# Vulnerabilities published in 2021


- [CVE-2021-20178](https://insights.sbomify.com/CVE-2021-20178/): Insertion of Sensitive Information into Log File in ansible (medium 5.5)
- [CVE-2021-20177](https://insights.sbomify.com/CVE-2021-20177/): Memory corruption in kernel (medium 4.4)
- [CVE-2021-20176](https://insights.sbomify.com/CVE-2021-20176/): Denial of service in ImageMagick (medium 5.5)
- [CVE-2021-20175](https://insights.sbomify.com/CVE-2021-20175/): Information disclosure in Netgear Nighthawk R6700 (high 7.5)
- [CVE-2021-20174](https://insights.sbomify.com/CVE-2021-20174/): Information disclosure in Netgear Nighthawk R6700 (high 7.5)
- [CVE-2021-20173](https://insights.sbomify.com/CVE-2021-20173/): Command injection in Netgear Nighthawk R6700 (high 8.8)
- [CVE-2021-20172](https://insights.sbomify.com/CVE-2021-20172/): Privilege escalation in Netgear Genie Installer for macOS (high 7.8)
- [CVE-2021-20171](https://insights.sbomify.com/CVE-2021-20171/): Information disclosure in Netgear RAX43 (medium 5.5)
- [CVE-2021-20170](https://insights.sbomify.com/CVE-2021-20170/): Hardcoded credentials in Netgear RAX43 (high 8.8)
- [CVE-2021-2017](https://insights.sbomify.com/CVE-2021-2017/): Information disclosure in User Management (medium 4.3)
- [CVE-2021-20169](https://insights.sbomify.com/CVE-2021-20169/): Information disclosure in Netgear RAX43 (medium 6.8)
- [CVE-2021-20168](https://insights.sbomify.com/CVE-2021-20168/): Hardcoded credentials in Netgear RAX43 (medium 6.8)
- [CVE-2021-20167](https://insights.sbomify.com/CVE-2021-20167/): Command injection in Netgear RAX43 (high 8.0)
- [CVE-2021-20166](https://insights.sbomify.com/CVE-2021-20166/): Memory corruption in Netgear RAX43 (high 8.8)
- [CVE-2021-20165](https://insights.sbomify.com/CVE-2021-20165/): Cross-site request forgery in Trendnet AC2600 TEW-827DRU (high 8.8)
- [CVE-2021-20164](https://insights.sbomify.com/CVE-2021-20164/): Information disclosure in Trendnet AC2600 TEW-827DRU (medium 4.9)
- [CVE-2021-20163](https://insights.sbomify.com/CVE-2021-20163/): Information disclosure in Trendnet AC2600 TEW-827DRU (medium 4.9)
- [CVE-2021-20162](https://insights.sbomify.com/CVE-2021-20162/): Information disclosure in Trendnet AC2600 TEW-827DRU (medium 4.9)
- [CVE-2021-20161](https://insights.sbomify.com/CVE-2021-20161/): Auth bypass in Trendnet AC2600 TEW-827DRU (medium 6.8)
- [CVE-2021-20160](https://insights.sbomify.com/CVE-2021-20160/): Command injection in Trendnet AC2600 TEW-827DRU (high 8.8)
- [CVE-2021-2016](https://insights.sbomify.com/CVE-2021-2016/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20159](https://insights.sbomify.com/CVE-2021-20159/): Command injection in Trendnet AC2600 TEW-827DRU (high 8.8)
- [CVE-2021-20158](https://insights.sbomify.com/CVE-2021-20158/): Auth bypass in Trendnet AC2600 TEW-827DRU (critical 9.8)
- [CVE-2021-20157](https://insights.sbomify.com/CVE-2021-20157/): Missing authorization in Trendnet AC2600 TEW-827DRU (high 7.5)
- [CVE-2021-20156](https://insights.sbomify.com/CVE-2021-20156/): Security feature bypass in Trendnet AC2600 TEW-827DRU (medium 6.5)
- [CVE-2021-20155](https://insights.sbomify.com/CVE-2021-20155/): Hardcoded credentials in Trendnet AC2600 TEW-827DRU (critical 9.8)
- [CVE-2021-20154](https://insights.sbomify.com/CVE-2021-20154/): Misconfiguration in Trendnet AC2600 TEW-827DRU (high 7.5)
- [CVE-2021-20153](https://insights.sbomify.com/CVE-2021-20153/): Path traversal in Trendnet AC2600 TEW-827DRU (medium 6.8)
- [CVE-2021-20152](https://insights.sbomify.com/CVE-2021-20152/): Missing authorization in Trendnet AC2600 TEW-827DRU (medium 6.5)
- [CVE-2021-20151](https://insights.sbomify.com/CVE-2021-20151/): Auth bypass in Trendnet AC2600 TEW-827DRU (critical 10.0)
- [CVE-2021-20150](https://insights.sbomify.com/CVE-2021-20150/): Auth bypass in Trendnet AC2600 TEW-827DRU (medium 5.3)
- [CVE-2021-2015](https://insights.sbomify.com/CVE-2021-2015/): Other in Workflow (high 8.2)
- [CVE-2021-20149](https://insights.sbomify.com/CVE-2021-20149/): Misconfiguration in Trendnet AC2600 TEW-827DRU (critical 9.8)
- [CVE-2021-20148](https://insights.sbomify.com/CVE-2021-20148/): Information disclosure in ManageEngine ADSelfService Plus (medium 4.3)
- [CVE-2021-20147](https://insights.sbomify.com/CVE-2021-20147/): Information disclosure in ManageEngine ADSelfService Plus (medium 5.3)
- [CVE-2021-20146](https://insights.sbomify.com/CVE-2021-20146/): Hardcoded credentials in Gryphon Tower router (critical 9.8)
- [CVE-2021-20145](https://insights.sbomify.com/CVE-2021-20145/): Misconfiguration in Gryphon Tower router (high 7.5)
- [CVE-2021-20144](https://insights.sbomify.com/CVE-2021-20144/): Command injection in Gryphon Tower router (high 8.8)
- [CVE-2021-20143](https://insights.sbomify.com/CVE-2021-20143/): Command injection in Gryphon Tower router (high 8.8)
- [CVE-2021-20142](https://insights.sbomify.com/CVE-2021-20142/): Command injection in Gryphon Tower router (high 8.8)
- [CVE-2021-20141](https://insights.sbomify.com/CVE-2021-20141/): Command injection in Gryphon Tower router (high 8.8)
- [CVE-2021-20140](https://insights.sbomify.com/CVE-2021-20140/): Command injection in Gryphon Tower router (high 8.8)
- [CVE-2021-2014](https://insights.sbomify.com/CVE-2021-2014/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20139](https://insights.sbomify.com/CVE-2021-20139/): Command injection in Gryphon Tower router (high 8.8)
- [CVE-2021-20138](https://insights.sbomify.com/CVE-2021-20138/): Command injection in Gryphon Tower router (high 8.8)
- [CVE-2021-20137](https://insights.sbomify.com/CVE-2021-20137/): Cross-site scripting in Gryphon Tower router (medium 6.1)
- [CVE-2021-20136](https://insights.sbomify.com/CVE-2021-20136/): Missing authorization in ManageEngine Log360 (critical 9.8)
- [CVE-2021-20135](https://insights.sbomify.com/CVE-2021-20135/): Privilege escalation in Nessus (medium 6.7)
- [CVE-2021-20134](https://insights.sbomify.com/CVE-2021-20134/): Path traversal in Quagga Services on D-Link DIR-2640 Routers (high 8.4)
- [CVE-2021-20133](https://insights.sbomify.com/CVE-2021-20133/): Path traversal in Quagga Services on D-Link DIR-2640 Routers (medium 6.1)
- [CVE-2021-20132](https://insights.sbomify.com/CVE-2021-20132/): Hardcoded credentials in Quagga Services on D-Link DIR-2640 Routers (high 8.8)
- [CVE-2021-20131](https://insights.sbomify.com/CVE-2021-20131/): File upload in ManageEngine ADManager Plus Build 7111 (high 8.8)
- [CVE-2021-20130](https://insights.sbomify.com/CVE-2021-20130/): File upload in ManageEngine ADManager Plus Build 7111 (high 8.8)
- [CVE-2021-2013](https://insights.sbomify.com/CVE-2021-2013/): Other in BI Publisher (formerly XML Publisher) (high 7.6)
- [CVE-2021-20129](https://insights.sbomify.com/CVE-2021-20129/): Information disclosure in Draytek VigorConnect (high 7.5)
- [CVE-2021-20128](https://insights.sbomify.com/CVE-2021-20128/): Cross-site scripting in Draytek VigorConnect (medium 5.4)
- [CVE-2021-20127](https://insights.sbomify.com/CVE-2021-20127/): Path traversal in Draytek VigorConnect (high 8.1)
- [CVE-2021-20126](https://insights.sbomify.com/CVE-2021-20126/): Cross-site request forgery in Draytek VigorConnect (high 8.8)
- [CVE-2021-20125](https://insights.sbomify.com/CVE-2021-20125/): File upload in Draytek VigorConnect (critical 9.8)
- [CVE-2021-20124](https://insights.sbomify.com/CVE-2021-20124/): Draytek VigorConnect Path Traversal Vulnerability (high 7.5, exploited in the wild)
- [CVE-2021-20123](https://insights.sbomify.com/CVE-2021-20123/): Draytek VigorConnect Path Traversal Vulnerability (high 7.5, exploited in the wild)
- [CVE-2021-20122](https://insights.sbomify.com/CVE-2021-20122/): Command injection in Telus Wi-Fi Hub (PRV65B444A-S-TS) (high 7.2)
- [CVE-2021-20121](https://insights.sbomify.com/CVE-2021-20121/): Path traversal in Telus Wi-Fi Hub (PRV65B444A-S-TS) (medium 4.0)
- [CVE-2021-20120](https://insights.sbomify.com/CVE-2021-20120/): Cross-site request forgery in Arris SurfBoard SB8200 (high 8.8)
- [CVE-2021-2012](https://insights.sbomify.com/CVE-2021-2012/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20119](https://insights.sbomify.com/CVE-2021-20119/): Privilege escalation in Arris SurfBoard SB8200 (high 7.1)
- [CVE-2021-20118](https://insights.sbomify.com/CVE-2021-20118/): Privilege escalation in Nessus Agent (medium 6.7)
- [CVE-2021-20117](https://insights.sbomify.com/CVE-2021-20117/): Privilege escalation in Nessus Agent (medium 6.7)
- [CVE-2021-20116](https://insights.sbomify.com/CVE-2021-20116/): Cross-site scripting in TCExam (medium 6.1)
- [CVE-2021-20115](https://insights.sbomify.com/CVE-2021-20115/): Cross-site scripting in TCExam (medium 6.1)
- [CVE-2021-20114](https://insights.sbomify.com/CVE-2021-20114/): Information disclosure in TCExam (high 7.5)
- [CVE-2021-20113](https://insights.sbomify.com/CVE-2021-20113/): Information disclosure in TCExam (medium 5.3)
- [CVE-2021-20112](https://insights.sbomify.com/CVE-2021-20112/): Cross-site scripting in TCExam (medium 5.4)
- [CVE-2021-20111](https://insights.sbomify.com/CVE-2021-20111/): Cross-site scripting in TCExam (medium 5.4)
- [CVE-2021-20110](https://insights.sbomify.com/CVE-2021-20110/): Integer overflow in Manage Engine Asset Explorer Agent (critical 9.8)
- [CVE-2021-2011](https://insights.sbomify.com/CVE-2021-2011/): Denial of service in MySQL Server (medium 5.9)
- [CVE-2021-20109](https://insights.sbomify.com/CVE-2021-20109/): Memory corruption in Manage Engine Asset Explorer Agent (high 7.5)
- [CVE-2021-20108](https://insights.sbomify.com/CVE-2021-20108/): Denial of service in Manage Engine Asset Explorer Agent (high 7.5)
- [CVE-2021-20107](https://insights.sbomify.com/CVE-2021-20107/): Missing authorization in SLOAN (medium 5.4)
- [CVE-2021-20106](https://insights.sbomify.com/CVE-2021-20106/): Privilege escalation in Nessus Agent (medium 6.5)
- [CVE-2021-20105](https://insights.sbomify.com/CVE-2021-20105/): Open redirect in AppNitro Machform (medium 6.1)
- [CVE-2021-20104](https://insights.sbomify.com/CVE-2021-20104/): File upload in AppNitro Machform (high 8.1)
- [CVE-2021-20103](https://insights.sbomify.com/CVE-2021-20103/): Cross-site scripting in AppNitro Machform (medium 6.1)
- [CVE-2021-20102](https://insights.sbomify.com/CVE-2021-20102/): Cross-site request forgery in AppNitro Machform (high 8.8)
- [CVE-2021-20101](https://insights.sbomify.com/CVE-2021-20101/): Other in AppNitro Machform (medium 6.1)
- [CVE-2021-20100](https://insights.sbomify.com/CVE-2021-20100/): Privilege escalation in Nessus Agent (medium 6.7)
- [CVE-2021-2010](https://insights.sbomify.com/CVE-2021-2010/): Other in MySQL Server (medium 4.2)
- [CVE-2021-20099](https://insights.sbomify.com/CVE-2021-20099/): Privilege escalation in Nessus Agent (medium 6.7)
- [CVE-2021-20096](https://insights.sbomify.com/CVE-2021-20096/): Cross-site request forgery in OpenOversight (high 8.1)
- [CVE-2021-20094](https://insights.sbomify.com/CVE-2021-20094/): Memory corruption in Wibu-Systems CodeMeter (high 7.5)
- [CVE-2021-20093](https://insights.sbomify.com/CVE-2021-20093/): Memory corruption in Wibu-Systems CodeMeter (critical 9.1)
- [CVE-2021-20092](https://insights.sbomify.com/CVE-2021-20092/): Auth bypass in Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 (high 7.5)
- [CVE-2021-20091](https://insights.sbomify.com/CVE-2021-20091/): Other in Buffalo WSR-2533DHPL2, Buffalo WSR-2533DHP3 (high 8.8)
- [CVE-2021-20090](https://insights.sbomify.com/CVE-2021-20090/): Arcadyan Buffalo Firmware Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2021-2009](https://insights.sbomify.com/CVE-2021-2009/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2021-20089](https://insights.sbomify.com/CVE-2021-20089/): Code injection in purl (high 8.8)
- [CVE-2021-20088](https://insights.sbomify.com/CVE-2021-20088/): mootools-more vulnerable to prototype pollution (high 8.8)
- [CVE-2021-20087](https://insights.sbomify.com/CVE-2021-20087/): Prototype Pollution in jquery-deparam (high 8.8)
- [CVE-2021-20086](https://insights.sbomify.com/CVE-2021-20086/): Prototype Pollution in jquery-bbq (high 8.8)
- [CVE-2021-20085](https://insights.sbomify.com/CVE-2021-20085/): Prototype Pollution in backbone-query-parameters (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/250/