# Vulnerabilities published in 2021


- [CVE-2021-20700](https://insights.sbomify.com/CVE-2021-20700/): Memory corruption in CLUSTERPRO X (critical 9.8)
- [CVE-2021-2070](https://insights.sbomify.com/CVE-2021-2070/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20699](https://insights.sbomify.com/CVE-2021-20699/): Memory corruption in C431 (critical 9.8)
- [CVE-2021-20698](https://insights.sbomify.com/CVE-2021-20698/): Command injection in C431 (critical 9.8)
- [CVE-2021-20697](https://insights.sbomify.com/CVE-2021-20697/): Auth bypass in DAP-1880AC (critical 9.8)
- [CVE-2021-20696](https://insights.sbomify.com/CVE-2021-20696/): Command injection in DAP-1880AC (high 8.8)
- [CVE-2021-20695](https://insights.sbomify.com/CVE-2021-20695/): Security feature bypass in DAP-1880AC (high 8.8)
- [CVE-2021-20694](https://insights.sbomify.com/CVE-2021-20694/): Missing authorization in DAP-1880AC (high 8.8)
- [CVE-2021-20693](https://insights.sbomify.com/CVE-2021-20693/): Open redirect in Gurunavi App (high 7.5)
- [CVE-2021-20692](https://insights.sbomify.com/CVE-2021-20692/): Path traversal in Archive collectively operation utility (high 7.1)
- [CVE-2021-20691](https://insights.sbomify.com/CVE-2021-20691/): Cross-site scripting in Yomi-Search (medium 6.1)
- [CVE-2021-20690](https://insights.sbomify.com/CVE-2021-20690/): Cross-site scripting in Yomi-Search (medium 6.1)
- [CVE-2021-2069](https://insights.sbomify.com/CVE-2021-2069/): Other in Outside In Technology (high 8.6)
- [CVE-2021-20689](https://insights.sbomify.com/CVE-2021-20689/): Cross-site scripting in Yomi-Search (medium 6.1)
- [CVE-2021-20688](https://insights.sbomify.com/CVE-2021-20688/): Cross-site scripting in Click Ranker (medium 6.1)
- [CVE-2021-20687](https://insights.sbomify.com/CVE-2021-20687/): Cross-site request forgery in Kagemai (high 8.8)
- [CVE-2021-20686](https://insights.sbomify.com/CVE-2021-20686/): Cross-site scripting in Kagemai (medium 6.1)
- [CVE-2021-20685](https://insights.sbomify.com/CVE-2021-20685/): Cross-site scripting in Kagemai (medium 6.1)
- [CVE-2021-20684](https://insights.sbomify.com/CVE-2021-20684/): Cross-site scripting in MagazinegerZ (medium 6.1)
- [CVE-2021-20683](https://insights.sbomify.com/CVE-2021-20683/): Cross-site Scripting (XSS) in baserCMS (medium 5.4)
- [CVE-2021-20682](https://insights.sbomify.com/CVE-2021-20682/): OS Command Injection in baserCMS (high 7.2)
- [CVE-2021-20681](https://insights.sbomify.com/CVE-2021-20681/): Cross-site Scripting (XSS) in baserCMS (medium 5.4)
- [CVE-2021-20680](https://insights.sbomify.com/CVE-2021-20680/): Cross-site scripting in NEC Aterm devices (medium 6.1)
- [CVE-2021-2068](https://insights.sbomify.com/CVE-2021-2068/): Other in Outside In Technology (high 8.6)
- [CVE-2021-20679](https://insights.sbomify.com/CVE-2021-20679/): Denial of service in Fuji Xerox multifunction devices and printers (high 7.5)
- [CVE-2021-20678](https://insights.sbomify.com/CVE-2021-20678/): SQL injection in Paid Memberships Pro (high 8.8)
- [CVE-2021-20677](https://insights.sbomify.com/CVE-2021-20677/): Denial of service in UNIVERGE Aspire series PBX (low 3.1)
- [CVE-2021-20676](https://insights.sbomify.com/CVE-2021-20676/): Missing authorization in M-System DL8 series (medium 4.3)
- [CVE-2021-20675](https://insights.sbomify.com/CVE-2021-20675/): Denial of service in M-System DL8 series (medium 6.5)
- [CVE-2021-20674](https://insights.sbomify.com/CVE-2021-20674/): Other in Installer of MagicConnect Client program (high 7.8)
- [CVE-2021-20673](https://insights.sbomify.com/CVE-2021-20673/): Cross-site scripting in GROWI (v4.2 Series) (medium 4.8)
- [CVE-2021-20672](https://insights.sbomify.com/CVE-2021-20672/): Cross-site scripting in GROWI (v4.2 Series) (medium 6.1)
- [CVE-2021-20671](https://insights.sbomify.com/CVE-2021-20671/): File upload in GROWI (high 7.2)
- [CVE-2021-20670](https://insights.sbomify.com/CVE-2021-20670/): Missing authorization in GROWI (high 7.5)
- [CVE-2021-2067](https://insights.sbomify.com/CVE-2021-2067/): Other in Outside In Technology (high 8.6)
- [CVE-2021-20669](https://insights.sbomify.com/CVE-2021-20669/): Path traversal in GROWI (medium 4.7)
- [CVE-2021-20668](https://insights.sbomify.com/CVE-2021-20668/): Path traversal in GROWI (low 2.7)
- [CVE-2021-20667](https://insights.sbomify.com/CVE-2021-20667/): Cross-site scripting in GROWI (medium 5.4)
- [CVE-2021-20665](https://insights.sbomify.com/CVE-2021-20665/): Cross-site scripting in Movable Type (medium 6.1)
- [CVE-2021-20664](https://insights.sbomify.com/CVE-2021-20664/): Cross-site scripting in Movable Type (medium 6.1)
- [CVE-2021-20663](https://insights.sbomify.com/CVE-2021-20663/): Cross-site scripting in Movable Type (medium 6.1)
- [CVE-2021-20662](https://insights.sbomify.com/CVE-2021-20662/): Missing authorization in SolarView Compact (high 7.5)
- [CVE-2021-20661](https://insights.sbomify.com/CVE-2021-20661/): Path traversal in SolarView Compact (high 8.1)
- [CVE-2021-20660](https://insights.sbomify.com/CVE-2021-20660/): Cross-site scripting in SolarView Compact (medium 6.1)
- [CVE-2021-2066](https://insights.sbomify.com/CVE-2021-2066/): Other in Outside In Technology (high 8.6)
- [CVE-2021-20659](https://insights.sbomify.com/CVE-2021-20659/): File upload in SolarView Compact (high 8.8)
- [CVE-2021-20658](https://insights.sbomify.com/CVE-2021-20658/): Command injection in SolarView Compact (critical 9.8)
- [CVE-2021-20657](https://insights.sbomify.com/CVE-2021-20657/): Missing authorization in SolarView Compact (medium 5.4)
- [CVE-2021-20656](https://insights.sbomify.com/CVE-2021-20656/): Information disclosure in SolarView Compact (medium 4.3)
- [CVE-2021-20655](https://insights.sbomify.com/CVE-2021-20655/): Command injection in FileZen (high 7.2)
- [CVE-2021-20654](https://insights.sbomify.com/CVE-2021-20654/): Cross-site scripting in Wekan (medium 5.4)
- [CVE-2021-20653](https://insights.sbomify.com/CVE-2021-20653/): Missing authorization in Calsos CSDJ (medium 5.3)
- [CVE-2021-20652](https://insights.sbomify.com/CVE-2021-20652/): Cross-site request forgery in Name Directory (high 8.8)
- [CVE-2021-20651](https://insights.sbomify.com/CVE-2021-20651/): Path traversal in ELECOM File Manager (critical 9.1)
- [CVE-2021-20650](https://insights.sbomify.com/CVE-2021-20650/): Cross-site request forgery in NCC-EWF100RMWH2 (medium 6.5)
- [CVE-2021-2065](https://insights.sbomify.com/CVE-2021-2065/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20649](https://insights.sbomify.com/CVE-2021-20649/): Security feature bypass in WRC-300FEBK-S (medium 4.8)
- [CVE-2021-20648](https://insights.sbomify.com/CVE-2021-20648/): Command injection in WRC-300FEBK-S (medium 6.8)
- [CVE-2021-20647](https://insights.sbomify.com/CVE-2021-20647/): Cross-site request forgery in WRC-300FEBK-S (medium 6.5)
- [CVE-2021-20646](https://insights.sbomify.com/CVE-2021-20646/): Cross-site request forgery in WRC-300FEBK-A (medium 6.5)
- [CVE-2021-20645](https://insights.sbomify.com/CVE-2021-20645/): Cross-site scripting in WRC-300FEBK-A (medium 5.4)
- [CVE-2021-20644](https://insights.sbomify.com/CVE-2021-20644/): Cross-site scripting in WRC-1467GHBK-A (medium 6.1)
- [CVE-2021-20643](https://insights.sbomify.com/CVE-2021-20643/): Missing authorization in LD-PS/U1 (high 7.5)
- [CVE-2021-20642](https://insights.sbomify.com/CVE-2021-20642/): Denial of service in LAN-W300N/RS (medium 6.5)
- [CVE-2021-20641](https://insights.sbomify.com/CVE-2021-20641/): Cross-site request forgery in LAN-W300N/RS (medium 6.5)
- [CVE-2021-20640](https://insights.sbomify.com/CVE-2021-20640/): Memory corruption in LAN-W300N/PGRB (medium 6.8)
- [CVE-2021-2064](https://insights.sbomify.com/CVE-2021-2064/): Other in WebLogic Server (critical 9.8)
- [CVE-2021-20639](https://insights.sbomify.com/CVE-2021-20639/): Command injection in LAN-W300N/PGRB (medium 6.8)
- [CVE-2021-20638](https://insights.sbomify.com/CVE-2021-20638/): Command injection in LAN-W300N/PGRB (medium 6.8)
- [CVE-2021-20637](https://insights.sbomify.com/CVE-2021-20637/): Denial of service in LAN-W300N/PR5B (medium 6.5)
- [CVE-2021-20636](https://insights.sbomify.com/CVE-2021-20636/): Cross-site request forgery in LAN-W300N/PR5B (medium 6.5)
- [CVE-2021-20635](https://insights.sbomify.com/CVE-2021-20635/): Auth bypass in LAN-WH450N/GR (medium 6.5)
- [CVE-2021-20634](https://insights.sbomify.com/CVE-2021-20634/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2021-20633](https://insights.sbomify.com/CVE-2021-20633/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2021-20632](https://insights.sbomify.com/CVE-2021-20632/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2021-20631](https://insights.sbomify.com/CVE-2021-20631/): Other in Cybozu Office (medium 6.5)
- [CVE-2021-20630](https://insights.sbomify.com/CVE-2021-20630/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2021-2063](https://insights.sbomify.com/CVE-2021-2063/): Other in PeopleSoft Enterprise PT PeopleTools (high 8.4)
- [CVE-2021-20629](https://insights.sbomify.com/CVE-2021-20629/): Cross-site scripting in Cybozu Office (medium 6.1)
- [CVE-2021-20628](https://insights.sbomify.com/CVE-2021-20628/): Cross-site scripting in Cybozu Office (medium 6.1)
- [CVE-2021-20627](https://insights.sbomify.com/CVE-2021-20627/): Cross-site scripting in Cybozu Office (medium 6.1)
- [CVE-2021-20626](https://insights.sbomify.com/CVE-2021-20626/): Missing authorization in Cybozu Office (medium 6.5)
- [CVE-2021-20625](https://insights.sbomify.com/CVE-2021-20625/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2021-20624](https://insights.sbomify.com/CVE-2021-20624/): Missing authorization in Cybozu Office (medium 6.5)
- [CVE-2021-20623](https://insights.sbomify.com/CVE-2021-20623/): Code injection in Video Insight VMS (critical 9.8)
- [CVE-2021-20622](https://insights.sbomify.com/CVE-2021-20622/): Cross-site scripting in Aterm WG2600HP and Aterm WG2600HP2 (medium 6.1)
- [CVE-2021-20621](https://insights.sbomify.com/CVE-2021-20621/): Cross-site request forgery in Aterm WG2600HP and Aterm WG2600HP2 (high 8.8)
- [CVE-2021-20620](https://insights.sbomify.com/CVE-2021-20620/): Cross-site scripting in Aterm WF800HP (medium 6.1)
- [CVE-2021-2062](https://insights.sbomify.com/CVE-2021-2062/): Other in BI Publisher (formerly XML Publisher) (high 7.6)
- [CVE-2021-20619](https://insights.sbomify.com/CVE-2021-20619/): Cross-site scripting in GROWI v4.2 Series (medium 6.1)
- [CVE-2021-20618](https://insights.sbomify.com/CVE-2021-20618/): Privilege escalation in acmailer and acmailer DB (critical 9.8)
- [CVE-2021-20617](https://insights.sbomify.com/CVE-2021-20617/): Missing authorization in acmailer and acmailer DB (critical 9.8)
- [CVE-2021-20616](https://insights.sbomify.com/CVE-2021-20616/): Other in SKYSEA Client View (high 7.8)
- [CVE-2021-20613](https://insights.sbomify.com/CVE-2021-20613/): Denial of service in MELSEC-F series FX3U-ENET; MELSEC-F series FX3U-ENET-L; MELSEC-F series FX3U-ENET-P502 (high 7.5)
- [CVE-2021-20612](https://insights.sbomify.com/CVE-2021-20612/): Denial of service in MELSEC-F series FX3U-ENET; MELSEC-F series FX3U-ENET-L; MELSEC-F series FX3U-ENET-P502 (high 7.5)
- [CVE-2021-20611](https://insights.sbomify.com/CVE-2021-20611/): Denial of service in MELIPC Series MI5122-VW (high 7.5)
- [CVE-2021-20610](https://insights.sbomify.com/CVE-2021-20610/): Denial of service in MELIPC Series MI5122-VW (high 7.5)
- [CVE-2021-2061](https://insights.sbomify.com/CVE-2021-2061/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2021-20609](https://insights.sbomify.com/CVE-2021-20609/): Denial of service in MELIPC Series MI5122-VW (high 7.5)
- [CVE-2021-20608](https://insights.sbomify.com/CVE-2021-20608/): Denial of service in GX Works2 (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/245/
