CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- allegroAllegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary...7.1 High
- fortinet fortiwebMultiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6...4.2 Medium
drupal/webformPackagistAccess Bypass: This module enables you to build forms and surveys in Drupal. The module doesn't sufficiently check access for administrative features for webforms attached to nodes using the Webform N…No score- fortinet forticlient enterprise management server, forticlientems +1 moreAn authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7...5.4 Medium
- fortinet fortinacA privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may...7.8 High
- xylem aanderaa geoviewSQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3...9.8 Critical
- fatpipe ipvpn, mpvpn, warp +4 more +6 moreArbitrary file upload vulnerability in FatPipe software9.8 Critical
- grafana agentInstance config inline secret exposure6.5 Medium
- fabiocaccamo fabiocaccamo/utils.js, utils.js project utils.js +1 morePrototype Pollution in fabiocaccamo/utils.js8.0 High
- allegroAn issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1. A standard...7.1 High
- tp-link archer ax10 v1 firmwareAn HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote...7.5 High
- genesys intelligent workload distribution managerA SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution...7.2 High
- genesys intelligent workload distribution managerA SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution...7.2 High
- plex media serverAn issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker (with a...7.0 High
- samsung payImproper export of Android application components vulnerability in Samsung Pay (India only) prior...3.8 Low
- samsung blockchain walletIntent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows...4.0 Medium
- samsung payImproper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior...2.0 Low
- samsung contactsInsecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to...4.0 Medium
- samsung dialer, samsung mobile samsungdialer +1 moreInsecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows...4.0 Medium
- samsung smart capture, samsung mobile capture +1 moreInsecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02...5.3 Medium
- samsung internetInsecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows...4.0 Medium
- samsung internetInsecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior...5.9 Medium
- google android, samsung mobile devices +1 moreAn improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local...4.0 Medium
- google android, samsung mobile devices +1 moreAn improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows...6.4 Medium
- google android, samsung mobile devices +1 moreAn improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows...7.7 High
- google android, samsung mobile devices +1 moreAn improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021...6.4 Medium
- google android, samsung mobile devices +1 moreAn improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreAn improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers...3.3 Low
- google android, samsung mobile devices +1 moreAn improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021...2.4 Low
- google android, samsung mobile devices +1 moreAn improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows...6.1 Medium
- google android, samsung mobile devices +1 moreAn improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows...6.3 Medium
- google android, samsung mobile devices +1 moreAn improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows...5.3 Medium
- huawei emui, harmonyos, magic ui +2 moreThere is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of...5.3 Medium
- huawei emui, harmonyos, magic ui +2 moreThere is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this...8.1 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this...7.4 High
- huawei emui, harmonyos, magic ui +2 moreThere is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this...9.1 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this...6.5 Medium
- huawei emui, harmonyos, magic ui +2 moreThere is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of...7.5 High
- fortinet fortiwebAn improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3...5.3 Medium
- Show moreLoading…