CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreFailure to correctly record the location of live pointers across wasm instance calls resulted in...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy misusing a race in our notification code, an attacker could have forcefully hidden the...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUnder certain circumstances, asynchronous functions could have caused a navigation to fail but...6.5 Medium
- admidioCross-site Scripting (XSS) when redirect an url8.8 High
- online enrollment management system project enrollment management systemAuthenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment...7.2 High
- vercel next.jsUnexpected server crash in Next.js7.5 High
- apereo central authentication serviceCross-site Scripting in Apereo CAS6.1 Medium
- owasp modsecurity, debian linux, f5 nginx modsecurity waf +2 more +4 moreModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects...7.5 High
- couchbase sync gatewayAn issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials...8.1 High
- gl-inet gl-ar150 firmwareGL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action...6.1 Medium
- trustedfirmware op-teeAn issue was discovered in Trusted Firmware OP-TEE Trusted OS through 3.15.0. The OPTEE-OS CSU driver for NXP i.MX6UL SoC devices lacks security access configuration for wakeup-related registers, resu…7.8 High
- raspberrypi raspberry pi os liteRaspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not...9.8 Critical
- wso2 identity server, api manager, identity server as key manager +1 more +3 moreIn accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to...6.1 Medium
- trustedfirmware op-teeThe OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/wri…7.1 High
- bkw solar-log 500 firmwareAn issue was discovered in Solar-Log 500 before 2.8.2 Build 52 23.04.2013. In /export.html, email...6.5 Medium
- bkw solar-log 500 firmwareThe web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require...7.5 High
- devise masquerade project masqueradeImproper Privilege Management in devise_masquerade8.1 High
- debug meta data project meta dataThe debug-meta-data plugin 1.1.2 for WordPress allows XSS.5.4 Medium
- accops hyworks windows clientAn Integer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200....8.8 High
- accops hyworks windows clientA Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The...8.8 High
- accops hyworks windows clientAn Integer Overflow exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL...8.8 High
- accops hyworks dvm toolsAn Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 . The...8.8 High
- accops hyworks windows clientA Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The...8.8 High
- accops hyworks dvm toolsAn Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 .The...8.8 High
- accops hyworks dvm toolsA Buffer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105. The IOCTL...8.8 High
- amazon workspacesAmazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the...8.8 High
- amazon workspacesAmazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon...8.8 High
- amzetta zportal dvm toolsAmZetta Amzetta zPortal DVM Tools is affected by Integer Overflow. IOCTL Handler 0x22001B in the...8.8 High
- amzetta zportal windows zclientAmzetta zPortal Windows zClient is affected by Integer Overflow. IOCTL Handler 0x22001B in the...8.8 High
- amzetta zportal dvm toolsAmzetta zPortal DVM Tools is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta...8.8 High
- amzetta zportal windows zclientAmzetta zPortal Windows zClient is affected by Buffer Overflow. IOCTL Handler 0x22001B in the...8.8 High
- donglifyDonglify is affected by Integer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309...8.8 High
- donglifyDonglify is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309...8.8 High
- flexihubFlexiHub For Windows is affected by Integer Overflow. IOCTL Handler 0x22001B in the FlexiHub For...8.8 High
- flexihubFlexiHub For Windows is affected by Buffer Overflow. IOCTL Handler 0x22001B in the FlexiHub For...8.8 High
- eltima usb network gateEltima USB Network Gate is affected by Buffer Overflow. IOCTL Handler 0x22001B in the USB Network...8.8 High
- eltima usb network gateEltima USB Network Gate is affected by Integer Overflow. IOCTL Handler 0x22001B in the USB...8.8 High
- nomachine enterprise clientNoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler 0x22001B in the...8.8 High
- nomachine enterprise clientNoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler 0x22001B in the...8.8 High
- nomachine cloud serverNoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine...8.8 High
- nomachine cloud serverNoMachine Cloud Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine...8.8 High
- nomachine enterprise desktopNoMachine Enterprise Desktop is affected by Integer Overflow. IOCTL Handler 0x22001B in the...8.8 High
- nomachine enterprise desktopNoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the...8.8 High
- nomachine serverNoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server...8.8 High
- nomachine serverNoMachine Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Server...8.8 High
- tp-link archer ax10 firmwareA denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before...7.5 High
- facebook whatsapp business for android, whatsapp for android, whatsapp +1 more +3 moreA missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and...9.8 Critical
- elastic enterprise search, enterprisesearch +1 moreAn information disclosure via GET request server-side request forgery vulnerability was...6.8 Medium
- auerswald compact 5500r firmwareBackdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers...9.8 Critical
- Show moreLoading…