# Vulnerabilities published in 2021


- [CVE-2021-20377](https://insights.sbomify.com/CVE-2021-20377/): Information disclosure in Security Guardium (low 2.7)
- [CVE-2021-20376](https://insights.sbomify.com/CVE-2021-20376/): Information disclosure in Sterling File Gateway (medium 4.3)
- [CVE-2021-20375](https://insights.sbomify.com/CVE-2021-20375/): Missing authorization in Sterling File Gateway (medium 6.5)
- [CVE-2021-20374](https://insights.sbomify.com/CVE-2021-20374/): Cross-site scripting in Maximo Asset Management (medium 6.5)
- [CVE-2021-20373](https://insights.sbomify.com/CVE-2021-20373/): Information disclosure in DB2 for Linux, UNIX and Windows (medium 5.9)
- [CVE-2021-20372](https://insights.sbomify.com/CVE-2021-20372/): Missing authorization in Sterling File Gateway (medium 4.3)
- [CVE-2021-20371](https://insights.sbomify.com/CVE-2021-20371/): Information disclosure in Engineering Lifecycle Optimization (medium 4.3)
- [CVE-2021-20369](https://insights.sbomify.com/CVE-2021-20369/): Weak cryptography in Cloud Pak for Applications (medium 5.9)
- [CVE-2021-20368](https://insights.sbomify.com/CVE-2021-20368/): Cross-site scripting in Cloud Pak for Applications (medium 5.4)
- [CVE-2021-20366](https://insights.sbomify.com/CVE-2021-20366/): Cross-site scripting in Cloud Pak for Applications (medium 5.4)
- [CVE-2021-20365](https://insights.sbomify.com/CVE-2021-20365/): Cross-site scripting in Cloud Pak for Applications (medium 5.4)
- [CVE-2021-20364](https://insights.sbomify.com/CVE-2021-20364/): Cross-site scripting in Cloud Pak for Applications (medium 5.4)
- [CVE-2021-20363](https://insights.sbomify.com/CVE-2021-20363/): Cross-site scripting in Cloud Pak for Applications (medium 5.4)
- [CVE-2021-20362](https://insights.sbomify.com/CVE-2021-20362/): Cross-site scripting in Cloud Pak for Applications (medium 5.4)
- [CVE-2021-20361](https://insights.sbomify.com/CVE-2021-20361/): Cross-site scripting in Cloud Pak for Applications (medium 5.4)
- [CVE-2021-20360](https://insights.sbomify.com/CVE-2021-20360/): Weak cryptography in Cloud Pak for Applications (medium 5.9)
- [CVE-2021-2036](https://insights.sbomify.com/CVE-2021-2036/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20359](https://insights.sbomify.com/CVE-2021-20359/): Information disclosure in Cloud Pak for Automation (medium 6.5)
- [CVE-2021-20358](https://insights.sbomify.com/CVE-2021-20358/): Information disclosure in Cloud Pak for Automation (medium 6.5)
- [CVE-2021-20357](https://insights.sbomify.com/CVE-2021-20357/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20355](https://insights.sbomify.com/CVE-2021-20355/): Misconfiguration in Jazz Team Server (low 3.7)
- [CVE-2021-20354](https://insights.sbomify.com/CVE-2021-20354/): Path traversal in WebSphere Application Server (medium 5.9)
- [CVE-2021-20353](https://insights.sbomify.com/CVE-2021-20353/): XML external entity in WebSphere Application Server (high 8.2)
- [CVE-2021-20352](https://insights.sbomify.com/CVE-2021-20352/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20351](https://insights.sbomify.com/CVE-2021-20351/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20350](https://insights.sbomify.com/CVE-2021-20350/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-2035](https://insights.sbomify.com/CVE-2021-2035/): Other in Database - Enterprise Edition (high 8.8)
- [CVE-2021-20349](https://insights.sbomify.com/CVE-2021-20349/): Memory corruption in Workload Scheduler (medium 5.9)
- [CVE-2021-20348](https://insights.sbomify.com/CVE-2021-20348/): Server-side request forgery in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20347](https://insights.sbomify.com/CVE-2021-20347/): Server-side request forgery in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20346](https://insights.sbomify.com/CVE-2021-20346/): Server-side request forgery in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20345](https://insights.sbomify.com/CVE-2021-20345/): Server-side request forgery in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20343](https://insights.sbomify.com/CVE-2021-20343/): Server-side request forgery in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20341](https://insights.sbomify.com/CVE-2021-20341/): Information disclosure in Cloud Pak for Multicloud Management Monitoring (medium 5.3)
- [CVE-2021-20340](https://insights.sbomify.com/CVE-2021-20340/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-2034](https://insights.sbomify.com/CVE-2021-2034/): Other in Common Applications Calendar (high 8.2)
- [CVE-2021-20338](https://insights.sbomify.com/CVE-2021-20338/): Cross-site scripting in Engineering Lifecycle Optimization (medium 5.4)
- [CVE-2021-20337](https://insights.sbomify.com/CVE-2021-20337/): Weak cryptography in QRadar SIEM (medium 5.9)
- [CVE-2021-20336](https://insights.sbomify.com/CVE-2021-20336/): Cross-site scripting in Tivoli Netcool/OMNIbus GUI (medium 6.4)
- [CVE-2021-20335](https://insights.sbomify.com/CVE-2021-20335/): SSL may be unexpectedly disabled during upgrade of multiple-server MongoDB Ops Manager (medium 6.7)
- [CVE-2021-20334](https://insights.sbomify.com/CVE-2021-20334/): Local privilege escalation in MongoDB Compass for Windows (medium 4.8)
- [CVE-2021-20333](https://insights.sbomify.com/CVE-2021-20333/): Server log entry spoofing via newline injection (medium 5.3)
- [CVE-2021-20332](https://insights.sbomify.com/CVE-2021-20332/): Exposure of Sensitive Information to an Unauthorized Actor in MongoDB Rust Driver (medium 4.2)
- [CVE-2021-20331](https://insights.sbomify.com/CVE-2021-20331/): MongoDB C# Driver Risk of Exposing Authentication Data via Command Listener (medium 4.2)
- [CVE-2021-20330](https://insights.sbomify.com/CVE-2021-20330/): Specific replication command with malformed oplog entries can crash secondaries (medium 6.5)
- [CVE-2021-2033](https://insights.sbomify.com/CVE-2021-2033/): Denial of service in WebLogic Server (medium 4.3)
- [CVE-2021-20329](https://insights.sbomify.com/CVE-2021-20329/): Specific cstrings input may not be properly validated in the Go Driver (medium 6.8)
- [CVE-2021-20328](https://insights.sbomify.com/CVE-2021-20328/): MongoDB Java driver client-side field level encryption not verifying KMS host name (medium 6.4)
- [CVE-2021-20327](https://insights.sbomify.com/CVE-2021-20327/): MongoDB Node.js client side field level encryption library may not be validating KMS certificate (medium 6.4)
- [CVE-2021-20326](https://insights.sbomify.com/CVE-2021-20326/): Specially crafted query may result in a denial of service of mongod (medium 6.5)
- [CVE-2021-20325](https://insights.sbomify.com/CVE-2021-20325/): Memory corruption in httpd (critical 9.8)
- [CVE-2021-20323](https://insights.sbomify.com/CVE-2021-20323/): Cross-site Scripting in Keycloak (medium 6.1)
- [CVE-2021-20322](https://insights.sbomify.com/CVE-2021-20322/): Weak cryptography in kernel (high 7.4)
- [CVE-2021-20321](https://insights.sbomify.com/CVE-2021-20321/): Race condition in kernel (medium 4.7)
- [CVE-2021-20320](https://insights.sbomify.com/CVE-2021-20320/): Security feature bypass in kernel (medium 5.5)
- [CVE-2021-2032](https://insights.sbomify.com/CVE-2021-2032/): Information disclosure in MySQL Server (medium 4.3)
- [CVE-2021-20319](https://insights.sbomify.com/CVE-2021-20319/): coreos-installer improperly verifies GPG signature when decompressing gzipped artifact (high 7.8)
- [CVE-2021-20318](https://insights.sbomify.com/CVE-2021-20318/): Deserialization in Artemis in EAP 7 (high 7.2)
- [CVE-2021-20317](https://insights.sbomify.com/CVE-2021-20317/): Denial of service in kernel (medium 4.4)
- [CVE-2021-20316](https://insights.sbomify.com/CVE-2021-20316/): Race condition in samba (medium 6.8)
- [CVE-2021-20315](https://insights.sbomify.com/CVE-2021-20315/): Security feature bypass in gnome-shell (medium 6.1)
- [CVE-2021-20314](https://insights.sbomify.com/CVE-2021-20314/): Memory corruption in libspf2 (critical 9.8)
- [CVE-2021-20313](https://insights.sbomify.com/CVE-2021-20313/): Information disclosure in ImageMagick (high 7.5)
- [CVE-2021-20312](https://insights.sbomify.com/CVE-2021-20312/): Integer overflow in ImageMagick (high 7.5)
- [CVE-2021-20311](https://insights.sbomify.com/CVE-2021-20311/): Denial of service in ImageMagick (high 7.5)
- [CVE-2021-20310](https://insights.sbomify.com/CVE-2021-20310/): Denial of service in ImageMagick (high 7.5)
- [CVE-2021-2031](https://insights.sbomify.com/CVE-2021-2031/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20309](https://insights.sbomify.com/CVE-2021-20309/): Denial of service in ImagemMagick (high 7.5)
- [CVE-2021-20308](https://insights.sbomify.com/CVE-2021-20308/): Integer overflow in htmldoc (critical 9.8)
- [CVE-2021-20307](https://insights.sbomify.com/CVE-2021-20307/): Memory corruption in libpano13 (critical 9.8)
- [CVE-2021-20306](https://insights.sbomify.com/CVE-2021-20306/): Missing authorization in Business-central (medium 4.3)
- [CVE-2021-20305](https://insights.sbomify.com/CVE-2021-20305/): Weak cryptography in nettle (high 8.1)
- [CVE-2021-20304](https://insights.sbomify.com/CVE-2021-20304/): Integer overflow in OpenEXR (high 7.5)
- [CVE-2021-20303](https://insights.sbomify.com/CVE-2021-20303/): Integer overflow in OpenEXR (medium 6.1)
- [CVE-2021-20302](https://insights.sbomify.com/CVE-2021-20302/): Denial of service in OpenEXR (medium 5.5)
- [CVE-2021-20300](https://insights.sbomify.com/CVE-2021-20300/): Integer overflow in OpenEXR (medium 5.5)
- [CVE-2021-2030](https://insights.sbomify.com/CVE-2021-2030/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20299](https://insights.sbomify.com/CVE-2021-20299/): Null dereference in OpenEXR (high 7.5)
- [CVE-2021-20298](https://insights.sbomify.com/CVE-2021-20298/): Denial of service in OpenEXR (high 7.5)
- [CVE-2021-20297](https://insights.sbomify.com/CVE-2021-20297/): Denial of service in NetworkManager (medium 5.5)
- [CVE-2021-20296](https://insights.sbomify.com/CVE-2021-20296/): Null dereference in OpenEXR (medium 5.3)
- [CVE-2021-20295](https://insights.sbomify.com/CVE-2021-20295/): Memory corruption in QEMU (medium 6.5)
- [CVE-2021-20294](https://insights.sbomify.com/CVE-2021-20294/): Memory corruption in binutils (high 7.8)
- [CVE-2021-20293](https://insights.sbomify.com/CVE-2021-20293/): Cross-Site Scripting (medium 6.1)
- [CVE-2021-20292](https://insights.sbomify.com/CVE-2021-20292/): Use after free in kernel (medium 6.7)
- [CVE-2021-20291](https://insights.sbomify.com/CVE-2021-20291/): Improper Locking in github.com/containers/storage (medium 6.5)
- [CVE-2021-20290](https://insights.sbomify.com/CVE-2021-20290/): Missing authorization in smart proxy openscap (medium 6.1)
- [CVE-2021-2029](https://insights.sbomify.com/CVE-2021-2029/): Other in Scripting (critical 9.8)
- [CVE-2021-20289](https://insights.sbomify.com/CVE-2021-20289/): Exposure of class information in RESTEasy (medium 5.3)
- [CVE-2021-20288](https://insights.sbomify.com/CVE-2021-20288/): Auth bypass in ceph (high 7.2)
- [CVE-2021-20286](https://insights.sbomify.com/CVE-2021-20286/): Denial of service in libnbd (low 2.7)
- [CVE-2021-20285](https://insights.sbomify.com/CVE-2021-20285/): Memory corruption in upx (medium 6.6)
- [CVE-2021-20284](https://insights.sbomify.com/CVE-2021-20284/): Memory corruption in binutils (medium 5.5)
- [CVE-2021-20283](https://insights.sbomify.com/CVE-2021-20283/): Missing permission check in Moodle (medium 4.3)
- [CVE-2021-20282](https://insights.sbomify.com/CVE-2021-20282/): Moodle Bypass email verification secret when confirming account registration (medium 5.3)
- [CVE-2021-20281](https://insights.sbomify.com/CVE-2021-20281/): Moodle allowed some users without permission to view other users' full names (medium 5.3)
- [CVE-2021-20280](https://insights.sbomify.com/CVE-2021-20280/): Cross-site scripting (XSS) and Server side request forgery (SSRF) in moodle (medium 5.4)
- [CVE-2021-2028](https://insights.sbomify.com/CVE-2021-2028/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20279](https://insights.sbomify.com/CVE-2021-20279/): Moodle contains Stored XSS via ID number user profile field (medium 5.4)
- [CVE-2021-20278](https://insights.sbomify.com/CVE-2021-20278/): Kiali Authentication Bypass vulnerability (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/248/