CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
KernelLinuxnet: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()No scoreKernelLinuxnet: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()No scoreKernelLinuxsata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fslNo scoreKernelLinuxnet: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of boundNo scoreKernelLinuxscsi: mpt3sas: Fix kernel panic during drive powercycle testNo scoreKernelLinuxARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCENo scoreKernelLinuxproc/vmcore: fix clearing user buffer by properly using clear_user()No scoreKernelLinuxstaging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()No score- vim, vim vim/vim, apple mac os x +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.3 High
watchdogMageiaUpdated watchdog packages fix security issueNo score- privoxyA memory leak vulnerability was found in Privoxy when handling errors.7.5 High
- privoxyA vulnerability was found in Privoxy which was fixed in process_encrypted_request_headers() by...7.5 High
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.4 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37...5.3 Medium
- google chrome, chromium v8 +1 moreUse after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote...8.8 High
- google chromeObject lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker...8.8 High
- google chromeUse after free in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker...8.8 High
- google chromeInsufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote...7.4 High
- salesagility suitecrmSuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection.8.8 High
- apache plc4xApache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response8.8 High
ghostscriptOSS-FuzzHeap-buffer-overflow in insert_freeNo scoreghostscriptOSS-FuzzUNKNOWN READ in pdfi_read_cff_fontNo score- microsoft tangA flaw exists in tang, a network-based cryptographic binding server, which could result in leak...7.5 High
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat6.5 Medium
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreCross-Site Request Forgery (CSRF) in snipe/snipe-it4.3 Medium
ghostscriptOSS-FuzzSegv on unknown address in sreadbufNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in ndlz8_decompressNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in cmap_endcodespacerange_funcNo score- apache log4j, apache software foundation log4j2, debian linux +114 more +116 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluation5.9 Medium
- cvxopt project cvxopt, fedoraproject fedora +1 moreIncorrect Comparison in cvxopt7.5 High
ru.yandex.clickhouse:clickhouse-jdbc-bridgeMavenUsing JMSAppender in log4j configuration may lead to deserialization of untrusted data8.1 High- pyo project pyoClassic Buffer Overflow in pyo7.5 High
- pyo project pyoPyo Buffer Overflow Vulnerability7.5 High
- rare-technologies bounterbounter Null pointer reference7.5 High
- nette latteAccess Control Bypass9.8 Critical
- linuxfoundation dojo, debian linux, oracle communications policy management +2 more +4 morePrototype Pollution7.5 High
- http-server-node project http-server-nodeDirectory Traversal7.5 High
- unisharp laravel-filemanagerUnrestricted Upload of File with Dangerous Type in unisharp/laravel-filemanager6.7 Medium
- numpyBuffer Copy without Checking Size of Input in NumPy5.5 Medium
- numpyNumPy NULL Pointer Dereference5.3 Medium
- numpy, oracle communications cloud native core policy +1 moreIncorrect Comparison in NumPy5.3 Medium
- numpyNumPy Buffer Overflow (Disputed)5.3 Medium
- jsx-slack project jsx-slackRegular Expression Denial of Service (ReDoS) in jsx-slack5.3 Medium
- discourse message busPath traversal in message_bus4.4 Medium
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5...5.4 Medium
- sem-cms semcmsThe checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows...7.5 High
- sem-cms semcmsA vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the...9.8 Critical
- ftpshell serverA buffer overflow vulnerability in the Virtual Path Mapping component of FTPShell v6.83 allows...7.5 High
- Show moreLoading…