# Vulnerabilities published in 2021


- [CVE-2021-46076](https://insights.sbomify.com/CVE-2021-46076/): File upload in vehicle service management system project:vehicle service management system (high 8.8)
- [CVE-2021-46075](https://insights.sbomify.com/CVE-2021-46075/): Missing authorization in vehicle service management system project:vehicle service management system (high 7.2)
- [CVE-2021-46074](https://insights.sbomify.com/CVE-2021-46074/): Cross-site scripting in vehicle service management system project:vehicle service management system (medium 4.8)
- [CVE-2021-46073](https://insights.sbomify.com/CVE-2021-46073/): Cross-site scripting in vehicle service management system project:vehicle service management system (medium 4.8)
- [CVE-2021-46072](https://insights.sbomify.com/CVE-2021-46072/): Cross-site scripting in vehicle service management system project:vehicle service management system (medium 4.8)
- [CVE-2021-46071](https://insights.sbomify.com/CVE-2021-46071/): Cross-site scripting in vehicle service management system project:vehicle service management system (medium 4.8)
- [CVE-2021-46070](https://insights.sbomify.com/CVE-2021-46070/): Cross-site scripting in vehicle service management system project:vehicle service management system (medium 4.8)
- [CVE-2021-46069](https://insights.sbomify.com/CVE-2021-46069/): Cross-site scripting in vehicle service management system project:vehicle service management system (medium 4.8)
- [CVE-2021-46068](https://insights.sbomify.com/CVE-2021-46068/): Cross-site scripting in vehicle service management system project:vehicle service management system (medium 4.8)
- [CVE-2021-46067](https://insights.sbomify.com/CVE-2021-46067/): Auth bypass in vehicle service management system project:vehicle service management system (critical 9.8)
- [CVE-2021-46065](https://insights.sbomify.com/CVE-2021-46065/): Cross-site scripting in zohocorp:manageengine servicedesk plus (medium 4.8)
- [CVE-2021-46064](https://insights.sbomify.com/CVE-2021-46064/): Memory corruption in irfanview:irfanview (high 7.8)
- [CVE-2021-46063](https://insights.sbomify.com/CVE-2021-46063/): Server Side Template Injection in MCMS (critical 9.1)
- [CVE-2021-46062](https://insights.sbomify.com/CVE-2021-46062/): MCMS Arbitrary File Deletion vulnerability (high 7.1)
- [CVE-2021-46061](https://insights.sbomify.com/CVE-2021-46061/): SQL injection in computer and mobile repair shop management system project:computer and mobile repair shop management system (critical 9.8)
- [CVE-2021-46055](https://insights.sbomify.com/CVE-2021-46055/): Denial of service in webassembly:binaryen (medium 5.5)
- [CVE-2021-46054](https://insights.sbomify.com/CVE-2021-46054/): Denial of service in webassembly:binaryen (medium 5.5)
- [CVE-2021-46053](https://insights.sbomify.com/CVE-2021-46053/): Memory corruption in webassembly:binaryen (medium 5.5)
- [CVE-2021-46052](https://insights.sbomify.com/CVE-2021-46052/): Denial of service in webassembly:binaryen (medium 5.5)
- [CVE-2021-46051](https://insights.sbomify.com/CVE-2021-46051/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-46050](https://insights.sbomify.com/CVE-2021-46050/): Denial of service in webassembly:binaryen (medium 5.5)
- [CVE-2021-46049](https://insights.sbomify.com/CVE-2021-46049/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-46048](https://insights.sbomify.com/CVE-2021-46048/): Denial of service in webassembly:binaryen (medium 5.5)
- [CVE-2021-46047](https://insights.sbomify.com/CVE-2021-46047/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-46046](https://insights.sbomify.com/CVE-2021-46046/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-46045](https://insights.sbomify.com/CVE-2021-46045/): Denial of service in gpac:gpac (medium 5.5)
- [CVE-2021-46044](https://insights.sbomify.com/CVE-2021-46044/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-46043](https://insights.sbomify.com/CVE-2021-46043/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-46042](https://insights.sbomify.com/CVE-2021-46042/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-46041](https://insights.sbomify.com/CVE-2021-46041/): Memory corruption in gpac:gpac (medium 5.5)
- [CVE-2021-46040](https://insights.sbomify.com/CVE-2021-46040/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-46039](https://insights.sbomify.com/CVE-2021-46039/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-46038](https://insights.sbomify.com/CVE-2021-46038/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-46037](https://insights.sbomify.com/CVE-2021-46037/): Path traversal in MCMS (high 8.1)
- [CVE-2021-46036](https://insights.sbomify.com/CVE-2021-46036/): File upload leading to RCE in MCMS (critical 9.8)
- [CVE-2021-46034](https://insights.sbomify.com/CVE-2021-46034/): Cross-site scripting in forestblog project:forestblog (medium 6.1)
- [CVE-2021-46033](https://insights.sbomify.com/CVE-2021-46033/): File upload in forestblog project:forestblog (critical 9.8)
- [CVE-2021-46030](https://insights.sbomify.com/CVE-2021-46030/): Cross-site scripting in javaquarkbbs project:javaquarkbbs (medium 5.4)
- [CVE-2021-46028](https://insights.sbomify.com/CVE-2021-46028/): Cross-site request forgery in mblog project:mblog (medium 4.3)
- [CVE-2021-46027](https://insights.sbomify.com/CVE-2021-46027/): Cross-site request forgery in wangl1989:mysiteforme (medium 6.5)
- [CVE-2021-46026](https://insights.sbomify.com/CVE-2021-46026/): Cross-site scripting in wangl1989:mysiteforme (medium 5.4)
- [CVE-2021-46025](https://insights.sbomify.com/CVE-2021-46025/): Cross-site scripting in oneblog project:oneblog (medium 5.4)
- [CVE-2021-46024](https://insights.sbomify.com/CVE-2021-46024/): SQL injection in projectworlds:online-shopping-webvsite-in-php (critical 9.8)
- [CVE-2021-46023](https://insights.sbomify.com/CVE-2021-46023/): Memory corruption in mruby:mruby (high 7.5)
- [CVE-2021-46022](https://insights.sbomify.com/CVE-2021-46022/): Use after free in fedoraproject:fedora (medium 5.5)
- [CVE-2021-46021](https://insights.sbomify.com/CVE-2021-46021/): Use after free in fedoraproject:fedora (medium 5.5)
- [CVE-2021-46020](https://insights.sbomify.com/CVE-2021-46020/): Memory corruption in mruby:mruby (high 7.5)
- [CVE-2021-46019](https://insights.sbomify.com/CVE-2021-46019/): Null dereference in fedoraproject:fedora (medium 5.5)
- [CVE-2021-46013](https://insights.sbomify.com/CVE-2021-46013/): File upload in free school management software project:free school management software (critical 9.8)
- [CVE-2021-46010](https://insights.sbomify.com/CVE-2021-46010/): Weak cryptography in totolink:a3100r firmware (high 8.8)
- [CVE-2021-46009](https://insights.sbomify.com/CVE-2021-46009/): Missing authorization in totolink:a3100r firmware (critical 9.8)
- [CVE-2021-46008](https://insights.sbomify.com/CVE-2021-46008/): Hardcoded credentials in totolink:a3100r firmware (high 8.8)
- [CVE-2021-46007](https://insights.sbomify.com/CVE-2021-46007/): Command injection in totolink:ar3100r firmware (critical 9.8)
- [CVE-2021-46006](https://insights.sbomify.com/CVE-2021-46006/): Missing authorization in totolink:a3100r firmware (medium 6.5)
- [CVE-2021-46005](https://insights.sbomify.com/CVE-2021-46005/): Cross-site scripting in car rental management system project:car rental management system (medium 5.4)
- [CVE-2021-45998](https://insights.sbomify.com/CVE-2021-45998/): Command injection in dlink:dir-882 firmware (critical 9.8)
- [CVE-2021-45997](https://insights.sbomify.com/CVE-2021-45997/): Memory corruption in tendacn:g1 firmware (high 7.5)
- [CVE-2021-45996](https://insights.sbomify.com/CVE-2021-45996/): Memory corruption in tendacn:g1 firmware (high 7.5)
- [CVE-2021-45995](https://insights.sbomify.com/CVE-2021-45995/): Memory corruption in tendacn:g1 firmware (high 7.5)
- [CVE-2021-45994](https://insights.sbomify.com/CVE-2021-45994/): Memory corruption in tendacn:g1 firmware (high 7.5)
- [CVE-2021-45993](https://insights.sbomify.com/CVE-2021-45993/): Memory corruption in tendacn:g1 firmware (high 7.5)
- [CVE-2021-45992](https://insights.sbomify.com/CVE-2021-45992/): Memory corruption in tendacn:g1 firmware (high 7.5)
- [CVE-2021-45991](https://insights.sbomify.com/CVE-2021-45991/): Memory corruption in tendacn:g1 firmware (high 7.5)
- [CVE-2021-45990](https://insights.sbomify.com/CVE-2021-45990/): Command injection in tendacn:g1 firmware (critical 9.8)
- [CVE-2021-45989](https://insights.sbomify.com/CVE-2021-45989/): Memory corruption in tendacn:g1 firmware (high 7.5)
- [CVE-2021-45988](https://insights.sbomify.com/CVE-2021-45988/): Memory corruption in tendacn:g1 firmware (high 7.5)
- [CVE-2021-45987](https://insights.sbomify.com/CVE-2021-45987/): Command injection in tendacn:g1 firmware (critical 9.8)
- [CVE-2021-45986](https://insights.sbomify.com/CVE-2021-45986/): Command injection in tendacn:g1 firmware (critical 9.8)
- [CVE-2021-45985](https://insights.sbomify.com/CVE-2021-45985/): Memory corruption in lua:lua (high 7.5)
- [CVE-2021-45983](https://insights.sbomify.com/CVE-2021-45983/): Code injection in netscout:ngeniusone (critical 9.8)
- [CVE-2021-45982](https://insights.sbomify.com/CVE-2021-45982/): File upload in netscout:ngeniusone (high 8.8)
- [CVE-2021-45981](https://insights.sbomify.com/CVE-2021-45981/): XML external entity in netscout:ngeniusone (critical 9.8)
- [CVE-2021-45980](https://insights.sbomify.com/CVE-2021-45980/): Code injection in foxit:pdf editor (high 7.8)
- [CVE-2021-45979](https://insights.sbomify.com/CVE-2021-45979/): Command injection in foxit:pdf editor (high 7.8)
- [CVE-2021-45978](https://insights.sbomify.com/CVE-2021-45978/): Command injection in foxit:pdf editor (high 7.8)
- [CVE-2021-45977](https://insights.sbomify.com/CVE-2021-45977/): Misconfiguration in jetbrains:clion (critical 9.8)
- [CVE-2021-45975](https://insights.sbomify.com/CVE-2021-45975/): Privilege escalation in acer:care center (high 7.8)
- [CVE-2021-45972](https://insights.sbomify.com/CVE-2021-45972/): Memory corruption in debian:debian linux (high 7.1)
- [CVE-2021-45971](https://insights.sbomify.com/CVE-2021-45971/): Memory corruption in insyde:insydeh2o (high 8.2)
- [CVE-2021-45970](https://insights.sbomify.com/CVE-2021-45970/): Memory corruption in insyde:insydeh2o (high 8.2)
- [CVE-2021-45969](https://insights.sbomify.com/CVE-2021-45969/): Memory corruption in insyde:insydeh2o (high 8.2)
- [CVE-2021-45968](https://insights.sbomify.com/CVE-2021-45968/): Server-side request forgery in jivesoftware:jive (high 7.5)
- [CVE-2021-45967](https://insights.sbomify.com/CVE-2021-45967/): Path traversal in igniterealtime:openfire (critical 9.8)
- [CVE-2021-45966](https://insights.sbomify.com/CVE-2021-45966/): Command injection in pascom:cloud phone system (critical 9.8)
- [CVE-2021-45960](https://insights.sbomify.com/CVE-2021-45960/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2021-45958](https://insights.sbomify.com/CVE-2021-45958/): UltraJSON vulnerable to Out-of-bounds Write (medium 5.5)
- [CVE-2021-45957](https://insights.sbomify.com/CVE-2021-45957/): Memory corruption in thekelleys:dnsmasq (critical 9.8)
- [CVE-2021-45956](https://insights.sbomify.com/CVE-2021-45956/): Memory corruption in thekelleys:dnsmasq (critical 9.8)
- [CVE-2021-45955](https://insights.sbomify.com/CVE-2021-45955/): Memory corruption in thekelleys:dnsmasq (critical 9.8)
- [CVE-2021-45954](https://insights.sbomify.com/CVE-2021-45954/): Memory corruption in thekelleys:dnsmasq (critical 9.8)
- [CVE-2021-45953](https://insights.sbomify.com/CVE-2021-45953/): Memory corruption in thekelleys:dnsmasq (critical 9.8)
- [CVE-2021-45952](https://insights.sbomify.com/CVE-2021-45952/): Memory corruption in thekelleys:dnsmasq (critical 9.8)
- [CVE-2021-45951](https://insights.sbomify.com/CVE-2021-45951/): Memory corruption in thekelleys:dnsmasq (critical 9.8)
- [CVE-2021-45950](https://insights.sbomify.com/CVE-2021-45950/): Memory corruption in gnu:libredwg (medium 6.5)
- [CVE-2021-45949](https://insights.sbomify.com/CVE-2021-45949/): Memory corruption in artifex:ghostscript (low 3.9)
- [CVE-2021-45948](https://insights.sbomify.com/CVE-2021-45948/): Memory corruption in assimp:assimp (medium 5.5)
- [CVE-2021-45947](https://insights.sbomify.com/CVE-2021-45947/): Memory corruption in wasm3 project:wasm3 (medium 5.5)
- [CVE-2021-45946](https://insights.sbomify.com/CVE-2021-45946/): Memory corruption in wasm3 project:wasm3 (medium 5.5)
- [CVE-2021-45944](https://insights.sbomify.com/CVE-2021-45944/): Use after free in artifex:ghostscript (medium 5.5)
- [CVE-2021-45943](https://insights.sbomify.com/CVE-2021-45943/): Memory corruption in debian:debian linux (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/58/