# Vulnerabilities published in 2021


- [CVE-2021-21270](https://insights.sbomify.com/CVE-2021-21270/): Cleartext Storage of Sensitive Information (medium 6.2)
- [CVE-2021-2127](https://insights.sbomify.com/CVE-2021-2127/): Denial of service in VM VirtualBox (medium 4.4)
- [CVE-2021-21269](https://insights.sbomify.com/CVE-2021-21269/): Path Traversal in Keymaker (high 7.7)
- [CVE-2021-21267](https://insights.sbomify.com/CVE-2021-21267/): Regular Expression Denial-of-Service in npm schema-inspector (high 7.5)
- [CVE-2021-21266](https://insights.sbomify.com/CVE-2021-21266/): XXE vulnerability in OpenHAB (medium 6.4)
- [CVE-2021-21265](https://insights.sbomify.com/CVE-2021-21265/): October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers (medium 6.8)
- [CVE-2021-21264](https://insights.sbomify.com/CVE-2021-21264/): Bypass of fix for CVE-2020-26231, Twig sandbox escape (medium 5.2)
- [CVE-2021-21263](https://insights.sbomify.com/CVE-2021-21263/): Query Binding Exploitation in Laravel (high 7.2)
- [CVE-2021-21261](https://insights.sbomify.com/CVE-2021-21261/): Flatpak sandbox escape via spawn portal (high 7.3)
- [CVE-2021-21260](https://insights.sbomify.com/CVE-2021-21260/): XSS in description field (high 7.6)
- [CVE-2021-2126](https://insights.sbomify.com/CVE-2021-2126/): Other in VM VirtualBox (medium 6.0)
- [CVE-2021-21259](https://insights.sbomify.com/CVE-2021-21259/): Stored XSS in slide mode (high 7.4)
- [CVE-2021-21258](https://insights.sbomify.com/CVE-2021-21258/): XSS injection in ajax/kanban (medium 6.8)
- [CVE-2021-21257](https://insights.sbomify.com/CVE-2021-21257/): Out-of-bounds write in RPL-Classic and RPL-Lite (high 8.2)
- [CVE-2021-21255](https://insights.sbomify.com/CVE-2021-21255/): entities switch IDOR (medium 5.8)
- [CVE-2021-21254](https://insights.sbomify.com/CVE-2021-21254/): Regular expression Denial of Service in Markdown plugin (medium 6.5)
- [CVE-2021-21253](https://insights.sbomify.com/CVE-2021-21253/): Use of a One-Way Hash without a Salt in OnlineVotingSystem (medium 5.8)
- [CVE-2021-21252](https://insights.sbomify.com/CVE-2021-21252/): Regular expression denial of service in jquery-validation (medium 5.3)
- [CVE-2021-21251](https://insights.sbomify.com/CVE-2021-21251/): ZipSlip Arbitrary File Upload (high 7.7)
- [CVE-2021-21250](https://insights.sbomify.com/CVE-2021-21250/): Post-Auth External Entity Expansion (XXE) (high 7.7)
- [CVE-2021-2125](https://insights.sbomify.com/CVE-2021-2125/): Other in VM VirtualBox (medium 4.6)
- [CVE-2021-21249](https://insights.sbomify.com/CVE-2021-21249/): Post-Auth Unsafe Yaml deserialization (critical 9.6)
- [CVE-2021-21248](https://insights.sbomify.com/CVE-2021-21248/): Post-Auth Arbitrary Code execution via Groovy script injection (critical 9.6)
- [CVE-2021-21247](https://insights.sbomify.com/CVE-2021-21247/): Post-Auth Unsafe Deserialization on BasePage (AJAX) (critical 9.6)
- [CVE-2021-21246](https://insights.sbomify.com/CVE-2021-21246/): Pre-Auth Access token leak (high 8.6)
- [CVE-2021-21245](https://insights.sbomify.com/CVE-2021-21245/): Pre-Auth Arbitrary File Upload (critical 10.0)
- [CVE-2021-21244](https://insights.sbomify.com/CVE-2021-21244/): Pre-Auth SSTI via Bean validation message tampering (critical 10.0)
- [CVE-2021-21243](https://insights.sbomify.com/CVE-2021-21243/): Pre-Auth Unsafe Deserialization on KubernetesResource (critical 10.0)
- [CVE-2021-21242](https://insights.sbomify.com/CVE-2021-21242/): Pre-Auth Unsafe Deserialization on AttachmentUploadServet (critical 10.0)
- [CVE-2021-21241](https://insights.sbomify.com/CVE-2021-21241/): CSRF can expose users authentication token in Flask-Security-Too (high 7.4)
- [CVE-2021-21240](https://insights.sbomify.com/CVE-2021-21240/): Regular Expression Denial of Service in httplib2 (high 7.5)
- [CVE-2021-2124](https://insights.sbomify.com/CVE-2021-2124/): Denial of service in VM VirtualBox (medium 6.0)
- [CVE-2021-21239](https://insights.sbomify.com/CVE-2021-21239/): Open default xmlsec1 key-type preference (medium 6.5)
- [CVE-2021-21238](https://insights.sbomify.com/CVE-2021-21238/): SAML XML Signature wrapping (medium 6.5)
- [CVE-2021-21237](https://insights.sbomify.com/CVE-2021-21237/): Git LFS can execute a Git binary from the current directory on Windows (high 7.2)
- [CVE-2021-21236](https://insights.sbomify.com/CVE-2021-21236/): Regular Expression Denial of Service in CairoSVG (medium 5.7)
- [CVE-2021-21235](https://insights.sbomify.com/CVE-2021-21235/): Infinite loop in parsing PNG files in (medium 5.7)
- [CVE-2021-21234](https://insights.sbomify.com/CVE-2021-21234/): Directory Traversal (high 7.7)
- [CVE-2021-21233](https://insights.sbomify.com/CVE-2021-21233/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-21232](https://insights.sbomify.com/CVE-2021-21232/): Use after free in Chrome (high 8.8)
- [CVE-2021-21231](https://insights.sbomify.com/CVE-2021-21231/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-21230](https://insights.sbomify.com/CVE-2021-21230/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-2123](https://insights.sbomify.com/CVE-2021-2123/): Information disclosure in VM VirtualBox (low 3.2)
- [CVE-2021-21229](https://insights.sbomify.com/CVE-2021-21229/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2021-21228](https://insights.sbomify.com/CVE-2021-21228/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2021-21227](https://insights.sbomify.com/CVE-2021-21227/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-21226](https://insights.sbomify.com/CVE-2021-21226/): Use after free in Chrome (critical 9.6)
- [CVE-2021-21225](https://insights.sbomify.com/CVE-2021-21225/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-21224](https://insights.sbomify.com/CVE-2021-21224/): Google Chromium V8 Type Confusion (high 8.8, exploited in the wild)
- [CVE-2021-21223](https://insights.sbomify.com/CVE-2021-21223/): Integer overflow in Chrome (critical 9.6)
- [CVE-2021-21222](https://insights.sbomify.com/CVE-2021-21222/): Memory corruption in Chrome (medium 6.5)
- [CVE-2021-21221](https://insights.sbomify.com/CVE-2021-21221/): Information disclosure in Chrome (medium 6.5)
- [CVE-2021-21220](https://insights.sbomify.com/CVE-2021-21220/): Google Chromium V8 Improper Input Validation (high 8.8, exploited in the wild)
- [CVE-2021-2122](https://insights.sbomify.com/CVE-2021-2122/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-21219](https://insights.sbomify.com/CVE-2021-21219/): Information disclosure in Chrome (medium 5.5)
- [CVE-2021-21218](https://insights.sbomify.com/CVE-2021-21218/): Information disclosure in Chrome (medium 5.5)
- [CVE-2021-21217](https://insights.sbomify.com/CVE-2021-21217/): Information disclosure in Chrome (medium 5.5)
- [CVE-2021-21216](https://insights.sbomify.com/CVE-2021-21216/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2021-21215](https://insights.sbomify.com/CVE-2021-21215/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2021-21214](https://insights.sbomify.com/CVE-2021-21214/): Use after free in Chrome (high 8.8)
- [CVE-2021-21213](https://insights.sbomify.com/CVE-2021-21213/): Use after free in Chrome (high 8.8)
- [CVE-2021-21212](https://insights.sbomify.com/CVE-2021-21212/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2021-21211](https://insights.sbomify.com/CVE-2021-21211/): Information disclosure in Chrome (medium 6.5)
- [CVE-2021-21210](https://insights.sbomify.com/CVE-2021-21210/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2021-2121](https://insights.sbomify.com/CVE-2021-2121/): Denial of service in VM VirtualBox (medium 6.0)
- [CVE-2021-21209](https://insights.sbomify.com/CVE-2021-21209/): Information disclosure in Chrome (medium 6.5)
- [CVE-2021-21208](https://insights.sbomify.com/CVE-2021-21208/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2021-21207](https://insights.sbomify.com/CVE-2021-21207/): Use after free in Chrome (high 8.6)
- [CVE-2021-21206](https://insights.sbomify.com/CVE-2021-21206/): Google Chromium Blink Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-21205](https://insights.sbomify.com/CVE-2021-21205/): Security feature bypass in Chrome (high 8.1)
- [CVE-2021-21204](https://insights.sbomify.com/CVE-2021-21204/): Use after free in Chrome (high 8.8)
- [CVE-2021-21203](https://insights.sbomify.com/CVE-2021-21203/): Use after free in Chrome (high 8.8)
- [CVE-2021-21202](https://insights.sbomify.com/CVE-2021-21202/): Use after free in Chrome (high 8.6)
- [CVE-2021-21201](https://insights.sbomify.com/CVE-2021-21201/): Use after free in Chrome (critical 9.6)
- [CVE-2021-21200](https://insights.sbomify.com/CVE-2021-21200/): Memory corruption in Chrome (medium 5.4)
- [CVE-2021-2120](https://insights.sbomify.com/CVE-2021-2120/): Information disclosure in VM VirtualBox (medium 6.0)
- [CVE-2021-21199](https://insights.sbomify.com/CVE-2021-21199/): Use after free in Chrome (high 8.8)
- [CVE-2021-21198](https://insights.sbomify.com/CVE-2021-21198/): Memory corruption in Chrome (high 7.4)
- [CVE-2021-21197](https://insights.sbomify.com/CVE-2021-21197/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-21196](https://insights.sbomify.com/CVE-2021-21196/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-21195](https://insights.sbomify.com/CVE-2021-21195/): Use after free in Chrome (high 8.8)
- [CVE-2021-21194](https://insights.sbomify.com/CVE-2021-21194/): Use after free in Chrome (high 8.8)
- [CVE-2021-21193](https://insights.sbomify.com/CVE-2021-21193/): Google Chromium Blink Use-After-Free (high 8.8, exploited in the wild)
- [CVE-2021-21192](https://insights.sbomify.com/CVE-2021-21192/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-21191](https://insights.sbomify.com/CVE-2021-21191/): Use after free in Chrome (high 8.8)
- [CVE-2021-21190](https://insights.sbomify.com/CVE-2021-21190/): Information disclosure in Chrome (high 8.8)
- [CVE-2021-2119](https://insights.sbomify.com/CVE-2021-2119/): Information disclosure in VM VirtualBox (medium 6.0)
- [CVE-2021-21189](https://insights.sbomify.com/CVE-2021-21189/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2021-21188](https://insights.sbomify.com/CVE-2021-21188/): Use after free in Chrome (high 8.8)
- [CVE-2021-21187](https://insights.sbomify.com/CVE-2021-21187/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2021-21186](https://insights.sbomify.com/CVE-2021-21186/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2021-21185](https://insights.sbomify.com/CVE-2021-21185/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2021-21184](https://insights.sbomify.com/CVE-2021-21184/): Information disclosure in Chrome (medium 4.3)
- [CVE-2021-21183](https://insights.sbomify.com/CVE-2021-21183/): Information disclosure in Chrome (medium 4.3)
- [CVE-2021-21182](https://insights.sbomify.com/CVE-2021-21182/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2021-21181](https://insights.sbomify.com/CVE-2021-21181/): Information disclosure in Chrome (medium 6.5)
- [CVE-2021-21180](https://insights.sbomify.com/CVE-2021-21180/): Use after free in Chrome (high 8.8)
- [CVE-2021-2118](https://insights.sbomify.com/CVE-2021-2118/): Other in Marketing (high 8.2)
- [CVE-2021-21179](https://insights.sbomify.com/CVE-2021-21179/): Use after free in Chrome (high 8.8)
- [CVE-2021-21178](https://insights.sbomify.com/CVE-2021-21178/): Other in Chrome (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/240/