# CVEs published 2021-12-19

3 CVEs were published on December 19, 2021: 0 critical, 1 high. Days are UTC.

- [CVE-2021-4136](https://cve.now/CVE-2021-4136.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.3, vim/vim)
- [CVE-2021-45041](https://cve.now/CVE-2021-45041.md): SuiteCRM before 7.12.2 and 8.x before 8.0.1 allows authenticated SQL injection via the Tooltips action in the Project module, involving reso (no CVSS)
- [CVE-2021-43083](https://cve.now/CVE-2021-43083.md): Apache PLC4X 0.9.0 Buffer overflow in PLC4C via crafted server response (no CVSS, Apache Software Foundation Apache PLC4X)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-12-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.