CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- siemens teamcenter active workspace v4.3, teamcenter active workspace v5.0, teamcenter active workspace v5.1 +2 more +4 moreA vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.11),...7.2 High
- glfusionglFusion CMS v1.7.9 is affected by an arbitrary user impersonation vulnerability in /public_html...9.1 Critical
- openssl, netapp 500f firmware, a250 firmware +13 more +15 moreInvalid handling of X509_verify_cert() internal errors in libssl7.5 High
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...7.8 High
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...7.8 High
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...7.8 High
- the xorg project xorg-x11-server, debian linux, fedoraproject fedora +1 more +3 moreA flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of...7.8 High
- gnuboard gnuboard/gnuboard5, gnuboard5 +1 moreCross-site Scripting (XSS) - Reflected in gnuboard/gnuboard57.1 High
ghostscriptOSS-FuzzStack-buffer-overflow in pdfi_read_cff_dictNo scoreghostscriptOSS-FuzzGlobal-buffer-overflow in pdfi_fapi_get_glyphNo scoreghostscriptOSS-FuzzHeap-use-after-free in chunk_free_objectNo scoreghostscriptOSS-FuzzGlobal-buffer-overflow in search_table_1No scoreghostscriptOSS-FuzzStack-buffer-underflow in read_xrefNo scoreghostscriptOSS-FuzzStack-buffer-overflow in pdfi_annot_drawNo scoreghostscriptOSS-FuzzSegv on unknown address in cs_adjust_counts_iccNo scoreghostscriptOSS-FuzzSegv on unknown address in chunk_free_objectNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in pdfi_dereferenceNo scoreghostscriptOSS-FuzzUNKNOWN READ in pdfi_open_memory_stream_from_filtered_streamNo scoreghostscriptOSS-FuzzMemcpy-param-overlap in pdfi_set_input_streamNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in pdfi_repair_fileNo scoreghostscriptOSS-FuzzSegv on unknown address in pdfi_dereferenceNo score- siemens modelsim, modelsim simulation, questa +1 more +3 moreA vulnerability has been identified in ModelSim Simulation (All versions), Questa Simulation (All...6.5 Medium
- apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 moreDeserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5 High
- hyperledger besuSHL, SHR, and SAR operations trigger native exception at key values in besu7.5 High
- zzcmsCross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv...6.1 Medium
- facebook hermesA type confusion vulnerability could be triggered when resolving the "typeof" unary operator in...9.8 Critical
sambaUbuntusamba regressionNo score- sourcegraphSide-channel attack in Sourcegraph6.5 Medium
- jackalope jackalope-doctrine-dbal, jackalope doctrine-dbal project doctrine-dbal +1 moreSQL injection in jackalope/jackalope-doctrine-dbal8.5 High
sambaUbuntusamba regressionNo score- collabora onlineReflected Cross-Site-Scripting vulnerability in Collabora Online8.2 High
- rizinHeap-based OOB write when parsing dwarf DIE info in Rizin7.7 High
- mercurius-js mercuriusUncaught Exception in mercurius7.5 High
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS)...6.5 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery ...4.2 Medium
- ibm i2 analyst's notebook, i2 analysts notebook +1 moreIBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow,...5.3 Medium
- ibm i2 analyst's notebook, i2 analysts notebook +1 moreIBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow,...5.3 Medium
- ibm spectrum protect, spectrum protect backup-archive client, spectrum protect for space management +2 moreIBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by...6.2 Medium
- ibm spectrum protect operations centerIBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local...5.1 Medium
- ibm spectrum protect plusThe IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum...6.8 Medium
- blackberry qnx software development platform (sdp), qnx software development platform +1 moreA remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4...9.8 Critical
- lxml, debian linux, fedoraproject fedora +8 more +10 moreHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 High
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute...8.1 High
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules...5.9 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic...5.9 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the...5.4 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain...5.9 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the...5.6 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic...5.9 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed...6.5 Medium
- Show moreLoading…