CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- parallels remote application server, remote application server (client) +1 moreParallels Remote Application Server credentials management errors7.1 High
- tcman gimTCMAN GIM missing authorization vulnerability7.2 High
- tcman gimTCMAN GIM open redirect vulnerability6.1 Medium
- tcman gimTCMAN GIM SQL injection vulnerability7.5 High
- tcman gimTCMAN GIM SQL injection vulnerability10.0 Critical
- mattermost, mattermost server +1 moreMattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which...3.5 Low
- mattermost, mattermost server +1 moreMattermost 6.0 and earlier fails to sufficiently validate the email address during registration,...3.7 Low
- mitsubishielectric ezsocket, gx works2, melsoft navigator +2 moreInteger Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior,...5.5 Medium
- mitsubishi electric corporation gx works2Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX...7.5 High
- mitsubishielectric ezsocket, gx works2, melsoft navigator +2 moreOut-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior,...5.5 Medium
- omnissa workspace one uem, vmware workspace one uem console +1 moreVMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0...7.5 High
- google androidIn alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This...5.5 Medium
- google androidIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google androidIn Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check....7.8 High
- google androidIn apusys, there is a possible out of bounds read due to an incorrect bounds check. This could...4.4 Medium
- google androidIn apusys, there is a possible memory corruption due to a missing bounds check. This could lead...6.7 Medium
- google androidIn apusys, there is a possible out of bounds read due to an incorrect bounds check. This could...4.4 Medium
- google androidIn apusys, there is a possible memory corruption due to a use after free. This could lead to...6.7 Medium
- google androidIn apusys, there is a possible memory corruption due to a use after free. This could lead to...6.7 Medium
- google androidIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google androidIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google androidIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google androidIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google androidIn apusys, there is a possible memory corruption due to a use after free. This could lead to...6.7 Medium
- google androidIn apusys, there is a possible memory corruption due to a missing bounds check. This could lead...6.7 Medium
- google androidIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google androidIn ccu driver, there is a possible out of bounds read due to an integer overflow. This could lead...4.4 Medium
- google androidIn geniezone driver, there is a possible out of bounds read due to an incorrect bounds check....4.4 Medium
- sick sopas engineering toolSICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to...7.5 High
- sick sopas engineering toolSICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator...8.6 High
- sick sopas engineering toolSICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and...8.6 High
- wolterskluwer teammate audit managementWolters Kluwer TeamMate AM 12.4 Update 1 mishandles attachment uploads, such that an...4.4 Medium
- tp-link archer ax10 firmwareAn HTTP/1.1 misconfiguration in web interface of TP-Link AX10v1 before V1_211117 could allow an...7.5 High
- hashicorp vaultIn HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1,...4.9 Medium
- convosA Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.5.4 Medium
- wechat-php-sdk project wechat-php-sdkWechat-php-sdk is affected by a Cross Site Scripting vulnerability.6.1 Medium
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat7.3 High
- linuxfoundation longhornUnauthorized data access from replicas through vulnerable instance manager pods8.1 High
- linuxfoundation longhornHost operations allowed in privileged Longhorn managed pods9.6 Critical
- apache nifiApache NiFi information disclosure by XXE6.5 Medium
- open-emr openemrAn authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before...6.5 Medium
c-blosc2OSS-FuzzHeap-buffer-overflow in ndlz4_decompressNo scoreghostscriptOSS-FuzzStack-buffer-overflow in pdfi_do_imageNo scoreghostscriptOSS-FuzzUNKNOWN READ in chunk_free_objectNo scoreghostscriptOSS-FuzzNegative-size-param in general_endcidrange_funcNo scoreghostscriptOSS-FuzzSegv on unknown address in gx_adjust_color_PatternNo scoreghostscriptOSS-FuzzStack-buffer-overflow in pdfi_create_iccbasedNo scoreghostscriptOSS-FuzzUNKNOWN in pdfi_fapi_get_gsubrNo scorede.averbis.textanalysis:pear-archetypeMavenCritical vulnerability in log4j may affect generated PEAR projectsNo score- gglocker project gglockerGGLocker iOS application, contains an insecure data storage of the password hash value which...5.5 Medium
- Show moreLoading…