# Vulnerabilities published in 2021 - [CVE-2021-45802](https://insights.sbomify.com/CVE-2021-45802/): SQL injection in iresturant project:iresturant (critical 9.8) - [CVE-2021-45794](https://insights.sbomify.com/CVE-2021-45794/): SQL injection in slims:senayan library management system (high 7.5) - [CVE-2021-45793](https://insights.sbomify.com/CVE-2021-45793/): SQL injection in slims:senayan library management system (high 7.5) - [CVE-2021-45792](https://insights.sbomify.com/CVE-2021-45792/): Cross-site scripting in slims:senayan library management system (medium 4.8) - [CVE-2021-45791](https://insights.sbomify.com/CVE-2021-45791/): SQL injection in slims:senayan library management system (high 8.8) - [CVE-2021-45790](https://insights.sbomify.com/CVE-2021-45790/): File upload in metersphere:metersphere (critical 9.8) - [CVE-2021-45789](https://insights.sbomify.com/CVE-2021-45789/): Path traversal in metersphere:metersphere (medium 6.5) - [CVE-2021-45788](https://insights.sbomify.com/CVE-2021-45788/): SQL injection in metersphere:metersphere (high 8.8) - [CVE-2021-45787](https://insights.sbomify.com/CVE-2021-45787/): Cross-site scripting in maccms:maccms (medium 5.4) - [CVE-2021-45786](https://insights.sbomify.com/CVE-2021-45786/): Auth bypass in maccms:maccms (critical 9.8) - [CVE-2021-45785](https://insights.sbomify.com/CVE-2021-45785/): Cross-site request forgery in trudesk project:trudesk (medium 4.3) - [CVE-2021-45783](https://insights.sbomify.com/CVE-2021-45783/): Path traversal in bookeen:notea firmware (medium 4.6) - [CVE-2021-45773](https://insights.sbomify.com/CVE-2021-45773/): Null dereference in mz-automation:lib60870 (high 7.5) - [CVE-2021-45769](https://insights.sbomify.com/CVE-2021-45769/): Null dereference in mz-automation:libiec61850 (high 7.5) - [CVE-2021-45767](https://insights.sbomify.com/CVE-2021-45767/): Memory corruption in gpac:gpac (medium 5.5) - [CVE-2021-45764](https://insights.sbomify.com/CVE-2021-45764/): Memory corruption in gpac:gpac (medium 5.5) - [CVE-2021-45763](https://insights.sbomify.com/CVE-2021-45763/): Denial of service in gpac:gpac (medium 5.5) - [CVE-2021-45762](https://insights.sbomify.com/CVE-2021-45762/): Memory corruption in gpac:gpac (medium 5.5) - [CVE-2021-45761](https://insights.sbomify.com/CVE-2021-45761/): Null dereference in ropium project:ropium (high 7.5) - [CVE-2021-45760](https://insights.sbomify.com/CVE-2021-45760/): Memory corruption in gpac:gpac (medium 5.5) - [CVE-2021-45757](https://insights.sbomify.com/CVE-2021-45757/): Memory corruption in asus:rt-ac68u firmware (high 7.5) - [CVE-2021-45756](https://insights.sbomify.com/CVE-2021-45756/): Memory corruption in asus:rt-ac5300 firmware (critical 9.8) - [CVE-2021-45746](https://insights.sbomify.com/CVE-2021-45746/): Path traversal in webank:wecube (high 7.5) - [CVE-2021-45745](https://insights.sbomify.com/CVE-2021-45745/): Cross-site scripting in bludit:bludit (medium 5.4) - [CVE-2021-45744](https://insights.sbomify.com/CVE-2021-45744/): Cross-site scripting in bludit:bludit (medium 5.4) - [CVE-2021-45742](https://insights.sbomify.com/CVE-2021-45742/): Command injection in totolink:a720r firmware (critical 9.8) - [CVE-2021-45741](https://insights.sbomify.com/CVE-2021-45741/): Memory corruption in totolink:x5000r firmware (high 7.5) - [CVE-2021-45740](https://insights.sbomify.com/CVE-2021-45740/): Memory corruption in totolink:a720r firmware (critical 9.8) - [CVE-2021-45739](https://insights.sbomify.com/CVE-2021-45739/): Memory corruption in totolink:a720r firmware (high 7.5) - [CVE-2021-45738](https://insights.sbomify.com/CVE-2021-45738/): Command injection in totolink:x5000r firmware (critical 9.8) - [CVE-2021-45737](https://insights.sbomify.com/CVE-2021-45737/): Memory corruption in totolink:a720r firmware (high 7.5) - [CVE-2021-45736](https://insights.sbomify.com/CVE-2021-45736/): Memory corruption in totolink:x5000r firmware (high 7.5) - [CVE-2021-45735](https://insights.sbomify.com/CVE-2021-45735/): Information disclosure in totolink:x5000r firmware (high 7.5) - [CVE-2021-45734](https://insights.sbomify.com/CVE-2021-45734/): Memory corruption in totolink:x5000r firmware (high 7.5) - [CVE-2021-45733](https://insights.sbomify.com/CVE-2021-45733/): Command injection in totolink:x5000r firmware (critical 9.8) - [CVE-2021-45732](https://insights.sbomify.com/CVE-2021-45732/): Hardcoded credentials in Netgear Nighthawk R6700 (high 8.8) - [CVE-2021-45730](https://insights.sbomify.com/CVE-2021-45730/): Missing authorization in Artifactory (medium 6.0) - [CVE-2021-45729](https://insights.sbomify.com/CVE-2021-45729/): WordPress WP Google Map plugin <= 1.8.0 - Privilege Escalation vulnerability (medium 5.4) - [CVE-2021-45721](https://insights.sbomify.com/CVE-2021-45721/): Cross-site scripting in JFrog Artifactory (medium 6.1) - [CVE-2021-45720](https://insights.sbomify.com/CVE-2021-45720/): Use after free in lru crate (high 7.5) - [CVE-2021-45719](https://insights.sbomify.com/CVE-2021-45719/): Use after free in rusqlite project:rusqlite (high 7.5) - [CVE-2021-45718](https://insights.sbomify.com/CVE-2021-45718/): Use after free in rusqlite project:rusqlite (high 7.5) - [CVE-2021-45717](https://insights.sbomify.com/CVE-2021-45717/): Use after free in rusqlite project:rusqlite (high 7.5) - [CVE-2021-45716](https://insights.sbomify.com/CVE-2021-45716/): Use after free in rusqlite project:rusqlite (high 7.5) - [CVE-2021-45715](https://insights.sbomify.com/CVE-2021-45715/): Use after free in rusqlite project:rusqlite (high 7.5) - [CVE-2021-45714](https://insights.sbomify.com/CVE-2021-45714/): Use after free in rusqlite project:rusqlite (high 7.5) - [CVE-2021-45713](https://insights.sbomify.com/CVE-2021-45713/): Use after free in rusqlite project:rusqlite (high 7.5) - [CVE-2021-45712](https://insights.sbomify.com/CVE-2021-45712/): RustEmbed generated `get` method allows for directory traversal when reading files from disk (high 7.5) - [CVE-2021-45711](https://insights.sbomify.com/CVE-2021-45711/): Panic on incorrect date input to `simple_asn1` (high 7.5) - [CVE-2021-45710](https://insights.sbomify.com/CVE-2021-45710/): Race Condition in tokio (high 8.1) - [CVE-2021-45709](https://insights.sbomify.com/CVE-2021-45709/): Use of a Broken or Risky Cryptographic Algorithm in crypto2 (critical 9.8) - [CVE-2021-45708](https://insights.sbomify.com/CVE-2021-45708/): Abomonation transmutes &T to and from &[u8] without sufficient constraints (high 7.5) - [CVE-2021-45707](https://insights.sbomify.com/CVE-2021-45707/): Out-of-bounds Write in nix (critical 9.8) - [CVE-2021-45706](https://insights.sbomify.com/CVE-2021-45706/): Memory flaw in zeroize_derive (critical 9.8) - [CVE-2021-45705](https://insights.sbomify.com/CVE-2021-45705/): Aliased mutable references from `tls_rand` & `TlsWyRand` (critical 9.8) - [CVE-2021-45704](https://insights.sbomify.com/CVE-2021-45704/): AtomicBucket unconditionally implements Send/Sync (high 8.1) - [CVE-2021-45703](https://insights.sbomify.com/CVE-2021-45703/): Duplicate Advisory: `Read` on uninitialized buffer may cause UB ('tectonic_xdv' crate) (critical 9.8) - [CVE-2021-45702](https://insights.sbomify.com/CVE-2021-45702/): Use After Free in tremor-script (high 7.5) - [CVE-2021-45701](https://insights.sbomify.com/CVE-2021-45701/): Use After Free in tremor-script (critical 9.8) - [CVE-2021-45700](https://insights.sbomify.com/CVE-2021-45700/): Process crashes when the cell used as DepGroup is not alive (high 7.5) - [CVE-2021-45699](https://insights.sbomify.com/CVE-2021-45699/): Allocation of Resources Without Limits or Throttling in ckb (high 7.5) - [CVE-2021-45698](https://insights.sbomify.com/CVE-2021-45698/): RPC call failure in ckb (critical 9.8) - [CVE-2021-45697](https://insights.sbomify.com/CVE-2021-45697/): The `total_size` function for partial read the length of any `FixVec` is incorrect in molecule. (critical 9.8) - [CVE-2021-45696](https://insights.sbomify.com/CVE-2021-45696/): Incorrect hash in sha2 (critical 9.8) - [CVE-2021-45695](https://insights.sbomify.com/CVE-2021-45695/): Incorrect reliance on Trait memory layout in mopa (critical 9.8) - [CVE-2021-45694](https://insights.sbomify.com/CVE-2021-45694/): Window may read from uninitialized memory locations in rdiff (high 7.5) - [CVE-2021-45693](https://insights.sbomify.com/CVE-2021-45693/): Use of Uninitialized Resource in messagepack-rs. (critical 9.8) - [CVE-2021-45692](https://insights.sbomify.com/CVE-2021-45692/): Use of Uninitialized Resource in messagepack-rs. (critical 9.8) - [CVE-2021-45691](https://insights.sbomify.com/CVE-2021-45691/): Use of Uninitialized Resource in messagepack-rs (critical 9.8) - [CVE-2021-45690](https://insights.sbomify.com/CVE-2021-45690/): Use of Uninitialized Resource in messagepack-rs. (critical 9.8) - [CVE-2021-45689](https://insights.sbomify.com/CVE-2021-45689/): Reading on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv()` ) (critical 9.8) - [CVE-2021-45688](https://insights.sbomify.com/CVE-2021-45688/): Use of Uninitialized Resource in ash. (critical 9.8) - [CVE-2021-45687](https://insights.sbomify.com/CVE-2021-45687/): Optional `Deserialize` implementations lacking validation (critical 9.8) - [CVE-2021-45686](https://insights.sbomify.com/CVE-2021-45686/): Use of Uninitialized Resource in csv-sniffer. (critical 9.8) - [CVE-2021-45685](https://insights.sbomify.com/CVE-2021-45685/): columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec()) (critical 9.8) - [CVE-2021-45684](https://insights.sbomify.com/CVE-2021-45684/): Use of Uninitialized Resource in flumedb. (critical 9.8) - [CVE-2021-45683](https://insights.sbomify.com/CVE-2021-45683/): 'Read' on uninitialized memory may cause UB (critical 9.8) - [CVE-2021-45682](https://insights.sbomify.com/CVE-2021-45682/): `Read` on uninitialized buffer can cause UB (impl of `ReadKVExt`) (critical 9.8) - [CVE-2021-45681](https://insights.sbomify.com/CVE-2021-45681/): QueryInterface should call AddRef before returning pointer (high 7.5) - [CVE-2021-45680](https://insights.sbomify.com/CVE-2021-45680/): vec-const attempts to construct a Vec from a pointer to a const slice (high 7.5) - [CVE-2021-45679](https://insights.sbomify.com/CVE-2021-45679/): Privilege escalation in netgear:r6900p firmware (high 8.4) - [CVE-2021-45678](https://insights.sbomify.com/CVE-2021-45678/): Other in netgear:rax200 firmware (critical 9.8) - [CVE-2021-45677](https://insights.sbomify.com/CVE-2021-45677/): Cross-site scripting in netgear:gs108t firmware (medium 5.2) - [CVE-2021-45676](https://insights.sbomify.com/CVE-2021-45676/): Cross-site scripting in netgear:rax15 firmware (medium 4.3) - [CVE-2021-45675](https://insights.sbomify.com/CVE-2021-45675/): Cross-site scripting in netgear:ac2100 firmware (medium 5.8) - [CVE-2021-45674](https://insights.sbomify.com/CVE-2021-45674/): Cross-site scripting in netgear:r7000 firmware (low 3.2) - [CVE-2021-45673](https://insights.sbomify.com/CVE-2021-45673/): Cross-site scripting in netgear:r6900p firmware (medium 4.8) - [CVE-2021-45672](https://insights.sbomify.com/CVE-2021-45672/): Cross-site scripting in netgear:ac2100 firmware (medium 4.2) - [CVE-2021-45671](https://insights.sbomify.com/CVE-2021-45671/): Cross-site scripting in netgear:cbr40 firmware (medium 6.5) - [CVE-2021-45670](https://insights.sbomify.com/CVE-2021-45670/): Cross-site scripting in netgear:cbr40 firmware (medium 6.5) - [CVE-2021-45669](https://insights.sbomify.com/CVE-2021-45669/): Cross-site scripting in netgear:mr60 firmware (low 3.7) - [CVE-2021-45668](https://insights.sbomify.com/CVE-2021-45668/): Cross-site scripting in netgear:eax20 firmware (medium 6.5) - [CVE-2021-45667](https://insights.sbomify.com/CVE-2021-45667/): Cross-site scripting in netgear:cbr40 firmware (medium 6.5) - [CVE-2021-45666](https://insights.sbomify.com/CVE-2021-45666/): Cross-site scripting in netgear:cbr40 firmware (medium 6.5) - [CVE-2021-45665](https://insights.sbomify.com/CVE-2021-45665/): Cross-site scripting in netgear:eax20 firmware (medium 6.5) - [CVE-2021-45664](https://insights.sbomify.com/CVE-2021-45664/): Cross-site scripting in netgear:r7000 firmware (medium 5.6) - [CVE-2021-45663](https://insights.sbomify.com/CVE-2021-45663/): Cross-site scripting in netgear:r7000 firmware (medium 6.1) - [CVE-2021-45662](https://insights.sbomify.com/CVE-2021-45662/): Cross-site scripting in netgear:r7000 firmware (medium 6.1) - [CVE-2021-45661](https://insights.sbomify.com/CVE-2021-45661/): Code injection in netgear:rbk20 firmware (high 7.1) - [CVE-2021-45660](https://insights.sbomify.com/CVE-2021-45660/): Code injection in netgear:rbk20 firmware (high 7.1) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/60/