CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- netgear r6900p firmware, r7000 firmware, r7000p firmware +1 more +3 moreCertain NETGEAR devices are affected by privilege escalation. This affects R6900P before 1.3.3...8.4 High
ghostscriptOSS-FuzzUNKNOWN READ in read_xref_stream_entriesNo scoreghostscriptOSS-FuzzStack-buffer-overflow in pdfi_oc_is_ocg_visibleNo scoreserenityOSS-FuzzHeap-buffer-overflow in TTF::be_u16No scoregrokOSS-FuzzHeap-buffer-overflow in grk::GrkImage::sycc420_to_rgbNo score- mediatek mt7603e firmware, mt7610 firmware, mt7612 firmware +7 more +9 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7610 firmware, mt7612 firmware +7 more +9 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7610 firmware, mt7612 firmware +7 more +9 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7610 firmware, mt7612 firmware +7 more +9 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7610 firmware, mt7612 firmware +7 more +9 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7612 firmware, mt7613 firmware +6 more +8 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7610 firmware, mt7612 firmware +7 more +9 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7610 firmware, mt7612 firmware +7 more +9 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7610 firmware, mt7612 firmware +7 more +9 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7610 firmware, mt7613 firmware +6 more +8 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7613 firmware, mt7615 firmware +4 more +6 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7613 firmware, mt7615 firmware +4 more +6 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7613 firmware, mt7615 firmware +4 more +6 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7613 firmware, mt7615 firmware +4 more +6 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7613 firmware, mt7615 firmware +4 more +6 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7613 firmware, mt7615 firmware +4 more +6 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7613 firmware, mt7615 firmware +4 more +6 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7613 firmware, mt7615 firmware +4 more +6 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7613 firmware, mt7615 firmware +4 more +6 moreMediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle...8.2 High
- mediatek mt7603e firmware, mt7612 firmware, mt7613 firmware +5 more +7 moreMediaTek microchips, as used in NETGEAR devices through 2021-12-13 and other devices, mishandle...6.5 Medium
- vim, vim vim/vim, apple mac os x +6 more +8 moreOut-of-bounds Read in vim/vim7.1 High
cargo-downloadcrates.iocargo-download is unmaintainedNo score- archivy archivy/archivy, archivy project archivy +1 moreCross-Site Request Forgery (CSRF) in archivy/archivy4.3 Medium
- netbsdIn NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG.7.5 High
- linux kernel, netapp aff a400 firmware, all flash fabric-attached storage 8300 firmware +23 more +25 moreIn the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an...7.5 High
- linux kernel, oracle communications cloud native core binding support function, communications cloud native core network exposure function +1 more +3 moreIn the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information...3.5 Low
- netbsdIn NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic...7.5 High
- netbsdIn NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.7.5 High
- netbsdIn NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG.7.5 High
phpOSS-FuzzHeap-use-after-free in zend_hash_reverse_applyNo scorecurlOSS-FuzzHeap-buffer-overflow in seturlNo scorecurlOSS-FuzzHeap-buffer-overflow in Curl_sasl_decode_mechNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in ndlz4_decompressNo scoreghostscriptOSS-FuzzUNKNOWN READ in insert_free_sizeNo scoreghostscriptOSS-FuzzUNKNOWN READ in names_string_refNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in s_hex_processNo score- debian linux, linux kernel +1 moreAn issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the...5.5 Medium
- invoiceninja invoiceninja/invoiceninja, invoice ninja +1 moreCross-site Scripting (XSS) - Stored in invoiceninja/invoiceninja6.5 Medium
- parse-link-header project parse-link-headerRegular Expression Denial of Service (ReDoS)7.5 High
- js-dataPrototype Pollution7.5 High
- elgg, elgg elgg/elgg +1 moreCross-site Scripting (XSS) - Stored in elgg/elgg9.0 Critical
- iris-go irisArbitrary File Write7.5 High
dotenv_codegencrates.iodotenv is UnmaintainedNo scoredotenvcrates.iodotenv is UnmaintainedNo score- groupsession, japan total system co.,ltd. groupsession free edition, groupsession bycloud, groupsession zion +1 morePath traversal vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession...6.8 Medium
- Show moreLoading…