CVEs published December 8, 2021
137 CVEs were published on December 8, 2021: 6 critical, 25 high. 3 are now in CISA KEV.
- Published
- 137
- Critical
- 6
- High
- 25
- Medium
- 35
- Low
- 4
- Unrated
- 67
- Now in CISA KEV
- 3
- Fix available
- 59
Most affected products
- Huawei EMUI · Huawei Magic UI +1
- 17
- Fortinet FortiWeb
- 13
- Mozilla Firefox · Mozilla Thunderbird
- 10
- Samsung Mobile Devices
- 10
- Mozilla Thunderbird · Mozilla Firefox ESR +1
- 9
- SonicWall SMA100
- 8
- Mozilla Firefox
- 6
- Fortinet FortiOS
- 5
- Fortinet FortiWLM
- 3
- Anker
- 2
Critical 6
- CVE-2021-21950An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker EufAnker
- CVE-2021-21951An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker EufAnker
- CVE-2021-23859Denial of Service and Authentication Bypass Vulnerability in multiple Bosch productsBosch BVMS · Bosch DIVAR IP 7000 R2 +5
- CVE-2021-27860Arbitrary file upload vulnerability in FatPipe softwareFatPipe WARP · FatPipe IPVPN +1
- CVE-2021-20038A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticSonicWall SMA100
- CVE-2021-44529A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code witIvanti EPM
High 25
- CVE-2021-43811Code injection via unsafe YAML loadingawslabs sockeye · sockeye
- CVE-2021-21957A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0.Dream Report
- CVE-2021-23862Authenticated Remote Code ExecutionBosch BVMS · Bosch DIVAR IP 7000 R2 +4
- CVE-2021-41017Multiple heap-based buffer overflow vulnerabilities in some web API controllers of FortiWeb 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allowFortinet FortiWeb
- CVE-2021-41025Multiple vulnerabilities in the authentication mechanism of confd in FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 through 6.2Fortinet FortiWeb
- CVE-2021-36173A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 thFortinet FortiOS
- CVE-2021-43978Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modif
- CVE-2021-41021A privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may allow an admin user to escalate the privilFortinet FortiNAC
- CVE-2021-3815Prototype Pollution in fabiocaccamo/utils.jsfabiocaccamo/utils.js · @fabiocaccamo/utils.js
- CVE-2021-42110An issue was discovered in Allegro Windows (formerly Popsy Windows) before 3.3.4156.1.
- CVE-2021-25517An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution.Samsung Mobile Devices
- CVE-2021-41014A uncontrolled resource consumption in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticated attacker to makFortinet FortiWeb
- CVE-2021-41027A stack-based buffer overflow in Fortinet FortiWeb version 6.4.1 and 6.4.0, allows an authenticated attacker to execute unauthorized code orFortinet FortiWeb
- CVE-2021-26109An integer overflow or wraparound vulnerability in the memory allocator of SSLVPN in FortiOS before 7.0.1 may allow an unauthenticated attacFortinet FortiOS
- CVE-2021-26108A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverFortinet FortiOS
- CVE-2021-41024A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthenticatFortinet FortiOS
- CVE-2021-42760A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.1 and below allows aFortinet FortiWLM
- CVE-2021-43067A exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator version 6.4.0, version 6.3.2 and below, version Fortinet FortiAuthenticator
- CVE-2021-42758An improper access control vulnerability [CWE-284] in FortiWLC 8.6.1 and below may allow an authenticated and remote attacker with low priviFortinet FortiWLC
- CVE-2021-36180Multiple improper neutralization of special elements used in a command vulnerabilities [CWE-77] in FortiWeb management interface 6.4.1 and bFortinet FortiWeb
- CVE-2021-26110An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and ForFortinet FortiOS, FortiProxy
- CVE-2021-20039Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authentiSonicWall SMA100
- CVE-2021-41311Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access rAtlassian Jira Server · Atlassian Jira Data Center
- CVE-2021-44725KNIME Server before 4.13.4 allows directory traversal in a request for a client profile.
- CVE-2021-44726KNIME Server before 4.13.4 allows XSS via the old WebPortal login page.
Medium, low and unrated 106
- CVE-2021-4048An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in Olapack
- CVE-2021-38503The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scriptsMozilla Firefox · Mozilla Thunderbird
- CVE-2021-38504When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to Mozilla Firefox · Mozilla Thunderbird
- CVE-2021-38505Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to theMozilla Firefox · Mozilla Thunderbird
- CVE-2021-38506Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user.Mozilla Firefox · Mozilla Thunderbird
- CVE-2021-38507The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while retaining the visual Mozilla Firefox · Mozilla Thunderbird
- CVE-2021-38508By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validitMozilla Firefox · Mozilla Thunderbird
- CVE-2021-38509Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled) contents could be dMozilla Firefox · Mozilla Thunderbird
- CVE-2021-38510The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run commands on a user's Mozilla Firefox · Mozilla Thunderbird
- CVE-2021-43528Thunderbird unexpectedly enabled JavaScript in the composition area.Mozilla Thunderbird
- CVE-2021-43530A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QMozilla Firefox
- CVE-2021-43531When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked.Mozilla Firefox
- CVE-2021-43532The 'Copy Image Link' context menu action would copy the final image URL after redirects.Mozilla Firefox
- CVE-2021-43533When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies tMozilla Firefox
- CVE-2021-43534Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2.Mozilla Firefox · Mozilla Thunderbird
- CVE-2021-43535A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a poteMozilla Firefox · Mozilla Thunderbird
- CVE-2021-43536Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2021-43537An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitablMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2021-43538By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2021-43539Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2021-43540WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been Mozilla Firefox
- CVE-2021-43541When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2021-43542Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2021-43543Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2021-43544When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caMozilla Firefox
- CVE-2021-43545Using the Location API in a loop could have caused severe application hangs and crashes.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2021-43546It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor.Mozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2021-23861Possible Access to Debug Functions in Bosch VRM / BVMSBosch BVMS · Bosch DIVAR IP 7000 R2 +2
- CVE-2021-23860Reflected Cross Site Scripting (XSS) vulnerability in Bosch VRM / BVMSBosch BVMS · Bosch DIVAR IP 7000 R2 +2
- CVE-2021-37941A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an applicaElastic APM Java Agent · elastic-apm
- CVE-2021-36718SYNEL - eharmonynew / Synel Reports version 8.0.2 Default credentials , Security miscommunication , Sensetive data exposureSynel eharmonynew, Synel Reports
- CVE-2021-36719Cybonet - PineAppCybonet PineApp - Mail Secure
- CVE-2021-36720Cybonet - PineAppCybonet PineApp - Mail Secure
- CVE-2021-43809Local Code Execution through Argument Injection via dash leading git url parameter in Gemfilerubygems · bundler
- CVE-2020-27416Mahavitaran android application 7.50 and prior are affected by account takeover due to improper OTP validation, allows remote attackers to c
- CVE-2021-43399The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the length of some operations
- CVE-2021-36195Multiple command injection vulnerabilities in the command line interpreter of FortiWeb versions 6.4.1, 6.4.0, 6.3.0 through 6.3.15, 6.2.0 thFortinet FortiWeb
- CVE-2021-41030An authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7.0.1 and below and 6.4.4 and below may allowFortinet FortiClientEMS
- CVE-2021-41063SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attacke
- CVE-2021-41090Instance config inline secret exposuregrafana agent · github.com/grafana/agent
- CVE-2021-41450An HTTP request smuggling attack in TP-Link AX10v1 before v1_211117 allows a remote unauthenticated attacker to DoS the web application via
- CVE-2021-40861A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) 9.0.017.07 allows an attacker to exe
- CVE-2021-40860A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) before 9.0.013.11 allows an attacker
- CVE-2021-42835An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee.
- CVE-2021-25527Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to accesSamsung Mobile Samsung Pay
- CVE-2021-25526Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action.Samsung Mobile Samsung Blockchain Wallet
- CVE-2021-25525Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFCSamsung Mobile Samsung Pay
- CVE-2021-25524Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID.Samsung Mobile Contacts
- CVE-2021-25523Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID.Samsung Mobile SamsungDialer
- CVE-2021-25522Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captuSamsung Mobile Samsung Capture
- CVE-2021-25521Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in SSamsung Mobile Samsung Internet
- CVE-2021-25520Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusteSamsung Mobile Samsung Internet
- CVE-2021-25519An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC information without pSamsung Mobile Devices
- CVE-2021-25518An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution.Samsung Mobile Devices
- CVE-2021-25516An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locatioSamsung Mobile Devices
- CVE-2021-25515An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID.Samsung Mobile Devices
- CVE-2021-25514An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information.Samsung Mobile Devices
- CVE-2021-25513An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some dSamsung Mobile Devices
- CVE-2021-25512An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities.Samsung Mobile Devices
- CVE-2021-25511An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path Samsung Mobile Devices
- CVE-2021-25510An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution.Samsung Mobile Devices
- CVE-2021-37097There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37093There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers stHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37092There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affeHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37075There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37074There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privileHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37069There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affectedHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37054There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability mayHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37053There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37052There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leaHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37051There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memoHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37050There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect serHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37049There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memorHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37045There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedlHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37044There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availabiliHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37040There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalatiHuawei EMUI · Huawei Magic UI +1
- CVE-2021-37039There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS.Huawei EMUI · Huawei Magic UI +1
- CVE-2021-37037There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to Huawei EMUI · Huawei Magic UI +1
- CVE-2021-41013An improper access control vulnerability [CWE-284] in FortiWeb versions 6.4.1 and below and 6.3.15 and below in the Report Browse section ofFortinet FortiWeb
- CVE-2021-36188A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 Fortinet FortiWeb
- CVE-2021-43063A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and 6.4.0, versionFortinet FortiWeb
- CVE-2021-36190A unintended proxy or intermediary ('confused deputy') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows an unauthenticaFortinet FortiWeb
- CVE-2021-36191A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to use Fortinet FortiWeb
- CVE-2021-41015A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 Fortinet FortiWeb
- CVE-2021-43064A url redirection to untrusted site ('open redirect') in Fortinet FortiWeb version 6.4.1 and 6.4.0, version 6.3.15 and below, version 6.2.6 Fortinet FortiWeb
- CVE-2021-26103An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison 2.0.3 and below, 1.2.1Fortinet FortiOS
- CVE-2021-32591A missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS credentials in FortiSandbox before 4.0.1, FFortinet FortiSandbox
- CVE-2021-42752A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows aFortinet FortiWLM
- CVE-2021-41029A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiWLM version 8.6.1 and below allows aFortinet FortiWLM
- CVE-2021-44557National Library of the Netherlands multiNER <= c0440948057afc6e3d6b4903a7c05e666b94a3bc is affected by an XML External Entity (XXE) vulnera
- CVE-2021-44556National Library of the Netherlands digger < 6697d1269d981e35e11f240725b16401b5ce3db5 is affected by a XML External Entity (XXE) vulnerabili
- CVE-2021-42757A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated lFortinet FortiOS · Fortinet FortiDDoS-F +12
- CVE-2021-31850Denial of Service in Database Security on WindowsMcAfee Database Security
- CVE-2021-4050Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatlivehelperchat/livehelperchat · remdex/livehelperchat
- CVE-2021-20047SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability.SonicWall Global VPN Client
- CVE-2021-20045A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potentialSonicWall SMA100
- CVE-2021-20044A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS systemSonicWall SMA100
- CVE-2021-20043A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially exeSonicWall SMA100
- CVE-2021-20042An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules.SonicWall SMA100
- CVE-2021-20041An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfileSonicWall SMA100
- CVE-2021-20040A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages orSonicWall SMA100
- CVE-2018-25020The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructio
- CVE-2020-2242174CMS v6.0.4 was discovered to contain a cross-site scripting (XSS) vulnerability via /index.php?m=&c=help&a=help_list&key.
- CVE-2021-3370DouPHP v1.6 was discovered to contain a cross-site scripting (XSS) vulnerability via /admin/cloud.php.
- CVE-2021-41309Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access revoked to export aAtlassian Jira Server · Atlassian Jira Data Center
- CVE-2021-43527NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-Mozilla NSS