# Vulnerabilities published in 2021 - [CVE-2021-46307](https://insights.sbomify.com/CVE-2021-46307/): SQL injection in projectworlds:online examination system (critical 9.8) - [CVE-2021-46304](https://insights.sbomify.com/CVE-2021-46304/): Missing authorization in CP-8000 MASTER MODULE WITH I/O -25/+70°C (medium 5.3) - [CVE-2021-46283](https://insights.sbomify.com/CVE-2021-46283/): Null dereference in linux:linux kernel (medium 5.5) - [CVE-2021-46279](https://insights.sbomify.com/CVE-2021-46279/): Session Fixation and Insufficient Session Expiration (medium 5.8) - [CVE-2021-46270](https://insights.sbomify.com/CVE-2021-46270/): Missing authorization in JFrog Artifactory (low 2.7) - [CVE-2021-46265](https://insights.sbomify.com/CVE-2021-46265/): Memory corruption in tenda:ac11 firmware (critical 9.8) - [CVE-2021-46264](https://insights.sbomify.com/CVE-2021-46264/): Memory corruption in tenda:ac11 firmware (critical 9.8) - [CVE-2021-46263](https://insights.sbomify.com/CVE-2021-46263/): Memory corruption in tenda:ac11 firmware (critical 9.8) - [CVE-2021-46262](https://insights.sbomify.com/CVE-2021-46262/): Memory corruption in tenda:ac11 firmware (critical 9.8) - [CVE-2021-46255](https://insights.sbomify.com/CVE-2021-46255/): Path traversal in eyoucms:eyoucms (high 8.1) - [CVE-2021-46253](https://insights.sbomify.com/CVE-2021-46253/): Cross-site Scripting in Anchor CMS (medium 5.4) - [CVE-2021-46252](https://insights.sbomify.com/CVE-2021-46252/): Cross-site request forgery in scratch-wiki:scratch confirmaccount v3 (medium 6.5) - [CVE-2021-46251](https://insights.sbomify.com/CVE-2021-46251/): Cross-site scripting in scratchoauth2 project:scratchoauth2 (medium 6.1) - [CVE-2021-46250](https://insights.sbomify.com/CVE-2021-46250/): Auth bypass in scratchoauth2 project:scratchoauth2 (critical 10.0) - [CVE-2021-46249](https://insights.sbomify.com/CVE-2021-46249/): Missing authorization in scratchoauth2 project:scratchoauth2 (medium 6.5) - [CVE-2021-46247](https://insights.sbomify.com/CVE-2021-46247/): Hardcoded credentials in asus:cmax6000 firmware (high 7.5) - [CVE-2021-46244](https://insights.sbomify.com/CVE-2021-46244/): Denial of service in hdfgroup:hdf5 (medium 6.5) - [CVE-2021-46243](https://insights.sbomify.com/CVE-2021-46243/): Null dereference in hdfgroup:hdf5 (medium 6.5) - [CVE-2021-46242](https://insights.sbomify.com/CVE-2021-46242/): Use after free in hdfgroup:hdf5 (high 8.8) - [CVE-2021-46240](https://insights.sbomify.com/CVE-2021-46240/): Null dereference in gpac:gpac (medium 5.5) - [CVE-2021-46239](https://insights.sbomify.com/CVE-2021-46239/): Memory corruption in gpac:gpac (medium 5.5) - [CVE-2021-46238](https://insights.sbomify.com/CVE-2021-46238/): Memory corruption in gpac:gpac (medium 5.5) - [CVE-2021-46237](https://insights.sbomify.com/CVE-2021-46237/): Null dereference in gpac:gpac (medium 5.5) - [CVE-2021-46236](https://insights.sbomify.com/CVE-2021-46236/): Null dereference in gpac:gpac (medium 5.5) - [CVE-2021-46234](https://insights.sbomify.com/CVE-2021-46234/): Null dereference in gpac:gpac (medium 5.5) - [CVE-2021-46233](https://insights.sbomify.com/CVE-2021-46233/): Command injection in dlink:di-7200gv2 firmware (critical 9.8) - [CVE-2021-46232](https://insights.sbomify.com/CVE-2021-46232/): Command injection in dlink:di-7200gv2 firmware (critical 9.8) - [CVE-2021-46231](https://insights.sbomify.com/CVE-2021-46231/): Command injection in dlink:di-7200gv2 firmware (critical 9.8) - [CVE-2021-46230](https://insights.sbomify.com/CVE-2021-46230/): Command injection in dlink:di-7200gv2 firmware (critical 9.8) - [CVE-2021-46229](https://insights.sbomify.com/CVE-2021-46229/): Command injection in dlink:di-7200gv2 firmware (critical 9.8) - [CVE-2021-46228](https://insights.sbomify.com/CVE-2021-46228/): Command injection in dlink:di-7200gv2 firmware (critical 9.8) - [CVE-2021-46227](https://insights.sbomify.com/CVE-2021-46227/): Command injection in dlink:di-7200gv2 firmware (critical 9.8) - [CVE-2021-46226](https://insights.sbomify.com/CVE-2021-46226/): Command injection in dlink:di-7200gv2 firmware (critical 9.8) - [CVE-2021-46225](https://insights.sbomify.com/CVE-2021-46225/): Memory corruption in libmeshb project:libmeshb (medium 6.5) - [CVE-2021-46204](https://insights.sbomify.com/CVE-2021-46204/): SQL injection in taogogo:taocms (critical 9.8) - [CVE-2021-46203](https://insights.sbomify.com/CVE-2021-46203/): Path traversal in taogogo:taocms (medium 6.5) - [CVE-2021-46201](https://insights.sbomify.com/CVE-2021-46201/): SQL injection in online resort management system project:online resort management system (critical 9.8) - [CVE-2021-46200](https://insights.sbomify.com/CVE-2021-46200/): SQL injection in oretnom23:simple music cloud community system (critical 9.8) - [CVE-2021-46198](https://insights.sbomify.com/CVE-2021-46198/): SQL injection in courier management system project:courier management system (critical 9.8) - [CVE-2021-46195](https://insights.sbomify.com/CVE-2021-46195/): Denial of service in gnu:gcc (medium 5.5) - [CVE-2021-46179](https://insights.sbomify.com/CVE-2021-46179/): Denial of service in upx:upx (medium 6.5) - [CVE-2021-46174](https://insights.sbomify.com/CVE-2021-46174/): Memory corruption in gnu:binutils (high 7.5) - [CVE-2021-46171](https://insights.sbomify.com/CVE-2021-46171/): Null dereference in modex project:modex (medium 5.5) - [CVE-2021-46170](https://insights.sbomify.com/CVE-2021-46170/): Use after free in jerryscript:jerryscript (high 7.5) - [CVE-2021-46169](https://insights.sbomify.com/CVE-2021-46169/): Use after free in modex project:modex (medium 5.5) - [CVE-2021-46168](https://insights.sbomify.com/CVE-2021-46168/): Memory corruption in spinroot:spin (medium 5.5) - [CVE-2021-46167](https://insights.sbomify.com/CVE-2021-46167/): Missing authorization in wizplat:pd065 firmware (high 7.8) - [CVE-2021-46166](https://insights.sbomify.com/CVE-2021-46166/): Information disclosure in zohocorp:manageengine desktop central (medium 6.5) - [CVE-2021-46165](https://insights.sbomify.com/CVE-2021-46165/): Other in zohocorp:manageengine desktop central (high 7.8) - [CVE-2021-46164](https://insights.sbomify.com/CVE-2021-46164/): Code injection in zohocorp:manageengine desktop central (high 8.8) - [CVE-2021-46163](https://insights.sbomify.com/CVE-2021-46163/): Cross-site scripting in kentico:xperience (medium 6.1) - [CVE-2021-46162](https://insights.sbomify.com/CVE-2021-46162/): Memory corruption in Simcenter Femap (high 7.8) - [CVE-2021-46161](https://insights.sbomify.com/CVE-2021-46161/): Memory corruption in Simcenter Femap V2020.2 (high 7.8) - [CVE-2021-46160](https://insights.sbomify.com/CVE-2021-46160/): Memory corruption in Simcenter Femap V2020.2 (high 7.8) - [CVE-2021-46159](https://insights.sbomify.com/CVE-2021-46159/): Memory corruption in Simcenter Femap V2020.2 (high 7.8) - [CVE-2021-46158](https://insights.sbomify.com/CVE-2021-46158/): Memory corruption in Simcenter Femap V2020.2 (high 7.8) - [CVE-2021-46157](https://insights.sbomify.com/CVE-2021-46157/): Memory corruption in Simcenter Femap V2020.2 (high 7.8) - [CVE-2021-46156](https://insights.sbomify.com/CVE-2021-46156/): Memory corruption in Simcenter Femap V2020.2 (high 7.8) - [CVE-2021-46155](https://insights.sbomify.com/CVE-2021-46155/): Memory corruption in Simcenter Femap V2020.2 (high 7.8) - [CVE-2021-46154](https://insights.sbomify.com/CVE-2021-46154/): Memory corruption in Simcenter Femap V2020.2 (high 7.8) - [CVE-2021-46153](https://insights.sbomify.com/CVE-2021-46153/): Memory corruption in Simcenter Femap V2020.2 (high 7.8) - [CVE-2021-46152](https://insights.sbomify.com/CVE-2021-46152/): Memory corruption in Simcenter Femap V2020.2 (high 7.8) - [CVE-2021-46151](https://insights.sbomify.com/CVE-2021-46151/): Memory corruption in Simcenter Femap V2020.2 (high 7.8) - [CVE-2021-46150](https://insights.sbomify.com/CVE-2021-46150/): Cross-site scripting in mediawiki:mediawiki (medium 4.8) - [CVE-2021-46149](https://insights.sbomify.com/CVE-2021-46149/): Denial of service in mediawiki:mediawiki (high 7.5) - [CVE-2021-46148](https://insights.sbomify.com/CVE-2021-46148/): Information disclosure in mediawiki:mediawiki (medium 6.5) - [CVE-2021-46147](https://insights.sbomify.com/CVE-2021-46147/): Cross-site request forgery in mediawiki:mediawiki (high 8.8) - [CVE-2021-46146](https://insights.sbomify.com/CVE-2021-46146/): Cross-site scripting in mediawiki:mediawiki (medium 5.4) - [CVE-2021-46145](https://insights.sbomify.com/CVE-2021-46145/): Auth bypass in honda:civic 2012 (medium 5.3) - [CVE-2021-46144](https://insights.sbomify.com/CVE-2021-46144/): Cross-site scripting in debian:debian linux (medium 6.1) - [CVE-2021-46143](https://insights.sbomify.com/CVE-2021-46143/): Integer overflow in libexpat project:libexpat (high 8.1) - [CVE-2021-46142](https://insights.sbomify.com/CVE-2021-46142/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2021-46141](https://insights.sbomify.com/CVE-2021-46141/): Use after free in debian:debian linux (medium 5.5) - [CVE-2021-46122](https://insights.sbomify.com/CVE-2021-46122/): Memory corruption in tp-link:tl-wr840n firmware (high 7.2) - [CVE-2021-46118](https://insights.sbomify.com/CVE-2021-46118/): Code injection in jpress:jpress (high 7.2) - [CVE-2021-46117](https://insights.sbomify.com/CVE-2021-46117/): Code injection in jpress:jpress (high 7.2) - [CVE-2021-46116](https://insights.sbomify.com/CVE-2021-46116/): File upload in jpress:jpress (high 7.2) - [CVE-2021-46115](https://insights.sbomify.com/CVE-2021-46115/): File upload in jpress:jpress (high 7.2) - [CVE-2021-46114](https://insights.sbomify.com/CVE-2021-46114/): Code injection in jpress:jpress (high 8.8) - [CVE-2021-46113](https://insights.sbomify.com/CVE-2021-46113/): File upload in kea-hotel-erp project:kea-hotel-erp (high 8.8) - [CVE-2021-46110](https://insights.sbomify.com/CVE-2021-46110/): SQL injection in phpgurukul:online shopping portal (critical 9.8) - [CVE-2021-46109](https://insights.sbomify.com/CVE-2021-46109/): Cross-site scripting in asus:rt-ac52u b1 firmware (medium 6.1) - [CVE-2021-46108](https://insights.sbomify.com/CVE-2021-46108/): Cross-site scripting in dlink:dsl-2730e firmware (medium 5.4) - [CVE-2021-46107](https://insights.sbomify.com/CVE-2021-46107/): Server-side request forgery in ligeo-archives:ligeo basics (high 7.5) - [CVE-2021-46104](https://insights.sbomify.com/CVE-2021-46104/): Path traversal in webp:webp server go (high 7.5) - [CVE-2021-46102](https://insights.sbomify.com/CVE-2021-46102/): Integer overflow in solana_rbpf (high 7.5) - [CVE-2021-46101](https://insights.sbomify.com/CVE-2021-46101/): Code injection in gitforwindows:git (high 7.5) - [CVE-2021-46097](https://insights.sbomify.com/CVE-2021-46097/): File upload in dolphinphp:dolphinphp (high 8.8) - [CVE-2021-46093](https://insights.sbomify.com/CVE-2021-46093/): Missing authorization in elitecms:elite cms (critical 9.8) - [CVE-2021-46089](https://insights.sbomify.com/CVE-2021-46089/): SQL Injection in JeecgBoot (critical 9.8) - [CVE-2021-46088](https://insights.sbomify.com/CVE-2021-46088/): Code injection in zabbix:zabbix (high 7.2) - [CVE-2021-46087](https://insights.sbomify.com/CVE-2021-46087/): Cross-site scripting in jflyfox:jfinal cms (medium 5.4) - [CVE-2021-46086](https://insights.sbomify.com/CVE-2021-46086/): Missing authorization in mindskip:xzs-mysql (high 7.5) - [CVE-2021-46085](https://insights.sbomify.com/CVE-2021-46085/): Privilege escalation in oneblog project:oneblog (medium 6.5) - [CVE-2021-46084](https://insights.sbomify.com/CVE-2021-46084/): Cross-site scripting in uscat project:uscat (medium 5.4) - [CVE-2021-46083](https://insights.sbomify.com/CVE-2021-46083/): Cross-site scripting in uscat project:uscat (medium 5.4) - [CVE-2021-46082](https://insights.sbomify.com/CVE-2021-46082/): Denial of service in moxa:mgate 5101-pbm-mn-t firmware (high 7.5) - [CVE-2021-46080](https://insights.sbomify.com/CVE-2021-46080/): Cross-site request forgery in vehicle service management system project:vehicle service management system (medium 4.8) - [CVE-2021-46079](https://insights.sbomify.com/CVE-2021-46079/): File upload in vehicle service management system project:vehicle service management system (high 7.2) - [CVE-2021-46078](https://insights.sbomify.com/CVE-2021-46078/): File upload in vehicle service management system project:vehicle service management system (medium 4.8) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/57/