CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- racktables project racktablesCross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to...6.1 Medium
- huawei emui, magic ui +1 moreThere is an Improper permission control vulnerability in Huawei Smartphone.Successful...5.3 Medium
- huawei emui, magic ui +1 moreThere is a Logic bypass vulnerability in Huawei Smartphone.Successful exploitation of this...5.3 Medium
- huawei emui, magic ui +1 moreThere is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, magic ui +1 moreThere is a Memory leak vulnerability with the codec detection module in Huawei Smartphone...7.5 High
- huawei emui, magic ui +1 moreThere is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of...9.1 Critical
- huawei emui, magic ui +1 moreThere is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of...9.1 Critical
- huawei emui, magic ui +1 moreThere is an Improper access control vulnerability in Huawei Smartphone.Successful exploitation of...7.5 High
- mahadiscom mahavitaranAn issue was discovered in Mahavitaran android application 7.50 and below, allows local attackers...4.2 Medium
- adobe bridgeAdobe Bridge RGB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe bridgeAdobe Bridge SGI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe bridgeAdobe Bridge SGI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- ivanti avalancheAn exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an...8.1 High
- ivanti avalancheA command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with...8.8 High
- ivanti avalancheA SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with...8.8 High
- ivanti avalancheA deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 allows...8.8 High
- ivanti avalancheA command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with...8.8 High
- ivanti avalancheAn exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using...9.8 Critical
- ivanti avalancheA deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using...9.8 Critical
- ivanti avalancheAn improper authorization control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an...8.8 High
- ivanti avalancheAn unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an...8.8 High
- ivanti avalancheAn improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an...8.8 High
- citrix application delivery controller firmware, gateway, sd-wan +2 moreAn uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22...7.5 High
- citrix gateway, application delivery controller firmware +1 moreA unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22...7.5 High
- ui unifi switch firmware, ubiquiti inc unifi switches +1 moreA vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious...6.5 Medium
- squaredupA cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2...5.4 Medium
- squaredupAn issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System /...4.9 Medium
- squaredupA DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited,...5.4 Medium
- squaredupA cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2...5.4 Medium
- squaredupA cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows...5.4 Medium
- rusqlite project rusqliteUse After Free in rusqlite7.5 High
- rusqlite project rusqliteUse After Free in rusqlite7.5 High
- rusqlite project rusqliteUse After Free in rusqlite7.5 High
- rusqlite project rusqliteUse After Free in rusqlite7.5 High
- rusqlite project rusqliteUse After Free in rusqlite7.5 High
- rusqlite project rusqliteUse After Free in rusqlite7.5 High
- rusqlite project rusqliteUse After Free in rusqlite7.5 High
- esri arcgis serverBUG-000142180 Hosted feature services vulnerable to stored XSS6.1 Medium
- esri arcgis enterprise, arcgis server +1 moreAn information disclosure vulnerability5.3 Medium
- esri arcgis serverSQL injection vulnerability in ArcGIS Server7.3 High
- esri arcgis serverRemote file inclusion vulnerability in ArcGIS Server help documentation4.7 Medium
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat4.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 morePotential bypass of an upstream access control based on URL paths in Django7.3 High
- tmate tmate-ssh-serverInsecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to...7.0 High
- tmate tmate-ssh-serverWorld-writable permissions on the /tmp/tmate/sessions directory in tmate-ssh-server 2.3.0 allow a...7.0 High
- calibre-ebook calibre, fedoraproject fedora +1 morecalibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular...7.5 High
- git-it project git-itCommand injection in git-it-electron9.8 Critical
- github-todos project github-todosCommand injection in github-todos9.8 Critical
- veritas enterprise vaultAn issue (1 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the...9.8 Critical
- veritas enterprise vaultAn issue (2 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the...9.8 Critical
- Show moreLoading…