CVEs published December 17, 2021
65 CVEs were published on December 17, 2021: 3 critical, 8 high. 1 is now in CISA KEV.
- Published
- 65
- Critical
- 3
- High
- 8
- Medium
- 6
- Low
- 2
- Unrated
- 46
- Now in CISA KEV
- 1
- Fix available
- 15
Most affected products
- MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- 13
- numpy
- 4
- TCMAN GIM
- 4
- xorg-x11-server
- 4
- SICK SOPAS ET
- 3
- Mattermost
- 2
- Mitsubishi Electric GX Works2; Mitsubishi Electric MELSOFT…
- 2
- pyo
- 2
- SUSE Longhorn
- 2
- Apache Software Foundation Apache NiFi · org.apache.nifi:ni…
- 1
Critical 3
High 8
- CVE-2021-23450Prototype Pollutiondojo
- CVE-2021-23797Directory Traversalhttp-server-node
- CVE-2020-8968Parallels Remote Application Server credentials management errorsParallels Remote Application Server
- CVE-2021-40853TCMAN GIM missing authorization vulnerabilityTCMAN GIM
- CVE-2021-40851TCMAN GIM SQL injection vulnerabilityTCMAN GIM
- CVE-2021-22054VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5VMware Workspace ONE UEM console
- CVE-2021-4132Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatlivehelperchat/livehelperchat · remdex/livehelperchat
- CVE-2021-36780Unauthorized data access from replicas through vulnerable instance manager podsSUSE Longhorn
Medium, low and unrated 54
- CVE-2021-41500Incomplete string comparison vulnerability exits in cvxopt.org cvxop <= 1.2.6 in APIs (cvxopt.cholmod.diag, cvxopt.cholmod.getfactor, cvxoptcvxopt
- CVE-2021-41499Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo < 1.03 in the Server_debug function, which allows remote attackers to condpyo
- CVE-2021-41498Buffer overflow in ajaxsoundstudio.com Pyo < and 1.03 in the Server_jack_init function.pyo
- CVE-2021-41497Null pointer reference in CMS_Conservative_increment_obj in RaRe-Technologies bounter version 1.01 and 1.10, allows attackers to conduct Denbounter
- CVE-2021-23814This affects versions of the package unisharp/laravel-filemanager before 2.6.2.unisharp/laravel-filemanager
- CVE-2021-41496Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service anumpy
- CVE-2021-41495Null Pointer Dereference vulnerability exists in numpy.sort in NumPy < and 1.19 in the PyArray_DescrNew function due to missing return-valnumpy
- CVE-2021-34141An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying bynumpy
- CVE-2021-33430A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dinumpy
- CVE-2021-43838Regular Expression Denial of Service (ReDoS) in jsx-slackyhatt jsx-slack · jsx-slack
- CVE-2021-43840Path traversal in message_busdiscourse message_bus · message_bus
- CVE-2021-38883IBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scriptiIBM Business Process Manager · IBM Business Automation Work…
- CVE-2020-18081The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext th
- CVE-2020-18078A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password.
- CVE-2020-18077A buffer overflow vulnerability in the Virtual Path Mapping component of FTPShell v6.83 allows attackers to cause a denial of service (DoS).
- CVE-2021-40852TCMAN GIM open redirect vulnerabilityTCMAN GIM
- CVE-2021-37863Mattermost 6.0 and earlier fails to sufficiently validate parameters during post creation, which allows authenticated attackers to cause a cMattermost
- CVE-2021-37862Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into Mattermost
- CVE-2021-20607Integer Underflow vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions 2Mitsubishi Electric GX Works2; Mitsubishi Electric MELSOFT…
- CVE-2021-20606Out-of-bounds Read vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior, Mitsubishi Electric MELSOFT Navigator versions Mitsubishi Electric GX Works2; Mitsubishi Electric MELSOFT…
- CVE-2021-20608Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric GX Works2 versions 1.606G and prior allows a remoteGX Works2
- CVE-2021-0674In alac decoder, there is a possible out of bounds read due to an incorrect bounds check.MT6570, MT6580, MT6735, MT6737, MT6739, MT6750, MT6750S, MT…
- CVE-2021-0673In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check.MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, MT6875, MT…
- CVE-2021-0903In apusys, there is a possible out of bounds write due to a missing bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0902In apusys, there is a possible out of bounds read due to an incorrect bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0901In apusys, there is a possible memory corruption due to a missing bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0899In apusys, there is a possible memory corruption due to a use after free.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0900In apusys, there is a possible out of bounds read due to an incorrect bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0898In apusys, there is a possible memory corruption due to a use after free.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0896In apusys, there is a possible out of bounds write due to a missing bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0897In apusys, there is a possible out of bounds write due to a missing bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0895In apusys, there is a possible out of bounds write due to a missing bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0894In apusys, there is a possible out of bounds write due to a missing bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0679In apusys, there is a possible memory corruption due to a missing bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0893In apusys, there is a possible memory corruption due to a use after free.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0678In apusys, there is a possible out of bounds write due to a missing bounds check.MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6…
- CVE-2021-0676In geniezone driver, there is a possible out of bounds read due to an incorrect bounds check.MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6…
- CVE-2021-0677In ccu driver, there is a possible out of bounds read due to an integer overflow.MT6833, MT6853, MT6873, MT6877, MT6885, MT6889, MT8771, MT8…
- CVE-2021-32499SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the command line arguments to pass in any value to the Emulator executableSICK SOPAS ET
- CVE-2021-32498SICK SOPAS ET before version 4.8.0 allows attackers to manipulate the pathname of the emulator and use path traversal to run an arbitrary exSICK SOPAS ET
- CVE-2021-32497SICK SOPAS ET before version 4.8.0 allows attackers to wrap any executable file into an SDD and provide this to a SOPAS ET user.SICK SOPAS ET
- CVE-2021-44035Wolters Kluwer TeamMate AM 12.4 Update 1 mishandles attachment uploads, such that an authenticated user may download and execute malicious f
- CVE-2021-41451A misconfiguration in HTTP/1.0 and HTTP/1.1 of the web interface in TP-Link AX10v1 before V1_211117 allows a remote unauthenticated attacker
- CVE-2021-45042In HashiCorp Vault and Vault Enterprise before 1.7.7, 1.8.x before 1.8.6, and 1.9.x before 1.9.1, clusters using the Integrated Storage back
- CVE-2021-42584A Stored Cross Site Scripting (XSS) issue exists in Convos-Chat before 6.32.
- CVE-2021-43678Wechat-php-sdk v1.10.2 is affected by a Cross Site Scripting (XSS) vulnerability in Wechat.php.gaoming13/wechat-php-sdk
- CVE-2021-44145Apache NiFi information disclosure by XXEApache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2021-41843An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from al
- CVE-2021-4008A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14.xorg-x11-server
- CVE-2021-4009A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14.xorg-x11-server
- CVE-2021-4010A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14.xorg-x11-server
- CVE-2021-4011A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14.xorg-x11-server
- CVE-2021-44857An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1.
- CVE-2021-45038An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1.