# Vulnerabilities published in 2021


- [CVE-2021-43300](https://insights.sbomify.com/CVE-2021-43300/): Memory corruption in pjsip (critical 9.8)
- [CVE-2021-4330](https://insights.sbomify.com/CVE-2021-4330/): Envato Elements <= 2.0.10 & Template Kit <= 1.0.13 - Authenticated (Contributor+) Arbitrary File Upload (high 8.8)
- [CVE-2021-43299](https://insights.sbomify.com/CVE-2021-43299/): Memory corruption in pjsip (critical 9.8)
- [CVE-2021-43298](https://insights.sbomify.com/CVE-2021-43298/): Weak cryptography in goahead (critical 9.8)
- [CVE-2021-43297](https://insights.sbomify.com/CVE-2021-43297/): Dubbo Hessian cause RCE when parse error (critical 9.8)
- [CVE-2021-43296](https://insights.sbomify.com/CVE-2021-43296/): Server-side request forgery in zohocorp:manageengine supportcenter plus (high 7.5)
- [CVE-2021-43295](https://insights.sbomify.com/CVE-2021-43295/): Cross-site scripting in zohocorp:manageengine supportcenter plus (medium 6.1)
- [CVE-2021-43294](https://insights.sbomify.com/CVE-2021-43294/): Cross-site scripting in zohocorp:manageengine supportcenter plus (medium 6.1)
- [CVE-2021-43293](https://insights.sbomify.com/CVE-2021-43293/): Server-side request forgery in sonatype:nexus repository manager (medium 4.3)
- [CVE-2021-43290](https://insights.sbomify.com/CVE-2021-43290/): Path traversal in thoughtworks:gocd (critical 9.8)
- [CVE-2021-4329](https://insights.sbomify.com/CVE-2021-4329/): json-logic-js logic.js command injection (medium 5.5)
- [CVE-2021-43289](https://insights.sbomify.com/CVE-2021-43289/): Path traversal in thoughtworks:gocd (high 7.5)
- [CVE-2021-43288](https://insights.sbomify.com/CVE-2021-43288/): Cross-site scripting in thoughtworks:gocd (medium 5.4)
- [CVE-2021-43287](https://insights.sbomify.com/CVE-2021-43287/): Information disclosure in thoughtworks:gocd (high 7.5)
- [CVE-2021-43286](https://insights.sbomify.com/CVE-2021-43286/): Command injection in thoughtworks:gocd (high 8.8)
- [CVE-2021-43284](https://insights.sbomify.com/CVE-2021-43284/): Hardcoded credentials in govicture:wr1200 firmware (high 7.8)
- [CVE-2021-43283](https://insights.sbomify.com/CVE-2021-43283/): Command injection in govicture:wr1200 firmware (high 8.8)
- [CVE-2021-43282](https://insights.sbomify.com/CVE-2021-43282/): Hardcoded credentials in govicture:wr1200 firmware (medium 6.5)
- [CVE-2021-43281](https://insights.sbomify.com/CVE-2021-43281/): Code injection in mybb:mybb (high 7.2)
- [CVE-2021-43280](https://insights.sbomify.com/CVE-2021-43280/): Memory corruption in opendesign:drawings software development kit (high 7.8)
- [CVE-2021-4328](https://insights.sbomify.com/CVE-2021-4328/): 狮子鱼CMS ApiController.class.php goods_detail sql injection (medium 6.3)
- [CVE-2021-43279](https://insights.sbomify.com/CVE-2021-43279/): Memory corruption in opendesign:oda prc software development kit (high 7.8)
- [CVE-2021-43278](https://insights.sbomify.com/CVE-2021-43278/): Memory corruption in opendesign:drawings software developemnt kit (high 7.8)
- [CVE-2021-43277](https://insights.sbomify.com/CVE-2021-43277/): Memory corruption in opendesign:oda prc software development kit (high 7.8)
- [CVE-2021-43276](https://insights.sbomify.com/CVE-2021-43276/): Memory corruption in opendesign:oda viewer (high 7.8)
- [CVE-2021-43275](https://insights.sbomify.com/CVE-2021-43275/): Use after free in opendesign:drawings software development kit (high 7.8)
- [CVE-2021-43274](https://insights.sbomify.com/CVE-2021-43274/): Use after free in opendesign:drawings software development kit (high 7.8)
- [CVE-2021-43273](https://insights.sbomify.com/CVE-2021-43273/): Memory corruption in opendesign:drawings sdk (low 3.3)
- [CVE-2021-43272](https://insights.sbomify.com/CVE-2021-43272/): Memory corruption in opendesign:oda viewer (critical 9.8)
- [CVE-2021-43271](https://insights.sbomify.com/CVE-2021-43271/): Information disclosure in riverbed:appresponse (medium 6.8)
- [CVE-2021-43270](https://insights.sbomify.com/CVE-2021-43270/): Weak cryptography in datalust:seq.app.emailplus (high 7.5)
- [CVE-2021-4327](https://insights.sbomify.com/CVE-2021-4327/): SerenityOS TypedArray.cpp initialize_typed_array_from_array_buffer integer overflow (medium 5.5)
- [CVE-2021-43269](https://insights.sbomify.com/CVE-2021-43269/): Code injection in code42:code42 (high 8.8)
- [CVE-2021-43268](https://insights.sbomify.com/CVE-2021-43268/): Memory corruption in windriver:vxworks (medium 6.5)
- [CVE-2021-43267](https://insights.sbomify.com/CVE-2021-43267/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2021-43266](https://insights.sbomify.com/CVE-2021-43266/): Command injection in mahara:mahara (high 7.3)
- [CVE-2021-43265](https://insights.sbomify.com/CVE-2021-43265/): Cross-site scripting in mahara:mahara (medium 5.4)
- [CVE-2021-43264](https://insights.sbomify.com/CVE-2021-43264/): Path traversal in mahara:mahara (low 3.3)
- [CVE-2021-4326](https://insights.sbomify.com/CVE-2021-4326/): Imperative Local Command Injection allows Activity Masking (low 3.3)
- [CVE-2021-43258](https://insights.sbomify.com/CVE-2021-43258/): File upload in churchdb:churchinfo (high 8.8)
- [CVE-2021-43257](https://insights.sbomify.com/CVE-2021-43257/): MantisBT CSV Injection unprivileged user access in csv_export.php (high 7.8)
- [CVE-2021-43256](https://insights.sbomify.com/CVE-2021-43256/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-43255](https://insights.sbomify.com/CVE-2021-43255/): Microsoft Office Trust Center Spoofing Vulnerability (medium 5.5)
- [CVE-2021-4325](https://insights.sbomify.com/CVE-2021-4325/): NHN TOAST UI Chart Legend cross site scripting (low 3.5)
- [CVE-2021-43248](https://insights.sbomify.com/CVE-2021-43248/): Windows Digital Media Receiver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-43247](https://insights.sbomify.com/CVE-2021-43247/): Windows TCP/IP Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-43246](https://insights.sbomify.com/CVE-2021-43246/): Windows Hyper-V Denial of Service Vulnerability (medium 5.6)
- [CVE-2021-43245](https://insights.sbomify.com/CVE-2021-43245/): Windows Digital TV Tuner Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-43244](https://insights.sbomify.com/CVE-2021-43244/): Windows Kernel Information Disclosure Vulnerability (medium 6.5)
- [CVE-2021-43243](https://insights.sbomify.com/CVE-2021-43243/): VP9 Video Extensions Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-43242](https://insights.sbomify.com/CVE-2021-43242/): Microsoft SharePoint Server Spoofing Vulnerability (high 7.6)
- [CVE-2021-43240](https://insights.sbomify.com/CVE-2021-43240/): NTFS Set Short Name Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-4324](https://insights.sbomify.com/CVE-2021-4324/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2021-43239](https://insights.sbomify.com/CVE-2021-43239/): Windows Recovery Environment Agent Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2021-43238](https://insights.sbomify.com/CVE-2021-43238/): Windows Remote Access Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-43237](https://insights.sbomify.com/CVE-2021-43237/): Windows Setup Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-43236](https://insights.sbomify.com/CVE-2021-43236/): Microsoft Message Queuing Information Disclosure Vulnerability (high 7.5)
- [CVE-2021-43235](https://insights.sbomify.com/CVE-2021-43235/): Storage Spaces Controller Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-43234](https://insights.sbomify.com/CVE-2021-43234/): Windows Fax Service Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-43233](https://insights.sbomify.com/CVE-2021-43233/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2021-43232](https://insights.sbomify.com/CVE-2021-43232/): Windows Event Tracing Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-43231](https://insights.sbomify.com/CVE-2021-43231/): Windows NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-43230](https://insights.sbomify.com/CVE-2021-43230/): Windows NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-4323](https://insights.sbomify.com/CVE-2021-4323/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2021-43229](https://insights.sbomify.com/CVE-2021-43229/): Windows NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-43228](https://insights.sbomify.com/CVE-2021-43228/): SymCrypt Denial of Service Vulnerability (high 7.5)
- [CVE-2021-43227](https://insights.sbomify.com/CVE-2021-43227/): Storage Spaces Controller Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-43226](https://insights.sbomify.com/CVE-2021-43226/): Microsoft Windows Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-43225](https://insights.sbomify.com/CVE-2021-43225/): Bot Framework SDK Remote Code Execution Vulnerability (high 7.5)
- [CVE-2021-43224](https://insights.sbomify.com/CVE-2021-43224/): Windows Common Log File System Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-43223](https://insights.sbomify.com/CVE-2021-43223/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-43222](https://insights.sbomify.com/CVE-2021-43222/): Microsoft Message Queuing Information Disclosure Vulnerability (high 7.5)
- [CVE-2021-43221](https://insights.sbomify.com/CVE-2021-43221/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (medium 4.2)
- [CVE-2021-43220](https://insights.sbomify.com/CVE-2021-43220/): Microsoft Edge for iOS Spoofing Vulnerability (low 3.1)
- [CVE-2021-4322](https://insights.sbomify.com/CVE-2021-4322/): Use after free in Chrome (high 8.8)
- [CVE-2021-43219](https://insights.sbomify.com/CVE-2021-43219/): DirectX Graphics Kernel File Denial of Service Vulnerability (high 7.4)
- [CVE-2021-43217](https://insights.sbomify.com/CVE-2021-43217/): Windows Encrypting File System (EFS) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2021-43216](https://insights.sbomify.com/CVE-2021-43216/): Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability (medium 6.5)
- [CVE-2021-43215](https://insights.sbomify.com/CVE-2021-43215/): iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution (critical 9.8)
- [CVE-2021-43214](https://insights.sbomify.com/CVE-2021-43214/): Web Media Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-43211](https://insights.sbomify.com/CVE-2021-43211/): Windows 10 Update Assistant Elevation of Privilege Vulnerability (medium 5.5)
- [CVE-2021-4321](https://insights.sbomify.com/CVE-2021-4321/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2021-43209](https://insights.sbomify.com/CVE-2021-43209/): 3D Viewer Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-43208](https://insights.sbomify.com/CVE-2021-43208/): 3D Viewer Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-43207](https://insights.sbomify.com/CVE-2021-43207/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-43206](https://insights.sbomify.com/CVE-2021-43206/): Information disclosure in Fortinet FortiOS, FortiProxy (medium 4.3)
- [CVE-2021-43205](https://insights.sbomify.com/CVE-2021-43205/): Information disclosure in Fortinet FortiClientLinux (medium 4.3)
- [CVE-2021-43204](https://insights.sbomify.com/CVE-2021-43204/): Denial of service in Fortinet FortiClientWindows (medium 4.4)
- [CVE-2021-43203](https://insights.sbomify.com/CVE-2021-43203/): Auth bypass in jetbrains:ktor (high 7.5)
- [CVE-2021-43202](https://insights.sbomify.com/CVE-2021-43202/): Other in jetbrains:teamcity (critical 9.8)
- [CVE-2021-43201](https://insights.sbomify.com/CVE-2021-43201/): Business logic in jetbrains:teamcity (medium 5.3)
- [CVE-2021-43200](https://insights.sbomify.com/CVE-2021-43200/): Missing authorization in jetbrains:teamcity (critical 9.8)
- [CVE-2021-4320](https://insights.sbomify.com/CVE-2021-4320/): Use after free in Chrome (high 8.8)
- [CVE-2021-43199](https://insights.sbomify.com/CVE-2021-43199/): Missing authorization in jetbrains:teamcity (medium 5.3)
- [CVE-2021-43198](https://insights.sbomify.com/CVE-2021-43198/): Cross-site scripting in jetbrains:teamcity (medium 5.4)
- [CVE-2021-43197](https://insights.sbomify.com/CVE-2021-43197/): Cross-site scripting in jetbrains:teamcity (medium 6.1)
- [CVE-2021-43196](https://insights.sbomify.com/CVE-2021-43196/): Information disclosure in jetbrains:teamcity (high 7.5)
- [CVE-2021-43195](https://insights.sbomify.com/CVE-2021-43195/): Misconfiguration in jetbrains:teamcity (medium 5.3)
- [CVE-2021-43194](https://insights.sbomify.com/CVE-2021-43194/): Information disclosure in jetbrains:teamcity (medium 5.3)
- [CVE-2021-43193](https://insights.sbomify.com/CVE-2021-43193/): Code injection in jetbrains:teamcity (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/77/