CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- groupsession, japan total system co.,ltd. groupsession free edition, groupsession bycloud, groupsession zion +1 moreOpen redirect vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession...6.1 Medium
- groupsession, japan total system co.,ltd. groupsession free edition, groupsession bycloud, groupsession zion +1 moreIncorrect permission assignment for critical resource vulnerability in GroupSession Free edition...7.5 High
- idec data file manager, windedit, windldr +3 more +5 morePlaintext storage of a password vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in-One CPU...7.5 High
- idec data file manager, windedit, windldr +3 more +5 moreUnprotected transport of credentials vulnerability in IDEC PLCs (FC6A Series MICROSmart All-in...7.6 High
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.5.3 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can...6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit...6.1 Medium
- mediawiki, fedoraproject fedora +1 moreIn MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as...6.1 Medium
libjxlOSS-FuzzHeap-buffer-overflow in jxl::N_AVX2::FloatToRGBA8No scorecurlOSS-FuzzHeap-buffer-overflow in seturlNo scorerdkitOSS-FuzzHeap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<chNo score- qemu, redhat enterprise linux +1 moreA NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user...6.0 Medium
- linux kernelCVE-2021-4135 affecting package kernel for versions less than 5.15.67.1-45.5 Medium
- qemu, fedoraproject fedora +1 moreA DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE...8.2 High
- debian linux, fedoraproject fedora, libarchive +11 more +13 moreAn improper link resolution flaw can occur while extracting an archive leading to changing modes,...7.8 High
- debian linux, fedoraproject fedora, libarchive +10 more +12 moreAn improper link resolution flaw while extracting an archive can lead to changing the access...7.8 High
- utimf uti mutual fund invest onlineAn issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers...5.3 Medium
ldnsMageiaUpdated ldns packages fix security vulnerabilityNo score- ruby-lang cgi, ruby, debian linux +6 more +8 moreCookie Prefix Spoofing in CGI::Cookie.parse7.5 High
- mozilla thunderbirdWhen receiving an OpenPGP/MIME signed email message that contains an additional outer MIME...6.5 Medium
- circl cve-searchlib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can...7.5 High
- netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 moreStorageGRID (formerly StorageGRID Webscale) versions 11.5 prior to 11.5.0.5 are susceptible to a...4.4 Medium
- the foreman foreman, redhat satellite +1 moreA server side remote code execution vulnerability was found in Foreman project. A authenticated...7.2 High
- netapp virtual desktop serviceNetApp Virtual Desktop Service (VDS) when used with an HTML5 gateway is susceptible to a...9.8 Critical
- containers podman, fedoraproject fedora, redhat enterprise linux +2 moreExposure of Sensitive Information to an Unauthorized Actor and Origin Validation Error in podman6.5 Medium
- redhat jboss enterprise application platformThe HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A...7.2 High
- myscada mypromySCADA myPRO9.1 Critical
- myscada mypromySCADA myPRO7.5 High
- myscada mypromySCADA myPRO10.0 Critical
- myscada mypromySCADA myPRO10.0 Critical
- myscada mypromySCADA myPRO10.0 Critical
- myscada mypromySCADA myPRO9.8 Critical
- myscada mypromySCADA myPRO10.0 Critical
- myscada mypromySCADA myPRO10.0 Critical
- solarwinds web help deskHTTP PUT & DELETE Methods Enabled5.3 Medium
- apple ipados, macos, watchos +3 more +5 moreA logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur...5.5 Medium
- apple macos, mac os x +1 moreA use after free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina...5.5 Medium
- apple ios, macos, tvos +2 more +4 moreThis issue was addressed with a new entitlement. This issue is fixed in macOS Mojave 10.14.6,...5.5 Medium
- apple ios, macos, tvos +3 more +5 moreThis issue was addressed with improved entitlements. This issue is fixed in watchOS 6, tvOS 13,...9.8 Critical
- apple macos, mac os x +1 moreAn issue in handling file permissions was addressed with improved validation. This issue is fixed...7.8 High
- apple icloud, icloud for windows, ios +6 more +8 moreA null pointer dereference was addressed with improved validation. This issue is fixed in macOS...7.8 High
- apple macos, mac os x +1 moreCVE-2019-8643: Arun Sharma of VMWare This issue is fixed in macOS Mojave 10.14. Description: A...9.8 Critical
- apple macos, mac os x +1 moreA validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10...6.8 Medium
- apple macos, mac os x +1 moreAn access issue was addressed with additional sandbox restrictions on applications. This issue is...5.5 Medium
- apple macos, mac os x +1 moreAn issue existed in the storage of sensitive tokens. This issue was addressed by placing the...5.5 Medium
- apple macos, mac os x +1 moreA state management issue was addressed with improved state validation. This issue is fixed in...6.8 Medium
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreAn issue existed in the handling of Contact sharing. This issue was addressed with improved...7.5 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- Show moreLoading…