# Vulnerabilities published in 2021


- [CVE-2021-40777](https://insights.sbomify.com/CVE-2021-40777/): Adobe Media Encoder WAV file memory corruption vulnerability could lead to arbitrary code execution (high 7.8)
- [CVE-2021-40776](https://insights.sbomify.com/CVE-2021-40776/): Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability (medium 6.1)
- [CVE-2021-40775](https://insights.sbomify.com/CVE-2021-40775/): Adobe Prelude SVG File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40774](https://insights.sbomify.com/CVE-2021-40774/): Adobe Prelude NULL Pointer Dereference Application Denial of Service (medium 5.5)
- [CVE-2021-40773](https://insights.sbomify.com/CVE-2021-40773/): Adobe Prelude NULL Pointer Dereference Application Denial of Service (medium 5.5)
- [CVE-2021-40772](https://insights.sbomify.com/CVE-2021-40772/): Adobe Prelude M4A File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40771](https://insights.sbomify.com/CVE-2021-40771/): Adobe Prelude WAV File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40770](https://insights.sbomify.com/CVE-2021-40770/): Adobe Prelude M4A File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40769](https://insights.sbomify.com/CVE-2021-40769/): Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-40768](https://insights.sbomify.com/CVE-2021-40768/): Adobe Character Animator NULL Pointer Dereference Application denial-of-service (medium 5.5)
- [CVE-2021-40767](https://insights.sbomify.com/CVE-2021-40767/): Adobe Character Animator Memory Corruption could lead to Application denial-of-service (medium 5.5)
- [CVE-2021-40766](https://insights.sbomify.com/CVE-2021-40766/): Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-40765](https://insights.sbomify.com/CVE-2021-40765/): Adobe Character Animator Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-40764](https://insights.sbomify.com/CVE-2021-40764/): Adobe Character Animator Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-40763](https://insights.sbomify.com/CVE-2021-40763/): Adobe Character Animator Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-40762](https://insights.sbomify.com/CVE-2021-40762/): Adobe Character Animator NULL Pointer Dereference Application denial-of-service (medium 5.5)
- [CVE-2021-40761](https://insights.sbomify.com/CVE-2021-40761/): Adobe After Effects NULL Pointer Dereference Application Denial of Service (medium 5.5)
- [CVE-2021-40760](https://insights.sbomify.com/CVE-2021-40760/): Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-4076](https://insights.sbomify.com/CVE-2021-4076/): Information disclosure in tang (high 7.5)
- [CVE-2021-40759](https://insights.sbomify.com/CVE-2021-40759/): Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40758](https://insights.sbomify.com/CVE-2021-40758/): Adobe After Effects WAV File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40757](https://insights.sbomify.com/CVE-2021-40757/): Adobe After Effects MXF File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40756](https://insights.sbomify.com/CVE-2021-40756/): Adobe After Effects NULL Pointer Dereference Application Denial of Service (medium 5.5)
- [CVE-2021-40755](https://insights.sbomify.com/CVE-2021-40755/): Adobe After Effects SGI File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40754](https://insights.sbomify.com/CVE-2021-40754/): Adobe After Effects WAV File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40753](https://insights.sbomify.com/CVE-2021-40753/): Adobe After Effects SVG File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40752](https://insights.sbomify.com/CVE-2021-40752/): Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40751](https://insights.sbomify.com/CVE-2021-40751/): Adobe After Effects M4A File Parsing Memory Corruption Arbitrary Code Execution (high 7.8)
- [CVE-2021-40750](https://insights.sbomify.com/CVE-2021-40750/): Adobe Bridge NULL Pointer Dereference could lead to Application denial-of-service (medium 5.5)
- [CVE-2021-4075](https://insights.sbomify.com/CVE-2021-4075/): Server-Side Request Forgery (SSRF) in snipe/snipe-it (low 2.7)
- [CVE-2021-40745](https://insights.sbomify.com/CVE-2021-40745/): Adobe Campaign Path Traversal Leads to Information Exposure (high 7.5)
- [CVE-2021-40742](https://insights.sbomify.com/CVE-2021-40742/): Adobe Audition NULL Pointer Dereference Application denial-of-service (medium 5.5)
- [CVE-2021-40741](https://insights.sbomify.com/CVE-2021-40741/): Adobe Audition Memory Corruption could lead to Application denial-of-service (medium 5.5)
- [CVE-2021-40740](https://insights.sbomify.com/CVE-2021-40740/): Adobe Audition Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-4074](https://insights.sbomify.com/CVE-2021-4074/): WHMCS Bridge <= 6.1 Subscriber+ Stored Cross-Site Scripting (medium 6.4)
- [CVE-2021-40739](https://insights.sbomify.com/CVE-2021-40739/): Adobe Audition Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-40738](https://insights.sbomify.com/CVE-2021-40738/): Adobe Audition WAV file Memory corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-40737](https://insights.sbomify.com/CVE-2021-40737/): Adobe Audition NULL Pointer Dereference Application denial-of-service (medium 5.5)
- [CVE-2021-40736](https://insights.sbomify.com/CVE-2021-40736/): Adobe Audition Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-40735](https://insights.sbomify.com/CVE-2021-40735/): Adobe Audition Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-40734](https://insights.sbomify.com/CVE-2021-40734/): Adobe Audition Memory Corruption could lead to Arbitrary code execution (high 7.8)
- [CVE-2021-40733](https://insights.sbomify.com/CVE-2021-40733/): Adobe Animate Memory Corruption Could Lead To Arbitrary Code Execution (high 7.8)
- [CVE-2021-40732](https://insights.sbomify.com/CVE-2021-40732/): XMP Toolkit SDK Null Pointer Dereference (medium 6.1)
- [CVE-2021-40731](https://insights.sbomify.com/CVE-2021-40731/): Adobe Acrobat Reader DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40730](https://insights.sbomify.com/CVE-2021-40730/): Adobe Acrobat Reader DC JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-4073](https://insights.sbomify.com/CVE-2021-4073/): RegistrationMagic <= 5.0.1.7 Authentication Bypass (critical 9.8)
- [CVE-2021-40729](https://insights.sbomify.com/CVE-2021-40729/): Adobe Acrobat Reader DC PDF Out-of-Bound Read Vulnerability Information Disclosure (low 3.3)
- [CVE-2021-40728](https://insights.sbomify.com/CVE-2021-40728/): Adobe Acrobat Reader DC Use After Free Arbitrary Code Execution (high 7.8)
- [CVE-2021-40727](https://insights.sbomify.com/CVE-2021-40727/): Adobe InDesign crashes when parsing the TIF file (high 7.8)
- [CVE-2021-40726](https://insights.sbomify.com/CVE-2021-40726/): Adobe Acrobat Reader DC AcroForm Field Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40725](https://insights.sbomify.com/CVE-2021-40725/): Adobe Acrobat Reader DC AcroForm listbox Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40724](https://insights.sbomify.com/CVE-2021-40724/): Adobe Acrobat Reader Android Abritrary Code Execution Vulnerability (high 7.8)
- [CVE-2021-40723](https://insights.sbomify.com/CVE-2021-40723/): Acrobat Reader DC Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-40722](https://insights.sbomify.com/CVE-2021-40722/): AEM Forms Improper Restriction of XML External Entity Reference (critical 9.8)
- [CVE-2021-40721](https://insights.sbomify.com/CVE-2021-40721/): Adobe Connect Reflected Cross Site Scripting (medium 6.1)
- [CVE-2021-40720](https://insights.sbomify.com/CVE-2021-40720/): Ops CLI Deserialization of Untrusted Data leads to Abritrary Code Execution (critical 9.8)
- [CVE-2021-4072](https://insights.sbomify.com/CVE-2021-4072/): Cross-site Scripting (XSS) - Stored in elgg/elgg (critical 9.0)
- [CVE-2021-40719](https://insights.sbomify.com/CVE-2021-40719/): Adobe Connect Deserialization of Untrusted Data Remote Code Execution (critical 9.8)
- [CVE-2021-40716](https://insights.sbomify.com/CVE-2021-40716/): XMP Toolkit SDK SVG_Adapter Out-of-bounds Read Information Disclosure (medium 5.5)
- [CVE-2021-40715](https://insights.sbomify.com/CVE-2021-40715/): Adobe Premiere Pro 2021 EXR File Parsing Leads to Memory Corruption (high 7.8)
- [CVE-2021-40714](https://insights.sbomify.com/CVE-2021-40714/): Adobe Experience Manager Reflected Cross Site Scripting via accesskey parameter (medium 6.1)
- [CVE-2021-40713](https://insights.sbomify.com/CVE-2021-40713/): Adobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle Attack (medium 5.9)
- [CVE-2021-40712](https://insights.sbomify.com/CVE-2021-40712/): Adobe Experience Manager Path parameter Improper Input Validation Could Lead To DOS (medium 6.5)
- [CVE-2021-40711](https://insights.sbomify.com/CVE-2021-40711/): Adobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code Execution (medium 5.4)
- [CVE-2021-40710](https://insights.sbomify.com/CVE-2021-40710/): Adobe Premiere Pro 2021 SVG File Parsing Leads to Memory Corruption (high 7.8)
- [CVE-2021-40709](https://insights.sbomify.com/CVE-2021-40709/): Adobe Photoshop Buffer Overflow leads to Arbitrary Code Execution (high 7.8)
- [CVE-2021-40708](https://insights.sbomify.com/CVE-2021-40708/): Adobe Genuine Service Installer Privilege Escalation Vulnerability (high 7.3)
- [CVE-2021-40703](https://insights.sbomify.com/CVE-2021-40703/): Adobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-40702](https://insights.sbomify.com/CVE-2021-40702/): Adobe Premiere Elements psd Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-40701](https://insights.sbomify.com/CVE-2021-40701/): Adobe Premiere Elements m4a Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-40700](https://insights.sbomify.com/CVE-2021-40700/): Adobe Premiere Elements TIFF Memory Corruption Vulnerability Could Lead to Arbitrary Code Execution (high 7.8)
- [CVE-2021-4070](https://insights.sbomify.com/CVE-2021-4070/): Off-by-one Error in v2fly/v2ray-core (medium 5.9)
- [CVE-2021-40699](https://insights.sbomify.com/CVE-2021-40699/): ColdFusion CFIDE Improper Access Control Leads To Privilege Escalation (high 7.4)
- [CVE-2021-40698](https://insights.sbomify.com/CVE-2021-40698/): ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass (high 7.4)
- [CVE-2021-40697](https://insights.sbomify.com/CVE-2021-40697/): Adobe FrameMaker PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2021-40695](https://insights.sbomify.com/CVE-2021-40695/): Moodle Exposure of Sensitive Information to an Unauthorized Actor (medium 4.3)
- [CVE-2021-40694](https://insights.sbomify.com/CVE-2021-40694/): Moodle Improper Encoding or Escaping of Output (medium 4.9)
- [CVE-2021-40693](https://insights.sbomify.com/CVE-2021-40693/): Moodle type juggling vulnerability (medium 6.5)
- [CVE-2021-40692](https://insights.sbomify.com/CVE-2021-40692/): Moodle Incorrect Authorization (medium 4.3)
- [CVE-2021-40691](https://insights.sbomify.com/CVE-2021-40691/): Moodle Improper Authentication (medium 4.3)
- [CVE-2021-40690](https://insights.sbomify.com/CVE-2021-40690/): Bypass of the secureValidation property (high 7.5)
- [CVE-2021-4069](https://insights.sbomify.com/CVE-2021-4069/): Use After Free in vim/vim (high 7.3)
- [CVE-2021-40684](https://insights.sbomify.com/CVE-2021-40684/): Missing authorization in talend:esb runtime (critical 9.1)
- [CVE-2021-40683](https://insights.sbomify.com/CVE-2021-40683/): Privilege escalation in akamai:enterprise application access (high 7.8)
- [CVE-2021-40680](https://insights.sbomify.com/CVE-2021-40680/): Path traversal in articatech:web proxy (high 8.1)
- [CVE-2021-4068](https://insights.sbomify.com/CVE-2021-4068/): Information disclosure in Chrome (medium 6.5)
- [CVE-2021-40678](https://insights.sbomify.com/CVE-2021-40678/): Cross-site scripting in piwigo:piwigo (medium 5.4)
- [CVE-2021-40674](https://insights.sbomify.com/CVE-2021-40674/): SQL injection in wuzhicms:wuzhicms (critical 9.8)
- [CVE-2021-40670](https://insights.sbomify.com/CVE-2021-40670/): SQL injection in wuzhicms:wuzhicms (critical 9.8)
- [CVE-2021-4067](https://insights.sbomify.com/CVE-2021-4067/): Use after free in Chrome (high 8.8)
- [CVE-2021-40669](https://insights.sbomify.com/CVE-2021-40669/): SQL injection in wuzhicms:wuzhicms (critical 9.8)
- [CVE-2021-40668](https://insights.sbomify.com/CVE-2021-40668/): Path traversal in http file server project:http file server (high 8.1)
- [CVE-2021-40663](https://insights.sbomify.com/CVE-2021-40663/): Prototype Pollution in deep.assign (critical 9.8)
- [CVE-2021-40662](https://insights.sbomify.com/CVE-2021-40662/): Cross-site request forgery in chamilo:chamilo (high 8.8)
- [CVE-2021-40661](https://insights.sbomify.com/CVE-2021-40661/): Path traversal in mt:ind780 firmware (high 7.5)
- [CVE-2021-40660](https://insights.sbomify.com/CVE-2021-40660/): Regular expression denial of service in Delight Nashorn Sandbox (high 7.5)
- [CVE-2021-4066](https://insights.sbomify.com/CVE-2021-4066/): Integer overflow in Chrome (high 8.8)
- [CVE-2021-40658](https://insights.sbomify.com/CVE-2021-40658/): Cross-site scripting in textpattern:textpattern (medium 4.8)
- [CVE-2021-40656](https://insights.sbomify.com/CVE-2021-40656/): Memory corruption in libsixel:libsixel (high 8.8)
- [CVE-2021-40655](https://insights.sbomify.com/CVE-2021-40655/): D-Link DIR-605 Router Information Disclosure (high 7.5, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/95/