CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
flatbuffersOSS-FuzzHeap-buffer-overflow in flatbuffers::EscapeStringNo scorec-blosc2OSS-FuzzUNKNOWN READ in ndlz8_decompressNo scorekamailioOSS-FuzzHeap-buffer-overflow in find_sdp_line_delimiterNo score- privoxyAn XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode...6.1 Medium
- privoxyA vulnerability was found in Privoxy which was fixed in get_url_spec_param() by freeing memory of...7.5 High
- reprisesoftware reprise license managerAn issue was discovered in /goform/login_process in Reprise RLM 14.2. When an attacker attempts...5.3 Medium
- reprisesoftware reprise license managerAn issue was discovered in Reprise RLM 14.2. Because /goform/change_password_process does not...9.8 Critical
- reprisesoftware reprise license managerAn issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can...7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization...8.8 High
- linux kernel, netapp h300e firmware, h300s firmware +7 more +9 moreAn out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel. Missing...7.1 High
- amazon aws opensearchThe CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file.9.8 Critical
- hashicorp consulHashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has...8.8 High
- zoho desktop central, zohocorp manageengine desktop central +1 moreZoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code...9.8 Critical
c-blosc2OSS-FuzzHeap-buffer-overflow in blosc_dNo scoreunicornOSS-FuzzUNKNOWN READ in helper_uc_tracecodeNo scorephpOSS-FuzzDynamic-stack-buffer-overflow in zend_calc_live_rangesNo score- phpservermon phpservermon/phpservermon, phpservermonitor php server monitor +1 moreCRLF Injection in phpservermon/phpservermon6.3 Medium
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm4.3 Medium
- frentix openolatPath Traversal in some REST methods leading to file upload to arbitrary places8.1 High
- google chrome, debian linux +1 moreOut of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
- google chrome, debian linux +1 moreType confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInteger underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreIncorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote...6.5 Medium
- debian linux, google chrome, fedoraproject fedora +2 moreUse after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who...8.8 High
- amd generic encapsulated software architecture, processors +1 moreImproper handling of pointers in the System Management Mode (SMM) handling code may allow for a...6.7 Medium
- amd epyc™, epyc 7001 firmware, epyc 7232p firmware +103 more +105 moreA malicious hypervisor in conjunction with an unprivileged attacker process inside an SEV/SEV-ES...8.4 High
- grafanaGrafana directory traversal for `.cvs` files4.3 Medium
org.ops4j.pax.logging:pax-logging-log4j2MavenRemote code injection in Log4j (through pax-logging-log4j2)No score- sey project seyPrototype Pollution6.5 Medium
- merge-deep2 project merge-deep2Prototype Pollution6.5 Medium
- simonhaenisch md-to-pdf, markdown to pdf project to pdf +1 moreRemote Code Execution (RCE)9.8 Critical
- c2fo combPrototype Pollution6.5 Medium
- h2database h2XML External Entity (XXE) Injection8.1 High
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreImproper Access Control in snipe/snipe-it4.3 Medium
clamavopenSUSESecurity update for clamavNo score- pluck-cms pluckIn Pluck-4.7.15 admin background a remote command execution vulnerability exists when uploading...8.1 High
- max-3000 maxsite cmsRemote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.9.8 Critical
- Show moreLoading…