CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- apple macos, tvos, watchos +2 more +4 moreA race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS...8.1 High
- apple ios, watchos, iphone os +2 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...7.8 High
- apple ios, iphone os +1 moreAn issue existed in preventing the uploading of CallKit call history to iCloud. This issue was...3.3 Low
- apple remote desktopA cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was...7.5 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreIn __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of...7.8 High
- autodesk advance steel, autocad, autocad architecture +10 more +12 moreA Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL...7.8 High
- autodesk advance steel, autocad, autocad architecture +10 more +12 moreA maliciously crafted PDF file prior to 9.0.7 may be forced to read beyond allocated boundaries...7.8 High
- nltkInefficient Regular Expression Complexity in nltk7.5 High
- pytorchlightning pytorchlightning/pytorch-lightning, lightningai pytorch lightning +1 moreDeserialization of Untrusted Data in pytorchlightning/pytorch-lightning7.8 High
- niklasmerz cordova-plugin-fingerprint-aio, cordova plugin fingerprint all-in-one project plugin fingerprint all-in-one +1 moreDoS vulnerability6.2 Medium
- nvidia geforce experience, geforce experience software +1 moreNVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does...8.2 High
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 12003 allows authentication bypass in certain admin...9.8 Critical
- oretnom23 simple online men\'s salon management systemThe password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be...7.5 High
- online enrollment management system project enrollment management systemThe id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to...7.5 High
- apache solrApache Solr information disclosure vulnerability through DataImportHandler9.8 Critical
- tp-link tl-wr802n v4(jp), tl-wr802n firmware +1 moreTP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS...8.8 High
- gegl, gimp, fedoraproject fedora +1 more +3 moreGEGL before 0.4.34, as used (for example) in GIMP before 2.10.30, allows shell expansion when a...7.8 High
- sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 moreAn Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted...7.5 High
- sonicwall sma100, sma 100 firmware, sma 200 firmware +4 more +6 moreA vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker...7.5 High
ghostscriptOSS-FuzzStack-buffer-overflow in strncatNo scoreghostscriptOSS-FuzzStack-buffer-overflow in line_join_pointsNo scoreghostscriptOSS-FuzzStack-buffer-overflow in pdfi_annot_draw_LE_oneNo score- open5gsIn Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF.7.5 High
- e2bn e2guardiane2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM...7.4 High
- personal blog cms project blog cmsBlog CMS v1.0 contains a cross-site scripting (XSS) vulnerability in the /controller...6.1 Medium
- thinkcmfAn issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted...9.8 Critical
- metinfoMetInfo 7.0 beta contains a stored cross-site scripting (XSS) vulnerability in the $name...5.4 Medium
- mossle lemonA cross-site scripting (XSS) vulnerability in the Editing component of lemon V1.10.0 allows...6.1 Medium
- mossle lemonA cross-site scripting (XSS) vulnerability in the potrtalItemName parameter in \web...6.1 Medium
- opms project opmsA cross-site request forgery (CSRF) in OPMS v1.3 and below allows attackers to arbitrarily add a...6.5 Medium
- rockoaA cross-site request forgery (CSRF) in Rockoa v1.9.8 allows an authenticated attacker to...8.0 High
- s-cmsS-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability...6.1 Medium
- s-cmsS-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability...6.1 Medium
- ajax.net professional project professional, michaelschwarz ajax.net-professional +1 moreCross-Site Scripting in AjaxNetProfessional8.7 High
- sangoma restappsFreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is...9.8 Critical
- realtek rtl8195am firmwareA stack buffer overflow was discovered on Realtek RTL8195AM device before 2.0.10, it exists in...9.8 Critical
- anker eufy homebase 2 firmwareAn authentication bypass vulnerability exists in the process_msg() function of the home_security...7.7 High
- anker eufy homebase 2 firmwareAn authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality...9.4 Critical
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- advantech r-seenetA specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated...7.7 High
- Show moreLoading…