8 December 2021

6 results · Clear filters · Feed

• Critical 10.0
  CVE-2021-21950

  An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_securit…

  Dec 8, 2021
• Critical 10.0
  CVE-2021-21951

  An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_securit…

  Dec 8, 2021
• Critical 9.1
  CVE-2021-23859

  Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products

  An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to send further unauthenticated commands to the service. On som…

  Bosch BVMS DIVAR IP all-in-one 5000 DIVAR IP 7000 R2
  Dec 8, 2021
• Critical 9.8
  CVE-2021-27860 Exploited EPSS 40%

  Arbitrary file upload vulnerability in FatPipe software

  A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identi…

  FatPipe WARP MPVPN IPVPN
  Dec 8, 2021

  KEV Jan 10, 2022
• Critical 9.8
  CVE-2021-20038 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…

  SonicWall SonicWall SMA100 Network devices
  Dec 8, 2021

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2021-44529 Exploited · Ransomware Public exploit Scanner template EPSS 99%

  A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execu…

  Dec 8, 2021

  KEV Mar 25, 2024