CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- elecom edwrc-2533gst2 firmware, wrc-1167gst2 firmware, wrc-1167gst2a firmware +12 more +14 moreOS command injection vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC...8.0 High
- elecom edwrc-2533gst2 firmware, wrc-1167gst2 firmware, wrc-1167gst2a firmware +12 more +14 moreImproper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior,...4.3 Medium
- elecom edwrc-2533gst2 firmware, wrc-1167gst2 firmware, wrc-1167gst2a firmware +12 more +14 moreImproper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and...8.8 High
- elecom edwrc-2533gst2 firmware, wrc-1167gst2 firmware, wrc-1167gst2a firmware +12 more +14 moreCross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1...8.8 High
- elecom edwrc-2533gst2 firmware, wrc-1167gst2 firmware, wrc-1167gst2a firmware +12 more +14 moreELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior...8.0 High
- elecom wrc-2533ghbk-i firmware, elecom co.,ltd. lan router +1 moreCross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior...5.4 Medium
- elecom wrc-2533ghbk-i firmware, elecom co.,ltd. lan router +1 moreCross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior...5.4 Medium
- elecom wrh-733gbk firmware, wrh-733gwh firmware, elecom co.,ltd. lan routers +2 moreCross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior...5.4 Medium
- elecom wrh-733gbk firmware, wrh-733gwh firmware, elecom co.,ltd. lan routers +2 moreCross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior...5.4 Medium
- elecom wrh-733gbk firmware, wrh-733gwh firmware, elecom co.,ltd. lan routers +2 moreELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and...6.8 Medium
- elecom wrh-733gbk firmware, wrh-733gwh firmware, elecom co.,ltd. lan routers +2 moreELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and...6.8 Medium
- elecom wrh-733gbk firmware, wrh-733gwh firmware, elecom co.,ltd. lan routers +2 moreBuffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and...6.8 Medium
- aftab muni browser and operating system finder, browser and operating system finder project and operating system finder +1 moreCross-site request forgery (CSRF) vulnerability in Browser and Operating System Finder versions...8.8 High
- ntt docomo, inc. wi-fi station sh-52a, nttdocomo wi-fi station sh-52a firmware +1 moreCross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K,...6.1 Medium
- sun ehrdSunnet eHRD - Insecure Deserialization8.8 High
- sun ehrdSunnet eHRD - Broken Access Control8.8 High
- sun ehrdSunnet eHRD - Path Traversal7.5 High
- jamfAn issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted...8.8 High
espeak-ngOSS-FuzzStack-buffer-overflow in MatchRuleNo score- mozilla nss, nss esr, netapp cloud backup +7 more +9 moreNSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap...9.8 Critical
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number...7.5 High
- vim, vim vim/vim, debian linux +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.1 High
- vim, vim vim/vim, debian linux +1 more +3 moreHeap-based Buffer Overflow in vim/vim7.3 High
- google androidIn ufshcd_eh_device_reset_handler of ufshcd.c, there is a possible out of bounds read due to a...4.4 Medium
- google androidIn __configfs_open_file of file.c, there is a possible use-after-free due to improper locking....6.7 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A9.8 Critical
- google androidIn sec_ts_parsing_cmds of (TBD), there is a possible out of bounds write due to an incorrect...6.7 Medium
- google androidIn TBD of TBD, there is a possible way to access PIN protected settings bypassing PIN...7.8 High
- google androidIn (TBD) of (TBD), there is a possible out of bounds write due to a missing bounds check. This...6.7 Medium
- google androidIn regmap_exit of regmap.c, there is a possible use-after-free due to improper locking. This...6.7 Medium
- google androidIn gadget_dev_desc_UDC_show of configfs.c, there is a possible disclosure of kernel heap memory...4.1 Medium
- google androidIn mon_smc_load_sp of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc_booting.S, there is a...4.4 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A7.5 High
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A9.8 Critical
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A9.8 Critical
- google androidIn ic_startRetrieveEntryValue of acropora/app/identity/ic.c, there is a possible bypass of...6.7 Medium
- google androidIn synchronous_process_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to...6.4 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A9.8 Critical
- google androidIn __dwc3_gadget_ep0_queue of ep0.c, there is a possible out of bounds write due to improper...7.8 High
- google androidIn TBD of fvp.c, there is a possible way to glitch CPU behavior due to a missing permission check...6.8 Medium
- google androidIn periodic_io_work_func of lwis_periodic_io.c, there is a possible out of bounds write due to a...6.7 Medium
- google androidIn CreateDeviceInfo of trusty_remote_provisioning_context.cpp, there is a possible out of bounds...4.4 Medium
- google androidIn do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel...4.4 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +208 more +210 morePossible use after free when process shell memory is freed using IOCTL call and process...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, aqt1000 firmware +172 more +174 morePossible assertion in QOS request due to improper validation when multiple add or update request...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +59 more +61 morePossible out of bound access due to improper validation of item size and DIAG memory pools data...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, aqt1000 firmware +103 more +105 moreImproper validation of a socket state when socket events are being sent to clients can lead to...8.4 High
- google androidIn valid_ipc_dram_addr of cm_access_control.c, there is a possible out of bounds read due to an...4.4 Medium
- google androidIn lwis_dpm_update_clock of lwis_device_dpm.c, there is a possible out of bounds read due to an...4.4 Medium
- google androidIn getLine1NumberForDisplay of PhoneInterfaceManager.java, there is apossible way to determine...3.3 Low
- Show moreLoading…