# Vulnerabilities published in 2021


- [CVE-2021-45942](https://insights.sbomify.com/CVE-2021-45942/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2021-45941](https://insights.sbomify.com/CVE-2021-45941/): Memory corruption in libbpf project:libbpf (medium 6.5)
- [CVE-2021-45940](https://insights.sbomify.com/CVE-2021-45940/): Memory corruption in libbpf project:libbpf (medium 6.5)
- [CVE-2021-45939](https://insights.sbomify.com/CVE-2021-45939/): Memory corruption in wolfssl:wolfmqtt (medium 5.5)
- [CVE-2021-45938](https://insights.sbomify.com/CVE-2021-45938/): Memory corruption in wolfssl:wolfmqtt (medium 5.5)
- [CVE-2021-45937](https://insights.sbomify.com/CVE-2021-45937/): Memory corruption in wolfssl:wolfmqtt (medium 5.5)
- [CVE-2021-45936](https://insights.sbomify.com/CVE-2021-45936/): Memory corruption in wolfssl:wolfmqtt (medium 5.5)
- [CVE-2021-45935](https://insights.sbomify.com/CVE-2021-45935/): Memory corruption in grok project:grok (medium 5.5)
- [CVE-2021-45934](https://insights.sbomify.com/CVE-2021-45934/): Memory corruption in wolfssl:wolfmqtt (medium 5.5)
- [CVE-2021-45933](https://insights.sbomify.com/CVE-2021-45933/): Memory corruption in wolfssl:wolfmqtt (medium 5.5)
- [CVE-2021-45932](https://insights.sbomify.com/CVE-2021-45932/): Memory corruption in wolfssl:wolfmqtt (medium 5.5)
- [CVE-2021-45931](https://insights.sbomify.com/CVE-2021-45931/): Memory corruption in fedoraproject:fedora (medium 6.5)
- [CVE-2021-45930](https://insights.sbomify.com/CVE-2021-45930/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2021-45929](https://insights.sbomify.com/CVE-2021-45929/): Memory corruption in wasm3 project:wasm3 (medium 5.5)
- [CVE-2021-45928](https://insights.sbomify.com/CVE-2021-45928/): Memory corruption in libjxl project:libjxl (medium 5.5)
- [CVE-2021-45927](https://insights.sbomify.com/CVE-2021-45927/): Memory corruption in mdbtools project:mdbtools (high 7.8)
- [CVE-2021-45926](https://insights.sbomify.com/CVE-2021-45926/): Memory corruption in mdbtools project:mdbtools (high 7.8)
- [CVE-2021-45925](https://insights.sbomify.com/CVE-2021-45925/): Username Enumeration (medium 5.3)
- [CVE-2021-45919](https://insights.sbomify.com/CVE-2021-45919/): Studio 42 elFinder allows stored XSS (medium 5.4)
- [CVE-2021-45918](https://insights.sbomify.com/CVE-2021-45918/): NHI’s health insurance web service component – Heap-based Buffer Overflow (high 7.5)
- [CVE-2021-45917](https://insights.sbomify.com/CVE-2021-45917/): SUN & MOON RISE CO., LTD. Shockwall - Improper Authentication (high 8.0)
- [CVE-2021-45916](https://insights.sbomify.com/CVE-2021-45916/): SUN & MOON RISE CO., LTD. Shockwall - Improper Input Validation (low 3.5)
- [CVE-2021-45915](https://insights.sbomify.com/CVE-2021-45915/): Auth bypass in luxsoft:luxcal (critical 9.8)
- [CVE-2021-45914](https://insights.sbomify.com/CVE-2021-45914/): Auth bypass in luxsoft:luxcal (critical 9.8)
- [CVE-2021-45913](https://insights.sbomify.com/CVE-2021-45913/): Hardcoded credentials in controlup:controlup agent (high 7.2)
- [CVE-2021-45912](https://insights.sbomify.com/CVE-2021-45912/): Command injection in controlup:real-time agent (high 7.8)
- [CVE-2021-45911](https://insights.sbomify.com/CVE-2021-45911/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-45910](https://insights.sbomify.com/CVE-2021-45910/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-45909](https://insights.sbomify.com/CVE-2021-45909/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2021-45908](https://insights.sbomify.com/CVE-2021-45908/): Memory corruption in gif2apng project:gif2apng (high 7.8)
- [CVE-2021-45907](https://insights.sbomify.com/CVE-2021-45907/): Memory corruption in gif2apng project:gif2apng (high 7.8)
- [CVE-2021-45906](https://insights.sbomify.com/CVE-2021-45906/): Cross-site scripting in openwrt:openwrt (medium 5.4)
- [CVE-2021-45905](https://insights.sbomify.com/CVE-2021-45905/): Cross-site scripting in openwrt:openwrt (medium 5.4)
- [CVE-2021-45904](https://insights.sbomify.com/CVE-2021-45904/): Cross-site scripting in openwrt:openwrt (medium 5.4)
- [CVE-2021-45903](https://insights.sbomify.com/CVE-2021-45903/): Cross-site scripting in salesagility:suitecrm (medium 6.1)
- [CVE-2021-45901](https://insights.sbomify.com/CVE-2021-45901/): Information disclosure in servicenow:servicenow (medium 5.3)
- [CVE-2021-45900](https://insights.sbomify.com/CVE-2021-45900/): Auth bypass in vivoh:webinar manager (medium 6.5)
- [CVE-2021-45899](https://insights.sbomify.com/CVE-2021-45899/): Deserialization in salesagility:suitecrm (critical 9.8)
- [CVE-2021-45898](https://insights.sbomify.com/CVE-2021-45898/): Path traversal in salesagility:suitecrm (critical 9.8)
- [CVE-2021-45897](https://insights.sbomify.com/CVE-2021-45897/): Code injection in salesagility:suitecrm (high 8.8)
- [CVE-2021-45896](https://insights.sbomify.com/CVE-2021-45896/): Privilege escalation in nokia:fastmile firmware (high 8.8)
- [CVE-2021-45895](https://insights.sbomify.com/CVE-2021-45895/): Cross-site Scripting in Netgen Tags Bundle (medium 6.1)
- [CVE-2021-45894](https://insights.sbomify.com/CVE-2021-45894/): Information disclosure in zauner:arc (medium 5.9)
- [CVE-2021-45893](https://insights.sbomify.com/CVE-2021-45893/): Weak cryptography in zauner:arc (high 7.5)
- [CVE-2021-45892](https://insights.sbomify.com/CVE-2021-45892/): Weak cryptography in zauner:arc (medium 5.9)
- [CVE-2021-45891](https://insights.sbomify.com/CVE-2021-45891/): Privilege escalation in zauner:arc (high 8.8)
- [CVE-2021-45890](https://insights.sbomify.com/CVE-2021-45890/): Auth bypass in authguard project:authguard (critical 9.8)
- [CVE-2021-45889](https://insights.sbomify.com/CVE-2021-45889/): Cross-site scripting in ponton:x\/p messenger (medium 5.4)
- [CVE-2021-45888](https://insights.sbomify.com/CVE-2021-45888/): Cross-site scripting in ponton:x\/p messenger (medium 4.8)
- [CVE-2021-45887](https://insights.sbomify.com/CVE-2021-45887/): Path traversal in ponton:x\/p messenger (critical 9.8)
- [CVE-2021-45886](https://insights.sbomify.com/CVE-2021-45886/): Cross-site request forgery in ponton:x\/p messenger (high 8.8)
- [CVE-2021-45885](https://insights.sbomify.com/CVE-2021-45885/): Auth bypass in stormshield:network security (high 7.5)
- [CVE-2021-45884](https://insights.sbomify.com/CVE-2021-45884/): Information disclosure in brave:brave (high 7.5)
- [CVE-2021-45878](https://insights.sbomify.com/CVE-2021-45878/): Missing authorization in garo:wallbox glb firmware (critical 9.1)
- [CVE-2021-45877](https://insights.sbomify.com/CVE-2021-45877/): Hardcoded credentials in garo:wallbox glb firmware (critical 9.8)
- [CVE-2021-45876](https://insights.sbomify.com/CVE-2021-45876/): Command injection in garo:wallbox glb firmware (critical 9.8)
- [CVE-2021-45868](https://insights.sbomify.com/CVE-2021-45868/): Use after free in linux:linux kernel (medium 5.5)
- [CVE-2021-45866](https://insights.sbomify.com/CVE-2021-45866/): Cross-site scripting in student attendance management system project:student attendance management system (medium 5.4)
- [CVE-2021-45865](https://insights.sbomify.com/CVE-2021-45865/): File upload in student attendance management system project:student attendance management system (critical 9.8)
- [CVE-2021-45864](https://insights.sbomify.com/CVE-2021-45864/): Memory corruption in tsmuxer project:tsmuxer (medium 5.5)
- [CVE-2021-45863](https://insights.sbomify.com/CVE-2021-45863/): Memory corruption in tsmuxer project:tsmuxer (medium 5.5)
- [CVE-2021-45861](https://insights.sbomify.com/CVE-2021-45861/): Denial of service in tsmuxer project:tsmuxer (medium 5.5)
- [CVE-2021-45860](https://insights.sbomify.com/CVE-2021-45860/): Integer overflow in tsmuxer project:tsmuxer (medium 5.5)
- [CVE-2021-45856](https://insights.sbomify.com/CVE-2021-45856/): Memory corruption in accu-time:maximus firmware (high 7.5)
- [CVE-2021-45852](https://insights.sbomify.com/CVE-2021-45852/): Missing authorization in projectworlds:hospital management system in php (medium 5.3)
- [CVE-2021-45851](https://insights.sbomify.com/CVE-2021-45851/): Server-Side Request Forgery in FUXA (high 7.5)
- [CVE-2021-45848](https://insights.sbomify.com/CVE-2021-45848/): Nicotine+ DoS on Null Character in Download Request (high 7.5)
- [CVE-2021-45847](https://insights.sbomify.com/CVE-2021-45847/): Null dereference in slic3r:slic3r (medium 5.5)
- [CVE-2021-45846](https://insights.sbomify.com/CVE-2021-45846/): Null dereference in slic3r:slic3r (medium 5.5)
- [CVE-2021-45845](https://insights.sbomify.com/CVE-2021-45845/): Command injection in debian:debian linux (high 7.8)
- [CVE-2021-45844](https://insights.sbomify.com/CVE-2021-45844/): Command injection in debian:debian linux (high 7.8)
- [CVE-2021-45843](https://insights.sbomify.com/CVE-2021-45843/): Cross-site scripting in glfusion:glfusion (medium 6.1)
- [CVE-2021-45842](https://insights.sbomify.com/CVE-2021-45842/): Information disclosure in terra-master:tos (high 7.5)
- [CVE-2021-45841](https://insights.sbomify.com/CVE-2021-45841/): Auth bypass in terra-master:tos (high 8.1)
- [CVE-2021-45840](https://insights.sbomify.com/CVE-2021-45840/): Command injection in terra-master:tos (critical 9.8)
- [CVE-2021-45839](https://insights.sbomify.com/CVE-2021-45839/): Information disclosure in terra-master:tos (medium 6.5)
- [CVE-2021-45837](https://insights.sbomify.com/CVE-2021-45837/): Command injection in terra-master:tos (critical 9.8)
- [CVE-2021-45836](https://insights.sbomify.com/CVE-2021-45836/): Command injection in terra-master:tos (high 8.8)
- [CVE-2021-45835](https://insights.sbomify.com/CVE-2021-45835/): File upload in online admission system project:online admissions system (critical 9.8)
- [CVE-2021-45834](https://insights.sbomify.com/CVE-2021-45834/): File upload in opendocman:opendocman (critical 9.8)
- [CVE-2021-45833](https://insights.sbomify.com/CVE-2021-45833/): Memory corruption in hdfgroup:hdf5 (medium 5.5)
- [CVE-2021-45832](https://insights.sbomify.com/CVE-2021-45832/): Memory corruption in hdfgroup:hdf5 (medium 5.5)
- [CVE-2021-45831](https://insights.sbomify.com/CVE-2021-45831/): Null dereference in gpac:gpac (medium 5.5)
- [CVE-2021-45830](https://insights.sbomify.com/CVE-2021-45830/): Memory corruption in hdfgroup:hdf5 (medium 5.5)
- [CVE-2021-45829](https://insights.sbomify.com/CVE-2021-45829/): Denial of service in hdfgroup:hdf5 (medium 5.5)
- [CVE-2021-45822](https://insights.sbomify.com/CVE-2021-45822/): Cross-site scripting in btiteam:xbtit (medium 6.1)
- [CVE-2021-45821](https://insights.sbomify.com/CVE-2021-45821/): SQL injection in btiteam:xbtit (high 8.8)
- [CVE-2021-45819](https://insights.sbomify.com/CVE-2021-45819/): Privilege escalation in wordline:hidccemonitorsvc (medium 6.4)
- [CVE-2021-45818](https://insights.sbomify.com/CVE-2021-45818/): Other in safarimontage:safari montage (medium 6.1)
- [CVE-2021-45815](https://insights.sbomify.com/CVE-2021-45815/): Cross-site scripting in quectel:uc20 firmware (medium 6.1)
- [CVE-2021-45814](https://insights.sbomify.com/CVE-2021-45814/): SQL injection in nettemp:nnt (critical 9.8)
- [CVE-2021-45813](https://insights.sbomify.com/CVE-2021-45813/): Cross-site scripting in slican:webcti (medium 6.1)
- [CVE-2021-45812](https://insights.sbomify.com/CVE-2021-45812/): Cross-site scripting in nuuo:nvrsolo firmware (medium 6.1)
- [CVE-2021-45811](https://insights.sbomify.com/CVE-2021-45811/): SQL injection in enhancesoft:osticket (medium 6.5)
- [CVE-2021-45810](https://insights.sbomify.com/CVE-2021-45810/): Missing authorization in globalprotect-openconnect project:globalprotect-openconnect (high 7.5)
- [CVE-2021-45809](https://insights.sbomify.com/CVE-2021-45809/): Privilege escalation in globalprotect-openconnect project:globalprotect-openconnect (critical 9.8)
- [CVE-2021-45808](https://insights.sbomify.com/CVE-2021-45808/): File upload in jpress:jpress (high 8.8)
- [CVE-2021-45807](https://insights.sbomify.com/CVE-2021-45807/): Command injection in jpress:jpress (critical 9.8)
- [CVE-2021-45806](https://insights.sbomify.com/CVE-2021-45806/): Code injection in jpress:jpress (high 8.8)
- [CVE-2021-45803](https://insights.sbomify.com/CVE-2021-45803/): SQL injection in iresturant project:iresturant (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/59/