# Vulnerabilities published in 2021 - [CVE-2021-20992](https://insights.sbomify.com/CVE-2021-20992/): Fibaro Home Center Unencrypted management interface (high 8.1) - [CVE-2021-20991](https://insights.sbomify.com/CVE-2021-20991/): Fibaro Home Center Authenticated remote command execution (critical 9.8) - [CVE-2021-20990](https://insights.sbomify.com/CVE-2021-20990/): Fibaro Home Center Unauthenticated access to shutdown, reboot and reboot to recovery mode (high 7.5) - [CVE-2021-2099](https://insights.sbomify.com/CVE-2021-2099/): Other in CRM Technical Foundation (high 8.2) - [CVE-2021-20989](https://insights.sbomify.com/CVE-2021-20989/): Fibaro Home Center Insufficient remote access server authorization (medium 5.9) - [CVE-2021-20988](https://insights.sbomify.com/CVE-2021-20988/): Hilscher rcX RTOS: Wrong handling of the UDP checksum (high 8.6) - [CVE-2021-20987](https://insights.sbomify.com/CVE-2021-20987/): Hilscher: EtherNet/IP stack crash for specific CIP service (high 8.6) - [CVE-2021-20986](https://insights.sbomify.com/CVE-2021-20986/): Hilscher: Denial of Service vulnerability in PROFINET IO Device (high 7.5) - [CVE-2021-2098](https://insights.sbomify.com/CVE-2021-2098/): Other in Email Center (high 8.2) - [CVE-2021-2097](https://insights.sbomify.com/CVE-2021-2097/): Other in iSupport (high 8.2) - [CVE-2021-2096](https://insights.sbomify.com/CVE-2021-2096/): Other in iStore (high 8.2) - [CVE-2021-2094](https://insights.sbomify.com/CVE-2021-2094/): Other in One-to-One Fulfillment (high 8.2) - [CVE-2021-2093](https://insights.sbomify.com/CVE-2021-2093/): Other in Common Applications (high 8.2) - [CVE-2021-2092](https://insights.sbomify.com/CVE-2021-2092/): Other in CRM Technical Foundation (high 8.2) - [CVE-2021-2091](https://insights.sbomify.com/CVE-2021-2091/): Other in Scripting (high 8.2) - [CVE-2021-2090](https://insights.sbomify.com/CVE-2021-2090/): Other in Email Center (high 8.2) - [CVE-2021-2089](https://insights.sbomify.com/CVE-2021-2089/): Other in iStore (high 8.2) - [CVE-2021-2088](https://insights.sbomify.com/CVE-2021-2088/): Denial of service in MySQL Server (medium 4.4) - [CVE-2021-20877](https://insights.sbomify.com/CVE-2021-20877/): Cross-site scripting in Canon laser printers and small office multifunctional printers (medium 4.8) - [CVE-2021-20876](https://insights.sbomify.com/CVE-2021-20876/): Path traversal in GroupSession Free edition, GroupSession byCloud, GroupSession ZION (medium 6.8) - [CVE-2021-20875](https://insights.sbomify.com/CVE-2021-20875/): Open redirect in GroupSession Free edition, GroupSession byCloud, GroupSession ZION (medium 6.1) - [CVE-2021-20874](https://insights.sbomify.com/CVE-2021-20874/): Misconfiguration in GroupSession Free edition, GroupSession byCloud, GroupSession ZION (high 7.5) - [CVE-2021-20873](https://insights.sbomify.com/CVE-2021-20873/): Open redirect in Yappli (high 8.1) - [CVE-2021-20872](https://insights.sbomify.com/CVE-2021-20872/): Security feature bypass in bizhub series (medium 6.8) - [CVE-2021-20871](https://insights.sbomify.com/CVE-2021-20871/): Information disclosure in bizhub series (medium 6.5) - [CVE-2021-20870](https://insights.sbomify.com/CVE-2021-20870/): Information disclosure in bizhub series (medium 4.6) - [CVE-2021-2087](https://insights.sbomify.com/CVE-2021-2087/): Denial of service in MySQL Server (medium 4.4) - [CVE-2021-20869](https://insights.sbomify.com/CVE-2021-20869/): Information disclosure in bizhub series (medium 6.5) - [CVE-2021-20868](https://insights.sbomify.com/CVE-2021-20868/): Missing authorization in bizhub series (medium 4.5) - [CVE-2021-20867](https://insights.sbomify.com/CVE-2021-20867/): Missing authorization in Advanced Custom Fields and Advanced Custom Fields Pro (medium 6.5) - [CVE-2021-20866](https://insights.sbomify.com/CVE-2021-20866/): Missing authorization in Advanced Custom Fields and Advanced Custom Fields Pro (medium 6.5) - [CVE-2021-20865](https://insights.sbomify.com/CVE-2021-20865/): Missing authorization in Advanced Custom Fields and Advanced Custom Fields Pro (high 7.5) - [CVE-2021-20864](https://insights.sbomify.com/CVE-2021-20864/): Missing authorization in ELECOM routers (high 8.8) - [CVE-2021-20863](https://insights.sbomify.com/CVE-2021-20863/): Command injection in ELECOM routers (high 8.0) - [CVE-2021-20862](https://insights.sbomify.com/CVE-2021-20862/): Missing authorization in ELECOM routers (medium 4.3) - [CVE-2021-20861](https://insights.sbomify.com/CVE-2021-20861/): Auth bypass in ELECOM LAN routers (high 8.8) - [CVE-2021-20860](https://insights.sbomify.com/CVE-2021-20860/): Cross-site request forgery in ELECOM LAN routers (high 8.8) - [CVE-2021-2086](https://insights.sbomify.com/CVE-2021-2086/): Denial of service in VM VirtualBox (medium 6.0) - [CVE-2021-20859](https://insights.sbomify.com/CVE-2021-20859/): Command injection in ELECOM LAN routers (high 8.0) - [CVE-2021-20858](https://insights.sbomify.com/CVE-2021-20858/): Cross-site scripting in ELECOM LAN router (medium 5.4) - [CVE-2021-20857](https://insights.sbomify.com/CVE-2021-20857/): Cross-site scripting in ELECOM LAN router (medium 5.4) - [CVE-2021-20856](https://insights.sbomify.com/CVE-2021-20856/): Cross-site scripting in ELECOM LAN routers (medium 5.4) - [CVE-2021-20855](https://insights.sbomify.com/CVE-2021-20855/): Cross-site scripting in ELECOM LAN routers (medium 5.4) - [CVE-2021-20854](https://insights.sbomify.com/CVE-2021-20854/): Command injection in ELECOM LAN routers (medium 6.8) - [CVE-2021-20853](https://insights.sbomify.com/CVE-2021-20853/): Command injection in ELECOM LAN routers (medium 6.8) - [CVE-2021-20852](https://insights.sbomify.com/CVE-2021-20852/): Memory corruption in ELECOM LAN routers (medium 6.8) - [CVE-2021-20851](https://insights.sbomify.com/CVE-2021-20851/): Cross-site request forgery in Browser and Operating System Finder (high 8.8) - [CVE-2021-20850](https://insights.sbomify.com/CVE-2021-20850/): Command injection in PowerCMS XMLRPC API (critical 9.8) - [CVE-2021-2085](https://insights.sbomify.com/CVE-2021-2085/): Other in CRM Technical Foundation (high 8.2) - [CVE-2021-20848](https://insights.sbomify.com/CVE-2021-20848/): Cross-site Scripting in github.com/schollz/rwtxt (medium 6.1) - [CVE-2021-20847](https://insights.sbomify.com/CVE-2021-20847/): Cross-site scripting in Wi-Fi STATION SH-52A (medium 6.1) - [CVE-2021-20846](https://insights.sbomify.com/CVE-2021-20846/): Cross-site request forgery in Push Notifications for WordPress (Lite) (high 8.8) - [CVE-2021-20845](https://insights.sbomify.com/CVE-2021-20845/): Cross-site request forgery in Unlimited Sitemap Generator (high 8.8) - [CVE-2021-20844](https://insights.sbomify.com/CVE-2021-20844/): Cross-site scripting in RTX830, NVR510, NVR700W, RTX1210 (medium 5.7) - [CVE-2021-20843](https://insights.sbomify.com/CVE-2021-20843/): Cross-site scripting in RTX830, NVR510, NVR700W, RTX1210 (medium 5.4) - [CVE-2021-20842](https://insights.sbomify.com/CVE-2021-20842/): EC-CUBE Cross-site request forgery (CSRF) vulnerability (medium 6.5) - [CVE-2021-20841](https://insights.sbomify.com/CVE-2021-20841/): EC-CUBE Improper access control in Management screen (medium 6.5) - [CVE-2021-20840](https://insights.sbomify.com/CVE-2021-20840/): Cross-site scripting in Booking Package - Appointment Booking Calendar System (medium 6.1) - [CVE-2021-2084](https://insights.sbomify.com/CVE-2021-2084/): Other in CRM Technical Foundation (high 8.2) - [CVE-2021-20839](https://insights.sbomify.com/CVE-2021-20839/): XML external entity in Office Server Document Converter (medium 6.5) - [CVE-2021-20838](https://insights.sbomify.com/CVE-2021-20838/): XML external entity in Office Server Document Converter (high 7.5) - [CVE-2021-20837](https://insights.sbomify.com/CVE-2021-20837/): Command injection in Movable Type (critical 9.8) - [CVE-2021-20836](https://insights.sbomify.com/CVE-2021-20836/): Memory corruption in OMRON CX-Supervisor (medium 6.5) - [CVE-2021-20835](https://insights.sbomify.com/CVE-2021-20835/): Missing authorization in Android App 'Mercari (Merpay) - Marketplace and Mobile Payments App' (Japan version) (high 7.5) - [CVE-2021-20834](https://insights.sbomify.com/CVE-2021-20834/): Open redirect in Nike App for Android versions prior to 2.177 and Nike App for iOS versions prior to 2.177.1 (medium 6.1) - [CVE-2021-20833](https://insights.sbomify.com/CVE-2021-20833/): Weak cryptography in SNKRDUNK Market Place App for iOS (high 7.4) - [CVE-2021-20832](https://insights.sbomify.com/CVE-2021-20832/): Information disclosure in InBody App for iOS versions prior to 2.3.30 and InBody App for Android versions prior to 2.2.90(510) (medium 5.3) - [CVE-2021-20831](https://insights.sbomify.com/CVE-2021-20831/): Cross-site request forgery in OG Tags (high 8.8) - [CVE-2021-2083](https://insights.sbomify.com/CVE-2021-2083/): Other in iSupport (high 8.2) - [CVE-2021-20829](https://insights.sbomify.com/CVE-2021-20829/): Cross-site scripting in GROWI (medium 6.1) - [CVE-2021-20828](https://insights.sbomify.com/CVE-2021-20828/): Cross-site scripting in Order Status Batch Change Plug-in (for EC-CUBE 3.0 series) (medium 6.1) - [CVE-2021-20827](https://insights.sbomify.com/CVE-2021-20827/): Information disclosure in IDEC PLC (high 7.5) - [CVE-2021-20826](https://insights.sbomify.com/CVE-2021-20826/): Information disclosure in IDEC PLC (high 7.6) - [CVE-2021-20825](https://insights.sbomify.com/CVE-2021-20825/): Cross-site scripting in List (order management) item change plug-in (for EC-CUBE 3.0 series) (medium 6.1) - [CVE-2021-2082](https://insights.sbomify.com/CVE-2021-2082/): Other in iStore (high 8.2) - [CVE-2021-20815](https://insights.sbomify.com/CVE-2021-20815/): Cross-site scripting in Movable Type (medium 6.1) - [CVE-2021-20814](https://insights.sbomify.com/CVE-2021-20814/): Cross-site scripting in Movable Type (medium 6.1) - [CVE-2021-20813](https://insights.sbomify.com/CVE-2021-20813/): Cross-site scripting in Movable Type (medium 6.1) - [CVE-2021-20812](https://insights.sbomify.com/CVE-2021-20812/): Cross-site scripting in Movable Type (medium 6.1) - [CVE-2021-20811](https://insights.sbomify.com/CVE-2021-20811/): Cross-site scripting in Movable Type (medium 6.1) - [CVE-2021-20810](https://insights.sbomify.com/CVE-2021-20810/): Cross-site scripting in Movable Type (medium 6.1) - [CVE-2021-2081](https://insights.sbomify.com/CVE-2021-2081/): Denial of service in MySQL Server (medium 4.9) - [CVE-2021-20809](https://insights.sbomify.com/CVE-2021-20809/): Cross-site scripting in Movable Type (medium 6.1) - [CVE-2021-20808](https://insights.sbomify.com/CVE-2021-20808/): Cross-site scripting in Movable Type (medium 6.1) - [CVE-2021-20807](https://insights.sbomify.com/CVE-2021-20807/): Cross-site scripting in Cybozu Remote Service (medium 6.1) - [CVE-2021-20806](https://insights.sbomify.com/CVE-2021-20806/): Open redirect in Cybozu Remote Service (medium 6.1) - [CVE-2021-20805](https://insights.sbomify.com/CVE-2021-20805/): Cross-site scripting in Cybozu Remote Service (medium 5.4) - [CVE-2021-20804](https://insights.sbomify.com/CVE-2021-20804/): Denial of service in Cybozu Remote Service (medium 6.5) - [CVE-2021-20803](https://insights.sbomify.com/CVE-2021-20803/): Missing authorization in Cybozu Remote Service (medium 5.4) - [CVE-2021-20802](https://insights.sbomify.com/CVE-2021-20802/): Other in Cybozu Remote Service (medium 5.3) - [CVE-2021-20801](https://insights.sbomify.com/CVE-2021-20801/): XML external entity in Cybozu Remote Service (medium 6.5) - [CVE-2021-20800](https://insights.sbomify.com/CVE-2021-20800/): Cross-site scripting in Cybozu Remote Service (medium 5.4) - [CVE-2021-2080](https://insights.sbomify.com/CVE-2021-2080/): Other in Configurator (high 8.2) - [CVE-2021-20799](https://insights.sbomify.com/CVE-2021-20799/): Cross-site scripting in Cybozu Remote Service (medium 5.4) - [CVE-2021-20798](https://insights.sbomify.com/CVE-2021-20798/): Cross-site scripting in Cybozu Remote Service (medium 5.4) - [CVE-2021-20797](https://insights.sbomify.com/CVE-2021-20797/): Cross-site scripting in Cybozu Remote Service (medium 5.4) - [CVE-2021-20796](https://insights.sbomify.com/CVE-2021-20796/): Path traversal in Cybozu Remote Service (medium 6.5) - [CVE-2021-20795](https://insights.sbomify.com/CVE-2021-20795/): Cross-site request forgery in Cybozu Remote Service (high 8.8) - [CVE-2021-20793](https://insights.sbomify.com/CVE-2021-20793/): Other in The installers of multiple Sony products (high 7.8) - [CVE-2021-20792](https://insights.sbomify.com/CVE-2021-20792/): Cross-site scripting in Quiz And Survey Master (medium 6.1) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/243/