CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The password for the...9.8 Critical
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Two unauthenticated...9.8 Critical
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A world writable file...7.8 High
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Multiple functions in...9.8 Critical
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vim7.3 High
- opendesign drawings explorerAn out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance ...7.8 High
- opendesign drawings sdkA use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance...7.8 High
- opendesign prc sdkAn out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC...7.8 High
- opendesign drawings sdkAn out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance...7.8 High
- opendesign drawings sdkAn out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance...7.8 High
- m-files webM-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP...7.5 High
encodingcrates.io`encoding` is unmaintainedNo score- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreCross-Site Request Forgery (CSRF) in firefly-iii/firefly-iii4.3 Medium
openexrOSS-FuzzHeap-buffer-overflow in uncompress_b44_implNo scorec-blosc2OSS-FuzzUNKNOWN READ in ndlz4_decompressNo scoreopen62541OSS-FuzzUNKNOWN READ in UA_Server_initNS0No scoreunicornOSS-FuzzUNKNOWN WRITE in cpu_arm_exec_armNo scorelibjxlOSS-FuzzContainer-overflow in void jxl::CopyImageTo<int>No score- hashicorp nomadImproper Authentication in HashiCorp Nomad8.8 High
- chamilo lmsA stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web...4.8 Medium
- chamilo lmsChamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main...9.8 Critical
- chamilo lmsA remote code execution (RCE) vulnerability in course_intro_pdf_import.php of Chamilo LMS v1.11.x...8.8 High
- ajaxpro.2 project ajaxpro.2, ajax.net professional professional, michaelschwarz ajax.net professional +2 moreDeserialization of Untrusted Data8.1 High
- tiny pluploadArbitrary File Upload4.2 Medium
- tsmuxer project tsmuxertsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function...9.8 Critical
- tsmuxer project tsmuxertsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function...9.8 Critical
- yejiao tuzicmsSQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameter in App\Manage...9.8 Critical
- yejiao tuzicmsSQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\Manage\Controller...9.8 Critical
- yejiao tuzicmsSQL Injection vulnerability exists in TuziCMS v2.0.6 in App\Manage\Controller\GuestbookController...9.8 Critical
- tendacn ac15 firmwareA Stack-based Buffer Overflow vlnerability exists in the Tenda AC15 V15.03.05.18_multi device via...9.8 Critical
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter...5.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the...4.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a...5.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application...2.7 Low
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability...6.1 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords...5.9 Medium
- elgg, elgg elgg/elgg +1 moreExposure of Private Personal Information to an Unauthorized Actor in elgg/elgg5.3 Medium
- kentico xperience, xperience xms +1 morePersistent XSS via Avatar Upload in Kentico Xperience CMS6.8 Medium
- swoole php frameworkPath manipulation in matyhtf/framework9.8 Critical
- librenmsPath traversal in librenms/librenms9.8 Critical
- thinkupapp thinkup** UNSUPPORTED WHEN ASSIGNED ** ThinkUp 2.0-beta.10 is affected by a path manipulation...9.8 Critical
- dzzofficedzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in...6.1 Medium
- trend micro apex oneA reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the...5.5 Medium
- trend micro worry-free business security, trend micro, inc. micro worry-free business security +1 moreAn unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could...7.8 High
- trend micro worry-free business security, trend micro, inc. micro worry-free business security +1 moreAn unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could...7.8 High
- trend micro worry-free business security, trend micro, inc. micro worry-free business security +1 moreAn unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could...7.8 High
- trend micro security 2021 (consumer), trendmicro antivirus\+ security, internet security +2 more +4 moreTrend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the...5.5 Medium
- showdoc, star7th star7th/showdoc +1 moreOpen Redirect in star7th/showdoc6.5 Medium
aaa_baseSUSESecurity update for aaa_baseNo score- Show moreLoading…