CVEs published December 29, 2021
21 CVEs were published on December 29, 2021: 0 critical, 8 high.
- Published
- 21
- Critical
- 0
- High
- 8
- Medium
- 12
- Low
- 0
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- ifmeorg ifme
- 4
- Emuse eServices / eNvoice
- 2
- livehelperchat/livehelperchat
- 2
- Zyxel NBG6604 series firmware
- 2
- Carinal Tien Hospital Health Report System
- 1
- celery
- 1
- Changing MOTP
- 1
- ForeScout eServices / eNvoice
- 1
- Linn Products Limited Kazoo Server
- 1
- Microsoft SharePoint Enterprise Server · Microsoft SharePoi…
- 1
High 8
- CVE-2021-43876Microsoft SharePoint Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2021-23727Stored Command Injectioncelery
- CVE-2021-36722Emuse - eServices / eNvoice SQL injectionEmuse eServices / eNvoice
- CVE-2021-38688Improper Authentication in QfileQNAP Systems Qfile
- CVE-2021-38687Stack Overflow Vulnerability in Surveillance StationQNAP Systems Surveillance Station
- CVE-2021-35034An insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware could allow a remote attacker to access thZyxel NBG6604 series firmware
- CVE-2021-44161Changing Information Technology Inc. MOTP(Mobile One Time Password) - SQL InjectionChanging MOTP
- CVE-2021-44160Carinal Tien Hospital Health Report System - Authorization Bypass Through User-Controlled KeyCarinal Tien Hospital Health Report System
Medium, low and unrated 13
- CVE-2021-4187Use After Free in vim/vimvim/vim
- CVE-2021-36724ForeScout - SecureConnector Local Service DoSForeScout eServices / eNvoice
- CVE-2021-25993Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editorRequarks wiki
- CVE-2021-45885An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8).
- CVE-2021-4175Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchatlivehelperchat/livehelperchat
- CVE-2021-4176Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchatlivehelperchat/livehelperchat
- CVE-2021-36723Emuse - eServices / eNvoice Exposure Of Private Personal InformationEmuse eServices / eNvoice
- CVE-2021-38680Reflected XSS in Kazoo ServerLinn Products Limited Kazoo Server
- CVE-2021-35035A cleartext storage of sensitive information vulnerability in the Zyxel NBG6604 firmware could allow a remote, authenticated attacker to obtZyxel NBG6604 series firmware
- CVE-2021-25991ifme - Improper Access Control leads to admin deactivationifmeorg ifme
- CVE-2021-25990ifme - Stored Cross-Site Scripting (XSS) in Contacts sectionifmeorg ifme
- CVE-2021-25989ifme - Stored Cross-Site Scripting (XSS) in Groups sectionifmeorg ifme
- CVE-2021-25988ifme - Stored Cross-Site Scripting (XSS) in Notifications sectionifmeorg ifme