical 10.0)
- [CVE-2021-23169](https://insights.sbomify.com/CVE-2021-23169/): Memory corruption in OpenEXR (high 8.8)
- [CVE-2021-23168](https://insights.sbomify.com/CVE-2021-23168/): Memory corruption in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products (medium 6.5)
- [CVE-2021-23167](https://insights.sbomify.com/CVE-2021-23167/): Weak cryptography in Command Centre (high 8.1)
- [CVE-2021-23166](https://insights.sbomify.com/CVE-2021-23166/): Security feature bypass in Odoo Community (high 8.7)
- [CVE-2021-23165](https://insights.sbomify.com/CVE-2021-23165/): Memory corruption in htmldoc (critical 9.8)
- [CVE-2021-23163](https://insights.sbomify.com/CVE-2021-23163/): Cross-site request forgery in JFrog Artifactory (low 3.1)
- [CVE-2021-23162](https://insights.sbomify.com/CVE-2021-23162/): Security feature bypass in Command Centre Mobile Connect for Android (high 7.7)
- [CVE-2021-2316](https://insights.sbomify.com/CVE-2021-2316/): Other in HRMS (France) (high 8.1)
- [CVE-2021-23159](https://insights.sbomify.com/CVE-2021-23159/): Memory corruption in SoX (Sound eXchange) (medium 5.5)
- [CVE-2021-23158](https://insights.sbomify.com/CVE-2021-23158/): Memory corruption in htmldoc (critical 9.8)
- [CVE-2021-23157](https://insights.sbomify.com/CVE-2021-23157/): WECON LeviStudioU (high 7.8)
- [CVE-2021-23155](https://insights.sbomify.com/CVE-2021-23155/): Security feature bypass in Command Centre Mobile Client for Android (critical 9.0)
- [CVE-2021-23154](https://insights.sbomify.com/CVE-2021-23154/): Command injection in Lens (medium 6.3)
- [CVE-2021-23152](https://insights.sbomify.com/CVE-2021-23152/): Privilege escalation in Intel(R) Advisor software (high 7.8)
- [CVE-2021-23150](https://insights.sbomify.com/CVE-2021-23150/): Cross-site scripting in AMP for WP – Accelerated Mobile Pages (WordPress plugin) (medium 4.8)
- [CVE-2021-2315](https://insights.sbomify.com/CVE-2021-2315/): Other in HTTP Server (medium 5.4)
- [CVE-2021-23147](https://insights.sbomify.com/CVE-2021-23147/): Auth bypass in Netgear Nighthawk R6700 (medium 6.8)
- [CVE-2021-23146](https://insights.sbomify.com/CVE-2021-23146/): Auth bypass in Command Center (high 7.1)
- [CVE-2021-23140](https://insights.sbomify.com/CVE-2021-23140/): Missing authorization in Command Centre (critical 9.9)
- [CVE-2021-2314](https://insights.sbomify.com/CVE-2021-2314/): Other in Application Object Library (high 8.1)
- [CVE-2021-23139](https://insights.sbomify.com/CVE-2021-23139/): Null dereference in Trend Micro Apex One (high 7.5)
- [CVE-2021-23138](https://insights.sbomify.com/CVE-2021-23138/): WECON LeviStudioU (high 7.8)
- [CVE-2021-23136](https://insights.sbomify.com/CVE-2021-23136/): Missing authorization in Command Centre (medium 6.5)
- [CVE-2021-23135](https://insights.sbomify.com/CVE-2021-23135/): Argo CD leaked secret data into error messages and logs on invalid edits via UI (medium 5.9)
- [CVE-2021-23134](https://insights.sbomify.com/CVE-2021-23134/): Linux kernel llcp_sock_bind/connect use-after-free (high 7.8)
- [CVE-2021-23133](https://insights.sbomify.com/CVE-2021-23133/): Linux Kernel sctp_destroy_sock race condition (medium 6.7)
- [CVE-2021-23132](https://insights.sbomify.com/CVE-2021-23132/): [20210306] - Core - com_media allowed paths that are not intended for image uploads (high 7.5)
- [CVE-2021-23131](https://insights.sbomify.com/CVE-2021-23131/): [20210305] - Core - Input validation within the template manager (high 7.5)
- [CVE-2021-23130](https://insights.sbomify.com/CVE-2021-23130/): [20210304] - Core - XSS within the feed parser library (medium 6.1)
- [CVE-2021-23129](https://insights.sbomify.com/CVE-2021-23129/): [20210303] - Core - XSS within alert messages showed to users (medium 6.1)
- [CVE-2021-23128](https://insights.sbomify.com/CVE-2021-23128/): [20210302] - Core - Potential Insecure FOFEncryptRandval (critical 9.1)
- [CVE-2021-23127](https://insights.sbomify.com/CVE-2021-23127/): [20210301] - Core - Insecure randomness within 2FA secret generation (critical 9.1)
- [CVE-2021-23126](https://insights.sbomify.com/CVE-2021-23126/): [20210301] - Core - Insecure randomness within 2FA secret generation (medium 5.3)
- [CVE-2021-23125](https://insights.sbomify.com/CVE-2021-23125/): [20210103] - Core - XSS in com_tags image parameters (medium 6.1)
- [CVE-2021-23124](https://insights.sbomify.com/CVE-2021-23124/): [20210102] - Core - XSS in mod_breadcrumbs aria-label attribute (medium 6.1)
- [CVE-2021-23123](https://insights.sbomify.com/CVE-2021-23123/): [20210101] - Core - com_modules exposes module names (medium 5.3)
- [CVE-2021-2312](https://insights.sbomify.com/CVE-2021-2312/): Denial of service in VM VirtualBox (medium 4.4)
- [CVE-2021-2311](https://insights.sbomify.com/CVE-2021-2311/): Other in Hospitality Inventory Management (medium 6.5)
- [CVE-2021-2310](https://insights.sbomify.com/CVE-2021-2310/): Other in VM VirtualBox (high 7.5)
- [CVE-2021-2309](https://insights.sbomify.com/CVE-2021-2309/): Other in VM VirtualBox (high 7.5)
- [CVE-2021-2308](https://insights.sbomify.com/CVE-2021-2308/): Information disclosure in MySQL Server (low 2.7)
- [CVE-2021-2307](https://insights.sbomify.com/CVE-2021-2307/): Other in MySQL Server (medium 6.1)
- [CVE-2021-2306](https://insights.sbomify.com/CVE-2021-2306/): Information disclosure in VM VirtualBox (medium 6.0)
- [CVE-2021-23055](https://insights.sbomify.com/CVE-2021-23055/): Security feature bypass in NGINX Ingress Controller (medium 6.5)
- [CVE-2021-23054](https://insights.sbomify.com/CVE-2021-23054/): Cross-site scripting in BIG-IP APM (medium 6.1)
- [CVE-2021-23053](https://insights.sbomify.com/CVE-2021-23053/): Denial of service in BIG-IP Advanced WAF and BIG-IP ASM (medium 5.3)
- [CVE-2021-23052](https://insights.sbomify.com/CVE-2021-23052/): Open redirect in BIG-IP APM (medium 6.1)
- [CVE-2021-23051](https://insights.sbomify.com/CVE-2021-23051/): Denial of service in BIG-IP (high 7.5)
- [CVE-2021-23050](https://insights.sbomify.com/CVE-2021-23050/): Denial of service in BIG-IP Advanced WAF and BIG-IP ASM; NGINX App Protect (high 7.5)
- [CVE-2021-2305](https://insights.sbomify.com/CVE-2021-2305/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-23049](https://insights.sbomify.com/CVE-2021-23049/): Denial of service in BIG-IP (high 7.5)
- [CVE-2021-23048](https://insights.sbomify.com/CVE-2021-23048/): Denial of service in BIG-IP (high 7.5)
- [CVE-2021-23047](https://insights.sbomify.com/CVE-2021-23047/): Denial of service in BIG-IP APM (medium 5.3)
- [CVE-2021-23046](https://insights.sbomify.com/CVE-2021-23046/): Information disclosure in BIG-IP Guided Configuration (medium 4.9)
- [CVE-2021-23045](https://insights.sbomify.com/CVE-2021-23045/): Denial of service in BIG-IP (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/222/