CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
KernelLinuxhamradio: defer ax25 kfree after unregister_netdevNo scoreKernelLinuxf2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()No scoreKernelLinuxipmi: fix initialization when workqueue allocation failsNo scoreKernelLinuxIB/qib: Fix memory leak in qib_user_sdma_queue_pkts()No scoreKernelLinuxipmi: Fix UAF when uninstall ipmi_si and ipmi_msghandler moduleNo scoreKernelLinuxphonet/pep: refuse to enable an unbound pipeNo scoreKernelLinuxhamradio: improve the incomplete fix to avoid NPDNo scoreKernelLinuxhamradio: defer ax25 kfree after unregister_netdevNo scoreKernelLinuxf2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()No scoreKernelLinuxIB/qib: Fix memory leak in qib_user_sdma_queue_pkts()No scoreKernelLinuxphonet/pep: refuse to enable an unbound pipeNo scoreKernelLinuxhamradio: improve the incomplete fix to avoid NPDNo scoreKernelLinuxhamradio: defer ax25 kfree after unregister_netdevNo scoreKernelLinuxIB/qib: Fix memory leak in qib_user_sdma_queue_pkts()No scoreKernelLinuxphonet/pep: refuse to enable an unbound pipeNo scoreKernelLinuxhamradio: improve the incomplete fix to avoid NPDNo scoreKernelLinuxhamradio: defer ax25 kfree after unregister_netdevNo scoreKernelLinuxIB/qib: Fix memory leak in qib_user_sdma_queue_pkts()No score- wireshark, fedoraproject fedora +1 moreLarge loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet...7.5 High
- wireshark, fedoraproject fedora +1 moreCrash in the Gryphon dissector in Wireshark 3.4.0 to 3.4.10 allows denial of service via packet...6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreInfinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of...7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreInfinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows...7.5 High
- wireshark, fedoraproject fedora, oracle http server +1 more +3 moreCrash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file5.5 Medium
- wireshark, fedoraproject fedora, oracle http server +1 more +3 moreCrash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service...7.5 High
- wireshark, debian linux, fedoraproject fedora +2 more +4 moreCrash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of...7.5 High
- microsoft sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016, sharepoint server 2019 +2 more +4 moreMicrosoft SharePoint Elevation of Privilege Vulnerability8.8 High
- debian linux, linux kernel +1 moreGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information...6.5 Medium
- debian linux, linux kernel +1 moreGuest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information...6.5 Medium
- xen, debian linux +1 moreRogue backends can cause DoS of guests via high frequency events T[his CNA information record...6.5 Medium
- xen, debian linux +1 moreRogue backends can cause DoS of guests via high frequency events T[his CNA information record...6.5 Medium
- xen, debian linux +1 moreRogue backends can cause DoS of guests via high frequency events T[his CNA information record...6.5 Medium
- vim, vim vim/vim, apple mac os x +2 more +4 moreUse After Free in vim/vim6.8 Medium
- forescout secureconnector, eservices / envoice +1 moreForeScout - SecureConnector Local Service DoS6.1 Medium
- requarks wiki, wiki.js +1 moreRequarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor5.4 Medium
- celeryproject celery, fedoraproject extra packages for enterprise linux, fedora +2 moreStored Command Injection7.5 High
- stormshield network securityAn issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8...7.5 High
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat6.6 Medium
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreCross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat5.4 Medium
- emuse eservices / envoice, emuse - eservices \/ envoice project - eservices \/ envoice +1 moreEmuse - eServices / eNvoice SQL injection7.1 High
- emuse eservices / envoice, emuse - eservices \/ envoice project - eservices \/ envoice +1 moreEmuse - eServices / eNvoice Exposure Of Private Personal Information6.1 Medium
- qnap qfileImproper Authentication in Qfile7.1 High
- qnap surveillance stationStack Overflow Vulnerability in Surveillance Station8.1 High
- linn products limited kazoo serverReflected XSS in Kazoo Server5.3 Medium
- zyxel nbg6604 firmware, nbg6604 series firmware +1 moreA cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could...4.9 Medium
- zyxel nbg6604 firmware, nbg6604 series firmware +1 moreAn insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware...7.4 High
- if-me ifmeifme - Improper Access Control leads to admin deactivation5.7 Medium
- if-me ifmeifme - Stored Cross-Site Scripting (XSS) in Contacts section5.4 Medium
- if-me ifmeifme - Stored Cross-Site Scripting (XSS) in Groups section5.4 Medium
- if-me ifmeifme - Stored Cross-Site Scripting (XSS) in Notifications section5.4 Medium
- changing motp(mobile one time password), changingtec motp +1 moreChanging Information Technology Inc. MOTP(Mobile One Time Password) - SQL Injection8.8 High
- Show moreLoading…