CVEs published December 28, 2021
28 CVEs were published on December 28, 2021: 0 critical, 2 high.
- Published
- 28
- Critical
- 0
- High
- 2
- Medium
- 5
- Low
- 0
- Unrated
- 21
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- FATEK Automation WinProladder
- 2
- livehelperchat/livehelperchat
- 2
- 4NB VideoOffice
- 1
- Apache Software Foundation Apache Log4j2 · org.apache.lo… +1
- 1
- github.com/foxcpp/maddy
- 1
- WOWSOFT Printchaser
- 1
- Yappli
- 1
- Zyxel GS1900 series firmware
- 1
- Zyxel GS1900 series firmware · Zyxel XGS1210 series firm… +1
- 1
High 2
Medium, low and unrated 26
- CVE-2021-44832Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationApache Software Foundation Apache Log4j2 · org.apache.lo… +1
- CVE-2020-22061SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys.
- CVE-2020-22057The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were discovered to be configured with the default
- CVE-2020-7883Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote filWOWSOFT Printchaser
- CVE-2020-7878An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions (CVE-2020-7878).4NB VideoOffice
- CVE-2021-42583A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the expogithub.com/foxcpp/maddy
- CVE-2021-45814Nettmp NNT 5.1 is affected by a SQL injection vulnerability.
- CVE-2021-45813SLICAN WebCTI 1.01 2015 is affected by a Cross Site Scripting (XSS) vulnerability.
- CVE-2021-45812NUUO Network Video Recorder NVRsolo 3.9.1 is affected by a Cross Site Scripting (XSS) vulnerability.
- CVE-2021-45903A persistent cross-site scripting (XSS) issue in the web interface of SuiteCRM before 7.10.35, and 7.11.x and 7.12.x before 7.12.2, allows a
- CVE-2019-20082ASUS RT-N53 3.0.0.4.376.3754 devices have a buffer overflow via a long lan_dns1_x or lan_dns2_x parameter to Advanced_LAN_Content.asp.
- CVE-2018-17875A remote code execution issue in the ping command on Poly Trio 8800 5.7.1.4145 devices allows remote authenticated users to execute commands
- CVE-2021-45425Reflected Cross Site Scripting (XSS) in SAFARI Montage versions 8.3 and 8.5 allows remote attackers to execute JavaScript codes.
- CVE-2021-37400An attacker may obtain the user credentials from the communication between the PLC and the software.
- CVE-2021-37401An attacker may obtain the user credentials from file servers, backup repositories, or ZLD files saved in SD cards.
- CVE-2021-40579https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access
- CVE-2021-35032A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local user to execute arbitZyxel GS1900 series firmware
- CVE-2021-35031A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmware, which could allow Zyxel GS1900 series firmware · Zyxel XGS1210 series firm… +1
- CVE-2021-4179Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatlivehelperchat/livehelperchat
- CVE-2021-4177Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchatlivehelperchat/livehelperchat
- CVE-2021-20873Yappli is an application development platform which provides the function to access a requested URL using Custom URL Scheme.Yappli
- CVE-2021-45908An issue was discovered in gif2apng 1.9.
- CVE-2021-45909An issue was discovered in gif2apng 1.9.
- CVE-2021-45910An issue was discovered in gif2apng 1.9.
- CVE-2021-45911An issue was discovered in gif2apng 1.9.
- CVE-2021-45907An issue was discovered in gif2apng 1.9.