CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- lantronix premierwave 2050 firmwareSpecially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An...9.1 Critical
- lantronix premierwave 2050 firmwareA specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd...9.1 Critical
- lantronix premierwave 2050 firmwareA specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd...9.1 Critical
- lantronix premierwave 2050 firmwareA specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd...9.1 Critical
- lantronix premierwave 2050 firmwareAn OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute...9.9 Critical
- gpacA null pointer dereference vulnerability exists in gpac 1.1.0 via the lsr_read_anim_values_ex...7.5 High
drupal/mail_loginPackagistThis modules enables users to login via email address. This module does not sufficiently check user status when authenticating.No score- projectworlds online shopping systemProjectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter...9.8 Critical
- projectworlds online shopping systemIn ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a...4.3 Medium
- thoughtworks gocdAdding a new pipeline in GoCD server version 21.3.0 has a functionality that could be abused to...9.8 Critical
- projectworlds online book store project in phpProjectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn"...9.8 Critical
- projectworlds online book store project in phpIn ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a...6.5 Medium
- projectworlds hospital management system in phpProjectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the...9.8 Critical
- projectworlds hospital management system in phpProjectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple...8.8 High
- projectworlds hospital management system in phpProjectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple...9.8 Critical
- projectworlds hospital management system in phpProjectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email...9.8 Critical
- gnu patchAn Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which...5.5 Medium
- gpacA null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function,...5.5 Medium
- gpacAn Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function,...5.5 Medium
- gpacA stack overflow vulnerability exists in gpac 1.1.0 via the gf_bifs_dec_proto_list function,...5.5 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.0.0 could allow an authenticated user...4.3 Medium
- nasm netwide assemblerAn infinite loop vulnerability exists in nasm 2.16rc0 via the gpaste_tokens function.5.5 Medium
- nasm netwide assemblerA Null Pointer Dereference vulnerability existfs in nasm 2.16rc0 via asm/preproc.c.5.5 Medium
- starcharge nova 360 cabinet firmware, titan 180 premium firmware +1 moreCertain Starcharge products are affected by Improper Input Validation. The affected products...8.8 High
- starcharge nova 360 cabinet firmware, titan 180 premium firmware +1 moreCertain Starcharge products are vulnerable to Directory Traversal via main.cgi. The affected...8.8 High
- zendesk enc datavault, sandisk secureaccess, zendesk enc vaultapi +2 moreENC DataVault 7.1.1W and VaultAPI v67, which is currently being used in various other...8.1 High
- opmantek open-auditAn issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a...9.8 Critical
- f-secure atlant, elements endpoint detection and response, elements endpoint protection +4 more +6 moreDenial-of-Service (DoS) Vulnerability4.6 Medium
- node-windows project node-windowsCommand Injection in node-windows9.8 Critical
- quest kace desktop authorityAn issue was discovered in Quest KACE Desktop Authority before 11.2. This vulnerability allows...9.8 Critical
- quest kace desktop authorityAn issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles...9.8 Critical
- quest kace desktop authorityQuest KACE Desktop Authority before 11.2 allows XSS because it does not prevent untrusted HTML...6.1 Medium
- quest kace desktop authorityXXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file...5.5 Medium
curlOSS-FuzzHeap-buffer-overflow in Curl_sasl_decode_mechNo scoreselinuxOSS-FuzzSegv on unknown address in symhashNo scoreselinuxOSS-FuzzUNKNOWN READ in mls_semantic_level_expandNo score- gpacAn invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svg_node_start...5.5 Medium
- gpacAn invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function...5.5 Medium
- gpacAn invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA use-after-free exists in drivers/tee/tee_shm.c in the TEE subsystem in the Linux kernel through...7.0 High
- spipSPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability,...8.8 High
- spipSPIP 4.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ecrire/public...8.8 High
- spipSPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces...5.4 Medium
- spipSPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the...5.4 Medium
- teluu pjsip, debian linux, pjsip pjproject +2 moreOut-of-bounds read when parsing RTCP BYE message in PJSIP7.3 High
- gerbv, debian linux +1 moreAn out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling...10.0 Critical
- gerbv, debian linux +1 moreAn out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling...10.0 Critical
- teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 morePotential integer underflow upon receiving STUN message in PJSIP7.3 High
- anuko time tracker, timetracker +1 moreSQL injection vulnerability in anuko timetracker8.1 High
- debian linux, linux kernel, netapp h300e firmware +12 more +14 moreA read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain...7.0 High
- Show moreLoading…