# Vulnerabilities published in 2021 - [CVE-2021-21782](https://insights.sbomify.com/CVE-2021-21782/): Memory corruption in Accusoft (critical 9.8) - [CVE-2021-21781](https://insights.sbomify.com/CVE-2021-21781/): Information disclosure in Linux Kernel (medium 4.0) - [CVE-2021-2178](https://insights.sbomify.com/CVE-2021-2178/): Denial of service in MySQL Server (medium 6.5) - [CVE-2021-21779](https://insights.sbomify.com/CVE-2021-21779/): Use after free in Webkit (medium 6.8) - [CVE-2021-21778](https://insights.sbomify.com/CVE-2021-21778/): Denial of service in MZ Automation" (high 7.5) - [CVE-2021-21777](https://insights.sbomify.com/CVE-2021-21777/): Memory corruption in EIP Stack Group (high 8.6) - [CVE-2021-21776](https://insights.sbomify.com/CVE-2021-21776/): Memory corruption in Accusoft (critical 9.8) - [CVE-2021-21775](https://insights.sbomify.com/CVE-2021-21775/): Use after free in Webkit (medium 6.8) - [CVE-2021-21773](https://insights.sbomify.com/CVE-2021-21773/): Memory corruption in Accusoft (high 8.1) - [CVE-2021-21772](https://insights.sbomify.com/CVE-2021-21772/): Use after free in 3MF (high 8.1) - [CVE-2021-2177](https://insights.sbomify.com/CVE-2021-2177/): Other in Secure Global Desktop (critical 10.0) - [CVE-2021-21751](https://insights.sbomify.com/CVE-2021-21751/): Other in ZXIN10 CMS (high 8.1) - [CVE-2021-21750](https://insights.sbomify.com/CVE-2021-21750/): Privilege escalation in ZXIN10 CMS (high 7.8) - [CVE-2021-2175](https://insights.sbomify.com/CVE-2021-2175/): Information disclosure in Database - Enterprise Edition (low 2.7) - [CVE-2021-21749](https://insights.sbomify.com/CVE-2021-21749/): Memory corruption in MF971R (critical 9.8) - [CVE-2021-21748](https://insights.sbomify.com/CVE-2021-21748/): Memory corruption in MF971R (critical 9.8) - [CVE-2021-21747](https://insights.sbomify.com/CVE-2021-21747/): Cross-site scripting in MF971R (medium 6.1) - [CVE-2021-21746](https://insights.sbomify.com/CVE-2021-21746/): Cross-site scripting in MF971R (medium 6.1) - [CVE-2021-21745](https://insights.sbomify.com/CVE-2021-21745/): Cross-site request forgery in MF971R (medium 4.3) - [CVE-2021-21744](https://insights.sbomify.com/CVE-2021-21744/): Missing authorization in MF971R (high 7.5) - [CVE-2021-21743](https://insights.sbomify.com/CVE-2021-21743/): Other in MF971R (medium 4.3) - [CVE-2021-21742](https://insights.sbomify.com/CVE-2021-21742/): Information disclosure in ZTE Axon 30 Pro Message Service App (medium 5.5) - [CVE-2021-21741](https://insights.sbomify.com/CVE-2021-21741/): Deserialization in ZXV10 M910 (critical 9.8) - [CVE-2021-21740](https://insights.sbomify.com/CVE-2021-21740/): Information disclosure in ZXHN H2640 (low 2.4) - [CVE-2021-2174](https://insights.sbomify.com/CVE-2021-2174/): Denial of service in MySQL Server (medium 4.4) - [CVE-2021-21739](https://insights.sbomify.com/CVE-2021-21739/): Security feature bypass in (medium 4.6) - [CVE-2021-21738](https://insights.sbomify.com/CVE-2021-21738/): Cross-site scripting in (medium 6.1) - [CVE-2021-21737](https://insights.sbomify.com/CVE-2021-21737/): Missing authorization in ZXV10 B860H V5.0 (high 7.5) - [CVE-2021-21736](https://insights.sbomify.com/CVE-2021-21736/): Missing authorization in ZXHN HS562 (high 7.2) - [CVE-2021-21735](https://insights.sbomify.com/CVE-2021-21735/): Information disclosure in ZXHN H168N (medium 6.5) - [CVE-2021-21734](https://insights.sbomify.com/CVE-2021-21734/): Information disclosure in ZTE PON MDU devices (medium 6.5) - [CVE-2021-21733](https://insights.sbomify.com/CVE-2021-21733/): Information disclosure in (medium 4.9) - [CVE-2021-21732](https://insights.sbomify.com/CVE-2021-21732/): Missing authorization in (high 7.5) - [CVE-2021-21731](https://insights.sbomify.com/CVE-2021-21731/): Cross-site request forgery in ZXCLOUD iRAI (high 8.1) - [CVE-2021-21730](https://insights.sbomify.com/CVE-2021-21730/): Auth bypass in ZXHN H168N (critical 9.8) - [CVE-2021-2173](https://insights.sbomify.com/CVE-2021-2173/): Information disclosure in Database - Enterprise Edition (medium 4.1) - [CVE-2021-21729](https://insights.sbomify.com/CVE-2021-21729/): Cross-site request forgery in ZXHN H168N,ZXHN H108N (medium 6.5) - [CVE-2021-21728](https://insights.sbomify.com/CVE-2021-21728/): Misconfiguration in ZXA10 C300M (medium 5.3) - [CVE-2021-21727](https://insights.sbomify.com/CVE-2021-21727/): Denial of service in (high 7.5) - [CVE-2021-21726](https://insights.sbomify.com/CVE-2021-21726/): Denial of service in (low 2.3) - [CVE-2021-21725](https://insights.sbomify.com/CVE-2021-21725/): Information disclosure in ZXHN H196Q (medium 5.7) - [CVE-2021-21724](https://insights.sbomify.com/CVE-2021-21724/): Denial of service in ZXR10 8900E (medium 4.4) - [CVE-2021-21723](https://insights.sbomify.com/CVE-2021-21723/): Denial of service in (high 7.5) - [CVE-2021-21722](https://insights.sbomify.com/CVE-2021-21722/): Information disclosure in ZXV10 B860A (medium 4.4) - [CVE-2021-2172](https://insights.sbomify.com/CVE-2021-2172/): Denial of service in MySQL Server (medium 6.5) - [CVE-2021-2171](https://insights.sbomify.com/CVE-2021-2171/): Denial of service in MySQL Server (medium 4.4) - [CVE-2021-21708](https://insights.sbomify.com/CVE-2021-21708/): UAF due to php_filter_float() failing (high 8.2) - [CVE-2021-21707](https://insights.sbomify.com/CVE-2021-21707/): Special characters break path parsing in XML functions (medium 5.3) - [CVE-2021-21706](https://insights.sbomify.com/CVE-2021-21706/): ZipArchive::extractTo may extract outside of destination dir (medium 5.3) - [CVE-2021-21705](https://insights.sbomify.com/CVE-2021-21705/): Incorrect URL validation in FILTER_VALIDATE_URL (medium 4.3) - [CVE-2021-21704](https://insights.sbomify.com/CVE-2021-21704/): Multiple vulnerabilities in Firebird client extension (medium 5.0) - [CVE-2021-21703](https://insights.sbomify.com/CVE-2021-21703/): PHP-FPM memory access in root process leading to privilege escalation (high 7.8) - [CVE-2021-21702](https://insights.sbomify.com/CVE-2021-21702/): Null Dereference in SoapClient (medium 5.3) - [CVE-2021-21701](https://insights.sbomify.com/CVE-2021-21701/): XXE vulnerability in Jenkins Performance Plugin (medium 6.5) - [CVE-2021-21700](https://insights.sbomify.com/CVE-2021-21700/): Stored XSS vulnerability in Jenkins Scriptler Plugin (medium 5.4) - [CVE-2021-2170](https://insights.sbomify.com/CVE-2021-2170/): Denial of service in MySQL Server (medium 4.9) - [CVE-2021-21699](https://insights.sbomify.com/CVE-2021-21699/): Stored XSS vulnerability in Jenkins Active Choices Plugin (medium 5.4) - [CVE-2021-21698](https://insights.sbomify.com/CVE-2021-21698/): Path traversal vulnerability in Jenkins Subversion Plugin allows reading arbitrary files (high 7.5) - [CVE-2021-21697](https://insights.sbomify.com/CVE-2021-21697/): Agent-to-controller access control allows reading/writing most content of build directories in Jenkins (critical 9.1) - [CVE-2021-21696](https://insights.sbomify.com/CVE-2021-21696/): Agent-to-controller access control allowed writing to sensitive directory used by Jenkins Pipeline: Shared Groovy Libraries Plugin (critical 9.8) - [CVE-2021-21695](https://insights.sbomify.com/CVE-2021-21695/): Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins (high 8.8) - [CVE-2021-21694](https://insights.sbomify.com/CVE-2021-21694/): Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins (critical 9.8) - [CVE-2021-21693](https://insights.sbomify.com/CVE-2021-21693/): Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins (critical 9.8) - [CVE-2021-21692](https://insights.sbomify.com/CVE-2021-21692/): Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins (critical 9.8) - [CVE-2021-21691](https://insights.sbomify.com/CVE-2021-21691/): Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins (critical 9.8) - [CVE-2021-21690](https://insights.sbomify.com/CVE-2021-21690/): Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins (critical 9.8) - [CVE-2021-2169](https://insights.sbomify.com/CVE-2021-2169/): Denial of service in MySQL Server (medium 4.9) - [CVE-2021-21689](https://insights.sbomify.com/CVE-2021-21689/): Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins (critical 9.1) - [CVE-2021-21688](https://insights.sbomify.com/CVE-2021-21688/): Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins (high 7.5) - [CVE-2021-21687](https://insights.sbomify.com/CVE-2021-21687/): Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins (critical 9.1) - [CVE-2021-21686](https://insights.sbomify.com/CVE-2021-21686/): Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins (high 8.1) - [CVE-2021-21685](https://insights.sbomify.com/CVE-2021-21685/): Multiple vulnerabilities allow bypassing path filtering of agent-to-controller access control in Jenkins (critical 9.1) - [CVE-2021-21684](https://insights.sbomify.com/CVE-2021-21684/): Stored XSS vulnerability in Jenkins Git Plugin (medium 6.1) - [CVE-2021-21683](https://insights.sbomify.com/CVE-2021-21683/): Path traversal vulnerability on Windows in Jenkins (medium 6.5) - [CVE-2021-21682](https://insights.sbomify.com/CVE-2021-21682/): Improper handling of equivalent directory names on Windows in Jenkins (medium 4.3) - [CVE-2021-21681](https://insights.sbomify.com/CVE-2021-21681/): Password stored in plain text by Jenkins Nomad Plugin (medium 5.5) - [CVE-2021-21680](https://insights.sbomify.com/CVE-2021-21680/): XXE vulnerability in Jenkins Nested View Plugin (high 7.1) - [CVE-2021-21679](https://insights.sbomify.com/CVE-2021-21679/): Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL (high 8.8) - [CVE-2021-21678](https://insights.sbomify.com/CVE-2021-21678/): Jenkins SAML Plugin allows bypassing CSRF protection for any URL (high 8.8) - [CVE-2021-21677](https://insights.sbomify.com/CVE-2021-21677/): RCE vulnerability in Jenkins Code Coverage API Plugin (high 8.8) - [CVE-2021-21676](https://insights.sbomify.com/CVE-2021-21676/): Missing permission check in Jenkins requests-plugin Plugin allows sending emails (medium 4.3) - [CVE-2021-21675](https://insights.sbomify.com/CVE-2021-21675/): CSRF vulnerabilities in Jenkins requests-plugin Plugin (medium 6.5) - [CVE-2021-21674](https://insights.sbomify.com/CVE-2021-21674/): Missing permission check in Jenkins requests-plugin Plugin allows viewing pending requests (medium 4.3) - [CVE-2021-21673](https://insights.sbomify.com/CVE-2021-21673/): Open redirect vulnerability in Jenkins CAS Plugin (medium 6.1) - [CVE-2021-21672](https://insights.sbomify.com/CVE-2021-21672/): XXE vulnerability in Jenkins Selenium HTML report Plugin (medium 4.3) - [CVE-2021-21671](https://insights.sbomify.com/CVE-2021-21671/): Session fixation vulnerability in Jenkins (high 7.5) - [CVE-2021-21670](https://insights.sbomify.com/CVE-2021-21670/): Improper permission checks allow canceling queue items and aborting builds in Jenkins (medium 4.3) - [CVE-2021-2167](https://insights.sbomify.com/CVE-2021-2167/): Privilege escalation in Solaris Operating System (high 7.8) - [CVE-2021-21669](https://insights.sbomify.com/CVE-2021-21669/): XXE vulnerability in Jenkins Generic Webhook Trigger Plugin (critical 9.8) - [CVE-2021-21668](https://insights.sbomify.com/CVE-2021-21668/): Stored XSS vulnerability in Jenkins Scriptler Plugin (medium 5.4) - [CVE-2021-21667](https://insights.sbomify.com/CVE-2021-21667/): Stored XSS vulnerability in Jenkins Scriptler Plugin (medium 5.4) - [CVE-2021-21666](https://insights.sbomify.com/CVE-2021-21666/): Cross-site scripting in Jenkins Kiuwan Plugin (medium 6.1) - [CVE-2021-21665](https://insights.sbomify.com/CVE-2021-21665/): CSRF vulnerability in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials (high 8.8) - [CVE-2021-21664](https://insights.sbomify.com/CVE-2021-21664/): Incorrect permission check in XebiaLabs XL Deploy Plugin allows capturing credentials (medium 6.5) - [CVE-2021-21663](https://insights.sbomify.com/CVE-2021-21663/): Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows capturing credentials (medium 4.3) - [CVE-2021-21662](https://insights.sbomify.com/CVE-2021-21662/): Missing permission check in Jenkins XebiaLabs XL Deploy Plugin allows enumerating credentials IDs (medium 4.3) - [CVE-2021-21661](https://insights.sbomify.com/CVE-2021-21661/): Missing Authorization in Jenkins Kubernetes CLI Plugin (medium 4.3) - [CVE-2021-21660](https://insights.sbomify.com/CVE-2021-21660/): XSS vulnerability in Jenkins Markdown Formatter Plugin (medium 5.4) - [CVE-2021-2166](https://insights.sbomify.com/CVE-2021-2166/): Denial of service in MySQL Server (medium 4.9) - [CVE-2021-21659](https://insights.sbomify.com/CVE-2021-21659/): XXE vulnerability in Jenkins URLTrigger Plugin (high 8.1) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/235/