CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- oretnom23 simple forum\/discussion systemMultiple SQL injection vulnerabilities are found on Simple Forum-Discussion System 1.0 For...9.8 Critical
cloud-initAlmaLinuxcloud-init bug fix and enhancement updateNo scoregnome-classic-sessionAlmaLinux,gnome-shell-extension-apps-menuAlmaLinux,gnome-shell-extension-auto-move-windowsAlmaLinux +22 more +24 moregnome-shell-extensions bug fix and enhancement updateNo scorejava-11-openjdkAlmaLinux,java-11-openjdk-demoAlmaLinux,java-11-openjdk-demo-fastdebugAlmaLinux +20 more +22 morejava-11-openjdk bug fix and enhancement updateNo scorepopplerAlmaLinux,poppler-cppAlmaLinux,poppler-cpp-develAlmaLinux +6 more +8 morepoppler bug fix and enhancement updateNo scoreaccountsserviceAlmaLinux,accountsservice-develAlmaLinux,accountsservice-libsAlmaLinux +2 moreaccountsservice bug fix and enhancement updateNo scorelibsss_nss_idmap-develAlmaLinuxsssd bug fix and enhancement updateNo scoreopencryptoki-develAlmaLinuxopencryptoki bug fix and enhancement updateNo score- unknown directorist – business directory plugin, wpwax directorist +1 moreDirectorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload7.5 High
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social < 6.8.7 - Reflected Cross-Site Scripting6.1 Medium
- icegram, unknown popups, welcome bar, optins and lead generation plugin – icegram +1 moreIcegram < 2.0.5 - Reflected Cross-Site Scripting6.1 Medium
- wpeverest everest forms, unknown contact form, drag and drop form builder for wordpress – everest forms +1 moreEverest Forms < 1.8.0 - Reflected Cross-Site Scripting6.1 Medium
- unknown wcfm marketplace – best multivendor marketplace for woocommerce, wclovers frontend manager for woocommerce along with bookings subscription listings compatible +1 moreWCFM - WooCommerce Multivendor Marketplace < 3.4.12 - Unauthenticated SQL Injection9.8 Critical
- ni woocommerce custom order status project woocommerce custom order status, unknown ni woocommerce custom order status +1 moreNi WooCommerce Custom Order Status < 1.9.7 - Subscriber+ SQL Injection8.8 High
- codepress visitor statistics, osamaesh wp visitor statistics (real time traffic) +1 moreWP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection8.8 High
- shapedplugin logo carousel, unknown logo carousel – logo slider, logo showcase, and clients logo gallery +1 moreLogo Carousel < 3.4.2 - Unauthorised Private Post Access8.1 High
- shapedplugin logo carousel, unknown logo carousel – logo slider, logo showcase, and clients logo gallery +1 moreLogo Carousel < 3.4.2 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- themeboy sportspress, sportspress – sports club & league manager +1 moreSportsPress < 2.7.9 - Reflected Cross-Site Scripting6.1 Medium
ghostscriptOSS-FuzzMemcpy-param-overlap in gs_fapi_do_charNo scorecurlOSS-FuzzHeap-buffer-overflow in seturlNo scoreghostscriptOSS-FuzzUNKNOWN READ in pdfi_dict_getNo scoreuwebsocketsOSS-FuzzUNKNOWN WRITE in void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<4>No score- arm mbed tls, fedoraproject fedora +1 moreIn Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption...7.5 High
- trustedfirmware mbed tls, fedoraproject fedora +1 moreIn Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt...7.5 High
- gpacAn infinite loop vulnerability exists in Gpac 1.0.1 in gf_get_bit_size.5.5 Medium
- gpacThe gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service ...5.5 Medium
- gpacThe gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service ...5.5 Medium
firefoxUbuntufirefox regressionsNo score- requarks wiki, wiki.js +1 moreStored XSS via SVG file upload in Wiki.js5.4 Medium
- humhubAuthorization Bypass in Space Invite in HumHub6.5 Medium
- nebulab solidusCSRF forgery protection bypass for Spree::OrdersController#populate5.3 Medium
- msedgeredirect project msedgeredirectExternally Controlled Reference to a Resource in Another Sphere in MSEdgeRedirect8.8 High
- jsx-slack project jsx-slackInsufficient patch for Regular Expression Denial of Service (ReDoS) to jsx-slack v4.5.15.3 Medium
- thales sentinel protection installerThe Sentinel Protection Installer 7.7.0 creates files and directory with all privileges granting any user full permissions.6.5 Medium
- thales safenet authentication service, thalesgroup safenet windows logon agent +1 moreA user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to...7.2 High
- thales sentinel protection installerThe Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library6.5 Medium
- fuji electric tellus lite v-simulator, v-server lite, fujielectric v-server +1 more +3 moreFuji Electric Tellus Lite V-Simulator out of bounds write7.8 High
- fuji electric tellus lite v-simulator, v-server lite, fujielectric v-server +1 more +3 moreFuji Electric Tellus Lite V-Simulator stack based buffer overflow7.8 High
- fuji electric tellus lite v-simulator, v-server lite, fujielectric v-server +1 more +3 moreFuji Electric Tellus Lite V-Simulator out of bounds read7.8 High
- fuji electric tellus lite v-simulator, v-server lite, fujielectric v-server +1 more +3 moreFuji Electric Tellus Lite V-Simulator heap based buffer overflow7.8 High
- fuji electric tellus lite v-simulator, v-server lite, fujielectric v-server +1 more +3 moreFuji Electric Tellus Lite V-Simulator untrusted pointer dereference7.8 High
- fuji electric tellus lite v-simulator, v-server lite, fujielectric v-server +1 more +3 moreFuji Electric Tellus Lite V-Simulator uninitialized pointer7.8 High
- adobe auditionAdobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe auditionAdobe Audition MOV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe auditionAdobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe dimensionAdobe Dimension GIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe dimensionAdobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe dimensionAdobe Dimension PCX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe dimensionAdobe Dimension SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe dimensionAdobe Dimension TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- Show moreLoading…