# Vulnerabilities published in 2021


- [CVE-2021-0314](https://insights.sbomify.com/CVE-2021-0314/): Security feature bypass in Android (high 7.3)
- [CVE-2021-0313](https://insights.sbomify.com/CVE-2021-0313/): Denial of service in Android (high 7.5)
- [CVE-2021-0312](https://insights.sbomify.com/CVE-2021-0312/): Integer overflow in Android (medium 6.5)
- [CVE-2021-0311](https://insights.sbomify.com/CVE-2021-0311/): Memory corruption in Android (medium 6.5)
- [CVE-2021-0310](https://insights.sbomify.com/CVE-2021-0310/): Use after free in Android (high 7.8)
- [CVE-2021-0309](https://insights.sbomify.com/CVE-2021-0309/): Privilege escalation in Android (medium 5.5)
- [CVE-2021-0308](https://insights.sbomify.com/CVE-2021-0308/): Memory corruption in Android (medium 6.8)
- [CVE-2021-0307](https://insights.sbomify.com/CVE-2021-0307/): Privilege escalation in Android (high 7.8)
- [CVE-2021-0306](https://insights.sbomify.com/CVE-2021-0306/): Privilege escalation in Android (high 7.8)
- [CVE-2021-0305](https://insights.sbomify.com/CVE-2021-0305/): Other in Android (high 7.8)
- [CVE-2021-0304](https://insights.sbomify.com/CVE-2021-0304/): Privilege escalation in Android (medium 5.5)
- [CVE-2021-0303](https://insights.sbomify.com/CVE-2021-0303/): Use after free in Android (high 7.0)
- [CVE-2021-0302](https://insights.sbomify.com/CVE-2021-0302/): Other in Android (high 7.8)
- [CVE-2021-0301](https://insights.sbomify.com/CVE-2021-0301/): Memory corruption in Android (medium 6.7)
- [CVE-2021-0299](https://insights.sbomify.com/CVE-2021-0299/): Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet (high 7.5)
- [CVE-2021-0298](https://insights.sbomify.com/CVE-2021-0298/): Junos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditions (medium 4.7)
- [CVE-2021-0297](https://insights.sbomify.com/CVE-2021-0297/): Auth bypass in Junos OS Evolved (medium 6.5)
- [CVE-2021-0296](https://insights.sbomify.com/CVE-2021-0296/): CTPView: HSTS not being enforced on CTPView server. (high 7.4)
- [CVE-2021-0295](https://insights.sbomify.com/CVE-2021-0295/): Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN. (medium 6.1)
- [CVE-2021-0294](https://insights.sbomify.com/CVE-2021-0294/): Junos OS: QFX5000 Series and EX4600 Series: Enhanced storm control might not work leading to partial Denial of Service (medium 5.3)
- [CVE-2021-0293](https://insights.sbomify.com/CVE-2021-0293/): Junos OS: Out-of-memory condition and crashes can occur after executing a certain CLI command repeatedly (medium 5.5)
- [CVE-2021-0292](https://insights.sbomify.com/CVE-2021-0292/): Junos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS) (medium 6.5)
- [CVE-2021-0291](https://insights.sbomify.com/CVE-2021-0291/): Denial of service in Junos OS (medium 6.5)
- [CVE-2021-0290](https://insights.sbomify.com/CVE-2021-0290/): Junos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames (medium 6.5)
- [CVE-2021-0289](https://insights.sbomify.com/CVE-2021-0289/): Race condition in Junos OS (medium 6.5)
- [CVE-2021-0288](https://insights.sbomify.com/CVE-2021-0288/): Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs (medium 6.5)
- [CVE-2021-0287](https://insights.sbomify.com/CVE-2021-0287/): Junos OS and Junos OS Evolved: RPD could crash in SR-ISIS/MPLS environment due to a flap of an ISIS link in the network (medium 6.5)
- [CVE-2021-0286](https://insights.sbomify.com/CVE-2021-0286/): Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart (high 7.5)
- [CVE-2021-0285](https://insights.sbomify.com/CVE-2021-0285/): Denial of service in Junos OS (high 7.5)
- [CVE-2021-0284](https://insights.sbomify.com/CVE-2021-0284/): Memory corruption in Junos OS (high 7.5)
- [CVE-2021-0283](https://insights.sbomify.com/CVE-2021-0283/): Memory corruption in Junos OS (high 7.5)
- [CVE-2021-0282](https://insights.sbomify.com/CVE-2021-0282/): Junos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabled (high 7.5)
- [CVE-2021-0281](https://insights.sbomify.com/CVE-2021-0281/): Denial of service in Junos OS (medium 5.9)
- [CVE-2021-0280](https://insights.sbomify.com/CVE-2021-0280/): Denial of service in Junos OS (high 7.5)
- [CVE-2021-0279](https://insights.sbomify.com/CVE-2021-0279/): Contrail Cloud: Hardcoded credentials for RabbitMQ service (high 8.6)
- [CVE-2021-0278](https://insights.sbomify.com/CVE-2021-0278/): Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root. (high 8.8)
- [CVE-2021-0277](https://insights.sbomify.com/CVE-2021-0277/): Junos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpd (high 8.8)
- [CVE-2021-0276](https://insights.sbomify.com/CVE-2021-0276/): Steel-Belted Radius Carrier Edition: Remote code execution vulnerability when EAP Authentication is configured. (critical 9.8)
- [CVE-2021-0275](https://insights.sbomify.com/CVE-2021-0275/): Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session. (high 8.8)
- [CVE-2021-0273](https://insights.sbomify.com/CVE-2021-0273/): Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces. (medium 5.3)
- [CVE-2021-0272](https://insights.sbomify.com/CVE-2021-0272/): Denial of service in Junos OS (medium 6.5)
- [CVE-2021-0271](https://insights.sbomify.com/CVE-2021-0271/): Memory corruption in Junos OS (medium 6.5)
- [CVE-2021-0270](https://insights.sbomify.com/CVE-2021-0270/): Use after free in Junos OS (high 7.5)
- [CVE-2021-0269](https://insights.sbomify.com/CVE-2021-0269/): Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks. (high 8.8)
- [CVE-2021-0268](https://insights.sbomify.com/CVE-2021-0268/): Other in Junos OS (high 8.8)
- [CVE-2021-0267](https://insights.sbomify.com/CVE-2021-0267/): Junos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core. (high 7.4)
- [CVE-2021-0266](https://insights.sbomify.com/CVE-2021-0266/): Hardcoded credentials in Junos OS (high 8.1)
- [CVE-2021-0265](https://insights.sbomify.com/CVE-2021-0265/): Contrail Insights: The REST API implementation allows an unauthenticated remote attacker to execute commands as root. (high 8.1)
- [CVE-2021-0264](https://insights.sbomify.com/CVE-2021-0264/): Denial of service in Junos OS (medium 5.9)
- [CVE-2021-0263](https://insights.sbomify.com/CVE-2021-0263/): Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled (medium 5.9)
- [CVE-2021-0262](https://insights.sbomify.com/CVE-2021-0262/): Junos OS: QFX10002-60C: Use after free vulnerability found during static code analysis (medium 6.5)
- [CVE-2021-0261](https://insights.sbomify.com/CVE-2021-0261/): Denial of service in Junos OS (high 7.5)
- [CVE-2021-0260](https://insights.sbomify.com/CVE-2021-0260/): Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests. (high 7.3)
- [CVE-2021-0259](https://insights.sbomify.com/CVE-2021-0259/): Denial of service in Junos OS (high 7.4)
- [CVE-2021-0258](https://insights.sbomify.com/CVE-2021-0258/): Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface (medium 5.9)
- [CVE-2021-0257](https://insights.sbomify.com/CVE-2021-0257/): Denial of service in Junos OS (medium 6.5)
- [CVE-2021-0256](https://insights.sbomify.com/CVE-2021-0256/): Junos OS: mosquitto Local Privilege Escalation vulnerability in SUID binaries (medium 5.5)
- [CVE-2021-0255](https://insights.sbomify.com/CVE-2021-0255/): Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries (medium 5.5)
- [CVE-2021-0254](https://insights.sbomify.com/CVE-2021-0254/): Junos OS: Remote code execution vulnerability in overlayd service (critical 9.8)
- [CVE-2021-0253](https://insights.sbomify.com/CVE-2021-0253/): Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Escalation (high 7.8)
- [CVE-2021-0252](https://insights.sbomify.com/CVE-2021-0252/): Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escalation (high 7.8)
- [CVE-2021-0251](https://insights.sbomify.com/CVE-2021-0251/): Null dereference in Junos OS (high 8.6)
- [CVE-2021-0250](https://insights.sbomify.com/CVE-2021-0250/): Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD (high 7.5)
- [CVE-2021-0249](https://insights.sbomify.com/CVE-2021-0249/): Memory corruption in Junos OS (high 8.1)
- [CVE-2021-0248](https://insights.sbomify.com/CVE-2021-0248/): NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces. (critical 10.0)
- [CVE-2021-0247](https://insights.sbomify.com/CVE-2021-0247/): Race condition in Junos OS (medium 5.1)
- [CVE-2021-0246](https://insights.sbomify.com/CVE-2021-0246/): Misconfiguration in Junos OS (high 7.3)
- [CVE-2021-0245](https://insights.sbomify.com/CVE-2021-0245/): Hardcoded credentials in Junos OS (high 7.8)
- [CVE-2021-0244](https://insights.sbomify.com/CVE-2021-0244/): Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition (high 7.4)
- [CVE-2021-0243](https://insights.sbomify.com/CVE-2021-0243/): Junos OS: EX4300: Stateless firewall policer fails to discard traffic (medium 4.7)
- [CVE-2021-0242](https://insights.sbomify.com/CVE-2021-0242/): Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured (medium 6.5)
- [CVE-2021-0241](https://insights.sbomify.com/CVE-2021-0241/): Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart (high 7.4)
- [CVE-2021-0240](https://insights.sbomify.com/CVE-2021-0240/): Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart. (high 7.4)
- [CVE-2021-0239](https://insights.sbomify.com/CVE-2021-0239/): Junos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames. (medium 6.5)
- [CVE-2021-0238](https://insights.sbomify.com/CVE-2021-0238/): Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space (medium 5.5)
- [CVE-2021-0237](https://insights.sbomify.com/CVE-2021-0237/): Denial of service in Junos OS (medium 6.5)
- [CVE-2021-0236](https://insights.sbomify.com/CVE-2021-0236/): Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core. (medium 6.5)
- [CVE-2021-0235](https://insights.sbomify.com/CVE-2021-0235/): Misconfiguration in Junos OS (high 7.3)
- [CVE-2021-0234](https://insights.sbomify.com/CVE-2021-0234/): Junos OS: QFX5100-96S: DDoS protection does not work as expected. (medium 5.8)
- [CVE-2021-0233](https://insights.sbomify.com/CVE-2021-0233/): Denial of service in Junos OS (high 7.5)
- [CVE-2021-0232](https://insights.sbomify.com/CVE-2021-0232/): Paragon Active Assurance: Authentication bypass vulnerability in Control Center (high 7.4)
- [CVE-2021-0231](https://insights.sbomify.com/CVE-2021-0231/): Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure. (medium 6.5)
- [CVE-2021-0230](https://insights.sbomify.com/CVE-2021-0230/): Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics (high 7.5)
- [CVE-2021-0229](https://insights.sbomify.com/CVE-2021-0229/): Junos OS: Receipt of specific packets could lead to Denial of Service in MQTT Server (medium 5.3)
- [CVE-2021-0228](https://insights.sbomify.com/CVE-2021-0228/): Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment (medium 6.5)
- [CVE-2021-0227](https://insights.sbomify.com/CVE-2021-0227/): Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets (high 7.5)
- [CVE-2021-0226](https://insights.sbomify.com/CVE-2021-0226/): Junos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packet (high 7.1)
- [CVE-2021-0225](https://insights.sbomify.com/CVE-2021-0225/): Junos OS Evolved: Stateless IP firewall filter does not work as expected (medium 5.8)
- [CVE-2021-0224](https://insights.sbomify.com/CVE-2021-0224/): Junos OS: ANCPD core when hitting maximum-discovery-table-entries limit (medium 6.5)
- [CVE-2021-0223](https://insights.sbomify.com/CVE-2021-0223/): Junos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binaries (high 7.8)
- [CVE-2021-0222](https://insights.sbomify.com/CVE-2021-0222/): Denial of service in Junos OS (high 7.4)
- [CVE-2021-0221](https://insights.sbomify.com/CVE-2021-0221/): Junos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast traffic (medium 6.5)
- [CVE-2021-0220](https://insights.sbomify.com/CVE-2021-0220/): Junos Space: Shared secrets stored in recoverable format and directly exposed through the UI (medium 6.8)
- [CVE-2021-0219](https://insights.sbomify.com/CVE-2021-0219/): Junos OS: Command injection vulnerability in 'request system software' CLI command (medium 6.7)
- [CVE-2021-0218](https://insights.sbomify.com/CVE-2021-0218/): Junos OS: Command injection vulnerability in license-check daemon (high 7.8)
- [CVE-2021-0217](https://insights.sbomify.com/CVE-2021-0217/): Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets (high 7.4)
- [CVE-2021-0216](https://insights.sbomify.com/CVE-2021-0216/): Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets (medium 6.5)
- [CVE-2021-0215](https://insights.sbomify.com/CVE-2021-0215/): Denial of service in Junos OS (medium 6.5)
- [CVE-2021-0214](https://insights.sbomify.com/CVE-2021-0214/): Junos OS: Denial of Service in ppmd upon receipt of malformed packet (medium 6.5)
- [CVE-2021-0212](https://insights.sbomify.com/CVE-2021-0212/): Contrail Networking: Administrator credentials are exposed in a plaintext file (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/266/