CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- synacor zimbra collaboration suiteAn issue in /domain/service/.ewell-known/caldav of Zimbra Collaboration 8.8.12 allows attackers...6.1 Medium
- synacor zimbra collaboration suiteA reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp...6.1 Medium
- thinkphpThinkPHP5 SQL Injection vulnerability9.8 Critical
- anchorcms anchor cmsCross-site Scripting in Anchor CMS6.1 Medium
- suluPHP file inclusion in the Sulu admin panel8.5 High
- suluPrivilege escalation in the Sulu Admin panel7.2 High
- gradio-app gradioFiles on the host computer can be accessed from the Gradio interface7.7 High
- thrukThruk 2.40-2 allows stored XSS.5.4 Medium
- enalean tuleapSQL injection in Tuleap8.8 High
- gnu binutils, debian linux, fedoraproject fedora +2 more +4 morestab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a...7.8 High
- enalean tuleapIndirect LDAP injection in Tuleap6.7 Medium
- enalean tuleapIndirect LDAP injection in Tuleap6.7 Medium
- blocksera image hover effects, biplob adhikari image hover effects ultimate (wordpress plugin) +1 moreWordPress Image Hover Effects Ultimate plugin <= 9.6.1 - Unauthenticated Arbitrary Options Update leading to full website compromise9.8 Critical
- google androidIn UserDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking...5.5 Medium
- google androidIn onCreate of BluetoothPairingSelectionFragment.java, there is a possible EoP due to a...7.8 High
- google androidIn NotificationAccessActivity of AndroidManifest.xml, there is a possible EoP due to a tapjacking...7.8 High
- google androidIn (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing...7.8 High
- google androidIn createAdminSupportIntent of DevicePolicyManagerService.java, there is a possible way to...3.3 Low
- google androidIn enqueueNotificationInternal of NotificationManagerService.java, there is a possible way to run...7.8 High
- baxter welch allyn connex cardio, welch allyn diagnostic cardiology suite, welch allyn hscribe holter analysis system firmware +9 more +11 moreICSMA-21-343-01 Hillrom Welch Allyn Cardio Products8.1 High
- anonaddyA Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.9.8 Critical
- bookstackapp bookstack, bookstackapp/bookstack +1 moreImproper Access Control in bookstackapp/bookstack5.3 Medium
- ibm power system s821lc server (8001-12c), power hardware management console \(7063-cr1\) firmware, power system cs821lc \(8005-12n\) firmware +3 more +5 moreBMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow...5.3 Medium
- fatpipe ipvpn, mpvpn, warp +3 more +5 moreMissing authorization vulnerability in FatPipe software8.8 High
- fatpipe ipvpn, mpvpn, warp +3 more +5 moreMissing authorization vulnerability in FatPipe software5.3 Medium
- fatpipe ipvpn, mpvpn, warp +3 more +5 moreFatPipe software allows unauthenticated configuration download7.5 High
- fatpipe ipvpn, mpvpn, warp +3 more +5 moreFatPipe software administrative account with no password9.8 Critical
- fatpipe ipvpn, mpvpn, warp +3 more +5 moreFatPipe software allows privilege escalation8.8 High
- golang go, debian linux +1 moreGo before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file...4.8 Medium
- golang go, debian linux, netapp cloud insights telegraf +2 moregolang.org/x/net/http2 allows uncontrolled memory consumption7.5 High
- online pre-owned\/used car showroom management system project pre-owned\/used car showroom management systemOnline Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication...9.8 Critical
- oretnom23 online magazine management systemOnline Magazine Management System 1.0 contains a SQL injection authentication bypass...9.8 Critical
- lycheeorg lycheeLychee-v3 3.2.16 is affected by a Cross Site Scripting (XSS) vulnerability in php/Access/Guest...6.1 Medium
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreBusiness Logic Errors in yetiforcecompany/yetiforcecrm7.7 High
- teeworlds, fedoraproject fedora +1 moreTeeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not...7.8 High
- stackstormIn StackStorm versions prior to 3.6.0, the jinja interpreter was not run in sandbox mode and thus...8.8 High
- microsoft visual studio codeVisual Studio Code Spoofing Vulnerability4.3 Medium
- microsoft visual studio code wsl extension, windows subsystem for linux +1 moreVisual Studio Code WSL Extension Remote Code Execution Vulnerability9.8 Critical
- microsoft office app, 365 copilot +1 moreMicrosoft Office app Remote Code Execution Vulnerability9.6 Critical
- microsoft 4k wireless display adapter, wireless display adapter firmware +1 moreMicrosoft 4K Wireless Display Adapter Remote Code Execution Vulnerability9.8 Critical
- microsoft powershell, cbl mariner 1.0 arm, cbl mariner 1.0 x64 +3 more +5 moreMicrosoft PowerShell Spoofing Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Encrypting File System (EFS) Elevation of Privilege Vulnerability7.5 High
- microsoft biztalk esb toolkit, biztalk esb toolkit 2.2, biztalk esb toolkit 2.3 +1 more +3 moreMicrosoft BizTalk ESB Toolkit Spoofing Vulnerability7.4 High
- microsoft visual studio codeVisual Studio Code Remote Code Execution Vulnerability7.8 High
- microsoft app installer, windows +1 moreWindows AppX Installer Spoofing Vulnerability7.1 High
- microsoft defender for iotMicrosoft Defender for IoT Remote Code Execution Vulnerability7.2 High
- microsoft defender for iotMicrosoft Defender for IoT Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows Installer Elevation of Privilege Vulnerability7.8 High
- microsoft defender for iotMicrosoft Defender for IoT Remote Code Execution Vulnerability9.0 Critical
- microsoft windows 11 version 21h2, windows 11 +1 moreWindows Mobile Device Management Elevation of Privilege Vulnerability5.5 Medium
- Show moreLoading…