# Vulnerabilities published in 2021


- [CVE-2021-44738](https://insights.sbomify.com/CVE-2021-44738/): Memory corruption in lexmark:6500e firmware (critical 9.8)
- [CVE-2021-44737](https://insights.sbomify.com/CVE-2021-44737/): Path traversal in lexmark:6500e firmware (high 8.8)
- [CVE-2021-44736](https://insights.sbomify.com/CVE-2021-44736/): Auth bypass in lexmark:mc3224i firmware (critical 9.8)
- [CVE-2021-44735](https://insights.sbomify.com/CVE-2021-44735/): Command injection in lexmark:b2236 firmware (critical 9.8)
- [CVE-2021-44734](https://insights.sbomify.com/CVE-2021-44734/): Code injection in lexmark:6500e firmware (critical 9.8)
- [CVE-2021-44733](https://insights.sbomify.com/CVE-2021-44733/): Use after free in debian:debian linux (high 7.0)
- [CVE-2021-44732](https://insights.sbomify.com/CVE-2021-44732/): Memory corruption in arm:mbed tls (critical 9.8)
- [CVE-2021-44731](https://insights.sbomify.com/CVE-2021-44731/): snapd could be made to escalate privileges and run programs as administrator (high 7.8)
- [CVE-2021-44730](https://insights.sbomify.com/CVE-2021-44730/): snapd could be made to escalate privileges and run programs as administrator (high 7.8)
- [CVE-2021-4473](https://insights.sbomify.com/CVE-2021-4473/): Tianxin Internet Behavior Management System Command Injection via toQuery.php (critical 9.3)
- [CVE-2021-44726](https://insights.sbomify.com/CVE-2021-44726/): Cross-site scripting in knime:knime server (high 8.8)
- [CVE-2021-44725](https://insights.sbomify.com/CVE-2021-44725/): Path traversal in knime:knime server (high 7.5)
- [CVE-2021-44720](https://insights.sbomify.com/CVE-2021-44720/): Hardcoded credentials in ivanti:connect secure (high 7.2)
- [CVE-2021-4472](https://insights.sbomify.com/CVE-2021-4472/): Python-mistralclient: mistral-dashboard: local file inclusion through the 'create workbook' feature (medium 6.5)
- [CVE-2021-44719](https://insights.sbomify.com/CVE-2021-44719/): Missing authorization in docker:docker desktop (high 8.4)
- [CVE-2021-44718](https://insights.sbomify.com/CVE-2021-44718/): Denial of service in wolfssl:wolfssl (medium 5.9)
- [CVE-2021-44717](https://insights.sbomify.com/CVE-2021-44717/): Other in debian:debian linux (medium 4.8)
- [CVE-2021-44716](https://insights.sbomify.com/CVE-2021-44716/): golang.org/x/net/http2 allows uncontrolled memory consumption (high 7.5)
- [CVE-2021-44715](https://insights.sbomify.com/CVE-2021-44715/): Adobe Acrobat Reader DC Out-of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-44714](https://insights.sbomify.com/CVE-2021-44714/): Adobe Acrobat Reader Missing Custom Protocols in Warning Message Prompts (low 2.5)
- [CVE-2021-44713](https://insights.sbomify.com/CVE-2021-44713/): Adobe Acrobat Reader DC Use After Free could lead to Application denial-of-service (medium 5.5)
- [CVE-2021-44712](https://insights.sbomify.com/CVE-2021-44712/): Adobe Acrobat Reader Memory Corruption could lead to Application denial-of-service (medium 5.5)
- [CVE-2021-44711](https://insights.sbomify.com/CVE-2021-44711/): Adobe Acrobat Reader DC annotation gestures integer overflow vulnerability (high 7.8)
- [CVE-2021-44710](https://insights.sbomify.com/CVE-2021-44710/): Adobe Acrobat Reader Use-after-free could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-4471](https://insights.sbomify.com/CVE-2021-4471/): TG8 Firewall Unauthenticated User Password Disclosure (high 8.7)
- [CVE-2021-44709](https://insights.sbomify.com/CVE-2021-44709/): Adobe Acrobat Pro DC Heap Overflow Vulnerability could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-44708](https://insights.sbomify.com/CVE-2021-44708/): Adobe Acrobat Pro DC Heap Overflow could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-44707](https://insights.sbomify.com/CVE-2021-44707/): Adobe Acrobat Reader DC OTF Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-44706](https://insights.sbomify.com/CVE-2021-44706/): Adobe Acrobat Reader Collab.registerReview Use-After-Free Remote Execution Vulnerability (high 7.8)
- [CVE-2021-44705](https://insights.sbomify.com/CVE-2021-44705/): Adobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-44704](https://insights.sbomify.com/CVE-2021-44704/): Adobe Acrobat Reader Use-After-Free could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-44703](https://insights.sbomify.com/CVE-2021-44703/): Adobe Acrobat Pro DC Stack Overflow Vulnerability Arbitrary code execution (high 7.8)
- [CVE-2021-44702](https://insights.sbomify.com/CVE-2021-44702/): Information disclosure in Acrobat Reader (low 3.1)
- [CVE-2021-44701](https://insights.sbomify.com/CVE-2021-44701/): Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-44700](https://insights.sbomify.com/CVE-2021-44700/): Adobe Illustrator JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-4470](https://insights.sbomify.com/CVE-2021-4470/): TG8 Firewall Unauthenticated RCE via runphpcmd.php (critical 9.3)
- [CVE-2021-44699](https://insights.sbomify.com/CVE-2021-44699/): Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-44698](https://insights.sbomify.com/CVE-2021-44698/): Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-44697](https://insights.sbomify.com/CVE-2021-44697/): Adobe Audition MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-44696](https://insights.sbomify.com/CVE-2021-44696/): Adobe Prelude JPEG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-44695](https://insights.sbomify.com/CVE-2021-44695/): Denial of service in SIMATIC Drive Controller CPU 1504D TF (medium 4.9)
- [CVE-2021-44694](https://insights.sbomify.com/CVE-2021-44694/): Denial of service in SIMATIC Drive Controller CPU 1504D TF (medium 5.5)
- [CVE-2021-44693](https://insights.sbomify.com/CVE-2021-44693/): Denial of service in SIMATIC Drive Controller CPU 1504D TF (medium 4.9)
- [CVE-2021-44692](https://insights.sbomify.com/CVE-2021-44692/): Information disclosure in buddyboss:buddyboss (medium 5.3)
- [CVE-2021-4469](https://insights.sbomify.com/CVE-2021-4469/): Denver SHO-110 IP Camera Unauthenticated Snapshot Access (high 8.7)
- [CVE-2021-44686](https://insights.sbomify.com/CVE-2021-44686/): Denial of service in calibre-ebook:calibre (high 7.5)
- [CVE-2021-44685](https://insights.sbomify.com/CVE-2021-44685/): Command injection in git-it-electron (critical 9.8)
- [CVE-2021-44684](https://insights.sbomify.com/CVE-2021-44684/): Command injection in github-todos (critical 9.8)
- [CVE-2021-44683](https://insights.sbomify.com/CVE-2021-44683/): Other in duckduckgo:duckduckgo (high 8.2)
- [CVE-2021-44682](https://insights.sbomify.com/CVE-2021-44682/): Deserialization in veritas:enterprise vault (critical 9.8)
- [CVE-2021-44681](https://insights.sbomify.com/CVE-2021-44681/): Deserialization in veritas:enterprise vault (critical 9.8)
- [CVE-2021-44680](https://insights.sbomify.com/CVE-2021-44680/): Deserialization in veritas:enterprise vault (critical 9.8)
- [CVE-2021-4468](https://insights.sbomify.com/CVE-2021-4468/): PLANEX CS-QP50F-ING2 Smart Camera Remote Configuration Disclosure (high 8.7)
- [CVE-2021-44679](https://insights.sbomify.com/CVE-2021-44679/): Deserialization in veritas:enterprise vault (critical 9.8)
- [CVE-2021-44678](https://insights.sbomify.com/CVE-2021-44678/): Deserialization in veritas:enterprise vault (critical 9.8)
- [CVE-2021-44677](https://insights.sbomify.com/CVE-2021-44677/): Deserialization in veritas:enterprise vault (critical 9.8)
- [CVE-2021-44676](https://insights.sbomify.com/CVE-2021-44676/): Auth bypass in zohocorp:manageengine access manager plus (critical 9.8)
- [CVE-2021-44675](https://insights.sbomify.com/CVE-2021-44675/): Auth bypass in zohocorp:manageengine servicedesk plus msp (critical 9.8)
- [CVE-2021-44674](https://insights.sbomify.com/CVE-2021-44674/): Path traversal in opmantek:open-audit (medium 6.5)
- [CVE-2021-44673](https://insights.sbomify.com/CVE-2021-44673/): Unrestricted Upload of File with Dangerous Type in Croogo (high 8.8)
- [CVE-2021-4467](https://insights.sbomify.com/CVE-2021-4467/): Positive Technologies MaxPatrol 8 & XSpider Remote DoS (high 8.7)
- [CVE-2021-44667](https://insights.sbomify.com/CVE-2021-44667/): Cross-site Scripting in Nacos (medium 6.1)
- [CVE-2021-44665](https://insights.sbomify.com/CVE-2021-44665/): Path traversal in xerte:xerte (medium 6.5)
- [CVE-2021-44664](https://insights.sbomify.com/CVE-2021-44664/): File upload in xerte:xerte (high 8.8)
- [CVE-2021-44663](https://insights.sbomify.com/CVE-2021-44663/): File upload in nottingham.ac:xerte online toolkits (critical 9.8)
- [CVE-2021-44662](https://insights.sbomify.com/CVE-2021-44662/): Cross-site scripting in nottingham.ac:xerte online toolkits (medium 6.1)
- [CVE-2021-4466](https://insights.sbomify.com/CVE-2021-4466/): IPCop <= 2.1.9 Authenticated RCE (high 8.7)
- [CVE-2021-44659](https://insights.sbomify.com/CVE-2021-44659/): Server-side request forgery in thoughtworks:gocd (critical 9.8)
- [CVE-2021-44657](https://insights.sbomify.com/CVE-2021-44657/): Code injection in stackstorm:stackstorm (high 8.8)
- [CVE-2021-44655](https://insights.sbomify.com/CVE-2021-44655/): SQL injection in online pre-owned\/used car showroom management system project:online pre-owned\/used car showroom management system (critical 9.8)
- [CVE-2021-44653](https://insights.sbomify.com/CVE-2021-44653/): SQL injection in oretnom23:online magazine management system (critical 9.8)
- [CVE-2021-44652](https://insights.sbomify.com/CVE-2021-44652/): Code injection in zohocorp:manageengine o365 manager plus (high 7.8)
- [CVE-2021-44651](https://insights.sbomify.com/CVE-2021-44651/): File upload in zohocorp:log360 (high 8.8)
- [CVE-2021-44650](https://insights.sbomify.com/CVE-2021-44650/): Command injection in zohocorp:manageengine m365 manager plus (high 7.2)
- [CVE-2021-4465](https://insights.sbomify.com/CVE-2021-4465/): ReQuest Serious Play F3 Media Server <= 7.0.3 Remote DoS (high 8.7)
- [CVE-2021-44649](https://insights.sbomify.com/CVE-2021-44649/): Cross-site Scripting in django-cms (medium 5.4)
- [CVE-2021-44648](https://insights.sbomify.com/CVE-2021-44648/): Memory corruption in debian:debian linux (high 8.8)
- [CVE-2021-44647](https://insights.sbomify.com/CVE-2021-44647/): Memory corruption in fedoraproject:fedora (medium 5.5)
- [CVE-2021-4464](https://insights.sbomify.com/CVE-2021-4464/): FIberHome AN5506-04-FA / HG6245D Routers Remote Stack Overflow (critical 9.3)
- [CVE-2021-44632](https://insights.sbomify.com/CVE-2021-44632/): Memory corruption in tp-link:tl-wr886n firmware (critical 9.8)
- [CVE-2021-44631](https://insights.sbomify.com/CVE-2021-44631/): Memory corruption in tp-link:tl-wr886n firmware (critical 9.8)
- [CVE-2021-44630](https://insights.sbomify.com/CVE-2021-44630/): Memory corruption in tp-link:tl-wr886n firmware (critical 9.8)
- [CVE-2021-4463](https://insights.sbomify.com/CVE-2021-4463/): Longjing Technology BEMS API <= 1.21 Remote Arbitrary File Download (high 8.7)
- [CVE-2021-44629](https://insights.sbomify.com/CVE-2021-44629/): Memory corruption in tp-link:tl-wr886n firmware (critical 9.8)
- [CVE-2021-44628](https://insights.sbomify.com/CVE-2021-44628/): Memory corruption in tp-link:tl-wr886n firmware (critical 9.8)
- [CVE-2021-44627](https://insights.sbomify.com/CVE-2021-44627/): Memory corruption in tp-link:tl-wr886n firmware (critical 9.8)
- [CVE-2021-44626](https://insights.sbomify.com/CVE-2021-44626/): Memory corruption in tp-link:tl-wr886n firmware (critical 9.8)
- [CVE-2021-44625](https://insights.sbomify.com/CVE-2021-44625/): Memory corruption in tp-link:tl-wr886n firmware (critical 9.8)
- [CVE-2021-44623](https://insights.sbomify.com/CVE-2021-44623/): Memory corruption in tp-link:tl-wr886n firmware (critical 9.8)
- [CVE-2021-44622](https://insights.sbomify.com/CVE-2021-44622/): Memory corruption in tp-link:tl-wr886n firmware (critical 9.8)
- [CVE-2021-44620](https://insights.sbomify.com/CVE-2021-44620/): Command injection in totolink:a3100r firmware (critical 9.8)
- [CVE-2021-4462](https://insights.sbomify.com/CVE-2021-4462/): Employee Records System v1.0 Arbitrary File Upload RCE (critical 9.3)
- [CVE-2021-44618](https://insights.sbomify.com/CVE-2021-44618/): Server-side Template Injection in nystudio107/craft-seomatic (critical 9.8)
- [CVE-2021-44617](https://insights.sbomify.com/CVE-2021-44617/): SQL injection in glpi-project:glpi (critical 9.8)
- [CVE-2021-44610](https://insights.sbomify.com/CVE-2021-44610/): SQL injection in bloofox:bloofoxcms (critical 9.8)
- [CVE-2021-4461](https://insights.sbomify.com/CVE-2021-4461/): Seeyon Zhiyuan OA Web Application System < 7.0 SP1 Authentication Bypass (critical 9.3)
- [CVE-2021-44608](https://insights.sbomify.com/CVE-2021-44608/): Cross-site scripting in bloofox:bloofoxcms (medium 5.4)
- [CVE-2021-44607](https://insights.sbomify.com/CVE-2021-44607/): Cross-site scripting in thedaylightstudio:fuel cms (medium 5.4)
- [CVE-2021-44600](https://insights.sbomify.com/CVE-2021-44600/): SQL injection in oretnom23:simple online men\'s salon management system (high 7.5)
- [CVE-2021-4460](https://insights.sbomify.com/CVE-2021-4460/): drm/amdkfd: Fix UBSAN shift-out-of-bounds warning (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/66/