CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- gryphonconnect gryphon tower firmwareAn unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon...8.8 High
- gryphonconnect gryphon tower firmwareA reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci...6.1 Medium
- gryphonconnect gryphon tower firmwareAn unauthenticated command injection vulnerability exists in the parameters of operation 41 in...8.8 High
- gryphonconnect gryphon tower firmwareAn unauthenticated command injection vulnerability exists in the parameters of operation 32 in...8.8 High
- gryphonconnect gryphon tower firmwareAn unauthenticated command injection vulnerability exists in the parameters of operation 10 in...8.8 High
- globaldatingsoftware premiumdatingscriptAn Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password...9.8 Critical
- gryphonconnect gryphon tower firmwareAn unprotected ssh private key exists on the Gryphon devices which could be used to achieve root...9.8 Critical
- gryphonconnect gryphon tower firmwareGryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers...7.5 High
- gryphonconnect gryphon tower firmwareAn unauthenticated command injection vulnerability exists in the parameters of operation 49 in...8.8 High
- gryphonconnect gryphon tower firmwareAn unauthenticated command injection vulnerability exists in the parameters of operation 48 in...8.8 High
- netgear rax35 firmware, rax38 firmware, rax40 firmware +2 moreA path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0...7.1 High
- wbce cms, wbce/wbce cms +1 moreSQL Injection in wbce/wbce_cms9.8 Critical
- fortinet fortiauthenticatorA improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the...5.4 Medium
- fortinet forticlient, forticlientwindows +1 moreAn improper authorization vulnerabiltiy [CWE-285] in FortiClient Windows versions 7.0.0 and 6.4.6...4.3 Medium
- fortinet meru ap, meru firmware +1 moreA violation of secure design principles in Fortinet Meru AP version 8.6.1 and below, version 8.5...6.7 Medium
- fortinet fortiwebA heap-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and...8.8 High
- fortinet fortinacA incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to…7.8 High
- fortinet forticlientems, forticlient enterprise management server +1 moreA missing encryption of sensitive data in Fortinet FortiClientEMS version 7.0.1 and below,...6.8 Medium
- fortinet forticlient, forticlientwindows +1 moreA improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4...4.4 Medium
- apache airavata django portalairavata-django-portal allows CRLF log injection because of the lack of escaping in the log statements5.3 Medium
- fortinet fortiwebMultiple stack-based buffer overflows in the API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0...8.8 High
- netty, debian linux, netapp oncommand workflow automation +15 more +17 moreHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Medium
- amazon sockeyeCode injection via unsafe YAML loading7.8 High
- dreamreport remote connectorA privilege escalation vulnerability exists in the Remote Server functionality of Dream Report...8.8 High
- anker eufy homebase 2 firmwareAn out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST...10.0 Critical
- anker eufy homebase 2 firmwareAn out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST...10.0 Critical
- lapack project lapack, openblas project openblas, fedoraproject fedora +5 more +7 moreAn out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in...9.1 Critical
- mozilla thunderbird, debian linux +1 moreThunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution...6.5 Medium
- mozilla firefoxA Universal XSS vulnerability was present in Firefox for Android resulting from improper...6.1 Medium
- mozilla firefoxWhen a user loaded a Web Extensions context menu, the Web Extension could access the post...4.3 Medium
- mozilla firefoxThe 'Copy Image Link' context menu action would copy the final image URL after redirects. By...6.1 Medium
- mozilla firefoxWhen parsing internationalized domain names, high bits of the characters in the URLs were...4.3 Medium
- mozilla firefoxWhen receiving a URL through a SEND intent, Firefox would have searched for the text, but...6.1 Medium
- bosch bvms, vjd-7513, vjd-8000 +8 more +10 moreAuthenticated Remote Code Execution7.2 High
- bosch bvms, vrm, video management system +4 more +6 morePossible Access to Debug Functions in Bosch VRM / BVMS6.5 Medium
- bosch bvms, vrm, video management system +4 more +6 moreReflected Cross Site Scripting (XSS) vulnerability in Bosch VRM / BVMS5.0 Medium
- bosch bvms, vrm, access easy controller firmware +12 more +14 moreDenial of Service and Authentication Bypass Vulnerability in multiple Bosch products9.1 Critical
- elastic apm java agent, apm agent +1 moreAPM Java Agent Local Privilege Escalation7.8 High
libsndfileMageiaUpdated libsndfile packages fix security vulnerability rhbz#2027690No scoremono-toolsMageia,sharpziplibMageia +1 moreUpdated sharpziplib/mono-tools packages fix security vulnerabilityNo score- debian linux, f5 nginx, fedoraproject fedora +2 more +4 moreALPACA is an application layer protocol content confusion attack, exploiting TLS servers...7.4 High
- synel eharmonynew, eharmonynew, synel reports, reports +2 moreSYNEL - eharmonynew / Synel Reports version 8.0.2 Default credentials , Security miscommunication , Sensetive data exposure6.1 Medium
- cybonet mail secure, pineapp - mail secure +1 moreCybonet - PineApp8.8 High
- cybonet pineapp - mail secure, pineapp mail secure +1 moreCybonet - PineApp6.1 Medium
- fortinet fortiwebMultiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1...8.8 High
- bundler, rubygems +1 moreLocal Code Execution through Argument Injection via dash leading git url parameter in Gemfile6.7 Medium
- fortinet fortiwebMultiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4...7.3 High
- fortinet fortiosA heap-based buffer overflow in the firmware signature verification function of FortiOS versions...8.0 High
- mahadiscom mahavitaranMahavitaran android application 7.50 and prior are affected by account takeover due to improper...9.8 Critical
- yubico yubihsm 2 software development kitThe Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not...7.5 High
- Show moreLoading…