# Vulnerabilities published in 2021


- [CVE-2021-46455](https://insights.sbomify.com/CVE-2021-46455/): Command injection in dlink:dir-823 pro firmware (critical 9.8)
- [CVE-2021-46454](https://insights.sbomify.com/CVE-2021-46454/): Command injection in dlink:dir-823 pro firmware (critical 9.8)
- [CVE-2021-46453](https://insights.sbomify.com/CVE-2021-46453/): Command injection in dlink:dir-823 pro firmware (critical 9.8)
- [CVE-2021-46452](https://insights.sbomify.com/CVE-2021-46452/): Command injection in dlink:dir-823 pro firmware (critical 9.8)
- [CVE-2021-46451](https://insights.sbomify.com/CVE-2021-46451/): SQL injection in online project time management system project:online project time management system (critical 9.8)
- [CVE-2021-46448](https://insights.sbomify.com/CVE-2021-46448/): SQL injection in hhg-multistore:multistore (critical 9.8)
- [CVE-2021-46447](https://insights.sbomify.com/CVE-2021-46447/): Cross-site scripting in hhg-multistore:multistore (medium 5.4)
- [CVE-2021-46446](https://insights.sbomify.com/CVE-2021-46446/): SQL injection in hhg-multistore:multistore (critical 9.8)
- [CVE-2021-46445](https://insights.sbomify.com/CVE-2021-46445/): SQL injection in hhg-multistore:multistore (critical 9.8)
- [CVE-2021-46444](https://insights.sbomify.com/CVE-2021-46444/): SQL injection in hhg-multistore:multistore (critical 9.8)
- [CVE-2021-46442](https://insights.sbomify.com/CVE-2021-46442/): Auth bypass in dlink:dir-825 firmware (critical 9.8)
- [CVE-2021-46441](https://insights.sbomify.com/CVE-2021-46441/): Command injection in dlink:dir-825 firmware (high 8.8)
- [CVE-2021-46440](https://insights.sbomify.com/CVE-2021-46440/): Insecure password handling vulnerability in Strapi (high 7.5)
- [CVE-2021-46437](https://insights.sbomify.com/CVE-2021-46437/): Cross-site scripting in zzcms:zzcms (medium 4.8)
- [CVE-2021-46436](https://insights.sbomify.com/CVE-2021-46436/): SQL injection in zzcms:zzcms (high 7.2)
- [CVE-2021-46434](https://insights.sbomify.com/CVE-2021-46434/): Information disclosure in emqx:emqx (medium 5.3)
- [CVE-2021-46433](https://insights.sbomify.com/CVE-2021-46433/): Sandbox bypass in fenom (critical 10.0)
- [CVE-2021-46428](https://insights.sbomify.com/CVE-2021-46428/): File upload in simple chatbot application project:simple chatbot application (critical 9.8)
- [CVE-2021-46427](https://insights.sbomify.com/CVE-2021-46427/): SQL injection in simple chatbot application project:simple chatbot application (critical 9.8)
- [CVE-2021-46426](https://insights.sbomify.com/CVE-2021-46426/): Cross-site scripting in phpipam:phpipam (medium 6.1)
- [CVE-2021-46424](https://insights.sbomify.com/CVE-2021-46424/): Path traversal in telesquare:tlr-2005ksh firmware (critical 9.1)
- [CVE-2021-46423](https://insights.sbomify.com/CVE-2021-46423/): Missing authorization in telesquare:tlr-2005ksh firmware (medium 5.3)
- [CVE-2021-46422](https://insights.sbomify.com/CVE-2021-46422/): Command injection in telesquare:sdt-cs3b1 firmware (critical 9.8)
- [CVE-2021-46421](https://insights.sbomify.com/CVE-2021-46421/): Path traversal in franklinfueling:ts-550 evo firmware (high 7.5)
- [CVE-2021-46420](https://insights.sbomify.com/CVE-2021-46420/): Path traversal in franklinfueling:ts-550 evo firmware (high 7.5)
- [CVE-2021-46419](https://insights.sbomify.com/CVE-2021-46419/): Missing authorization in telesquare:tlr-2855ks6 firmware (critical 9.1)
- [CVE-2021-46418](https://insights.sbomify.com/CVE-2021-46418/): File upload in telesquare:tlr-2855ks6 firmware (high 7.5)
- [CVE-2021-46417](https://insights.sbomify.com/CVE-2021-46417/): Path traversal in franklinfueling:colibri firmware (high 7.5)
- [CVE-2021-46416](https://insights.sbomify.com/CVE-2021-46416/): Missing authorization in sma:sunny tripower firmware (medium 5.4)
- [CVE-2021-46408](https://insights.sbomify.com/CVE-2021-46408/): Memory corruption in tenda:ax12 firmware (high 7.5)
- [CVE-2021-46398](https://insights.sbomify.com/CVE-2021-46398/): Cross-Site Request Forgery in Filebrowser (high 8.8)
- [CVE-2021-46394](https://insights.sbomify.com/CVE-2021-46394/): Memory corruption in tenda:ax3 firmware (critical 9.8)
- [CVE-2021-46393](https://insights.sbomify.com/CVE-2021-46393/): Memory corruption in tenda:ax3 firmware (critical 9.8)
- [CVE-2021-46390](https://insights.sbomify.com/CVE-2021-46390/): Auth bypass in lexar:f35 firmware (medium 6.8)
- [CVE-2021-46389](https://insights.sbomify.com/CVE-2021-46389/): Integer overflow in high resolution streaming image server project:high resolution streaming image server (high 7.5)
- [CVE-2021-46387](https://insights.sbomify.com/CVE-2021-46387/): Cross-site scripting in zyxel:zywall 2 plus internet security appliance firmware (medium 6.1)
- [CVE-2021-46386](https://insights.sbomify.com/CVE-2021-46386/): Mingsoft MCMS vulnerable to Remote Code Execution via file upload. (critical 9.8)
- [CVE-2021-46385](https://insights.sbomify.com/CVE-2021-46385/): Mingsoft MCMS SQL injection vulnerability (high 7.5)
- [CVE-2021-46384](https://insights.sbomify.com/CVE-2021-46384/): Remote code execution in net.mingsoft:ms-mcms (critical 9.8)
- [CVE-2021-46383](https://insights.sbomify.com/CVE-2021-46383/): Mingsoft MCMS SQL injection vulnerability (high 7.5)
- [CVE-2021-46382](https://insights.sbomify.com/CVE-2021-46382/): Cross-site scripting in netgear:wac120 ac firmware (medium 6.1)
- [CVE-2021-46381](https://insights.sbomify.com/CVE-2021-46381/): Path traversal in dlink:dap-1620 firmware (high 7.5)
- [CVE-2021-46379](https://insights.sbomify.com/CVE-2021-46379/): Open redirect in dlink:dir-850l firmware (medium 6.1)
- [CVE-2021-46378](https://insights.sbomify.com/CVE-2021-46378/): Missing authorization in dlink:dir-850l firmware (high 7.5)
- [CVE-2021-46377](https://insights.sbomify.com/CVE-2021-46377/): SQL injection in cskaza:cszcms (critical 9.8)
- [CVE-2021-46372](https://insights.sbomify.com/CVE-2021-46372/): Cross-site scripting in erudika:scoold (medium 5.4)
- [CVE-2021-46371](https://insights.sbomify.com/CVE-2021-46371/): Missing authorization in antd-admin project:antd-admin (high 7.5)
- [CVE-2021-46368](https://insights.sbomify.com/CVE-2021-46368/): Privilege escalation in trigonesoft:remote system monitor (high 7.8)
- [CVE-2021-46367](https://insights.sbomify.com/CVE-2021-46367/): File upload in ritecms:ritecms (high 7.2)
- [CVE-2021-46366](https://insights.sbomify.com/CVE-2021-46366/): Cross-Site Request Forgery in Magnolia CMS (high 8.8)
- [CVE-2021-46365](https://insights.sbomify.com/CVE-2021-46365/): Improper Restriction of XML External Entity Reference in Magnolia CMS (high 7.8)
- [CVE-2021-46364](https://insights.sbomify.com/CVE-2021-46364/): Deserialization of Untrusted Data in Magnolia CMS (high 7.8)
- [CVE-2021-46363](https://insights.sbomify.com/CVE-2021-46363/): Arbitrary code execution in Magnolia CMS (high 7.8)
- [CVE-2021-46362](https://insights.sbomify.com/CVE-2021-46362/): Code injection in magnolia-cms:magnolia cms (critical 9.8)
- [CVE-2021-46361](https://insights.sbomify.com/CVE-2021-46361/): Arbitrary code execution in Magnolia CMS (critical 9.8)
- [CVE-2021-46360](https://insights.sbomify.com/CVE-2021-46360/): File upload in ocproducts:composr (high 8.8)
- [CVE-2021-46359](https://insights.sbomify.com/CVE-2021-46359/): Business logic in fisco-bcos:fisco-bcos (high 7.5)
- [CVE-2021-46355](https://insights.sbomify.com/CVE-2021-46355/): Cross-site scripting in factorfx:ocs inventory (medium 5.4)
- [CVE-2021-46354](https://insights.sbomify.com/CVE-2021-46354/): Server-side request forgery in cybelesoft:thinfinity virtualui (high 7.5)
- [CVE-2021-46353](https://insights.sbomify.com/CVE-2021-46353/): Information disclosure in dlink:dir-x1860 firmware (medium 5.3)
- [CVE-2021-46351](https://insights.sbomify.com/CVE-2021-46351/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46350](https://insights.sbomify.com/CVE-2021-46350/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46349](https://insights.sbomify.com/CVE-2021-46349/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46348](https://insights.sbomify.com/CVE-2021-46348/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46347](https://insights.sbomify.com/CVE-2021-46347/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46346](https://insights.sbomify.com/CVE-2021-46346/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46345](https://insights.sbomify.com/CVE-2021-46345/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46344](https://insights.sbomify.com/CVE-2021-46344/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46343](https://insights.sbomify.com/CVE-2021-46343/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46342](https://insights.sbomify.com/CVE-2021-46342/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46340](https://insights.sbomify.com/CVE-2021-46340/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46339](https://insights.sbomify.com/CVE-2021-46339/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46338](https://insights.sbomify.com/CVE-2021-46338/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46337](https://insights.sbomify.com/CVE-2021-46337/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46336](https://insights.sbomify.com/CVE-2021-46336/): Denial of service in jerryscript:jerryscript (medium 5.5)
- [CVE-2021-46335](https://insights.sbomify.com/CVE-2021-46335/): Null dereference in moddable:moddable sdk (medium 5.5)
- [CVE-2021-46334](https://insights.sbomify.com/CVE-2021-46334/): Memory corruption in moddable:moddable sdk (high 7.8)
- [CVE-2021-46333](https://insights.sbomify.com/CVE-2021-46333/): Memory corruption in moddable:moddable sdk (medium 5.5)
- [CVE-2021-46332](https://insights.sbomify.com/CVE-2021-46332/): Memory corruption in moddable:moddable sdk (high 7.8)
- [CVE-2021-46331](https://insights.sbomify.com/CVE-2021-46331/): Null dereference in moddable:moddable sdk (medium 5.5)
- [CVE-2021-46330](https://insights.sbomify.com/CVE-2021-46330/): Null dereference in moddable:moddable sdk (medium 5.5)
- [CVE-2021-46329](https://insights.sbomify.com/CVE-2021-46329/): Memory corruption in moddable:moddable sdk (medium 5.5)
- [CVE-2021-46328](https://insights.sbomify.com/CVE-2021-46328/): Memory corruption in moddable:moddable sdk (high 7.8)
- [CVE-2021-46327](https://insights.sbomify.com/CVE-2021-46327/): Null dereference in moddable:moddable sdk (medium 5.5)
- [CVE-2021-46326](https://insights.sbomify.com/CVE-2021-46326/): Memory corruption in moddable:moddable sdk (high 7.8)
- [CVE-2021-46325](https://insights.sbomify.com/CVE-2021-46325/): Memory corruption in espruino:espruino (high 7.8)
- [CVE-2021-46324](https://insights.sbomify.com/CVE-2021-46324/): Memory corruption in espruino:espruino (high 7.8)
- [CVE-2021-46323](https://insights.sbomify.com/CVE-2021-46323/): Null dereference in espruino:espruino (medium 5.5)
- [CVE-2021-46322](https://insights.sbomify.com/CVE-2021-46322/): Null dereference in duktape project:duktape (medium 5.5)
- [CVE-2021-46321](https://insights.sbomify.com/CVE-2021-46321/): Memory corruption in tenda:ac11 firmware (critical 9.8)
- [CVE-2021-46320](https://insights.sbomify.com/CVE-2021-46320/): Race condition in openzeppelin:openzeppelin (high 7.5)
- [CVE-2021-46319](https://insights.sbomify.com/CVE-2021-46319/): Command injection in dlink:dir-846 firmware (critical 9.8)
- [CVE-2021-46315](https://insights.sbomify.com/CVE-2021-46315/): Command injection in dlink:dir-846 firmware (critical 9.8)
- [CVE-2021-46314](https://insights.sbomify.com/CVE-2021-46314/): Command injection in dlink:dir-846 firmware (critical 9.8)
- [CVE-2021-46313](https://insights.sbomify.com/CVE-2021-46313/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2021-46312](https://insights.sbomify.com/CVE-2021-46312/): Denial of service in djvulibre project:djvulibre (medium 6.5)
- [CVE-2021-46311](https://insights.sbomify.com/CVE-2021-46311/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-46310](https://insights.sbomify.com/CVE-2021-46310/): Denial of service in djvulibre project:djvulibre (medium 6.5)
- [CVE-2021-46309](https://insights.sbomify.com/CVE-2021-46309/): SQL injection in oretnom23:employee and visitor gate pass logging system (critical 9.8)
- [CVE-2021-46308](https://insights.sbomify.com/CVE-2021-46308/): SQL injection in online railway reservation system project:online railway reservation system (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/56/