# Vulnerabilities published in 2021


- [CVE-2021-20277](https://insights.sbomify.com/CVE-2021-20277/): Memory corruption in samba (high 7.5)
- [CVE-2021-20276](https://insights.sbomify.com/CVE-2021-20276/): Memory corruption in privoxy (high 7.5)
- [CVE-2021-20275](https://insights.sbomify.com/CVE-2021-20275/): Memory corruption in privoxy (high 7.5)
- [CVE-2021-20274](https://insights.sbomify.com/CVE-2021-20274/): Null dereference in privoxy (high 7.5)
- [CVE-2021-20273](https://insights.sbomify.com/CVE-2021-20273/): Denial of service in privoxy (high 7.5)
- [CVE-2021-20272](https://insights.sbomify.com/CVE-2021-20272/): Denial of service in privoxy (high 7.5)
- [CVE-2021-20271](https://insights.sbomify.com/CVE-2021-20271/): Security feature bypass in rpm (high 7.0)
- [CVE-2021-20270](https://insights.sbomify.com/CVE-2021-20270/): Infinite Loop in Pygments (high 7.5)
- [CVE-2021-2027](https://insights.sbomify.com/CVE-2021-2027/): Other in Marketing (high 8.2)
- [CVE-2021-20269](https://insights.sbomify.com/CVE-2021-20269/): Information disclosure in kexec-tools (medium 5.5)
- [CVE-2021-20268](https://insights.sbomify.com/CVE-2021-20268/): Memory corruption in kernel (high 7.8)
- [CVE-2021-20267](https://insights.sbomify.com/CVE-2021-20267/): Openstack Neutron has Insufficient Verification of IPv6 addresses (high 7.1)
- [CVE-2021-20266](https://insights.sbomify.com/CVE-2021-20266/): Memory corruption in rpm (medium 4.9)
- [CVE-2021-20265](https://insights.sbomify.com/CVE-2021-20265/): Denial of service in kernel (medium 5.5)
- [CVE-2021-20264](https://insights.sbomify.com/CVE-2021-20264/): Privilege escalation in containers/openjdk (high 7.8)
- [CVE-2021-20263](https://insights.sbomify.com/CVE-2021-20263/): Privilege escalation in QEMU (low 3.3)
- [CVE-2021-20262](https://insights.sbomify.com/CVE-2021-20262/): Keycloak Missing authentication for critical function (medium 6.8)
- [CVE-2021-20261](https://insights.sbomify.com/CVE-2021-20261/): Race condition in kernel (medium 6.4)
- [CVE-2021-20260](https://insights.sbomify.com/CVE-2021-20260/): Information disclosure in foreman (high 7.8)
- [CVE-2021-2026](https://insights.sbomify.com/CVE-2021-2026/): Other in Marketing (high 8.2)
- [CVE-2021-20259](https://insights.sbomify.com/CVE-2021-20259/): Exposure of Sensitive Information to an Unauthorized Actor in foreman_fog_proxmox (high 7.8)
- [CVE-2021-20257](https://insights.sbomify.com/CVE-2021-20257/): Denial of service in QEMU (medium 6.5)
- [CVE-2021-20256](https://insights.sbomify.com/CVE-2021-20256/): Information disclosure in Red Hat Satellite (medium 5.3)
- [CVE-2021-20255](https://insights.sbomify.com/CVE-2021-20255/): Denial of service in QEMU (medium 5.5)
- [CVE-2021-20254](https://insights.sbomify.com/CVE-2021-20254/): Memory corruption in samba (medium 6.8)
- [CVE-2021-20253](https://insights.sbomify.com/CVE-2021-20253/): Privilege escalation in ansible-tower (medium 6.7)
- [CVE-2021-20252](https://insights.sbomify.com/CVE-2021-20252/): Denial of service in 3scale/backend (medium 6.5)
- [CVE-2021-20251](https://insights.sbomify.com/CVE-2021-20251/): Race condition in samba (medium 5.9)
- [CVE-2021-20250](https://insights.sbomify.com/CVE-2021-20250/): JBoss EJB Client information disclosure vulnerability (medium 4.3)
- [CVE-2021-2025](https://insights.sbomify.com/CVE-2021-2025/): Other in Business Intelligence Enterprise Edition (high 8.2)
- [CVE-2021-20247](https://insights.sbomify.com/CVE-2021-20247/): Path traversal in isync/mbsync (high 7.4)
- [CVE-2021-20246](https://insights.sbomify.com/CVE-2021-20246/): Denial of service in ImageMagick (medium 5.5)
- [CVE-2021-20245](https://insights.sbomify.com/CVE-2021-20245/): Denial of service in ImageMagick (medium 5.5)
- [CVE-2021-20244](https://insights.sbomify.com/CVE-2021-20244/): Denial of service in ImageMagick (medium 5.5)
- [CVE-2021-20243](https://insights.sbomify.com/CVE-2021-20243/): Denial of service in ImageMagick (medium 5.5)
- [CVE-2021-20241](https://insights.sbomify.com/CVE-2021-20241/): Denial of service in ImageMagick (medium 5.5)
- [CVE-2021-20240](https://insights.sbomify.com/CVE-2021-20240/): Integer overflow in gdk-pixbuf (high 8.8)
- [CVE-2021-2024](https://insights.sbomify.com/CVE-2021-2024/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2021-20239](https://insights.sbomify.com/CVE-2021-20239/): Information disclosure in kernel (low 3.3)
- [CVE-2021-20238](https://insights.sbomify.com/CVE-2021-20238/): Missing authorization in openshift/machine-config-operator (low 3.7)
- [CVE-2021-20237](https://insights.sbomify.com/CVE-2021-20237/): Denial of service in zeromq (high 7.5)
- [CVE-2021-20236](https://insights.sbomify.com/CVE-2021-20236/): Memory corruption in zeromq (critical 9.8)
- [CVE-2021-20235](https://insights.sbomify.com/CVE-2021-20235/): Memory corruption in zeromq (high 8.1)
- [CVE-2021-20234](https://insights.sbomify.com/CVE-2021-20234/): Denial of service in zeromq (medium 6.5)
- [CVE-2021-20233](https://insights.sbomify.com/CVE-2021-20233/): Memory corruption in grub2 (high 8.2)
- [CVE-2021-20232](https://insights.sbomify.com/CVE-2021-20232/): Use after free in gnutls (critical 9.8)
- [CVE-2021-20231](https://insights.sbomify.com/CVE-2021-20231/): Use after free in gnutls (critical 9.8)
- [CVE-2021-20230](https://insights.sbomify.com/CVE-2021-20230/): Security feature bypass in stunnel (high 7.5)
- [CVE-2021-2023](https://insights.sbomify.com/CVE-2021-2023/): Other in Installed Base (medium 4.7)
- [CVE-2021-20229](https://insights.sbomify.com/CVE-2021-20229/): Incorrect Authorization in PostgreSQL (medium 4.3)
- [CVE-2021-20228](https://insights.sbomify.com/CVE-2021-20228/): Ansible Exposes Sensitive Information (high 7.5)
- [CVE-2021-20227](https://insights.sbomify.com/CVE-2021-20227/): Use after free in sqlite (medium 5.5)
- [CVE-2021-20226](https://insights.sbomify.com/CVE-2021-20226/): Use after free in kernel (high 7.8)
- [CVE-2021-20225](https://insights.sbomify.com/CVE-2021-20225/): Memory corruption in grub2 (medium 6.7)
- [CVE-2021-20224](https://insights.sbomify.com/CVE-2021-20224/): Integer overflow in ImageMagick (medium 5.5)
- [CVE-2021-20222](https://insights.sbomify.com/CVE-2021-20222/): Code injection in keycloak (high 7.5)
- [CVE-2021-20221](https://insights.sbomify.com/CVE-2021-20221/): Memory corruption in qemu (medium 6.0)
- [CVE-2021-20220](https://insights.sbomify.com/CVE-2021-20220/): HTTP request smuggling in Undertow (medium 4.8)
- [CVE-2021-2022](https://insights.sbomify.com/CVE-2021-2022/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2021-20219](https://insights.sbomify.com/CVE-2021-20219/): Denial of service in kernel (medium 5.5)
- [CVE-2021-20218](https://insights.sbomify.com/CVE-2021-20218/): Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client (high 7.4)
- [CVE-2021-20217](https://insights.sbomify.com/CVE-2021-20217/): Denial of service in privoxy (high 7.5)
- [CVE-2021-20216](https://insights.sbomify.com/CVE-2021-20216/): Denial of service in privoxy (high 7.5)
- [CVE-2021-20215](https://insights.sbomify.com/CVE-2021-20215/): Denial of service in privoxy (high 7.5)
- [CVE-2021-20214](https://insights.sbomify.com/CVE-2021-20214/): Denial of service in privoxy (high 7.5)
- [CVE-2021-20213](https://insights.sbomify.com/CVE-2021-20213/): Null dereference in privoxy (high 7.5)
- [CVE-2021-20212](https://insights.sbomify.com/CVE-2021-20212/): Denial of service in privoxy (high 7.5)
- [CVE-2021-20211](https://insights.sbomify.com/CVE-2021-20211/): Denial of service in privoxy (high 7.5)
- [CVE-2021-20210](https://insights.sbomify.com/CVE-2021-20210/): Denial of service in privoxy (high 7.5)
- [CVE-2021-2021](https://insights.sbomify.com/CVE-2021-2021/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20209](https://insights.sbomify.com/CVE-2021-20209/): Denial of service in privoxy (high 7.5)
- [CVE-2021-20208](https://insights.sbomify.com/CVE-2021-20208/): Privilege escalation in cifs-utils (medium 6.1)
- [CVE-2021-20206](https://insights.sbomify.com/CVE-2021-20206/): containernetworking/cni improper limitation of path name (high 7.2)
- [CVE-2021-20205](https://insights.sbomify.com/CVE-2021-20205/): Denial of service in Libjpeg-turbo (medium 6.5)
- [CVE-2021-20204](https://insights.sbomify.com/CVE-2021-20204/): Use after free in getdata (critical 9.8)
- [CVE-2021-20203](https://insights.sbomify.com/CVE-2021-20203/): Integer overflow in qemu (low 3.2)
- [CVE-2021-20202](https://insights.sbomify.com/CVE-2021-20202/): Temporary Directory Hijacking Vulnerability in Keycloak (high 7.3)
- [CVE-2021-20201](https://insights.sbomify.com/CVE-2021-20201/): Denial of service in spice (medium 5.3)
- [CVE-2021-2020](https://insights.sbomify.com/CVE-2021-2020/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2021-20199](https://insights.sbomify.com/CVE-2021-20199/): Podman Origin Validation Error (medium 5.9)
- [CVE-2021-20198](https://insights.sbomify.com/CVE-2021-20198/): Auth bypass in openshift/installer (high 8.1)
- [CVE-2021-20197](https://insights.sbomify.com/CVE-2021-20197/): Race condition in binutils (medium 6.3)
- [CVE-2021-20196](https://insights.sbomify.com/CVE-2021-20196/): Null dereference in qemu (medium 6.5)
- [CVE-2021-20195](https://insights.sbomify.com/CVE-2021-20195/): keycloak Self Stored Cross-site Scripting vulnerability (critical 9.6)
- [CVE-2021-20194](https://insights.sbomify.com/CVE-2021-20194/): Memory corruption in kernel (high 7.8)
- [CVE-2021-20193](https://insights.sbomify.com/CVE-2021-20193/): Out-of-bounds Read and Missing Release of Memory after Effective Lifetime in tar (low 3.3)
- [CVE-2021-20191](https://insights.sbomify.com/CVE-2021-20191/): Insertion of Sensitive Information into Log File in ansible (medium 5.5)
- [CVE-2021-20190](https://insights.sbomify.com/CVE-2021-20190/): Deserialization of untrusted data in jackson-databind (high 8.1)
- [CVE-2021-2019](https://insights.sbomify.com/CVE-2021-2019/): Information disclosure in MySQL Server (low 2.7)
- [CVE-2021-20188](https://insights.sbomify.com/CVE-2021-20188/): Improper Authorization in github.com/containers/libpod (high 7.0)
- [CVE-2021-20187](https://insights.sbomify.com/CVE-2021-20187/): Moodle Arbitrary PHP code execution by site admins via Shibboleth configuration (high 7.2)
- [CVE-2021-20186](https://insights.sbomify.com/CVE-2021-20186/): Moodle Cross-site Scripting (medium 5.4)
- [CVE-2021-20185](https://insights.sbomify.com/CVE-2021-20185/): Moodle Client side denial of service via personal message (medium 5.3)
- [CVE-2021-20184](https://insights.sbomify.com/CVE-2021-20184/): Moodle Grade information disclosure in grade's external fetch functions (medium 4.3)
- [CVE-2021-20183](https://insights.sbomify.com/CVE-2021-20183/): Moodle Vulnerable to Reflected Cross-site Scripting (medium 5.4)
- [CVE-2021-20182](https://insights.sbomify.com/CVE-2021-20182/): Privilege escalation in openshift (high 8.8)
- [CVE-2021-20181](https://insights.sbomify.com/CVE-2021-20181/): Race condition in qemu (high 7.5)
- [CVE-2021-20180](https://insights.sbomify.com/CVE-2021-20180/): Insertion of Sensitive Information into Log File in ansible (medium 5.5)
- [CVE-2021-2018](https://insights.sbomify.com/CVE-2021-2018/): Other in Advanced Networking Option (high 8.3)
- [CVE-2021-20179](https://insights.sbomify.com/CVE-2021-20179/): Security feature bypass in pki-core (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/249/