CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
aaa_baseopenSUSESecurity update for aaa_baseNo scoreassimpOSS-FuzzHeap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<chNo score- taogogo taocmsTaocms v2.5Beta5 was discovered to contain a cross-site scripting (XSS) vulnerability via the...4.8 Medium
- taogogo taocmsTaocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function...7.2 High
- taogogo taocmsTaocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function...7.2 High
- zblogcn z-blogphpZ-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via ...9.1 Critical
- zblogcn z-blogphpAn arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute...7.8 High
- gnu libredwgLibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.9.8 Critical
- gnu libredwgLibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.7.5 High
- renesas rx65 firmware, rx65n firmware +1 moreAn issue was discovered on Renesas RX65 and RX65N devices. With a VCC glitch, an attacker can...4.6 Medium
- hitachi energy fox61x, xcm20, hitachienergy fox615 firmware +1 more +3 moreWeak default credential associated with TCP port 269.0 Critical
- hitachi energy fox61x, xcm20, hitachienergy fox615 firmware +1 more +3 moreSSH activation problem in the proprietary management protocol (port TCP 5558)8.6 High
- broadcom ca network flow analysisCA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the...6.5 Medium
- line armeriaImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeria7.5 High
- cbads clickbank affiliate adsClickBank Affiliate Ads <= 1.20 - Admin+ Stored Cross-Site Scripting4.8 Medium
- cbads clickbank affiliate adsClickBank Affiliate Ads <= 1.20 - CSRF to Stored Cross-Site Scripting9.6 Critical
- digipas egeetouch managerAn issue was discovered in the eGeeTouch 3rd Generation Travel Padlock application for Android....6.8 Medium
- bookstackapp bookstack, bookstackapp/bookstack +1 moreCross-Site Request Forgery (CSRF) in bookstackapp/bookstack3.1 Low
- crafter software cms, craftercms crafter cms +1 moreTransmission of Private Resources into a New Sphere ('Resource Leak') and Exposure of Resource to Wrong Sphere in Crafter Search8.1 High
- crafter software cms, craftercms crafter cms +1 moreTransmission of Private Resources into a New Sphere ('Resource Leak') in Crafter Engine5.9 Medium
- crafter software cms, craftercms crafter cms +1 moreSnakeyaml deserialization vulnerability bypass4.2 Medium
- crafter software cms, craftercms crafter cms +1 moreOverriding the system configuration file causes a denial of service4.5 Medium
- crafter software cms, craftercms crafter cms +1 moreStored XSS Vulnerability in File Name of the File Upload function6.5 Medium
- crafter software cms, craftercms crafter cms +1 moreGroovy Sandbox Bypass4.2 Medium
- crafter software cms, craftercms crafter cms +1 moreSpring SPEL Expression Language Injection4.2 Medium
- shopex ecshopecshop v2.7.3 is affected by a SQL injection vulnerability in shopex\ecshop\upload\api\client\api...9.8 Critical
- thinkphp-bjyblog project thinkphp-bjyblogthinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS)...6.1 Medium
- zerodream sakurapanelSakuraPanel v1.0.1.1 is affected by a Cross Site Scripting (XSS) vulnerability in /master/core...6.1 Medium
- haschek pictsharepictshare v1.5 is affected by a Cross Site Scripting (XSS) vulnerability in api/info.php. The...6.1 Medium
- nzedb project nzedbnZEDb v0.4.20 is affected by a Cross Site Scripting (XSS) vulnerability in www/pages/api.php. The...6.1 Medium
- circutor compact dc-s basic firmwareBuffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC...9.8 Critical
- mahadiscom mahavitaranMahavitaran android application 7.50 and prior transmit sensitive information in URL parameters....5.9 Medium
- gnu mailman, debian linux +1 moreCross Site Request Forgery in mailman8.8 High
- zulipIneffective expiration validation for invitation links in Zulip6.5 Medium
dracoOSS-FuzzGlobal-buffer-overflow in draco::MeshEdgebreakerDecoderImpl<draco::MeshEdgebreakerTraversalValenceDecoder>No score- ruby-lang cgi, fedoraproject fedora +1 moreBuffer overrun in CGI.escape_html9.8 Critical
- aomediaAOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.6.5 Medium
- aomediaAOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86...6.5 Medium
- aomediaAOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder...8.8 High
- aomediaAOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.8.8 High
- aomediaAOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1...6.5 Medium
- aomediaAOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.8.8 High
- pixelite events managerEvents Manager < 5.9.8 - Cross-Site Scripting (XSS)6.1 Medium
- pixelite events managerEvents Manager < 5.9.8 - Admin+ SQL Injection7.2 High
- barracuda network access clientBarracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with...7.8 High
- dlink dir-809 firmwareD-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to...9.8 Critical
- dlink dir-809 firmwareD-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to...9.8 Critical
- dlink dir-809 firmwareD-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to...9.8 Critical
- dlink dir-809 firmwareD-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to...9.8 Critical
- dlink dir-809 firmwareD-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to...9.8 Critical
- Show moreLoading…