CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- veritas enterprise vaultAn issue (3 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the...9.8 Critical
- veritas enterprise vaultAn issue (4 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the...9.8 Critical
- veritas enterprise vaultAn issue (5 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the...9.8 Critical
- veritas enterprise vaultAn issue (6 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the...9.8 Critical
- b2evolution cmsb2evolution CMS v7.2.3 was discovered to contain a SQL injection vulnerability via the parameter...9.8 Critical
- b2evolution cmsb2evolution CMS v7.2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the User...8.8 High
- piwigoPiwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwg_token...8.8 High
- thinkphpDeserialization of Untrusted Data in topthink/framework9.8 Critical
- thinkphpDeserialization of Untrusted Data in topthink/framework9.8 Critical
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreServer-Side Request Forgery (SSRF) in snipe/snipe-it2.7 Low
- squaredupAn SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.9.8 Critical
- requarks wiki, wiki.js +1 moreAsset directory traversal with some storage modules on Windows7.5 High
- inveniosoftware invenio-drafts-resourcesPermissions not properly checked in Invenio-Drafts-Resources6.4 Medium
- distributed data systems webhmi, webhmi firmware +1 moreDistributed Data Systems WebHM9.8 Critical
- distributed data systems webhmi, webhmi firmware +1 moreDistributed Data Systems WebHM10.0 Critical
- gitlabAssuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some...6.2 Medium
- gitlabIt was possible to bypass 2FA for LDAP users and access some specific pages with Basic...3.1 Low
- johnson controls entrapass, johnsoncontrols kantech entrapass +1 moreEntrapass8.3 High
- solarwinds serv-u, serv-u server +1 moreA valid CSRF token is present in response to an invalid request8.3 High
- solarwinds serv-u, serv-u ftp +1 moreBroken Access Control Vulnerability for SolarWinds Serv-U8.4 High
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery by 10Web < 1.5.68 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- roundupwp registrations for the events calendar, unknown registrations for the events calendar – event registration plugin +1 moreRegistrations for the Events Calendar < 2.7.6 - Unauthenticated SQL Injection9.8 Critical
- profilepress loginwp, unknown loginwp (formerly peter's login redirect) +1 moreLoginWP < 3.0.0.5 - Reflected Cross-Site Scripting6.1 Medium
- woocommerce currency switcher, unknown woocs – currency switcher for woocommerce. professional and free multi currency plugin – pay in selected currency +1 moreWooCommerce Currency Switcher < 1.3.7.1 - Reflected Cross-Site Scripting6.1 Medium
- unknown wp google fonts, wp google fonts project google fonts +1 moreWP Google Fonts < 3.1.5 - Reflected Cross-Site Scripting6.1 Medium
- ays-pro secure copy content protection and content lockingSecure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection9.8 Critical
- booking-wp-plugin bookly, ladela wordpress online booking and scheduling plugin – bookly +1 moreBookly < 20.3.1 - Staff Member Stored Cross-Site Scripting5.4 Medium
- email log project log, sudar email log +1 moreEmail Log < 2.4.8 - Reflected Cross-Site Scripting6.1 Medium
- unknown wps hide loginWPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header7.5 High
- tawk tawk.to live chatTawk.to Live Chat < 0.6.0 - Subscriber+ Visitor Monitoring & Chat Removal8.0 High
- passionate programmer peter wp data accessWP Data Access < 5.0.0 - Admin+ SQL Injection9.8 Critical
- pdf.js viewer project viewer, unknown pdf.js viewer +1 morePDF.js Viewer < 2.0.2 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- reputeinfosystems contact form, survey & popup form plugin for wordpress – arforms form builder, contact form\, survey \& popup form plugin for wordpress - arforms form builder +1 moreARForms Form Builder < 1.5 - Admin+ Stored Cross Site Scripting4.8 Medium
- soflyy wp all import, unknown import any xml or csv file to wordpress +1 moreWP All Import < 3.6.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
aaa_baseopenSUSESecurity update for aaa_baseNo scoresambaUbuntusamba regressionsNo scoreclamavSUSESecurity update for clamavNo scoreclamavopenSUSESecurity update for clamavNo score- canon lbp223dw firmwareIn Canon LBP223 printers, the System Manager Mode login does not require an account password or...7.5 High
- vinga wr-n300u firmwareVINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead...8.8 High
gdalOSS-FuzzHeap-buffer-overflow in PCIDSK::CPCIDSKFile::ReadFromFileNo score- debian linux, linuxfoundation runc +1 moreOverflow in netlink bytemsg length field allows attacker to override netlink-based container configuration6.0 Medium
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The SNMP daemon was...9.8 Critical
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could...6.5 Medium
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A buffer overflow...9.8 Critical
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP...8.8 High
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The privileged...8.8 High
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file...6.5 Medium
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The wguest account...8.8 High
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows...7.8 High
- Show moreLoading…