CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- gpacA null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_sg_vrml_mf_append...5.5 Medium
- gpacA null pointer dereference vulnerability exists in the gpac in the gf_node_get_tag function,...5.5 Medium
- gpacA null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_svg_get_attribute_name...5.5 Medium
- gpacAn infinite loop vulnerability exists in gpac 1.1.0 in the gf_log function, which causes a Denial...5.5 Medium
- gpacA null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_dump_vrml_dyn_field.isra...5.5 Medium
- gpacA null pointer dereference vulnerability exists in gpac 1.1.0 in the BD_CheckSFTimeOffset...5.5 Medium
- gpacA null pointer dereference vulnerability exists in gpac 1.1.0 in the...5.5 Medium
- gpacAn invalid memory address dereference vulnerability exists in gpac 1.1.0 in the dump_od_to_saf...5.5 Medium
- gpacA Null Pointer Dereference vulnerability exists in the gf_sg_vrml_mf_alloc function, which causes...5.5 Medium
- gpacA Null Pointer Dereference vulnerability exists in gpac 1.1.0 in the gf_node_get_field function,...5.5 Medium
- gnuplotA Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c,...5.5 Medium
- ibm cloud pak for automation, workflow process service +1 moreIBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm business automation workflow, business process manager, cloud pak for automation +1 more +3 moreIBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0...4.9 Medium
- ibm business automation workflow, business process manager, business process manager standard +2 more +4 moreIBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0...6.4 Medium
- opendesign drawings sdkAn out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance...7.8 High
- opendesign drawings sdkAn out-of-bounds read vulnerability exists when reading a TIF file using Open Design Alliance...7.8 High
- opendesign drawings explorerAn out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance ...7.8 High
- opendesign drawings sdkAn Improper Input Validation Vulnerability exists when reading a BMP file using Open Design...7.8 High
- mesa labs amegaviewMesa Labs AmegaView improper authentication7.3 High
- mesa labs amegaviewMesa Labs AmegaView command injection10.0 Critical
- mesa labs amegaviewMesa Labs AmegaView authentication bypass7.3 High
- mesa labs amegaviewMesa Labs AmegaView Command Injection9.9 Critical
- mesa labs amegaviewMesa Labs AmegaView Improper Privilege Management7.8 High
- webassembly binaryen, fedoraproject fedora +1 moreA Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address...5.5 Medium
- acclaim systems usaherdsAcclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.8.1 High
- wuzhicmsA cross-site scripting (XSS) vulnerability in the system bulletin component of WUZHI CMS v4.1.0...5.4 Medium
- webassembly binaryen, fedoraproject fedora +1 moreA Denial of Service vulnerability exits in Binaryen 103 due to an assertion abort in wasm:...7.5 High
- gpacA vulnerability exists in GPAC 1.0.1 due to an omission of security-relevant Information, which...5.5 Medium
- dell powerpath management applianceDell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded...8.2 High
- dell powerscale onefsDell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an authentication bypass by primary...5.9 Medium
- dell wyse device agentDell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability...5.5 Medium
- dell wyse management suiteDell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols...6.5 Medium
- dell wyse management suiteWyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could...9.8 Critical
- dell avamar, emc avamar server +1 moreDell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage...6.7 Medium
- dell avamar, emc avamar server, emc powerprotect data protection appliance +2 moreDell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in...6.7 Medium
- dell avamar, emc avamar server +1 moreDell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege...6.7 Medium
- gpacA Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of...5.5 Medium
- crypto cronos, ethermint, evmos +2 moreDrainage of FeeCollector's Block Transaction Fees7.5 High
- dalmark systeam enterprise resource planningDalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via...8.8 High
- dalmark systeam enterprise resource planningDalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam...5.3 Medium
- dalmark systeam enterprise resource planningDalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User enumeration. The Systeam...5.3 Medium
- dalmark systeam enterprise resource planningDalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam...7.5 High
- prestashopPrestaShop XSS Vulnerability6.1 Medium
- stormshield endpoint securityStormshield Endpoint Security before 2.1.2 allows remote code execution.9.8 Critical
- stormshield endpoint securityStormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control.5.2 Medium
- stormshield endpoint securityStormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control.4.3 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore6.6 Medium
- lru project lruUse after free in lru crate7.5 High
- video sharing website project sharing websiteThe email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL...9.8 Critical
- simple cold storage management system project cold storage managment systemThe id parameter in view_storage.php from Simple Cold Storage Management System 1.0 appears to be...9.8 Critical
- Show moreLoading…