# Vulnerabilities published in 2021


- [CVE-2021-20791](https://insights.sbomify.com/CVE-2021-20791/): Security feature bypass in RevoWorks Browser (critical 9.3)
- [CVE-2021-20790](https://insights.sbomify.com/CVE-2021-20790/): Code injection in RevoWorks Browser (critical 9.6)
- [CVE-2021-2079](https://insights.sbomify.com/CVE-2021-2079/): Other in Configurator (high 8.2)
- [CVE-2021-20789](https://insights.sbomify.com/CVE-2021-20789/): Open redirect in GroupSession (medium 6.1)
- [CVE-2021-20788](https://insights.sbomify.com/CVE-2021-20788/): Server-side request forgery in GroupSession (medium 4.3)
- [CVE-2021-20787](https://insights.sbomify.com/CVE-2021-20787/): Cross-site scripting in GroupSession (medium 4.8)
- [CVE-2021-20786](https://insights.sbomify.com/CVE-2021-20786/): Cross-site request forgery in GroupSession (medium 4.3)
- [CVE-2021-20785](https://insights.sbomify.com/CVE-2021-20785/): Cross-site scripting in GroupSession (medium 4.8)
- [CVE-2021-20784](https://insights.sbomify.com/CVE-2021-20784/): Other in Everything (medium 6.1)
- [CVE-2021-20783](https://insights.sbomify.com/CVE-2021-20783/): Cross-site request forgery in Optical BB unit E-WMTA2.3 (high 8.8)
- [CVE-2021-20782](https://insights.sbomify.com/CVE-2021-20782/): Cross-site request forgery in Software License Manager (high 8.8)
- [CVE-2021-20781](https://insights.sbomify.com/CVE-2021-20781/): Cross-site request forgery in WordPress Meta Data Filter & Taxonomies Filter (high 8.8)
- [CVE-2021-20780](https://insights.sbomify.com/CVE-2021-20780/): Cross-site request forgery in WPCS - WordPress Currency Switcher (high 8.8)
- [CVE-2021-2078](https://insights.sbomify.com/CVE-2021-2078/): Other in Configurator (high 8.2)
- [CVE-2021-20779](https://insights.sbomify.com/CVE-2021-20779/): Cross-site request forgery in WordPress Email Template Designer - WP HTML Mail (high 8.8)
- [CVE-2021-20778](https://insights.sbomify.com/CVE-2021-20778/): Missing authorization in EC-CUBE (high 7.5)
- [CVE-2021-20777](https://insights.sbomify.com/CVE-2021-20777/): Open redirect in GU App for Android (medium 4.3)
- [CVE-2021-20776](https://insights.sbomify.com/CVE-2021-20776/): Auth bypass in SCT-40CM01SR and AT-40CM01SR (critical 9.8)
- [CVE-2021-20775](https://insights.sbomify.com/CVE-2021-20775/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-20774](https://insights.sbomify.com/CVE-2021-20774/): Cross-site scripting in Cybozu Garoon (medium 5.4)
- [CVE-2021-20773](https://insights.sbomify.com/CVE-2021-20773/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-20772](https://insights.sbomify.com/CVE-2021-20772/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-20771](https://insights.sbomify.com/CVE-2021-20771/): Cross-site scripting in Cybozu Garoon (medium 6.1)
- [CVE-2021-20770](https://insights.sbomify.com/CVE-2021-20770/): Cross-site scripting in Cybozu Garoon (medium 5.4)
- [CVE-2021-2077](https://insights.sbomify.com/CVE-2021-2077/): Other in iStore (high 8.2)
- [CVE-2021-20769](https://insights.sbomify.com/CVE-2021-20769/): Cross-site scripting in Cybozu Garoon (medium 5.4)
- [CVE-2021-20768](https://insights.sbomify.com/CVE-2021-20768/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-20767](https://insights.sbomify.com/CVE-2021-20767/): Cross-site scripting in Cybozu Garoon (medium 5.4)
- [CVE-2021-20766](https://insights.sbomify.com/CVE-2021-20766/): Cross-site scripting in Cybozu Garoon (medium 6.1)
- [CVE-2021-20765](https://insights.sbomify.com/CVE-2021-20765/): Cross-site scripting in Cybozu Garoon (medium 6.1)
- [CVE-2021-20764](https://insights.sbomify.com/CVE-2021-20764/): Other in Cybozu Garoon (medium 5.3)
- [CVE-2021-20763](https://insights.sbomify.com/CVE-2021-20763/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-20762](https://insights.sbomify.com/CVE-2021-20762/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-20761](https://insights.sbomify.com/CVE-2021-20761/): Missing authorization in Cybozu Garoon (low 2.7)
- [CVE-2021-20760](https://insights.sbomify.com/CVE-2021-20760/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-2076](https://insights.sbomify.com/CVE-2021-2076/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20759](https://insights.sbomify.com/CVE-2021-20759/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-20758](https://insights.sbomify.com/CVE-2021-20758/): Cross-site request forgery in Cybozu Garoon (high 8.0)
- [CVE-2021-20757](https://insights.sbomify.com/CVE-2021-20757/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-20756](https://insights.sbomify.com/CVE-2021-20756/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-20755](https://insights.sbomify.com/CVE-2021-20755/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-20754](https://insights.sbomify.com/CVE-2021-20754/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2021-20753](https://insights.sbomify.com/CVE-2021-20753/): Cross-site scripting in Cybozu Garoon (medium 5.4)
- [CVE-2021-20752](https://insights.sbomify.com/CVE-2021-20752/): Cross-site scripting in IkaIka RSS Reader (medium 6.1)
- [CVE-2021-20751](https://insights.sbomify.com/CVE-2021-20751/): EC-CUBE Cross-site scripting vulnerability (medium 6.1)
- [CVE-2021-20750](https://insights.sbomify.com/CVE-2021-20750/): EC-CUBE Cross-site scripting vulnerability (medium 6.1)
- [CVE-2021-2075](https://insights.sbomify.com/CVE-2021-2075/): Other in WebLogic Server (critical 9.8)
- [CVE-2021-20749](https://insights.sbomify.com/CVE-2021-20749/): Cross-site scripting in 'Fudousan plugin' series (medium 5.4)
- [CVE-2021-20748](https://insights.sbomify.com/CVE-2021-20748/): Hardcoded credentials in Retty App (high 7.5)
- [CVE-2021-20747](https://insights.sbomify.com/CVE-2021-20747/): Open redirect in Retty App (medium 4.3)
- [CVE-2021-20746](https://insights.sbomify.com/CVE-2021-20746/): Cross-site scripting in WordPress Popular Posts (medium 5.4)
- [CVE-2021-20745](https://insights.sbomify.com/CVE-2021-20745/): Command injection in Inkdrop (high 7.8)
- [CVE-2021-20744](https://insights.sbomify.com/CVE-2021-20744/): Cross-site scripting in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) (medium 6.1)
- [CVE-2021-20743](https://insights.sbomify.com/CVE-2021-20743/): Cross-site scripting in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) (medium 6.1)
- [CVE-2021-20742](https://insights.sbomify.com/CVE-2021-20742/): Cross-site scripting in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) (medium 6.1)
- [CVE-2021-20741](https://insights.sbomify.com/CVE-2021-20741/): Cross-site scripting in Hitachi Application Server Help (medium 6.1)
- [CVE-2021-20740](https://insights.sbomify.com/CVE-2021-20740/): Command injection in Hitachi Virtual File Platform and NEC Storage M Series NAS Gateway which uses Hitachi Virtual File Platform (high 8.8)
- [CVE-2021-2074](https://insights.sbomify.com/CVE-2021-2074/): Other in VM VirtualBox (high 8.2)
- [CVE-2021-20739](https://insights.sbomify.com/CVE-2021-20739/): Command injection in WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S (high 8.8)
- [CVE-2021-20738](https://insights.sbomify.com/CVE-2021-20738/): Information disclosure in WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA (medium 6.5)
- [CVE-2021-20737](https://insights.sbomify.com/CVE-2021-20737/): Auth bypass in GROWI (medium 6.5)
- [CVE-2021-20736](https://insights.sbomify.com/CVE-2021-20736/): SQL injection in GROWI (critical 9.1)
- [CVE-2021-20735](https://insights.sbomify.com/CVE-2021-20735/): Cross-site scripting in ETUNA EC-CUBE plugins (medium 6.1)
- [CVE-2021-20734](https://insights.sbomify.com/CVE-2021-20734/): Cross-site scripting in Welcart e-Commerce (medium 6.1)
- [CVE-2021-20733](https://insights.sbomify.com/CVE-2021-20733/): Open redirect in あすけんダイエット (asken diet) for Android (medium 6.1)
- [CVE-2021-20732](https://insights.sbomify.com/CVE-2021-20732/): Weak cryptography in ATOM (medium 5.9)
- [CVE-2021-20731](https://insights.sbomify.com/CVE-2021-20731/): Command injection in WSR-1166DHP3 and WSR-1166DHP4 (high 8.8)
- [CVE-2021-20730](https://insights.sbomify.com/CVE-2021-20730/): Missing authorization in WSR-1166DHP3 and WSR-1166DHP4 (medium 4.3)
- [CVE-2021-2073](https://insights.sbomify.com/CVE-2021-2073/): Denial of service in VM VirtualBox (medium 4.4)
- [CVE-2021-20729](https://insights.sbomify.com/CVE-2021-20729/): Cross-site scripting in pfSense CE and pfSense Plus (medium 6.1)
- [CVE-2021-20728](https://insights.sbomify.com/CVE-2021-20728/): Open redirect in goo blog App (medium 5.3)
- [CVE-2021-20727](https://insights.sbomify.com/CVE-2021-20727/): Cross-site scripting in Zettlr (medium 6.1)
- [CVE-2021-20726](https://insights.sbomify.com/CVE-2021-20726/): Other in The Installer of Overwolf (high 7.8)
- [CVE-2021-20725](https://insights.sbomify.com/CVE-2021-20725/): Cross-site scripting in [Calendar01] free edition (medium 6.1)
- [CVE-2021-20724](https://insights.sbomify.com/CVE-2021-20724/): Cross-site scripting in [Telop01] free edition (medium 6.1)
- [CVE-2021-20723](https://insights.sbomify.com/CVE-2021-20723/): Cross-site scripting in [MailForm01] free edition (medium 6.1)
- [CVE-2021-20722](https://insights.sbomify.com/CVE-2021-20722/): Other in The installers of ScanSnap Manager and the Software Download Installer (high 7.8)
- [CVE-2021-20721](https://insights.sbomify.com/CVE-2021-20721/): File upload in KonaWiki2 (critical 9.8)
- [CVE-2021-20720](https://insights.sbomify.com/CVE-2021-20720/): SQL injection in KonaWiki2 (critical 9.8)
- [CVE-2021-2072](https://insights.sbomify.com/CVE-2021-2072/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20719](https://insights.sbomify.com/CVE-2021-20719/): Command injection in RFNTPS (medium 6.8)
- [CVE-2021-20718](https://insights.sbomify.com/CVE-2021-20718/): Denial of service in mod auth openidc (high 7.5)
- [CVE-2021-20717](https://insights.sbomify.com/CVE-2021-20717/): EC-CUBE Cross-site scripting vulnerability (medium 6.1)
- [CVE-2021-20716](https://insights.sbomify.com/CVE-2021-20716/): Other in Buffalo network devices (critical 9.8)
- [CVE-2021-20715](https://insights.sbomify.com/CVE-2021-20715/): Open redirect in Hot Pepper Gourmet App (medium 4.3)
- [CVE-2021-20714](https://insights.sbomify.com/CVE-2021-20714/): Path traversal in WP Fastest Cache (medium 6.5)
- [CVE-2021-20713](https://insights.sbomify.com/CVE-2021-20713/): Privilege escalation in QND Advance/Premium/Standard (high 7.8)
- [CVE-2021-20712](https://insights.sbomify.com/CVE-2021-20712/): Security feature bypass in NEC Aterm devices (medium 5.3)
- [CVE-2021-20711](https://insights.sbomify.com/CVE-2021-20711/): Command injection in Aterm WG2600HS (critical 9.8)
- [CVE-2021-20710](https://insights.sbomify.com/CVE-2021-20710/): Cross-site scripting in Aterm WG2600HS (medium 6.1)
- [CVE-2021-2071](https://insights.sbomify.com/CVE-2021-2071/): Other in PeopleSoft Enterprise PT PeopleTools (high 8.1)
- [CVE-2021-20709](https://insights.sbomify.com/CVE-2021-20709/): Command injection in NEC Aterm devices (high 7.2)
- [CVE-2021-20708](https://insights.sbomify.com/CVE-2021-20708/): Command injection in NEC Aterm devices (high 7.2)
- [CVE-2021-20707](https://insights.sbomify.com/CVE-2021-20707/): Path traversal in CLUSTERPRO X (high 7.5)
- [CVE-2021-20706](https://insights.sbomify.com/CVE-2021-20706/): File upload in CLUSTERPRO X (high 7.5)
- [CVE-2021-20705](https://insights.sbomify.com/CVE-2021-20705/): File upload in CLUSTERPRO X (high 7.5)
- [CVE-2021-20704](https://insights.sbomify.com/CVE-2021-20704/): Memory corruption in CLUSTERPRO X (critical 9.8)
- [CVE-2021-20703](https://insights.sbomify.com/CVE-2021-20703/): Memory corruption in CLUSTERPRO X (critical 9.8)
- [CVE-2021-20702](https://insights.sbomify.com/CVE-2021-20702/): Memory corruption in CLUSTERPRO X (critical 9.8)
- [CVE-2021-20701](https://insights.sbomify.com/CVE-2021-20701/): Memory corruption in CLUSTERPRO X (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/244/