CVEs published in December 2021
2,574 vulnerabilities, 311 critical, 14 exploited.
- netgear r6700 firmwareNetgear Nighthawk R6700 version 1.0.4.120 does not utilize secure communication methods to the...7.5 High
- netgear r6700 firmwareNetgear Nighthawk R6700 version 1.0.4.120 contains a command injection vulnerability in update...8.8 High
- netgear r6700 firmwareNetgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All...7.5 High
- netgear r6700 firmwareNetgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear...8.8 High
- netgear r6700 firmwareNetgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART...6.8 Medium
- netgear genie installerAll known versions of the Netgear Genie Installer for macOS contain a local privilege escalation...7.8 High
- netgear rax43 firmwareNetgear RAX43 version 1.0.3.96 does not utilize secure communications to the web interface. By...6.8 Medium
- netgear rax43 firmwareNetgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A...6.8 Medium
- netgear rax43 firmwareNetgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi...8.0 High
- netgear rax43 firmwareNetgear RAX43 version 1.0.3.96 contains a buffer overrun vulnerability. The URL parsing...8.8 High
- netgear rax43 firmwareNetgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and...5.5 Medium
- netgear rax43 firmwareNetgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal...8.8 High
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 does not properly implement csrf protections. Most...8.8 High
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb...4.9 Medium
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 contains a flaw in the session management for the...10.0 Critical
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from...5.3 Medium
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient access controls for the WAN...9.8 Critical
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 leaks information via the ftp web page. Usernames and...4.9 Medium
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and...4.9 Medium
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART...6.8 Medium
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 contains a command injection vulnerability in the smb...8.8 High
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to...9.8 Critical
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 contains an security flaw in the web interface. HTTPS...7.5 High
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 contains a symlink vulnerability in the bittorrent...6.8 Medium
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent...6.5 Medium
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 is vulnerable to command injection. The system log...8.8 High
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is...9.8 Critical
- trendnet tew-827dru firmwareIt is possible for an unauthenticated, malicious user to force the device to reboot due to a...7.5 High
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that...6.5 Medium
- dlink dir-2640-us firmwareQuagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an...8.4 High
- dlink dir-2640-us firmwareQuagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an...6.1 Medium
- dlink dir-2640-us firmwareQuagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded...8.8 High
- glewlwyd project glewlwydGlewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user...8.8 High
- ibm iIBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to...6.1 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libtpms. The flaw can be triggered by specially-crafted TPM 2 command packets...6.1 Medium
- iball wrd12en firmwareiBall WRD12EN 1.0.0 devices allow cross-site request forgery (CSRF) attacks as demonstrated by...6.5 Medium
- jcubic jquery.terminalSelf XSS on user input3.7 Low
- mermaid-js mermaidIncorrect sanitisation function leads to `XSS`7.2 High
- quectel uc20 firmwareQuectel UC20 UMTS/HSPA+ UC20 6.3.14 is affected by a Cross Site Scripting (XSS) vulnerability.6.1 Medium
- safarimontage safari montageSAFARI Montage 8.7.32 is affected by a CRLF injection vulnerability which can lead to can lead to...6.1 Medium
- emerson xweb300d evo firmwareEmerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due...9.8 Critical
- mruby, mruby mruby/mruby +1 moreNULL Pointer Dereference in mruby/mruby6.8 Medium
KernelLinuxtun: avoid double free in tun_free_netdevNo scoreKernelLinuxpinctrl: mediatek: fix global-out-of-bounds issueNo scoreKernelLinuxhamradio: defer ax25 kfree after unregister_netdevNo scoreKernelLinuxhamradio: improve the incomplete fix to avoid NPDNo scoreKernelLinuxphonet/pep: refuse to enable an unbound pipeNo scoreKernelLinuxf2fs: fix to do sanity check on last xattr entry in __f2fs_setxattr()No scoreKernelLinuxtee: optee: Fix incorrect page free bugNo scoreKernelLinuxmm, hwpoison: fix condition in free hugetlb page pathNo score- Show moreLoading…