Archive
7 December 2021
Vulnerabilities first published on this day (UTC), newest first.
135 results · Feed
-
Unscored —
NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop…
-
Unscored —
NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and belo…
-
Unscored —
NoMachine Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below…
-
Unscored —
A denial-of-service attack in WPA2, and WPA3-SAE authentication methods in TP-Link AX10v1 before V1_211014, allows a re…
-
Unscored —
A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Androi…
-
Unscored —
An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace S…
-
Unscored —
Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web…
-
Unscored —
Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeo…
-
High 7.5
Grafana path traversal
Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url…
KEV Oct 9, 2025 -
Unscored —
A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to ex…
-
Unscored —
The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appe…
-
Unscored —
The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 exposes an API router that accepts a username, pa…
-
High 7.5
ReDos vulnerability on guest checkout email validation
Solidus is a free, open-source ecommerce platform built on Rails. Versions of Solidus prior to 3.1.4, 3.0.4, and 2.11.13 have a denial of service vulnerability that could be exploited during a guest checkout. The regular expression used to validate a guest or…
-
High 7.5CVE-2021-43789 Public exploit
Blind SQLi using Search filters in PrestaShop
PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with `orderBy` and `sortOrder` parameters. The problem is fixed in version 1.7.8.2.
-
Unscored —
There is a Improper Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may…
-
Unscored —
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to …
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability m…
-
Unscored —
There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerabil…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability m…
-
Unscored —
There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of thi…
-
Unscored —
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead…
-
Unscored —
There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead…
-
Unscored —
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to …
-
Unscored —
There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to …
-
Unscored —
There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vuln…
-
Unscored —
There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability m…
-
Unscored —
There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability ma…
-
Unscored —
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to …
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability m…
-
Unscored —
There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead…
-
Unscored —
There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability m…
-
Unscored —
There is a Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead…
-
Unscored —
There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability ma…
-
Unscored —
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead…
-
Unscored —
There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to …
-
Unscored —
There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vuln…
-
Unscored —
There is a Business Logic Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may l…
-
Unscored —
There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead…
-
Unscored —
There is a Resource Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability …