CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreType confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to...8.8 High
- fedoraproject fedora, perl comprehensive perl archive network +1 moreCPAN 2.28 allows Signature Verification Bypass.7.8 High
- cpan\ \The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.6.5 Medium
- app\ \, fedoraproject fedora +1 moreThe App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.7.8 High
- we-con levistudiouWECON LeviStudioU7.8 High
- huawei cloudengine 12800 firmware, cloudengine 5800 firmware, cloudengine 6800 firmware +1 more +3 moreThere is a memory leak vulnerability in CloudEngine 12800 V200R019C00SPC800, CloudEngine 5800...7.5 High
- huawei ecns280 td firmwareThere is an information leak vulnerability in eCNS280_TD V100R005C10SPC650. The vulnerability is...6.5 Medium
- abb robotware, omnicore c30 firmware +1 moreOmniCore RobotWare Missing Authentication Vulnerability9.8 Critical
- gitlab, gitlab runner +1 moreAn uncontrolled resource consumption vulnerability in GitLab Runner affecting all versions...6.5 Medium
- gitlabMissing authorization in GitLab EE versions between 12.4 and 14.3.6, between 14.4.0 and 14.4.4,...4.3 Medium
- gitlabAn information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4,...3.7 Low
- gitlab, gitlab community and enterprise editions +1 moreAn issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14...6.8 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14...4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14...4.3 Medium
- gitlabImproper access control allows any project member to retrieve the service desk email address in...4.3 Medium
- gitlabLack of an access control check in the External Status Check feature allowed any authenticated...4.3 Medium
- gitlabIn all versions of GitLab CE/EE starting version 14.0 before 14.3.6, all versions starting from...4.4 Medium
- gitlabImproper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from...5.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14...4.3 Medium
- gitlabA vulnerable regular expression pattern in GitLab CE/EE since version 8.15 before 14.3.6, all...3.1 Low
- gitlabA collision in access memoization logic in all versions of GitLab CE/EE before 14.3.6, all...5.9 Medium
- gitlabImproper access control in GitLab CE/EE affecting all versions starting from 10.7 before 14.3.6,...3.5 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14...3.1 Low
- gitlabImproper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before...2.7 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.0 before 14...7.1 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14...4.3 Medium
- gitlabIncorrect Authorization in GitLab EE affecting all versions starting from 11.1 before 14.3.6, all...3.1 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14...2.6 Low
- phpgurukul employee record management systemDirectory traversal vulnerability in /admin/includes/* directory for PHPGURUKUL Employee Record...7.5 High
- phpgurukul employee record management systemSQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System...9.8 Critical
- fortinet fortiosA Hidden Functionality in Fortinet FortiOS 7.x before 7.0.1, FortiOS 6.4.x before 6.4.7 allows...4.2 Medium
- fastadminfastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution...9.8 Critical
- wp cloud plugins lets-boxreflected XSS in search functionality of WP Cloud Plugins - Lets-Box4.7 Medium
- wp cloud plugins share-one-drivereflected XSS in search functionality of WP Cloud Plugins - Share-one-Drive4.7 Medium
- Show moreLoading…