# Vulnerabilities published in 2021


- [CVE-2021-46878](https://insights.sbomify.com/CVE-2021-46878/): Memory corruption in treasuredata:fluent bit (high 7.8)
- [CVE-2021-46877](https://insights.sbomify.com/CVE-2021-46877/): jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode (high 7.5)
- [CVE-2021-46876](https://insights.sbomify.com/CVE-2021-46876/): /user/sessions endpoint allows detecting valid accounts (medium 5.3)
- [CVE-2021-46875](https://insights.sbomify.com/CVE-2021-46875/): Cross-site scripting in eZ Platform Kernel (medium 6.1)
- [CVE-2021-46873](https://insights.sbomify.com/CVE-2021-46873/): Race condition in wireguard:wireguard (medium 5.3)
- [CVE-2021-46872](https://insights.sbomify.com/CVE-2021-46872/): Cross-site scripting in nim-lang:nim (medium 6.1)
- [CVE-2021-46871](https://insights.sbomify.com/CVE-2021-46871/): phoenix_html allows Cross-site Scripting in HEEx class attributes (medium 6.1)
- [CVE-2021-46868](https://insights.sbomify.com/CVE-2021-46868/): Memory corruption in EMUI (high 7.5)
- [CVE-2021-46867](https://insights.sbomify.com/CVE-2021-46867/): Memory corruption in EMUI (high 7.5)
- [CVE-2021-46856](https://insights.sbomify.com/CVE-2021-46856/): Path traversal in EMUI (high 7.5)
- [CVE-2021-46854](https://insights.sbomify.com/CVE-2021-46854/): Information disclosure in proftpd:proftpd (high 7.5)
- [CVE-2021-46853](https://insights.sbomify.com/CVE-2021-46853/): Race condition in alpine project:alpine (medium 5.9)
- [CVE-2021-46852](https://insights.sbomify.com/CVE-2021-46852/): Security feature bypass in EMUI (high 7.5)
- [CVE-2021-46851](https://insights.sbomify.com/CVE-2021-46851/): Security feature bypass in EMUI (critical 9.8)
- [CVE-2021-46850](https://insights.sbomify.com/CVE-2021-46850/): Command injection in vestacp:control panel (high 7.2)
- [CVE-2021-46848](https://insights.sbomify.com/CVE-2021-46848/): Memory corruption in debian:debian linux (critical 9.1)
- [CVE-2021-46846](https://insights.sbomify.com/CVE-2021-46846/): Cross-site scripting in HPE Integrated Lights-Out 5 (medium 6.4)
- [CVE-2021-46841](https://insights.sbomify.com/CVE-2021-46841/): Information disclosure in Apple Music for Android (medium 5.9)
- [CVE-2021-46840](https://insights.sbomify.com/CVE-2021-46840/): Memory corruption in EMUI (critical 9.1)
- [CVE-2021-46839](https://insights.sbomify.com/CVE-2021-46839/): Memory corruption in EMUI (critical 9.1)
- [CVE-2021-46837](https://insights.sbomify.com/CVE-2021-46837/): Null dereference in asterisk:certified asterisk (medium 6.5)
- [CVE-2021-46836](https://insights.sbomify.com/CVE-2021-46836/): Information disclosure in EMUI (high 7.5)
- [CVE-2021-46835](https://insights.sbomify.com/CVE-2021-46835/): Other in WS7200-10 (medium 4.3)
- [CVE-2021-46834](https://insights.sbomify.com/CVE-2021-46834/): Missing authorization in JAD-AL50 (medium 5.5)
- [CVE-2021-46830](https://insights.sbomify.com/CVE-2021-46830/): Path traversal in helpsystems:goanywhere managed file transfer (medium 6.5)
- [CVE-2021-46829](https://insights.sbomify.com/CVE-2021-46829/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-46828](https://insights.sbomify.com/CVE-2021-46828/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2021-46827](https://insights.sbomify.com/CVE-2021-46827/): Cross-site scripting in sync:oxygen publishing engine (medium 6.1)
- [CVE-2021-46825](https://insights.sbomify.com/CVE-2021-46825/): Other in Advance Secure Gateway and ProxySG (critical 9.1)
- [CVE-2021-46824](https://insights.sbomify.com/CVE-2021-46824/): Cross-site scripting in school file management system project:school file management system (medium 5.4)
- [CVE-2021-46823](https://insights.sbomify.com/CVE-2021-46823/): Denial of Service in python-ldap (medium 6.5)
- [CVE-2021-46822](https://insights.sbomify.com/CVE-2021-46822/): Memory corruption in libjpeg-turbo:libjpeg-turbo (medium 5.5)
- [CVE-2021-46820](https://insights.sbomify.com/CVE-2021-46820/): Missing authorization in xos-shop:xos shop system (high 8.1)
- [CVE-2021-46818](https://insights.sbomify.com/CVE-2021-46818/): Adobe Media Encoder M4A file memory corruption vulnerability could lead to remote code execution (high 7.8)
- [CVE-2021-46817](https://insights.sbomify.com/CVE-2021-46817/): Adobe Media Encoder M4A file memory corruption vulnerability could lead to remote code execution (high 7.8)
- [CVE-2021-46816](https://insights.sbomify.com/CVE-2021-46816/): Adobe Premiere Pro M4A file memory corruption vulnerability could lead to remote code execution (high 7.8)
- [CVE-2021-46814](https://insights.sbomify.com/CVE-2021-46814/): Memory corruption in EMUI (high 7.5)
- [CVE-2021-46813](https://insights.sbomify.com/CVE-2021-46813/): Other in EMUI (high 7.5)
- [CVE-2021-46812](https://insights.sbomify.com/CVE-2021-46812/): Other in EMUI (high 7.5)
- [CVE-2021-46811](https://insights.sbomify.com/CVE-2021-46811/): Information disclosure in EMUI (medium 5.3)
- [CVE-2021-46795](https://insights.sbomify.com/CVE-2021-46795/): Race condition in Ryzen 3000 Series (medium 4.7)
- [CVE-2021-46794](https://insights.sbomify.com/CVE-2021-46794/): Memory corruption in 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT (high 7.5)
- [CVE-2021-46792](https://insights.sbomify.com/CVE-2021-46792/): Race condition in Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Dali”/”Dali” ULP (medium 5.9)
- [CVE-2021-46791](https://insights.sbomify.com/CVE-2021-46791/): Memory corruption in 3rd Gen EPYC (medium 5.5)
- [CVE-2021-46790](https://insights.sbomify.com/CVE-2021-46790/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-46789](https://insights.sbomify.com/CVE-2021-46789/): Misconfiguration in EMUI;Magic UI (high 7.5)
- [CVE-2021-46788](https://insights.sbomify.com/CVE-2021-46788/): Other in EMUI (high 7.5)
- [CVE-2021-46787](https://insights.sbomify.com/CVE-2021-46787/): Missing authorization in EMUI (high 7.5)
- [CVE-2021-46786](https://insights.sbomify.com/CVE-2021-46786/): Memory corruption in EMUI (critical 9.8)
- [CVE-2021-46785](https://insights.sbomify.com/CVE-2021-46785/): Missing authorization in EMUI (medium 5.3)
- [CVE-2021-46784](https://insights.sbomify.com/CVE-2021-46784/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2021-46782](https://insights.sbomify.com/CVE-2021-46782/): Pricing Table by Supsystic < 1.9.5 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-46781](https://insights.sbomify.com/CVE-2021-46781/): Coming Soon by Supsystic < 1.7.6 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-46780](https://insights.sbomify.com/CVE-2021-46780/): Easy Google Maps < 1.9.32 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2021-46779](https://insights.sbomify.com/CVE-2021-46779/): Memory corruption in 1st Gen EPYC (high 7.1)
- [CVE-2021-46778](https://insights.sbomify.com/CVE-2021-46778/): Information disclosure in AMD Processors (medium 5.6)
- [CVE-2021-46775](https://insights.sbomify.com/CVE-2021-46775/): Memory corruption in 2nd Gen AMD EPYC™ (medium 6.8)
- [CVE-2021-46774](https://insights.sbomify.com/CVE-2021-46774/): Memory corruption in 1st Gen AMD EPYC™ Processors (medium 6.7)
- [CVE-2021-46773](https://insights.sbomify.com/CVE-2021-46773/): Memory corruption in 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT (high 8.8)
- [CVE-2021-46772](https://insights.sbomify.com/CVE-2021-46772/): Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (low 3.9)
- [CVE-2021-46771](https://insights.sbomify.com/CVE-2021-46771/): Other in 3rd Gen AMD EPYC™ (high 7.8)
- [CVE-2021-46769](https://insights.sbomify.com/CVE-2021-46769/): Other in 2nd Gen AMD EPYC™ (high 8.8)
- [CVE-2021-46768](https://insights.sbomify.com/CVE-2021-46768/): Memory corruption in 2nd Gen EPYC (medium 5.5)
- [CVE-2021-46767](https://insights.sbomify.com/CVE-2021-46767/): Other in 2nd Gen EPYC (medium 6.1)
- [CVE-2021-46766](https://insights.sbomify.com/CVE-2021-46766/): Information disclosure in 4th Gen AMD EPYC™ Processors (low 2.5)
- [CVE-2021-46765](https://insights.sbomify.com/CVE-2021-46765/): Memory corruption in Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics “Renoir” (high 7.5)
- [CVE-2021-46764](https://insights.sbomify.com/CVE-2021-46764/): Memory corruption in 2nd Gen AMD EPYC™ (high 7.5)
- [CVE-2021-46763](https://insights.sbomify.com/CVE-2021-46763/): Memory corruption in 2nd Gen AMD EPYC™ (high 7.5)
- [CVE-2021-46762](https://insights.sbomify.com/CVE-2021-46762/): Other in 2nd Gen AMD EPYC™ (low 3.9)
- [CVE-2021-46760](https://insights.sbomify.com/CVE-2021-46760/): Memory corruption in 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT (critical 9.8)
- [CVE-2021-46759](https://insights.sbomify.com/CVE-2021-46759/): Memory corruption in Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” (medium 6.1)
- [CVE-2021-46758](https://insights.sbomify.com/CVE-2021-46758/): Memory corruption in AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics “Barcelo” (medium 6.1)
- [CVE-2021-46757](https://insights.sbomify.com/CVE-2021-46757/): Memory corruption in AMD Ryzen™ Embedded 5000 (high 7.8)
- [CVE-2021-46756](https://insights.sbomify.com/CVE-2021-46756/): Other in 1st Gen AMD EPYC™ Processors (critical 9.1)
- [CVE-2021-46755](https://insights.sbomify.com/CVE-2021-46755/): Denial of service in 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT (high 7.5)
- [CVE-2021-46754](https://insights.sbomify.com/CVE-2021-46754/): Information disclosure in AMD Ryzen™ Embedded R1000 (critical 9.1)
- [CVE-2021-46753](https://insights.sbomify.com/CVE-2021-46753/): Memory corruption in Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock” (critical 9.1)
- [CVE-2021-46750](https://insights.sbomify.com/CVE-2021-46750/): Integer overflow in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (low 3.0)
- [CVE-2021-46749](https://insights.sbomify.com/CVE-2021-46749/): Memory corruption in 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT (high 7.5)
- [CVE-2021-46748](https://insights.sbomify.com/CVE-2021-46748/): Memory corruption in Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards (medium 5.5)
- [CVE-2021-46747](https://insights.sbomify.com/CVE-2021-46747/): Privilege escalation in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (high 7.1)
- [CVE-2021-46746](https://insights.sbomify.com/CVE-2021-46746/): Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (medium 5.2)
- [CVE-2021-46744](https://insights.sbomify.com/CVE-2021-46744/): Information disclosure in AMD Processors (medium 6.5)
- [CVE-2021-46743](https://insights.sbomify.com/CVE-2021-46743/): Firebase PHP-JWT key/algorithm type confusion (critical 9.1)
- [CVE-2021-46742](https://insights.sbomify.com/CVE-2021-46742/): Other in EMUI (critical 9.1)
- [CVE-2021-46741](https://insights.sbomify.com/CVE-2021-46741/): Other in EMUI (high 7.5)
- [CVE-2021-46740](https://insights.sbomify.com/CVE-2021-46740/): Auth bypass in EMUI (high 7.5)
- [CVE-2021-46709](https://insights.sbomify.com/CVE-2021-46709/): Cross-site scripting in phpliteadmin:phpliteadmin (medium 6.1)
- [CVE-2021-46708](https://insights.sbomify.com/CVE-2021-46708/): Spoofing attack in swagger-ui-dist (medium 6.1)
- [CVE-2021-46705](https://insights.sbomify.com/CVE-2021-46705/): grub2-once uses fixed file name in /var/tmp (medium 5.1)
- [CVE-2021-46704](https://insights.sbomify.com/CVE-2021-46704/): OS Command Injection in GenieACS (critical 9.8)
- [CVE-2021-46703](https://insights.sbomify.com/CVE-2021-46703/): Code injection in RazorEngine (critical 9.8)
- [CVE-2021-46702](https://insights.sbomify.com/CVE-2021-46702/): Information disclosure in torproject:tor (medium 5.5)
- [CVE-2021-46701](https://insights.sbomify.com/CVE-2021-46701/): Auth bypass in premid:premid (high 7.2)
- [CVE-2021-46700](https://insights.sbomify.com/CVE-2021-46700/): Memory corruption in saitoha:libsixel (medium 6.5)
- [CVE-2021-46699](https://insights.sbomify.com/CVE-2021-46699/): Memory corruption in Simcenter Femap (high 7.8)
- [CVE-2021-46687](https://insights.sbomify.com/CVE-2021-46687/): Information disclosure in JFrog Artifactory (medium 4.9)
- [CVE-2021-46686](https://insights.sbomify.com/CVE-2021-46686/): Command injection in acmailer CGI (critical 9.8)
- [CVE-2021-46681](https://insights.sbomify.com/CVE-2021-46681/): Vulnerability XSS in module mass operation name field (medium 4.0)
- [CVE-2021-46680](https://insights.sbomify.com/CVE-2021-46680/): Vulnerability XSS in module form name field (medium 4.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/53/