# Vulnerabilities published in 2021


- [CVE-2021-43192](https://insights.sbomify.com/CVE-2021-43192/): Other in jetbrains:youtrack mobile (medium 5.3)
- [CVE-2021-43191](https://insights.sbomify.com/CVE-2021-43191/): Security feature bypass in jetbrains:youtrack mobile (medium 5.3)
- [CVE-2021-43190](https://insights.sbomify.com/CVE-2021-43190/): Other in jetbrains:youtrack mobile (medium 5.3)
- [CVE-2021-4319](https://insights.sbomify.com/CVE-2021-4319/): Use after free in Chrome (high 8.8)
- [CVE-2021-43189](https://insights.sbomify.com/CVE-2021-43189/): Security feature bypass in jetbrains:youtrack mobile (high 7.3)
- [CVE-2021-43188](https://insights.sbomify.com/CVE-2021-43188/): Security feature bypass in jetbrains:youtrack mobile (high 7.3)
- [CVE-2021-43187](https://insights.sbomify.com/CVE-2021-43187/): Information disclosure in jetbrains:youtrack mobile (medium 5.3)
- [CVE-2021-43186](https://insights.sbomify.com/CVE-2021-43186/): Cross-site scripting in jetbrains:youtrack (medium 5.4)
- [CVE-2021-43185](https://insights.sbomify.com/CVE-2021-43185/): Other in jetbrains:youtrack (critical 9.8)
- [CVE-2021-43184](https://insights.sbomify.com/CVE-2021-43184/): Cross-site scripting in jetbrains:youtrack (medium 5.4)
- [CVE-2021-43183](https://insights.sbomify.com/CVE-2021-43183/): Security feature bypass in jetbrains:hub (critical 9.8)
- [CVE-2021-43182](https://insights.sbomify.com/CVE-2021-43182/): Denial of service in jetbrains:hub (high 7.5)
- [CVE-2021-43181](https://insights.sbomify.com/CVE-2021-43181/): Cross-site scripting in jetbrains:hub (medium 6.1)
- [CVE-2021-43180](https://insights.sbomify.com/CVE-2021-43180/): Information disclosure in jetbrains:hub (high 7.5)
- [CVE-2021-4318](https://insights.sbomify.com/CVE-2021-4318/): Memory corruption in Chrome (high 8.8)
- [CVE-2021-43177](https://insights.sbomify.com/CVE-2021-43177/): Improper one time password handling in devise-two-factor (medium 5.3)
- [CVE-2021-43176](https://insights.sbomify.com/CVE-2021-43176/): Path traversal in GOautodial API (high 8.8)
- [CVE-2021-43175](https://insights.sbomify.com/CVE-2021-43175/): Auth bypass in GOautodial API (high 7.5)
- [CVE-2021-43174](https://insights.sbomify.com/CVE-2021-43174/): gzip transfer encoding caused out-of-memory crash (high 7.5)
- [CVE-2021-43173](https://insights.sbomify.com/CVE-2021-43173/): Hanging RRDP request (high 7.5)
- [CVE-2021-43172](https://insights.sbomify.com/CVE-2021-43172/): Infinite length chain of RRDP repositories (high 7.5)
- [CVE-2021-43171](https://insights.sbomify.com/CVE-2021-43171/): Security feature bypass in e.foundation:app lounge (medium 6.5)
- [CVE-2021-4317](https://insights.sbomify.com/CVE-2021-4317/): Use after free in Chrome (high 8.8)
- [CVE-2021-43164](https://insights.sbomify.com/CVE-2021-43164/): Command injection in ruijienetworks:reyeeos (high 8.8)
- [CVE-2021-43163](https://insights.sbomify.com/CVE-2021-43163/): Command injection in ruijienetworks:reyeeos (critical 9.8)
- [CVE-2021-43162](https://insights.sbomify.com/CVE-2021-43162/): Command injection in ruijienetworks:reyeeos (high 8.8)
- [CVE-2021-43161](https://insights.sbomify.com/CVE-2021-43161/): Command injection in ruijienetworks:reyeeos (high 8.8)
- [CVE-2021-43160](https://insights.sbomify.com/CVE-2021-43160/): Command injection in ruijienetworks:reyeeos (high 8.8)
- [CVE-2021-4316](https://insights.sbomify.com/CVE-2021-4316/): Other in Chrome (medium 4.3)
- [CVE-2021-43159](https://insights.sbomify.com/CVE-2021-43159/): Command injection in ruijienetworks:reyeeos (high 8.8)
- [CVE-2021-43158](https://insights.sbomify.com/CVE-2021-43158/): Cross-site request forgery in projectworlds:online shopping system (medium 4.3)
- [CVE-2021-43157](https://insights.sbomify.com/CVE-2021-43157/): SQL injection in projectworlds:online shopping system (critical 9.8)
- [CVE-2021-43156](https://insights.sbomify.com/CVE-2021-43156/): Cross-site request forgery in projectworlds:online book store project in php (medium 6.5)
- [CVE-2021-43155](https://insights.sbomify.com/CVE-2021-43155/): SQL injection in projectworlds:online book store project in php (critical 9.8)
- [CVE-2021-43154](https://insights.sbomify.com/CVE-2021-43154/): Cross-site scripting in cmsmadesimple:cms made simple (medium 6.1)
- [CVE-2021-4315](https://insights.sbomify.com/CVE-2021-4315/): NYUCCL psiTurk experiment.py special elements used in a template engine (medium 5.5)
- [CVE-2021-43145](https://insights.sbomify.com/CVE-2021-43145/): Auth bypass in zammad:zammad (high 8.1)
- [CVE-2021-43142](https://insights.sbomify.com/CVE-2021-43142/): Improper Restriction of XML External Entity Reference in wutka jox (critical 9.8)
- [CVE-2021-43141](https://insights.sbomify.com/CVE-2021-43141/): Cross-site scripting in oretnom23:simple subscription website (medium 6.1)
- [CVE-2021-43140](https://insights.sbomify.com/CVE-2021-43140/): SQL injection in oretnom23:simple subscription website (critical 9.8)
- [CVE-2021-4314](https://insights.sbomify.com/CVE-2021-4314/): Auth bypass in Zowe (medium 5.3)
- [CVE-2021-43138](https://insights.sbomify.com/CVE-2021-43138/): Prototype Pollution in async (high 7.8)
- [CVE-2021-43137](https://insights.sbomify.com/CVE-2021-43137/): Cross-site scripting in phpgurukul:hostel management system (high 8.8)
- [CVE-2021-43136](https://insights.sbomify.com/CVE-2021-43136/): Hardcoded credentials in formalms:formalms (critical 9.8)
- [CVE-2021-43130](https://insights.sbomify.com/CVE-2021-43130/): SQL injection in customer relationship management system project:customer relationship management system (critical 9.8)
- [CVE-2021-4313](https://insights.sbomify.com/CVE-2021-4313/): NethServer phonenehome index.php get_country_coor sql injection (medium 5.5)
- [CVE-2021-43129](https://insights.sbomify.com/CVE-2021-43129/): Security feature bypass in d2l:brightspace (medium 6.5)
- [CVE-2021-4312](https://insights.sbomify.com/CVE-2021-4312/): Th3-822 Rapidleech zip.php zip_go cross site scripting (low 3.5)
- [CVE-2021-43118](https://insights.sbomify.com/CVE-2021-43118/): Command injection in draytek:vigor2960 firmware (critical 9.8)
- [CVE-2021-43117](https://insights.sbomify.com/CVE-2021-43117/): File upload in fastadmin:fastadmin (critical 9.8)
- [CVE-2021-43116](https://insights.sbomify.com/CVE-2021-43116/): Use of Hard-coded Credentials in Nacos (high 8.8)
- [CVE-2021-43114](https://insights.sbomify.com/CVE-2021-43114/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2021-43113](https://insights.sbomify.com/CVE-2021-43113/): Command injection in itext7-core (critical 9.8)
- [CVE-2021-43110](https://insights.sbomify.com/CVE-2021-43110/): Missing authorization in puneethreddyhc online-shopping-system project:puneethreddyhc online-shopping-system (critical 9.8)
- [CVE-2021-4311](https://insights.sbomify.com/CVE-2021-4311/): Talend Open Studio for MDM XML xml external entity reference (medium 5.5)
- [CVE-2021-43109](https://insights.sbomify.com/CVE-2021-43109/): SQL injection in puneethreddyhc online-shopping-system project:puneethreddyhc online-shopping-system (high 7.5)
- [CVE-2021-43106](https://insights.sbomify.com/CVE-2021-43106/): Open redirect in compassplus:tranzware online (medium 6.1)
- [CVE-2021-43105](https://insights.sbomify.com/CVE-2021-43105/): Other in technitium:dns server (medium 4.3)
- [CVE-2021-43103](https://insights.sbomify.com/CVE-2021-43103/): File upload in diyhi:bbs (high 7.2)
- [CVE-2021-43102](https://insights.sbomify.com/CVE-2021-43102/): File upload in diyhi:bbs (high 7.2)
- [CVE-2021-43101](https://insights.sbomify.com/CVE-2021-43101/): File upload in diyhi:bbs (high 7.2)
- [CVE-2021-43100](https://insights.sbomify.com/CVE-2021-43100/): File upload in diyhi:bbs (high 7.2)
- [CVE-2021-4310](https://insights.sbomify.com/CVE-2021-4310/): 01-Scripts 01-Artikelsystem 01article.php cross site scripting (low 3.5)
- [CVE-2021-43099](https://insights.sbomify.com/CVE-2021-43099/): Path traversal in diyhi:bbs (medium 4.9)
- [CVE-2021-43098](https://insights.sbomify.com/CVE-2021-43098/): File upload in diyhi:bbs (high 7.2)
- [CVE-2021-43097](https://insights.sbomify.com/CVE-2021-43097/): Code injection in diyhi:bbs (high 7.2)
- [CVE-2021-43094](https://insights.sbomify.com/CVE-2021-43094/): SQL injection in openmrs:openmrs (critical 9.8)
- [CVE-2021-43091](https://insights.sbomify.com/CVE-2021-43091/): SQL Injection in Yeswiki (high 7.5)
- [CVE-2021-43090](https://insights.sbomify.com/CVE-2021-43090/): Improper Restriction of XML External Entity Reference in soa-model (critical 9.8)
- [CVE-2021-4309](https://insights.sbomify.com/CVE-2021-4309/): 01-Scripts 01ACP cross site scripting (low 3.5)
- [CVE-2021-43086](https://insights.sbomify.com/CVE-2021-43086/): Memory corruption in arm:adaptive scalable texture compression encoder (critical 9.8)
- [CVE-2021-43084](https://insights.sbomify.com/CVE-2021-43084/): SQL injection in iteachyou:dreamer cms (critical 9.8)
- [CVE-2021-43083](https://insights.sbomify.com/CVE-2021-43083/): Apache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response (high 8.8)
- [CVE-2021-43082](https://insights.sbomify.com/CVE-2021-43082/): heap-buffer-overflow with stats-over-http plugin (critical 9.8)
- [CVE-2021-43081](https://insights.sbomify.com/CVE-2021-43081/): Cross-site scripting in Fortinet FortiProxy (medium 6.1)
- [CVE-2021-43080](https://insights.sbomify.com/CVE-2021-43080/): Cross-site scripting in Fortinet FortiOS (medium 4.6)
- [CVE-2021-4308](https://insights.sbomify.com/CVE-2021-4308/): WebPA sql injection (medium 5.5)
- [CVE-2021-43077](https://insights.sbomify.com/CVE-2021-43077/): SQL injection in Fortinet FortiWLM (high 8.8)
- [CVE-2021-43076](https://insights.sbomify.com/CVE-2021-43076/): Privilege escalation in FortiADC (medium 6.3)
- [CVE-2021-43075](https://insights.sbomify.com/CVE-2021-43075/): Command injection in Fortinet FortiWLM (high 8.8)
- [CVE-2021-43074](https://insights.sbomify.com/CVE-2021-43074/): Weak cryptography in FortiOS (medium 4.1)
- [CVE-2021-43073](https://insights.sbomify.com/CVE-2021-43073/): Command injection in fortinet:fortiweb (high 8.8)
- [CVE-2021-43072](https://insights.sbomify.com/CVE-2021-43072/): Memory corruption in FortiAnalyzer (medium 6.3)
- [CVE-2021-43071](https://insights.sbomify.com/CVE-2021-43071/): Memory corruption in Fortinet FortiWeb (high 8.8)
- [CVE-2021-43070](https://insights.sbomify.com/CVE-2021-43070/): Path traversal in Fortinet FortiWLM (medium 5.4)
- [CVE-2021-4307](https://insights.sbomify.com/CVE-2021-4307/): Yomguithereal Baobab prototype pollution (medium 6.3)
- [CVE-2021-43068](https://insights.sbomify.com/CVE-2021-43068/): Auth bypass in Fortinet FortiAuthenticator (medium 5.4)
- [CVE-2021-43067](https://insights.sbomify.com/CVE-2021-43067/): Information disclosure in Fortinet FortiAuthenticator (high 8.3)
- [CVE-2021-43066](https://insights.sbomify.com/CVE-2021-43066/): Privilege escalation in Fortinet FortiClientWindows (high 8.4)
- [CVE-2021-43065](https://insights.sbomify.com/CVE-2021-43065/): Misconfiguration in Fortinet FortiNAC (high 7.8)
- [CVE-2021-43064](https://insights.sbomify.com/CVE-2021-43064/): Open redirect in Fortinet FortiWeb (medium 4.3)
- [CVE-2021-43063](https://insights.sbomify.com/CVE-2021-43063/): Cross-site scripting in Fortinet FortiWeb (medium 6.1)
- [CVE-2021-43062](https://insights.sbomify.com/CVE-2021-43062/): Cross-site scripting in Fortinet FortiMail (medium 6.1)
- [CVE-2021-4306](https://insights.sbomify.com/CVE-2021-4306/): cronvel terminal-kit redos (low 3.5)
- [CVE-2021-43058](https://insights.sbomify.com/CVE-2021-43058/): Open redirect in REPLICATED CLASSIC (medium 6.1)
- [CVE-2021-43057](https://insights.sbomify.com/CVE-2021-43057/): Use after free in linux:linux kernel (high 7.8)
- [CVE-2021-43056](https://insights.sbomify.com/CVE-2021-43056/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2021-43055](https://insights.sbomify.com/CVE-2021-43055/): TIBCO eFTL Token Caching Vulnerability (medium 5.9)
- [CVE-2021-43054](https://insights.sbomify.com/CVE-2021-43054/): TIBCO eFTL Token Generation Vulnerability (high 7.1)
- [CVE-2021-43053](https://insights.sbomify.com/CVE-2021-43053/): TIBCO FTL Secret Exposure Vulnerability (high 8.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/78/