# Vulnerabilities published in 2021


- [CVE-2021-22300](https://insights.sbomify.com/CVE-2021-22300/): Information disclosure in eCNS280 TD (medium 4.1)
- [CVE-2021-2230](https://insights.sbomify.com/CVE-2021-2230/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-22299](https://insights.sbomify.com/CVE-2021-22299/): Privilege escalation in ManageOne (high 7.8)
- [CVE-2021-22298](https://insights.sbomify.com/CVE-2021-22298/): Business logic in ManageOne (medium 6.5)
- [CVE-2021-22296](https://insights.sbomify.com/CVE-2021-22296/): Denial of service in HarmonyOS (medium 5.5)
- [CVE-2021-22295](https://insights.sbomify.com/CVE-2021-22295/): Privilege escalation in HarmonyOS (medium 5.5)
- [CVE-2021-22294](https://insights.sbomify.com/CVE-2021-22294/): Missing authorization in HarmonyOS (low 3.3)
- [CVE-2021-22293](https://insights.sbomify.com/CVE-2021-22293/): Information disclosure in CampusInsight (high 7.5)
- [CVE-2021-22292](https://insights.sbomify.com/CVE-2021-22292/): Denial of service in eCNS280 (high 7.5)
- [CVE-2021-22291](https://insights.sbomify.com/CVE-2021-22291/): EIBPORT Reflected XSS (high 8.5)
- [CVE-2021-2229](https://insights.sbomify.com/CVE-2021-2229/): Other in Depot Repair (high 8.1)
- [CVE-2021-22289](https://insights.sbomify.com/CVE-2021-22289/): RCE through Project Upload from Target (high 8.3)
- [CVE-2021-22288](https://insights.sbomify.com/CVE-2021-22288/): Denial of service in PNI800 (high 7.5)
- [CVE-2021-22286](https://insights.sbomify.com/CVE-2021-22286/): Denial of service in PNI800 (high 7.5)
- [CVE-2021-22285](https://insights.sbomify.com/CVE-2021-22285/): Denial of service in PNI800 (high 7.5)
- [CVE-2021-22284](https://insights.sbomify.com/CVE-2021-22284/): SECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability (high 8.4)
- [CVE-2021-22283](https://insights.sbomify.com/CVE-2021-22283/): MMS File Transfer Vulnerability impact on Distribution Automation products (medium 6.2)
- [CVE-2021-22282](https://insights.sbomify.com/CVE-2021-22282/): RCE in B&R Automation Studio with crafted project files (high 8.3)
- [CVE-2021-22281](https://insights.sbomify.com/CVE-2021-22281/): Zip Slip Vulnerability in B&R Automation Studio Project Import (medium 6.3)
- [CVE-2021-22280](https://insights.sbomify.com/CVE-2021-22280/): DLL Hijacking Vulnerability in Automation Studio (high 7.2)
- [CVE-2021-2228](https://insights.sbomify.com/CVE-2021-2228/): Other in Incentive Compensation (high 8.1)
- [CVE-2021-22279](https://insights.sbomify.com/CVE-2021-22279/): OmniCore RobotWare Missing Authentication Vulnerability (critical 9.8)
- [CVE-2021-22278](https://insights.sbomify.com/CVE-2021-22278/): Certificate verification vulnerability in Update Manager of PCM600 Engineering Tool (medium 6.7)
- [CVE-2021-22277](https://insights.sbomify.com/CVE-2021-22277/): AC 800M MMS - Denial of Service vulnerability in MMS communication (high 7.5)
- [CVE-2021-22276](https://insights.sbomify.com/CVE-2021-22276/): free@home System Access Point FW integrity check can be bypassed. (medium 6.1)
- [CVE-2021-22275](https://insights.sbomify.com/CVE-2021-22275/): Denial of service vulnerability on Automation Runtime webserver (high 8.6)
- [CVE-2021-22272](https://insights.sbomify.com/CVE-2021-22272/): ControlTouch Cloud Service vulnerability: Serial Number can be misused during commissioning phase. (medium 6.5)
- [CVE-2021-2227](https://insights.sbomify.com/CVE-2021-2227/): Other in Cash Management (high 8.1)
- [CVE-2021-22267](https://insights.sbomify.com/CVE-2021-22267/): Auth bypass in hpe:web viewpoint (medium 5.9)
- [CVE-2021-22264](https://insights.sbomify.com/CVE-2021-22264/): Business logic in GitLab (medium 6.8)
- [CVE-2021-22263](https://insights.sbomify.com/CVE-2021-22263/): Privilege escalation in GitLab (medium 5.5)
- [CVE-2021-22262](https://insights.sbomify.com/CVE-2021-22262/): Missing authorization in GitLab (medium 5.4)
- [CVE-2021-22261](https://insights.sbomify.com/CVE-2021-22261/): Cross-site scripting in GitLab (high 7.3)
- [CVE-2021-22260](https://insights.sbomify.com/CVE-2021-22260/): Cross-site scripting in GitLab (high 7.7)
- [CVE-2021-2226](https://insights.sbomify.com/CVE-2021-2226/): Information disclosure in MySQL Server (medium 4.9)
- [CVE-2021-22259](https://insights.sbomify.com/CVE-2021-22259/): Denial of service in GitLab (medium 4.3)
- [CVE-2021-22258](https://insights.sbomify.com/CVE-2021-22258/): Information disclosure in GitLab (medium 4.3)
- [CVE-2021-22257](https://insights.sbomify.com/CVE-2021-22257/): Information disclosure in GitLab (medium 5.3)
- [CVE-2021-22256](https://insights.sbomify.com/CVE-2021-22256/): Missing authorization in GitLab (medium 5.4)
- [CVE-2021-22255](https://insights.sbomify.com/CVE-2021-22255/): Server-side request forgery in Baserow (high 7.7)
- [CVE-2021-22254](https://insights.sbomify.com/CVE-2021-22254/): Auth bypass in GitLab (low 3.1)
- [CVE-2021-22253](https://insights.sbomify.com/CVE-2021-22253/): Missing authorization in GitLab (medium 4.9)
- [CVE-2021-22252](https://insights.sbomify.com/CVE-2021-22252/): Missing authorization in GitLab (medium 6.5)
- [CVE-2021-22251](https://insights.sbomify.com/CVE-2021-22251/): Business logic in GitLab (medium 4.3)
- [CVE-2021-22250](https://insights.sbomify.com/CVE-2021-22250/): Missing authorization in GitLab (medium 5.4)
- [CVE-2021-2225](https://insights.sbomify.com/CVE-2021-2225/): Other in E-Business Intelligence (high 8.1)
- [CVE-2021-22249](https://insights.sbomify.com/CVE-2021-22249/): Information disclosure in GitLab (medium 4.3)
- [CVE-2021-22248](https://insights.sbomify.com/CVE-2021-22248/): Missing authorization in GitLab (medium 5.3)
- [CVE-2021-22247](https://insights.sbomify.com/CVE-2021-22247/): Missing authorization in GitLab (medium 4.3)
- [CVE-2021-22246](https://insights.sbomify.com/CVE-2021-22246/): Denial of service in GitLab (high 7.7)
- [CVE-2021-22245](https://insights.sbomify.com/CVE-2021-22245/): Other in GitLab (low 2.7)
- [CVE-2021-22244](https://insights.sbomify.com/CVE-2021-22244/): Missing authorization in GitLab (low 3.1)
- [CVE-2021-22243](https://insights.sbomify.com/CVE-2021-22243/): Auth bypass in GitLab (medium 5.0)
- [CVE-2021-22242](https://insights.sbomify.com/CVE-2021-22242/): Cross-site scripting in GitLab (high 8.7)
- [CVE-2021-22241](https://insights.sbomify.com/CVE-2021-22241/): Cross-site scripting in GitLab (high 8.7)
- [CVE-2021-22240](https://insights.sbomify.com/CVE-2021-22240/): Missing authorization in GitLab EE (medium 4.2)
- [CVE-2021-2224](https://insights.sbomify.com/CVE-2021-2224/): Other in Compensation Workbench (high 8.1)
- [CVE-2021-22239](https://insights.sbomify.com/CVE-2021-22239/): Missing authorization in GitLab (medium 5.0)
- [CVE-2021-22238](https://insights.sbomify.com/CVE-2021-22238/): Cross-site scripting in GitLab (medium 6.8)
- [CVE-2021-22237](https://insights.sbomify.com/CVE-2021-22237/): Auth bypass in GitLab (medium 6.6)
- [CVE-2021-22236](https://insights.sbomify.com/CVE-2021-22236/): Auth bypass in GitLab (medium 5.5)
- [CVE-2021-22235](https://insights.sbomify.com/CVE-2021-22235/): Denial of service in Wireshark (high 7.5)
- [CVE-2021-22234](https://insights.sbomify.com/CVE-2021-22234/): Path traversal in GitLab (critical 9.6)
- [CVE-2021-22233](https://insights.sbomify.com/CVE-2021-22233/): Missing authorization in GitLab (medium 4.3)
- [CVE-2021-22232](https://insights.sbomify.com/CVE-2021-22232/): Cross-site scripting in GitLab (low 3.5)
- [CVE-2021-22231](https://insights.sbomify.com/CVE-2021-22231/): Denial of service in GitLab (low 3.5)
- [CVE-2021-22230](https://insights.sbomify.com/CVE-2021-22230/): Code injection in GitLab (medium 4.9)
- [CVE-2021-2223](https://insights.sbomify.com/CVE-2021-2223/): Other in Receivables (high 8.1)
- [CVE-2021-22229](https://insights.sbomify.com/CVE-2021-22229/): Information disclosure in GitLab (medium 5.9)
- [CVE-2021-22228](https://insights.sbomify.com/CVE-2021-22228/): Missing authorization in GitLab (medium 6.5)
- [CVE-2021-22227](https://insights.sbomify.com/CVE-2021-22227/): Cross-site scripting in GitLab (medium 6.1)
- [CVE-2021-22226](https://insights.sbomify.com/CVE-2021-22226/): Missing authorization in GitLab (medium 6.5)
- [CVE-2021-22225](https://insights.sbomify.com/CVE-2021-22225/): Cross-site scripting in GitLab (medium 4.7)
- [CVE-2021-22224](https://insights.sbomify.com/CVE-2021-22224/): Cross-site request forgery in GitLab (high 7.1)
- [CVE-2021-22223](https://insights.sbomify.com/CVE-2021-22223/): Cross-site scripting in GitLab (medium 6.1)
- [CVE-2021-22222](https://insights.sbomify.com/CVE-2021-22222/): Denial of service in Wireshark (high 7.5)
- [CVE-2021-22221](https://insights.sbomify.com/CVE-2021-22221/): Auth bypass in GitLab (medium 6.5)
- [CVE-2021-22220](https://insights.sbomify.com/CVE-2021-22220/): Cross-site scripting in GitLab (medium 6.1)
- [CVE-2021-2222](https://insights.sbomify.com/CVE-2021-2222/): Other in Bill Presentment Architecture (high 8.1)
- [CVE-2021-22219](https://insights.sbomify.com/CVE-2021-22219/): Information disclosure in GitLab (medium 4.4)
- [CVE-2021-22218](https://insights.sbomify.com/CVE-2021-22218/): Security feature bypass in GitLab (low 2.6)
- [CVE-2021-22217](https://insights.sbomify.com/CVE-2021-22217/): Denial of service in GitLab (medium 6.5)
- [CVE-2021-22216](https://insights.sbomify.com/CVE-2021-22216/): Denial of service in GitLab (medium 6.5)
- [CVE-2021-22215](https://insights.sbomify.com/CVE-2021-22215/): Information disclosure in GitLab (high 7.5)
- [CVE-2021-22214](https://insights.sbomify.com/CVE-2021-22214/): Server-side request forgery in GitLab (medium 6.8)
- [CVE-2021-22213](https://insights.sbomify.com/CVE-2021-22213/): Information disclosure in GitLab (high 8.8)
- [CVE-2021-22212](https://insights.sbomify.com/CVE-2021-22212/): Weak cryptography in ntpsec (medium 4.0)
- [CVE-2021-22211](https://insights.sbomify.com/CVE-2021-22211/): Auth bypass in GitLab (low 3.1)
- [CVE-2021-22210](https://insights.sbomify.com/CVE-2021-22210/): Information disclosure in GitLab (medium 5.3)
- [CVE-2021-2221](https://insights.sbomify.com/CVE-2021-2221/): Other in Secure Global Desktop (critical 9.6)
- [CVE-2021-22209](https://insights.sbomify.com/CVE-2021-22209/): Missing authorization in GitLab (high 7.5)
- [CVE-2021-22208](https://insights.sbomify.com/CVE-2021-22208/): Missing authorization in GitLab (medium 4.3)
- [CVE-2021-22207](https://insights.sbomify.com/CVE-2021-22207/): Denial of service in Wireshark (medium 5.5)
- [CVE-2021-22206](https://insights.sbomify.com/CVE-2021-22206/): Information disclosure in GitLab (medium 6.8)
- [CVE-2021-22205](https://insights.sbomify.com/CVE-2021-22205/): GitLab Community and Enterprise Editions Remote Code Execution (critical 10.0, exploited in the wild)
- [CVE-2021-22204](https://insights.sbomify.com/CVE-2021-22204/): ExifTool Remote Code Execution (medium 6.8, exploited in the wild)
- [CVE-2021-22203](https://insights.sbomify.com/CVE-2021-22203/): Path traversal in GitLab (high 7.5)
- [CVE-2021-22202](https://insights.sbomify.com/CVE-2021-22202/): Cross-site request forgery in GitLab (low 2.4)
- [CVE-2021-22201](https://insights.sbomify.com/CVE-2021-22201/): Path traversal in GitLab (critical 9.6)
- [CVE-2021-22200](https://insights.sbomify.com/CVE-2021-22200/): Information disclosure in GitLab (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/230/