# Vulnerabilities published in 2021


- [CVE-2021-42740](https://insights.sbomify.com/CVE-2021-42740/): Improper Neutralization of Special Elements used in a Command in Shell-quote (critical 9.8)
- [CVE-2021-4274](https://insights.sbomify.com/CVE-2021-4274/): sileht bird-lg layout.html cross site scripting (low 3.5)
- [CVE-2021-42739](https://insights.sbomify.com/CVE-2021-42739/): Memory corruption in debian:debian linux (medium 6.7)
- [CVE-2021-42738](https://insights.sbomify.com/CVE-2021-42738/): Adobe Prelude MXF File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-42737](https://insights.sbomify.com/CVE-2021-42737/): Adobe Prelude WAV File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-42735](https://insights.sbomify.com/CVE-2021-42735/): Adobe Photoshop Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-42734](https://insights.sbomify.com/CVE-2021-42734/): Adobe Photoshop TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-42733](https://insights.sbomify.com/CVE-2021-42733/): Adobe Bridge NULL Pointer Dereference could lead to Application denial-of-service (medium 5.5)
- [CVE-2021-42732](https://insights.sbomify.com/CVE-2021-42732/): Adobe InDesign crashes when parsing the GIF file (high 7.8)
- [CVE-2021-42731](https://insights.sbomify.com/CVE-2021-42731/): Adobe Indesign Buffer Overflow Could Lead to Remote Code Execution (high 7.8)
- [CVE-2021-42730](https://insights.sbomify.com/CVE-2021-42730/): Adobe Bridge Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-4273](https://insights.sbomify.com/CVE-2021-4273/): studygolang search.go Search cross site scripting (medium 4.3)
- [CVE-2021-42729](https://insights.sbomify.com/CVE-2021-42729/): Adobe Bridge Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-42728](https://insights.sbomify.com/CVE-2021-42728/): Adobe Bridge Buffer Overflow Arbitrary code execution (high 7.8)
- [CVE-2021-42727](https://insights.sbomify.com/CVE-2021-42727/): Adobe Bridge Buffer Overflow Arbitrary code execution (high 7.8)
- [CVE-2021-42726](https://insights.sbomify.com/CVE-2021-42726/): Adobe Bridge Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-42725](https://insights.sbomify.com/CVE-2021-42725/): Adobe Bridge Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-42724](https://insights.sbomify.com/CVE-2021-42724/): Adobe Bridge Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-42723](https://insights.sbomify.com/CVE-2021-42723/): Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-42722](https://insights.sbomify.com/CVE-2021-42722/): Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-42721](https://insights.sbomify.com/CVE-2021-42721/): Adobe Bridge Use After Free could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-42720](https://insights.sbomify.com/CVE-2021-42720/): Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-4272](https://insights.sbomify.com/CVE-2021-4272/): studygolang topics.js cross site scripting (low 3.5)
- [CVE-2021-42719](https://insights.sbomify.com/CVE-2021-42719/): Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution (high 7.1)
- [CVE-2021-42718](https://insights.sbomify.com/CVE-2021-42718/): Sensitive data unnecessarily returned from authenticated API (medium 4.9)
- [CVE-2021-42717](https://insights.sbomify.com/CVE-2021-42717/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2021-42716](https://insights.sbomify.com/CVE-2021-42716/): Memory corruption in fedoraproject:fedora (high 7.1)
- [CVE-2021-42715](https://insights.sbomify.com/CVE-2021-42715/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2021-42714](https://insights.sbomify.com/CVE-2021-42714/): Misconfiguration in splashtop:splashtop (high 7.8)
- [CVE-2021-42713](https://insights.sbomify.com/CVE-2021-42713/): Misconfiguration in splashtop:splashtop (high 7.8)
- [CVE-2021-42712](https://insights.sbomify.com/CVE-2021-42712/): Misconfiguration in splashtop:streamer (high 7.8)
- [CVE-2021-42711](https://insights.sbomify.com/CVE-2021-42711/): Privilege escalation in barracuda:network access client (high 7.8)
- [CVE-2021-4271](https://insights.sbomify.com/CVE-2021-4271/): panicsteve w2wiki Markdown index.php toHTML cross site scripting (low 3.5)
- [CVE-2021-42707](https://insights.sbomify.com/CVE-2021-42707/): WECON PLC Editor (high 7.8)
- [CVE-2021-42706](https://insights.sbomify.com/CVE-2021-42706/): AzeoTech DAQFactory (high 7.8)
- [CVE-2021-42705](https://insights.sbomify.com/CVE-2021-42705/): WECON PLC Editor (high 7.8)
- [CVE-2021-42704](https://insights.sbomify.com/CVE-2021-42704/): Inkscape Out-of-bounds Write (high 7.8)
- [CVE-2021-42703](https://insights.sbomify.com/CVE-2021-42703/): AzeoTech DAQFactory (medium 5.4)
- [CVE-2021-42702](https://insights.sbomify.com/CVE-2021-42702/): Inkscape Access of Uninitialized Pointer (low 3.3)
- [CVE-2021-42701](https://insights.sbomify.com/CVE-2021-42701/): AzeoTech DAQFactory (medium 5.0)
- [CVE-2021-42700](https://insights.sbomify.com/CVE-2021-42700/): Inkscape Out-of-bounds Read (low 3.3)
- [CVE-2021-4270](https://insights.sbomify.com/CVE-2021-4270/): Imprint CMS ViewHelpers.cs SearchForm cross site scripting (low 3.5)
- [CVE-2021-42699](https://insights.sbomify.com/CVE-2021-42699/): AzeoTech DAQFactory (medium 5.7)
- [CVE-2021-42698](https://insights.sbomify.com/CVE-2021-42698/): AzeoTech DAQFactory (high 7.8)
- [CVE-2021-42697](https://insights.sbomify.com/CVE-2021-42697/): Uncontrolled Recursion in Akka HTTP (high 7.5)
- [CVE-2021-42694](https://insights.sbomify.com/CVE-2021-42694/): Security feature bypass in unicode:unicode (high 8.3)
- [CVE-2021-42692](https://insights.sbomify.com/CVE-2021-42692/): Memory corruption in tinytoml project:tinytoml (medium 6.5)
- [CVE-2021-4269](https://insights.sbomify.com/CVE-2021-4269/): SimpleRisk common.js checkAndSetValidation cross site scripting (low 3.5)
- [CVE-2021-42688](https://insights.sbomify.com/CVE-2021-42688/): Integer overflow in accops:hyworks windows client (high 8.8)
- [CVE-2021-42687](https://insights.sbomify.com/CVE-2021-42687/): Memory corruption in accops:hyworks windows client (high 8.8)
- [CVE-2021-42686](https://insights.sbomify.com/CVE-2021-42686/): Integer overflow in accops:hyworks windows client (high 8.8)
- [CVE-2021-42685](https://insights.sbomify.com/CVE-2021-42685/): Integer overflow in accops:hyworks dvm tools (high 8.8)
- [CVE-2021-42683](https://insights.sbomify.com/CVE-2021-42683/): Memory corruption in accops:hyworks windows client (high 8.8)
- [CVE-2021-42682](https://insights.sbomify.com/CVE-2021-42682/): Integer overflow in accops:hyworks dvm tools (high 8.8)
- [CVE-2021-42681](https://insights.sbomify.com/CVE-2021-42681/): Memory corruption in accops:hyworks dvm tools (high 8.8)
- [CVE-2021-4268](https://insights.sbomify.com/CVE-2021-4268/): phpRedisAdmin cross-site request forgery (medium 4.3)
- [CVE-2021-42675](https://insights.sbomify.com/CVE-2021-42675/): File upload in kreado:kreasfero (critical 9.8)
- [CVE-2021-42671](https://insights.sbomify.com/CVE-2021-42671/): Missing authorization in engineers online portal project:engineers online portal (high 7.5)
- [CVE-2021-42670](https://insights.sbomify.com/CVE-2021-42670/): SQL injection in engineers online portal project:engineers online portal (critical 9.8)
- [CVE-2021-4267](https://insights.sbomify.com/CVE-2021-4267/): tad_discuss cross site scripting (low 3.5)
- [CVE-2021-42669](https://insights.sbomify.com/CVE-2021-42669/): File upload in engineers online portal project:engineers online portal (critical 9.8)
- [CVE-2021-42668](https://insights.sbomify.com/CVE-2021-42668/): SQL injection in engineers online portal project:engineers online portal (critical 9.8)
- [CVE-2021-42667](https://insights.sbomify.com/CVE-2021-42667/): SQL injection in online event booking and reservation system project:online event booking and reservation system (critical 9.8)
- [CVE-2021-42666](https://insights.sbomify.com/CVE-2021-42666/): SQL injection in engineers online portal project:engineers online portal (high 8.8)
- [CVE-2021-42665](https://insights.sbomify.com/CVE-2021-42665/): SQL injection in engineers online portal project:engineers online portal (critical 9.8)
- [CVE-2021-42664](https://insights.sbomify.com/CVE-2021-42664/): Cross-site scripting in engineers online portal project:engineers online portal (medium 5.4)
- [CVE-2021-42663](https://insights.sbomify.com/CVE-2021-42663/): Cross-site scripting in online event booking and reservation system project:online event booking and reservation system (medium 4.3)
- [CVE-2021-42662](https://insights.sbomify.com/CVE-2021-42662/): Cross-site scripting in online event booking and reservation system project:online event booking and reservation system (medium 5.4)
- [CVE-2021-4266](https://insights.sbomify.com/CVE-2021-4266/): Webdetails cpf DependenciesPackage.java cross site scripting (low 3.5)
- [CVE-2021-42659](https://insights.sbomify.com/CVE-2021-42659/): Memory corruption in tenda:ac9 firmware (medium 6.5)
- [CVE-2021-42656](https://insights.sbomify.com/CVE-2021-42656/): Cross site scripting in SiteServer CMS (medium 5.4)
- [CVE-2021-42655](https://insights.sbomify.com/CVE-2021-42655/): SQL injection in SiteServer CMS (high 8.8)
- [CVE-2021-42654](https://insights.sbomify.com/CVE-2021-42654/): File upload in sscms:siteserver cms (critical 9.8)
- [CVE-2021-42651](https://insights.sbomify.com/CVE-2021-42651/): Code injection in pentest collaboration framework project:pentest collaboration framework (high 8.8)
- [CVE-2021-42650](https://insights.sbomify.com/CVE-2021-42650/): Cross-site scripting in portainer:portainer (medium 6.1)
- [CVE-2021-4265](https://insights.sbomify.com/CVE-2021-4265/): siwapp-ror cross site scripting (low 3.5)
- [CVE-2021-42648](https://insights.sbomify.com/CVE-2021-42648/): Cross site scripting in code-server (medium 6.1)
- [CVE-2021-42646](https://insights.sbomify.com/CVE-2021-42646/): XML external entity in wso2:api manager (critical 9.1)
- [CVE-2021-42645](https://insights.sbomify.com/CVE-2021-42645/): File upload in cmsimple-xh:cmsimple xh (critical 10.0)
- [CVE-2021-42644](https://insights.sbomify.com/CVE-2021-42644/): Path traversal in cmseasy:cmseasy (medium 6.5)
- [CVE-2021-42643](https://insights.sbomify.com/CVE-2021-42643/): Path traversal in cmseasy:cmseasy (high 8.8)
- [CVE-2021-42642](https://insights.sbomify.com/CVE-2021-42642/): Missing authorization in printerlogic:web stack (high 7.5)
- [CVE-2021-42641](https://insights.sbomify.com/CVE-2021-42641/): Missing authorization in printerlogic:web stack (high 7.5)
- [CVE-2021-42640](https://insights.sbomify.com/CVE-2021-42640/): Missing authorization in printerlogic:web stack (critical 9.1)
- [CVE-2021-4264](https://insights.sbomify.com/CVE-2021-4264/): LinkedIn dustjs prototype pollution (medium 6.3)
- [CVE-2021-42639](https://insights.sbomify.com/CVE-2021-42639/): Cross-site scripting in printerlogic:web stack (medium 6.1)
- [CVE-2021-42638](https://insights.sbomify.com/CVE-2021-42638/): Command injection in printerlogic:web stack (high 8.1)
- [CVE-2021-42637](https://insights.sbomify.com/CVE-2021-42637/): Server-side request forgery in printerlogic:web stack (critical 9.8)
- [CVE-2021-42635](https://insights.sbomify.com/CVE-2021-42635/): Hardcoded credentials in printerlogic:web stack (high 8.1)
- [CVE-2021-42633](https://insights.sbomify.com/CVE-2021-42633/): SQL injection in printerlogic:web stack (medium 5.3)
- [CVE-2021-42631](https://insights.sbomify.com/CVE-2021-42631/): Deserialization in printerlogic:virtual appliance (high 8.1)
- [CVE-2021-4263](https://insights.sbomify.com/CVE-2021-4263/): leanote history.js define cross site scripting (low 3.5)
- [CVE-2021-42627](https://insights.sbomify.com/CVE-2021-42627/): Missing authorization in dlink:dir-615 firmware (critical 9.8)
- [CVE-2021-42624](https://insights.sbomify.com/CVE-2021-42624/): Memory corruption in miniftpd project:miniftpd (high 7.8)
- [CVE-2021-4262](https://insights.sbomify.com/CVE-2021-4262/): laravel-jqgrid EloquentRepositoryAbstract.php getRows sql injection (medium 5.5)
- [CVE-2021-42614](https://insights.sbomify.com/CVE-2021-42614/): Use after free in fedoraproject:fedora (high 7.8)
- [CVE-2021-42613](https://insights.sbomify.com/CVE-2021-42613/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2021-42612](https://insights.sbomify.com/CVE-2021-42612/): Use after free in fedoraproject:fedora (high 7.8)
- [CVE-2021-4261](https://insights.sbomify.com/CVE-2021-4261/): pacman-canvas db-handler.php addHighscore sql injection (medium 6.3)
- [CVE-2021-4260](https://insights.sbomify.com/CVE-2021-4260/): oils-js Web.js redirect (medium 6.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/81/