# Vulnerabilities published in 2021


- [CVE-2021-44471](https://insights.sbomify.com/CVE-2021-44471/): Delta Electronics DIAEnergie (Update A) (high 7.5)
- [CVE-2021-44470](https://insights.sbomify.com/CVE-2021-44470/): Misconfiguration in Intel(R) Connect M Android application (medium 5.5)
- [CVE-2021-4447](https://insights.sbomify.com/CVE-2021-4447/): Essential Addons for Elementor <= 4.6.4 - Authenticated (Contributor+) Privilege Escalation (high 8.8)
- [CVE-2021-44467](https://insights.sbomify.com/CVE-2021-44467/): spx_restservice KillDupUsr_func Broken Access Control (medium 5.3)
- [CVE-2021-44466](https://insights.sbomify.com/CVE-2021-44466/): Privilege escalation in Bitmask Riseup VPN 0.21.6 (high 7.3)
- [CVE-2021-44465](https://insights.sbomify.com/CVE-2021-44465/): Missing authorization in Odoo Community (medium 5.3)
- [CVE-2021-44464](https://insights.sbomify.com/CVE-2021-44464/): Fresenius Kabi Agilia Connect Infusion System hard coded credentials (medium 6.3)
- [CVE-2021-44463](https://insights.sbomify.com/CVE-2021-44463/): Emerson DeltaV Uncontrolled Search Path Element (high 8.1)
- [CVE-2021-44462](https://insights.sbomify.com/CVE-2021-44462/): Horner Automation Cscape EnvisionRV Improper Input Validation (high 7.8)
- [CVE-2021-44461](https://insights.sbomify.com/CVE-2021-44461/): Cross-site scripting in Odoo Enterprise (medium 6.5)
- [CVE-2021-44460](https://insights.sbomify.com/CVE-2021-44460/): Missing authorization in Odoo Community (high 7.4)
- [CVE-2021-4446](https://insights.sbomify.com/CVE-2021-4446/): Essential Addons for Elementor <= 4.6.4 - Missing Authorization (medium 6.3)
- [CVE-2021-44458](https://insights.sbomify.com/CVE-2021-44458/): Lack of websocket authentication in Lens causes remote code execution when visiting a malicious website (high 8.3)
- [CVE-2021-44454](https://insights.sbomify.com/CVE-2021-44454/): Privilege escalation in Intel(R) Quartus(R) Prime Pro Edition (high 7.8)
- [CVE-2021-44453](https://insights.sbomify.com/CVE-2021-44453/): mySCADA myPRO (critical 10.0)
- [CVE-2021-44451](https://insights.sbomify.com/CVE-2021-44451/): API sensitive information leak (medium 6.5)
- [CVE-2021-44450](https://insights.sbomify.com/CVE-2021-44450/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-4445](https://insights.sbomify.com/CVE-2021-4445/): Premium Addons for Elementor <= 4.5.1 - Authenticated (Subscriber+) Limited Arbitrary Option Update (medium 6.5)
- [CVE-2021-44449](https://insights.sbomify.com/CVE-2021-44449/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44448](https://insights.sbomify.com/CVE-2021-44448/): Memory corruption in JT Utilities (low 3.3)
- [CVE-2021-44447](https://insights.sbomify.com/CVE-2021-44447/): Use after free in JT Utilities (high 7.8)
- [CVE-2021-44446](https://insights.sbomify.com/CVE-2021-44446/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44445](https://insights.sbomify.com/CVE-2021-44445/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44444](https://insights.sbomify.com/CVE-2021-44444/): Memory corruption in JT Utilities (low 3.3)
- [CVE-2021-44443](https://insights.sbomify.com/CVE-2021-44443/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44442](https://insights.sbomify.com/CVE-2021-44442/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44441](https://insights.sbomify.com/CVE-2021-44441/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44440](https://insights.sbomify.com/CVE-2021-44440/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-4444](https://insights.sbomify.com/CVE-2021-4444/): Product Filter by WooBeWoo <= 1.4.9 - Missing Authorization (high 7.3)
- [CVE-2021-44439](https://insights.sbomify.com/CVE-2021-44439/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44438](https://insights.sbomify.com/CVE-2021-44438/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44437](https://insights.sbomify.com/CVE-2021-44437/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44436](https://insights.sbomify.com/CVE-2021-44436/): Memory corruption in JT Utilities (low 3.3)
- [CVE-2021-44435](https://insights.sbomify.com/CVE-2021-44435/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44434](https://insights.sbomify.com/CVE-2021-44434/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44433](https://insights.sbomify.com/CVE-2021-44433/): Use after free in JT Utilities (high 7.8)
- [CVE-2021-44432](https://insights.sbomify.com/CVE-2021-44432/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-44431](https://insights.sbomify.com/CVE-2021-44431/): Memory corruption in JT Utilities (low 3.3)
- [CVE-2021-44430](https://insights.sbomify.com/CVE-2021-44430/): Memory corruption in JT Utilities (high 7.8)
- [CVE-2021-4443](https://insights.sbomify.com/CVE-2021-4443/): WordPress Mega Menu <= 2.0.6 - Arbitrary File Creation (critical 9.8)
- [CVE-2021-44429](https://insights.sbomify.com/CVE-2021-44429/): Memory corruption in vercot:serva (high 7.5)
- [CVE-2021-44428](https://insights.sbomify.com/CVE-2021-44428/): Memory corruption in ipuptime:pinkie (high 7.5)
- [CVE-2021-44427](https://insights.sbomify.com/CVE-2021-44427/): SQL Injection in rosariosis (critical 9.8)
- [CVE-2021-44426](https://insights.sbomify.com/CVE-2021-44426/): File upload in anydesk:anydesk (high 8.8)
- [CVE-2021-44425](https://insights.sbomify.com/CVE-2021-44425/): Misconfiguration in anydesk:anydesk (medium 6.5)
- [CVE-2021-44423](https://insights.sbomify.com/CVE-2021-44423/): Memory corruption in opendesign:drawings explorer (high 7.8)
- [CVE-2021-44422](https://insights.sbomify.com/CVE-2021-44422/): Memory corruption in opendesign:drawings sdk (high 7.8)
- [CVE-2021-44421](https://insights.sbomify.com/CVE-2021-44421/): Information disclosure in occlum project:occlum (medium 5.5)
- [CVE-2021-44420](https://insights.sbomify.com/CVE-2021-44420/): Potential bypass of an upstream access control based on URL paths in Django (high 7.3)
- [CVE-2021-4442](https://insights.sbomify.com/CVE-2021-4442/): tcp: add sanity tests to TCP_QUEUE_SEQ (medium 5.5)
- [CVE-2021-44419](https://insights.sbomify.com/CVE-2021-44419/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44418](https://insights.sbomify.com/CVE-2021-44418/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44417](https://insights.sbomify.com/CVE-2021-44417/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44416](https://insights.sbomify.com/CVE-2021-44416/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44415](https://insights.sbomify.com/CVE-2021-44415/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44414](https://insights.sbomify.com/CVE-2021-44414/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44413](https://insights.sbomify.com/CVE-2021-44413/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44412](https://insights.sbomify.com/CVE-2021-44412/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44411](https://insights.sbomify.com/CVE-2021-44411/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44410](https://insights.sbomify.com/CVE-2021-44410/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-4441](https://insights.sbomify.com/CVE-2021-4441/): spi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op() (medium 5.5)
- [CVE-2021-44409](https://insights.sbomify.com/CVE-2021-44409/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44408](https://insights.sbomify.com/CVE-2021-44408/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44407](https://insights.sbomify.com/CVE-2021-44407/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44406](https://insights.sbomify.com/CVE-2021-44406/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44405](https://insights.sbomify.com/CVE-2021-44405/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44404](https://insights.sbomify.com/CVE-2021-44404/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44403](https://insights.sbomify.com/CVE-2021-44403/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44402](https://insights.sbomify.com/CVE-2021-44402/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44401](https://insights.sbomify.com/CVE-2021-44401/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44400](https://insights.sbomify.com/CVE-2021-44400/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-4440](https://insights.sbomify.com/CVE-2021-4440/): x86/xen: Drop USERGS_SYSRET64 paravirt call (high 8.8)
- [CVE-2021-44399](https://insights.sbomify.com/CVE-2021-44399/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44398](https://insights.sbomify.com/CVE-2021-44398/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44397](https://insights.sbomify.com/CVE-2021-44397/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44396](https://insights.sbomify.com/CVE-2021-44396/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44395](https://insights.sbomify.com/CVE-2021-44395/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44394](https://insights.sbomify.com/CVE-2021-44394/): Denial of service in RLC-410W (high 8.6)
- [CVE-2021-44393](https://insights.sbomify.com/CVE-2021-44393/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44392](https://insights.sbomify.com/CVE-2021-44392/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44391](https://insights.sbomify.com/CVE-2021-44391/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44390](https://insights.sbomify.com/CVE-2021-44390/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-4439](https://insights.sbomify.com/CVE-2021-4439/): isdn: cpai: check ctr->cnr to avoid array index out of bound (high 7.8)
- [CVE-2021-44389](https://insights.sbomify.com/CVE-2021-44389/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44388](https://insights.sbomify.com/CVE-2021-44388/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44387](https://insights.sbomify.com/CVE-2021-44387/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44386](https://insights.sbomify.com/CVE-2021-44386/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44385](https://insights.sbomify.com/CVE-2021-44385/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44384](https://insights.sbomify.com/CVE-2021-44384/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44383](https://insights.sbomify.com/CVE-2021-44383/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44382](https://insights.sbomify.com/CVE-2021-44382/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44381](https://insights.sbomify.com/CVE-2021-44381/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44380](https://insights.sbomify.com/CVE-2021-44380/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-4438](https://insights.sbomify.com/CVE-2021-4438/): React Native Sms User Consent Intent Redirection Vulnerability (medium 5.3)
- [CVE-2021-44379](https://insights.sbomify.com/CVE-2021-44379/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44378](https://insights.sbomify.com/CVE-2021-44378/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44377](https://insights.sbomify.com/CVE-2021-44377/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44376](https://insights.sbomify.com/CVE-2021-44376/): Denial of service in reolink:rlc-410w firmware (high 8.6)
- [CVE-2021-44375](https://insights.sbomify.com/CVE-2021-44375/): Denial of service in RLC-410W (high 8.6)
- [CVE-2021-44374](https://insights.sbomify.com/CVE-2021-44374/): Denial of service in reolink:rlc-410w firmware (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/68/
