CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- carinal tien hospital health report system, cth carinal tien hospital health report system +1 moreCarinal Tien Hospital Health Report System - Authorization Bypass Through User-Controlled Key7.3 High
ghostscriptOSS-FuzzHeap-buffer-overflow in read_xrefNo scorephpOSS-FuzzHeap-use-after-free in zend_jit_fetch_dim_r_helperNo scoreespeak-ngOSS-FuzzStack-buffer-underflow in InterpretPhonemeNo scoresleuthkitOSS-FuzzHeap-buffer-overflow in hfs_dir_open_meta_cbNo scorepostgisDebianpostgis - regression updateNo score- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration6.6 Medium
- superantispywareSUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys....7.8 High
- evga precision xocThe WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were...9.1 Critical
- wowsoft printchaserPrintchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote...9.8 Critical
- 4nb videoofficeAn arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and...9.8 Critical
- fatek winproladderFATEK Automation WinProladder7.8 High
- fatek winproladderFATEK Automation WinProladder7.8 High
- foxcpp maddyUse of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy7.5 High
- nettemp nntNettmp NNT 5.1 is affected by a SQL injection vulnerability. An attacker can bypass...9.8 Critical
- slican webctiSLICAN WebCTI 1.01 2015 is affected by a Cross Site Scripting (XSS) vulnerability. The attacker...6.1 Medium
- nuuo nvrsolo firmwareNUUO Network Video Recorder NVRsolo 3.9.1 is affected by a Cross Site Scripting (XSS)...6.1 Medium
- salesagility suitecrmA persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35,...6.1 Medium
- 1234n minicmsMiniCMS v1.11 was discovered to contain a cross-site scripting (XSS) vulnerability via /mc-admin...5.4 Medium
- asus rt-n53 firmwareASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x...9.8 Critical
- poly trio 8800 firmwareA remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows...8.8 High
- safarimontage safari montageReflected Cross Site Scripting (XSS) in SAFARI Montage versions 8.3 and 8.5 allows remote...6.1 Medium
- idec data file manager, ft1a smartaxix lite firmware, ft1a smartaxix pro firmware +6 more +8 moreAn attacker may obtain the user credentials from the communication between the PLC and the...9.8 Critical
- idec data file manager, ft1a smartaxix lite firmware, ft1a smartaxix pro firmware +6 more +8 moreAn attacker may obtain the user credentials from file servers, backup repositories, or ZLD files...9.8 Critical
- online enrollment management system project enrollment management systemhttps://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source...6.5 Medium
- zyxel gs1900 series firmware, gs1900-10hp firmware, gs1900-16 firmware +10 more +12 moreA vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow...6.4 Medium
- zyxel gs1900 series firmware, xgs1210 series firmware, xgs1250 series firmware +14 more +16 moreA vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and...6.8 Medium
permissionsSUSESecurity update for permissionsNo scorepermissionsopenSUSESecurity update for permissionsNo score- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat6.6 Medium
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreGeneration of Error Message Containing Sensitive Information in livehelperchat/livehelperchat4.3 Medium
- yappliYappli is an application development platform which provides the function to access a requested...8.1 High
- gif2apng project gif2apngAn issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a while...7.8 High
- gif2apng project gif2apng, debian linux +1 moreAn issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow vulnerability in...7.8 High
- gif2apng project gif2apng, debian linux +1 moreAn issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow within the main...7.8 High
ghostscriptOSS-FuzzUNKNOWN READ in pdfi_array_getNo score- gif2apng project gif2apng, debian linux +1 moreAn issue was discovered in gif2apng 1.9. There is a heap-based buffer overflow in the main...7.8 High
ghostscriptOSS-FuzzUNKNOWN READ in chunk_free_objectNo score- gif2apng project gif2apngAn issue was discovered in gif2apng 1.9. There is a stack-based buffer overflow involving a for...7.8 High
ghostscriptOSS-FuzzStack-buffer-overflow in fn_ElIn_evaluateNo score- openwrtOpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen.5.4 Medium
- openwrtOpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen.5.4 Medium
- openwrtOpenWrt 21.02.1 allows XSS via the NAT Rules Name screen.5.4 Medium
- chshcms cscmsAn issue in the user login box of CSCMS v4.0 allows attackers to hijack user accounts via brute...9.8 Critical
- 8cms ljcmsAn issue in the user login box of LJCMS v1.11 allows attackers to hijack user accounts via brute...9.8 Critical
- damicmsA vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers...8.8 High
- braveIn Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying...7.5 High
- nokia fastmile firmwareNokia FastMile 3TG00118ABAD52 devices allow privilege escalation by an authenticated user via...8.8 High
- minioUser privilege escalation in MinIO8.8 High
- jeecgAn arbitrary file download vulnerability in jeecg v3.8 allows attackers to access sensitive files...7.5 High
- Show moreLoading…