CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- atomixAn issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages.5.9 Medium
- atomixMalicious Atomix node queries expose sensitive information6.5 Medium
- atomixAn issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations.8.1 High
- atomixAn issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node.8.1 High
- atomixAn issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node.7.5 High
- atomixA vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages.6.5 Medium
- atomixAn issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information.7.5 High
- user management system in php stored procedure project management system in php stored procedureCross Site Request Forgery (CSRF) vulnerability in Change-password.php in phpgurukul user...6.5 Medium
- peopledoc vault-cliTemplate injection in vault-cli8.4 High
- pmmp pocketmine-mpPocketMine-MP before 4.0.3 Operator Privilege Escalation via Case Sensitivity4.8 Medium
org.odpi.egeria:egeria-connector-xtdbMavenVulnerable dependency in XTDB connector5.3 Medium- phpgurukul bus pass management systemIn Bus Pass Management System v1.0, parameters 'pagedes' and `About Us` are affected with a...5.4 Medium
- phpgurukul bus pass management systemIn Bus Pass Management System v1.0, Directory Listing/Browsing is enabled on the web server which...7.5 High
- auth0 nextjs-auth0Open redirect in nextjs-auth06.4 Medium
- cbioportal project cbioportalA regular expression denial of service (ReDoS) vulnerability exits in cbioportal 3.6.21 and older...7.5 High
- fortinet forticlient, forticlient endpoint management server, forticlientems, forticlientwindows, forticlientlinux, forticlientmac +2 moreA combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS...8.2 High
- galetteStored Cross-site Scripting in Galette8.1 High
- galetteSQL Injection in Galette8.8 High
- galetteMissing CSRF checks in Galette8.2 High
- jflyfox jfinal cmsJFinal_cms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service.7.5 High
- vehicle service management system project service management systemCross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management...4.8 Medium
- fiberhome aan5506-04-g2g firmware, an5506-01-a firmware, an5506-01-b firmware +3 more +5 moreFiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This...8.8 High
- bitdefender gravityzonePrivilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-10146)7.1 High
- bitdefender gravityzoneServer-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)6.8 Medium
- meetecho janus, meetecho/janus-gateway +1 moreCross-site Scripting (XSS) - Stored in meetecho/janus-gateway8.1 High
seamonkeyopenSUSESecurity update for seamonkeyNo score- f-secure safe, mobile security +1 moreURL Address Bar Spoofing in F-Secure SAFE Browser for iOS4.6 Medium
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat6.5 Medium
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm6.4 Medium
- wisc htcondorAn issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2. When...8.8 High
- wisc htcondorAn issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2....8.1 High
- ksmbd project ksmbd, netapp h300e firmware, h300s firmware +6 more +8 moreThe ksmbd server through 3.4.2, as used in the Linux kernel through 5.15.8, sometimes...7.5 High
- ssh \& web terminal project \& web terminal** DISPUTED ** The addon.stdin service in addon-ssh (aka Home Assistant Community Add-on: SSH &...8.8 High
- oisf suricata, debian linux +1 moreAn issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based...7.5 High
- debian linux, linux kernel +1 morepep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak.5.5 Medium
- cybelesoft thinfinity virtualuiThinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could...9.8 Critical
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ security 2021 +3 more +5 moreA link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer)...7.1 High
- gnome epiphany, debian linux +1 moreXSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 because a server's...6.1 Medium
- gnome epiphany, debian linux +1 moreXSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 when View Source mode...6.1 Medium
- gnome epiphany, debian linux +1 moreXSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an error page.6.1 Medium
- gnome epiphany, debian linux +1 moreXSS can occur in GNOME Web (aka Epiphany) before 40.4 and 41.x before 41.1 via an about: page, as...6.1 Medium
- knime serverKNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the...2.9 Low
- knime analytics platformKNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a...4.7 Medium
- qos logback, netapp cloud manager, service level manager +3 more +5 moreRCE from attacker with configuration edit priviledges through JNDI lookup6.6 Medium
- google androidIn various setup methods of the USB gadget subsystem, there is a possible out of bounds write due...7.8 High
- elabftwIncorrect Authentication in elabftw9.1 Critical
- elabftwAccount takeover in eLabFTW8.1 High
perseus-actix-webcrates.ioDoS Vulnerability from Upstream Actix Web IssuesNo score- catfish-cms catfish cmsCross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:...6.1 Medium
- catfish-cms catfish cmsCross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html...8.8 High
- Show moreLoading…