CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- dlink dir-809 firmwareD-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to...9.8 Critical
- dlink dir-809 firmwareD-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to...9.8 Critical
- dlink dir-809 firmwareD-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to...9.8 Critical
glibcMageiaUpdated glibc packages fixes security related bugsNo score- discourseBypass of Poll voting limits in Discourse4.3 Medium
- discourseAnonymous user cache poisoning via development-mode header in Discourse5.3 Medium
- discourseNotifications leak in Discourse4.3 Medium
- phpgurukul hostel management systemCross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) vulnerability exits in hostel...8.8 High
@backstage/plugin-scaffolder-backendnpmRCE vulnerability affecting v1beta3 templates in @backstage/plugin-scaffolder-backendNo scoreezsystems/ezplatform-admin-uiPackagistXSS in richtext custom tag attributes in ezsystems/ezplatform-richtextNo scoreezsystems/ezplatform-richtextPackagistXSS in richtext custom tag attributes in ezsystems/ezplatform-richtextNo score- phpgurukul employee record management systemSQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the...9.8 Critical
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF). This may allow...5.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the...5.9 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow...5.9 Medium
- cloverdxCloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import.7.7 High
- qemu, debian linux, redhat codeready linux builder +7 more +9 moreAn off-by-one error was found in the SCSI device emulation in QEMU. It could occur while...6.5 Medium
- xengrant table v2 status pages may remain accessible after de-allocation (take two) Guest get...7.0 High
- chamilochamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin...6.1 Medium
- amd μprof tool, uprof +1 moreAMD Chipset Driver Information Disclosure Vulnerability9.9 Critical
- mitsubishi electric corporation melipc series mi5122-vw, melsec iq-r series r12ccpu-v, melsec l series l26cpu +121 more +123 moreImproper Input Validation vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware versions "24"...7.5 High
- mitsubishi electric corporation melipc series mi5122-vw, melsec iq-r series r12ccpu-v, melsec l series l26cpu +121 more +123 moreImproper Handling of Length Parameter Inconsistency vulnerability in MELSEC iQ-R Series R00/01...7.5 High
- mitsubishi electric corporation melipc series mi5122-vw, melsec iq-r series r12ccpu-v, melsec l series l26cpu +121 more +123 moreUncontrolled Resource Consumption vulnerability in MELSEC iQ-R Series R00/01/02CPU Firmware...7.5 High
- insulet omnipod insulin management system, omnipod insulin management system firmware +1 moreInsulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to...7.3 High
- wokkalokka wokka watch q50 firmwareWokka Lokka Q50 devices through 2021-11-30 allow remote attackers (who know the SIM phone number...8.1 High
- libretime hvlibretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master...9.8 Critical
- nxp kinetis k82 firmwareNXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other...6.1 Medium
- nxp lpc55s69jbd100 firmware, lpc55s69jbd64 firmware, lpc55s69jev98 firmware +2 moreNXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET...6.1 Medium
- manage project managemanage (last update Oct 24, 2017) is affected by is affected by a Cross Site Scripting (XSS)...6.1 Medium
- ckanCKAN - Stored Cross-Site Scripting (XSS) via SVG File Upload5.4 Medium
- librenmsCross-site Scripting in LibreNMS6.1 Medium
- librenmsCross-site Scripting in LibreNMS6.1 Medium
- attendance management system project management systemattendance management system 1.0 is affected by a SQL injection vulnerability in admin...9.8 Critical
libknet1AlmaLinux,libknet1-compress-bzip2-pluginAlmaLinux,libknet1-compress-lz4-pluginAlmaLinux +10 more +12 morekronosnet bug fix updateNo score- yurunproxy project yurunproxyYurunProxy v0.01 is affected by a Cross Site Scripting (XSS) vulnerability in src/Client.php. The...6.1 Medium
- fortinet forticlient, forticlient enterprise management server, forticlientwindows, forticlientems +2 moreAn unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x...7.8 High
- elgg, elgg elgg/elgg +1 moreAuthorization Bypass Through User-Controlled Key in elgg/elgg4.3 Medium
- kevinpapst kevinpapst/kimai2, kimai2 project kimai2 +1 moreCross-site Scripting (XSS) - Stored in kevinpapst/kimai26.3 Medium
- kevinpapst kevinpapst/kimai2, kimai kimai2 +1 moreCross-site Scripting (XSS) - Stored in kevinpapst/kimai28.0 High
- showdoc, star7th star7th/showdoc +1 moreOpen Redirect in star7th/showdoc6.5 Medium
- showdoc, star7th star7th/showdoc +1 moreUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc6.5 Medium
- kevinpapst kevinpapst/kimai2, kimai2 project kimai2 +1 moreImproper Access Control in kevinpapst/kimai26.5 Medium
- django-helpdesk django-helpdesk/django-helpdesk, django-helpdesk project django-helpdesk +1 moreCross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk8.8 High
- showdoc, star7th star7th/showdoc +1 moreCross-Site Request Forgery (CSRF) in star7th/showdoc4.3 Medium
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii4.3 Medium
- showdoc, star7th star7th/showdoc +1 moreCross-Site Request Forgery (CSRF) in star7th/showdoc7.3 High
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreCross-site Scripting (XSS) - Stored in snipe/snipe-it6.3 Medium
- codesys gitImproper Certificate Validation in CODESYS Git7.4 High
- elecom edwrc-2533gst2 firmware, wrc-1167gst2 firmware, wrc-1167gst2a firmware +12 more +14 moreImproper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior,...8.8 High
- Show moreLoading…