# Vulnerabilities published in 2021


- [CVE-2021-40498](https://insights.sbomify.com/CVE-2021-40498/): Denial of service in SAP SuccessFactors Mobile Application (for Android devices) (medium 5.5)
- [CVE-2021-40497](https://insights.sbomify.com/CVE-2021-40497/): Information disclosure in SAP BusinessObjects Analysis, (edition for OLAP) (medium 5.3)
- [CVE-2021-40496](https://insights.sbomify.com/CVE-2021-40496/): Information disclosure in SAP NetWeaver AS ABAP and ABAP Platform (medium 4.3)
- [CVE-2021-40495](https://insights.sbomify.com/CVE-2021-40495/): Denial of service in SAP NetWeaver AS ABAP and ABAP Platform (medium 5.3)
- [CVE-2021-40494](https://insights.sbomify.com/CVE-2021-40494/): AdaptiveScale LXDUI Hardcoded JWT Secret Key (critical 9.8)
- [CVE-2021-40493](https://insights.sbomify.com/CVE-2021-40493/): SQL injection in zohocorp:manageengine opmanager (critical 9.8)
- [CVE-2021-40492](https://insights.sbomify.com/CVE-2021-40492/): Cross-site scripting in gibbonedu:gibbon (medium 6.1)
- [CVE-2021-40491](https://insights.sbomify.com/CVE-2021-40491/): Server-side request forgery in debian:debian linux (medium 6.5)
- [CVE-2021-40490](https://insights.sbomify.com/CVE-2021-40490/): Race condition in debian:debian linux (high 7.0)
- [CVE-2021-4049](https://insights.sbomify.com/CVE-2021-4049/): Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat (medium 4.3)
- [CVE-2021-40489](https://insights.sbomify.com/CVE-2021-40489/): Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-40488](https://insights.sbomify.com/CVE-2021-40488/): Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-40487](https://insights.sbomify.com/CVE-2021-40487/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.1)
- [CVE-2021-40486](https://insights.sbomify.com/CVE-2021-40486/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40485](https://insights.sbomify.com/CVE-2021-40485/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40484](https://insights.sbomify.com/CVE-2021-40484/): Microsoft SharePoint Server Spoofing Vulnerability (high 7.6)
- [CVE-2021-40483](https://insights.sbomify.com/CVE-2021-40483/): Microsoft SharePoint Server Spoofing Vulnerability (high 7.6)
- [CVE-2021-40482](https://insights.sbomify.com/CVE-2021-40482/): Microsoft SharePoint Server Information Disclosure Vulnerability (medium 5.3)
- [CVE-2021-40481](https://insights.sbomify.com/CVE-2021-40481/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.1)
- [CVE-2021-40480](https://insights.sbomify.com/CVE-2021-40480/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-4048](https://insights.sbomify.com/CVE-2021-4048/): Memory corruption in lapack (critical 9.1)
- [CVE-2021-40479](https://insights.sbomify.com/CVE-2021-40479/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40478](https://insights.sbomify.com/CVE-2021-40478/): Storage Spaces Controller Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-40477](https://insights.sbomify.com/CVE-2021-40477/): Windows Event Tracing Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-40476](https://insights.sbomify.com/CVE-2021-40476/): Windows AppContainer Elevation Of Privilege Vulnerability (high 7.5)
- [CVE-2021-40475](https://insights.sbomify.com/CVE-2021-40475/): Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-40474](https://insights.sbomify.com/CVE-2021-40474/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40473](https://insights.sbomify.com/CVE-2021-40473/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40472](https://insights.sbomify.com/CVE-2021-40472/): Microsoft Excel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-40471](https://insights.sbomify.com/CVE-2021-40471/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40470](https://insights.sbomify.com/CVE-2021-40470/): DirectX Graphics Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-4047](https://insights.sbomify.com/CVE-2021-4047/): Other in OpenShift (high 7.5)
- [CVE-2021-40469](https://insights.sbomify.com/CVE-2021-40469/): Windows DNS Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2021-40468](https://insights.sbomify.com/CVE-2021-40468/): Windows Bind Filter Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-40467](https://insights.sbomify.com/CVE-2021-40467/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-40466](https://insights.sbomify.com/CVE-2021-40466/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-40465](https://insights.sbomify.com/CVE-2021-40465/): Windows Text Shaping Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40464](https://insights.sbomify.com/CVE-2021-40464/): Windows Nearby Sharing Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2021-40463](https://insights.sbomify.com/CVE-2021-40463/): Windows Network Address Translation (NAT) Denial of Service Vulnerability (high 7.7)
- [CVE-2021-40462](https://insights.sbomify.com/CVE-2021-40462/): Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40461](https://insights.sbomify.com/CVE-2021-40461/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.0)
- [CVE-2021-40460](https://insights.sbomify.com/CVE-2021-40460/): Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2021-4046](https://insights.sbomify.com/CVE-2021-4046/): TCMAN GIM Cross-Site Scripting (XSS) (medium 5.4)
- [CVE-2021-40457](https://insights.sbomify.com/CVE-2021-40457/): Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability (high 7.4)
- [CVE-2021-40456](https://insights.sbomify.com/CVE-2021-40456/): Windows AD FS Security Feature Bypass Vulnerability (medium 5.3)
- [CVE-2021-40455](https://insights.sbomify.com/CVE-2021-40455/): Windows Installer Spoofing Vulnerability (medium 5.5)
- [CVE-2021-40454](https://insights.sbomify.com/CVE-2021-40454/): Rich Text Edit Control Information Disclosure Vulnerability (medium 5.5)
- [CVE-2021-40453](https://insights.sbomify.com/CVE-2021-40453/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40452](https://insights.sbomify.com/CVE-2021-40452/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40450](https://insights.sbomify.com/CVE-2021-40450/): Microsoft Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-4045](https://insights.sbomify.com/CVE-2021-4045/): TP-LINK Tapo C200 remote code execution vulnerability (critical 9.8)
- [CVE-2021-40449](https://insights.sbomify.com/CVE-2021-40449/): Microsoft Windows Win32k Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-40448](https://insights.sbomify.com/CVE-2021-40448/): Microsoft Accessibility Insights for Android Information Disclosure Vulnerability (medium 6.3)
- [CVE-2021-40447](https://insights.sbomify.com/CVE-2021-40447/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-40444](https://insights.sbomify.com/CVE-2021-40444/): Microsoft MSHTML Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2021-40443](https://insights.sbomify.com/CVE-2021-40443/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-40442](https://insights.sbomify.com/CVE-2021-40442/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2021-40441](https://insights.sbomify.com/CVE-2021-40441/): Windows Media Center Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2021-40440](https://insights.sbomify.com/CVE-2021-40440/): Microsoft Dynamics Business Central Cross-site Scripting Vulnerability (medium 5.4)
- [CVE-2021-4044](https://insights.sbomify.com/CVE-2021-4044/): Invalid handling of X509_verify_cert() internal errors in libssl (high 7.5)
- [CVE-2021-40439](https://insights.sbomify.com/CVE-2021-40439/): Billion Laughs (medium 6.5)
- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2021-4043](https://insights.sbomify.com/CVE-2021-4043/): NULL Pointer Dereference in gpac/gpac (medium 5.8)
- [CVE-2021-40426](https://insights.sbomify.com/CVE-2021-40426/): Memory corruption in libsox (critical 10.0)
- [CVE-2021-40425](https://insights.sbomify.com/CVE-2021-40425/): Memory corruption in Secure Anywhere (high 7.1)
- [CVE-2021-40424](https://insights.sbomify.com/CVE-2021-40424/): Memory corruption in Secure Anywhere (high 7.1)
- [CVE-2021-40423](https://insights.sbomify.com/CVE-2021-40423/): Denial of service in reolink:rlc-410w firmware (high 7.5)
- [CVE-2021-40422](https://insights.sbomify.com/CVE-2021-40422/): Auth bypass in Swift Sensors Gateway (critical 10.0)
- [CVE-2021-40420](https://insights.sbomify.com/CVE-2021-40420/): Use after free in Foxit (high 8.8)
- [CVE-2021-40419](https://insights.sbomify.com/CVE-2021-40419/): Missing authorization in reolink:rlc-410w firmware (critical 10.0)
- [CVE-2021-40418](https://insights.sbomify.com/CVE-2021-40418/): Memory corruption in Blackmagic Design (critical 9.8)
- [CVE-2021-40417](https://insights.sbomify.com/CVE-2021-40417/): Integer overflow in Blackmagic Design (critical 9.8)
- [CVE-2021-40416](https://insights.sbomify.com/CVE-2021-40416/): Missing authorization in reolink:rlc-410w firmware (high 7.1)
- [CVE-2021-40415](https://insights.sbomify.com/CVE-2021-40415/): Missing authorization in reolink:rlc-410w firmware (high 7.1)
- [CVE-2021-40414](https://insights.sbomify.com/CVE-2021-40414/): Missing authorization in reolink:rlc-410w firmware (high 7.1)
- [CVE-2021-40413](https://insights.sbomify.com/CVE-2021-40413/): Missing authorization in reolink:rlc-410w firmware (high 7.1)
- [CVE-2021-40412](https://insights.sbomify.com/CVE-2021-40412/): Command injection in reolink:rlc-410w firmware (critical 9.1)
- [CVE-2021-40411](https://insights.sbomify.com/CVE-2021-40411/): Command injection in reolink:rlc-410w firmware (critical 9.1)
- [CVE-2021-40410](https://insights.sbomify.com/CVE-2021-40410/): Command injection in reolink:rlc-410w firmware (critical 9.1)
- [CVE-2021-4041](https://insights.sbomify.com/CVE-2021-4041/): ansible-runner vulnerable to shell command injection (high 7.8)
- [CVE-2021-40409](https://insights.sbomify.com/CVE-2021-40409/): Command injection in reolink:rlc-410w firmware (critical 9.1)
- [CVE-2021-40408](https://insights.sbomify.com/CVE-2021-40408/): Command injection in reolink:rlc-410w firmware (critical 9.1)
- [CVE-2021-40407](https://insights.sbomify.com/CVE-2021-40407/): Reolink RLC-410W IP Camera OS Command Injection Vulnerability (critical 9.1, exploited in the wild)
- [CVE-2021-40406](https://insights.sbomify.com/CVE-2021-40406/): Denial of service in reolink:rlc-410w firmware (high 7.5)
- [CVE-2021-40405](https://insights.sbomify.com/CVE-2021-40405/): Denial of service in RLC-410W (high 7.7)
- [CVE-2021-40404](https://insights.sbomify.com/CVE-2021-40404/): Auth bypass in reolink:rlc-410w firmware (medium 5.3)
- [CVE-2021-40403](https://insights.sbomify.com/CVE-2021-40403/): Information disclosure in Gerbv (medium 5.8)
- [CVE-2021-40402](https://insights.sbomify.com/CVE-2021-40402/): Memory corruption in Gerbv (critical 9.3)
- [CVE-2021-40401](https://insights.sbomify.com/CVE-2021-40401/): Use after free in Gerbv (critical 10.0)
- [CVE-2021-40400](https://insights.sbomify.com/CVE-2021-40400/): Memory corruption in Gerbv (critical 9.3)
- [CVE-2021-4040](https://insights.sbomify.com/CVE-2021-4040/): org.apache.activemq:artemis-core-client Vulnerable to Out-of-Bounds Write (medium 5.3)
- [CVE-2021-40399](https://insights.sbomify.com/CVE-2021-40399/): Use after free in WPS Office (high 8.8)
- [CVE-2021-40398](https://insights.sbomify.com/CVE-2021-40398/): Memory corruption in ImageGear (high 8.1)
- [CVE-2021-40397](https://insights.sbomify.com/CVE-2021-40397/): Privilege escalation in advantech:wise-paas\/ota (high 8.8)
- [CVE-2021-40396](https://insights.sbomify.com/CVE-2021-40396/): Privilege escalation in advantech:deviceon\/iservice (high 8.8)
- [CVE-2021-40394](https://insights.sbomify.com/CVE-2021-40394/): Memory corruption in Gerbv (critical 10.0)
- [CVE-2021-40393](https://insights.sbomify.com/CVE-2021-40393/): Memory corruption in Gerbv (critical 10.0)
- [CVE-2021-40392](https://insights.sbomify.com/CVE-2021-40392/): Information disclosure in MXView Series (medium 5.3)
- [CVE-2021-40391](https://insights.sbomify.com/CVE-2021-40391/): Memory corruption in Gerbv (critical 10.0)
- [CVE-2021-40390](https://insights.sbomify.com/CVE-2021-40390/): Hardcoded credentials in MXView Series (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2021/page/97/