CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- adobe dimensionAdobe Dimension GIF File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe premiere rushAdobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability5.5 Medium
- adobe premiere rushAdobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service5.5 Medium
- adobe premiere, premiere rush +1 moreAdobe Premiere Rush EPS/TIFF File Memory Corruption Remote Code Execution7.8 High
- adobe premiere rushAdobe Premiere Rush MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability3.3 Low
- adobe premiere, premiere rush +1 moreAdobe Premiere Rush SVG File Memory Corruption Remote Code Execution7.8 High
- adobe premiere rushAdobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service5.5 Medium
- adobe premiere rushAdobe Premiere Rush WAV File Memory Corruption Remote Code Execution7.8 High
- adobe premiere rushAdobe Premiere Rush NULL Pointer Dereference Local Denial-of-Service5.5 Medium
- adobe premiere rushAdobe Premiere Rush WAV File Memory Corruption Remote Code Execution7.8 High
- adobe premiere rushAdobe Premiere Rush PNG File Memory Corruption Remote Code Execution7.8 High
- adobe premiere rushAdobe Premiere Rush WAV File Memory Corruption Remote Code Execution7.8 High
- adobe premiere rushAdobe Premiere Rush M4A File Memory Corruption Remote Code Execution7.8 High
- adobe premiere rushAdobe Premiere Rush EXR File Memory Corruption Remote Code Execution7.8 High
- adobe premiere rushAdobe Premiere Rush M4A File Memory Corruption Remote Code Execution7.8 High
- adobe premiere rushAdobe Premiere Rush WAV File Memory Corruption Remote Code Execution7.8 High
- adobe premiere rushAdobe Premiere Rush MXF File Memory Corruption Remote Code Execution7.8 High
- vmware identity manager, workspace one access, vrealize automation +2 moreVMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3...7.5 High
- vmware workspace one accessVMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 contain an authentication bypass...8.8 High
- solarwinds orion core, orion platform +1 moreExposed Dangerous Functions - Privileged Escalation8.0 High
- solarwinds orion, orion platform +1 moreUnrestricted access to Orion.UserSettings SWIS entity for low-privilege users6.8 Medium
- solarwinds orion platformUnrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.66.8 Medium
- tarteaucitron tarteaucitron.js – cookies legislation & gdpr (wordpress plugin), tarteaucitron.js - cookies legislation \& gdpr project - cookies legislation \& gdpr +1 moreWordPress tarteaucitron.js – Cookies legislation & GDPR plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS)6.1 Medium
- tarteaucitron tarteaucitron.js – cookies legislation & gdpr (wordpress plugin), tarteaucitron.js - cookies legislation \& gdpr project - cookies legislation \& gdpr +1 moreWordPress tarteaucitron.js – Cookies legislation & GDPR plugin <= 1.6 - Multiple Stored Authenticated Cross-Site Scripting (XSS) vulnerabilities3.4 Low
- engineers online portal project online portalIn sourcecodetester Engineers Online Portal as of 10-21-21, an attacker can manipulate the Host...8.8 High
- iresturant project iresturantStored XSS in Signup Form in iResturant 1.0 Allows Remote Attacker to Inject Arbitrary code via...5.4 Medium
- iresturant project iresturantRCE in Add Review Function in iResturant 1.0 Allows remote attacker to execute commands remotely9.8 Critical
- iorder project iorderAn HTML Injection Vulnerability in iOrder 1.0 allows the remote attacker to execute Malicious...5.3 Medium
- iorder project iorderMultiple Stored XSS Vulnerabilities in the Source Code of iOrder 1.0 allow remote attackers to...6.1 Medium
github.com/opencontainers/runcGodevices resource list treated as a blacklist by defaultNo scoregithub.com/tendermint/tendermintGoSignature verification failure in TendermintNo scorenpm-groovy-lintnpmRemote Code Execution in npm-groovy-lintNo score- zohocorp manageengine pam360Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of...9.8 Critical
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated...9.8 Critical
- zohocorp manageengine access manager plusZoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g....9.8 Critical
- abode iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreCommand Execution due to unsanitized input9.6 Critical
- opmantek open-auditOpmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS)...6.1 Medium
- apache http server, apple mac os x, macos +8 more +10 morePossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier8.2 High
- apache software foundation parquet, apache parquet java +1 moreApache Parquet-MR potential DoS in case of malicious Parquet file7.5 High
- cybelesoft thinfinity virtualuiThinfinity VirtualUI before 3.0 allows a malicious actor to enumerate users registered in the OS ...5.3 Medium
- gurock testrailGurock TestRail before 7.2.4 mishandles HTML escaping.5.4 Medium
- samsung syncthru web serviceThe SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a...7.5 High
- chain sea information integration co., ltd ai chatbot system, chinasea qb smart service robot +1 moreChain Sea Information Integration Co., Ltd ai chatbot system - Arbitrary File Upload9.8 Critical
- chain sea information integration co., ltd ai chatbot system, chinasea qb smart service robot +1 moreChain Sea Information Integration Co., Ltd ai chatbot system - Reflected XSS6.1 Medium
- chain sea information integration co., ltd ai chatbot system, chinasea qb smart service robot +1 moreChain Sea Information Integration Co., Ltd ai chatbot system - Path Traversal7.5 High
- 4mosan gcb doctor4MOSAn GCB Doctor - Unrestricted Upload of File9.8 Critical
ghostscriptOSS-FuzzUNKNOWN READ in pdfi_dereferenceNo scoreghostscriptOSS-FuzzSegv on unknown address in chunk_obj_allocNo scoreghostscriptOSS-FuzzGlobal-buffer-overflow in ps_font_def_funcNo score- apache http server, apple mac os x, macos +10 more +12 morePossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier9.8 Critical
- Show moreLoading…