Skip to content
OpenAdvisories

Archive

15 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /15 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

255 results · Feed

  • Unscored —
    CVE-2021-0954 Public exploit

    In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to…

    Android
  • Unscored —
    CVE-2021-1044

    In eicOpsDecryptAes128Gcm of acropora/app/identity/identity_support.c, there is a possible out of bounds write due to a…

    Android
  • Unscored —
    CVE-2021-1045

    Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A

    Android
  • Unscored —
    CVE-2021-1043

    In TBD of TBD, there is a possible downgrade attack due to under utilized anti-rollback protections. This could lead to…

    Android
  • Unscored —
    CVE-2021-1042

    In dsi_panel_debugfs_read_cmdset of dsi_panel.c, there is a possible disclosure of freed kernel heap memory due to a us…

    Android
  • High 7.8
    CVE-2021-1048 Exploited

    In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lea…

    linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
    KEV May 23, 2022
  • Unscored —
    CVE-2021-1041

    In (TBD) of (TBD), there is a possible out of bounds read due to memory corruption. This could lead to local informatio…

    Android
  • Unscored —
    CVE-2021-0799

    In ActivityThread.java, there is a possible way to collide the content provider's authorities. This could lead to local…

    Android
  • Unscored —
    CVE-2021-0919

    In getService of IServiceManager.cpp, there is a possible unhandled exception due to an integer overflow. This could le…

    Android
  • Unscored —
    CVE-2021-0918

    In gatt_process_notification of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check. This…

    Android
  • Medium 6.4
    CVE-2021-0920 Exploited

    In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loc…

    linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
    KEV May 23, 2022
  • Unscored —
    CVE-2021-0921

    In ParsingPackageImpl of ParsingPackageImpl.java, there is a possible parcel serialization/deserialization mismatch due…

    Android
  • Unscored —
    CVE-2021-0922

    In enforceCrossUserOrProfilePermission of PackageManagerService.java, there is a possible bypass of INTERACT_ACROSS_PRO…

    Android
  • Unscored —
    CVE-2021-0924

    In xhci_vendor_get_ops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead…

    Android
  • Unscored —
    CVE-2021-0923

    In createOrUpdate of Permission.java, there is a possible way to gain internal permissions due to a missing permission …

    Android
  • Unscored —
    CVE-2021-0925

    In rw_t4t_sm_detect_ndef of rw_t4t.cc, there is a possible out of bounds read due to an incorrect bounds check. This co…

    Android
  • Unscored —
    CVE-2021-0649

    In stopVpnProfile of Vpn.java, there is a possible VPN profile reset due to a permissions bypass. This could lead to lo…

    Android
  • Unscored —
    CVE-2021-0650

    In WT_InterpolateNoLoop of eas_wtengine.c, there is a possible out of bounds read due to an incorrect bounds check. Thi…

    Android
  • Unscored —
    CVE-2021-0926

    In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's consent due to a mi…

    Android
  • Unscored —
    CVE-2021-0927

    In requestChannelBrowsable of TvInputManagerService.java, there is a possible permission bypass due to a logic error in…

    Android
  • Unscored —
    CVE-2021-0928 Public exploit

    In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due …

    Android
  • Unscored —
    CVE-2021-0929

    In ion_dma_buf_end_cpu_access and related functions of ion.c, there is a possible way to corrupt memory due to a use af…

    linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  • Unscored —
    CVE-2021-0930

    In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to a missing bounds c…

    Android
  • Unscored —
    CVE-2021-0931

    In getAlias of BluetoothDevice.java, there is a possible way to create misleading permission dialogs due to missing dat…

    Android
  • Unscored —
    CVE-2021-0889

    In Android TV , there is a possible silent pairing due to lack of rate limiting in the pairing flow. This could lead to…

    Android
  • Unscored —
    CVE-2021-0932

    In showNotification of NavigationModeController.java, there is a possible confused deputy due to an unsafe PendingInten…

    Android
  • Unscored —
    CVE-2021-0653

    In enqueueNotification of NetworkPolicyManagerService.java, there is a possible way to retrieve a trackable identifier …

    Android
  • Unscored —
    CVE-2021-0933

    In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to int…

    Android
  • Unscored —
    CVE-2021-0434

    In onReceive of BluetoothPermissionRequest.java, there is a possible phishing attack allowing a malicious Bluetooth dev…

    Android
  • High 8.1
    CVE-2021-43935

    ICSMA-21-343-01 Hillrom Welch Allyn Cardio Products

    The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accept manual entry of any active directory (AD) account provisioned in the application without supplying…

    Hillrom Welch Allyn Connex Cardio Welch Allyn X-Scribe Cardiac Stress Testing System Welch Allyn Vision Express
  • Unscored —
    CVE-2021-42216

    A Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.

  • Medium 5.3
    CVE-2021-4119 EPSS 27%

    Improper Access Control in bookstackapp/bookstack

    bookstack is vulnerable to Improper Access Control

    BookStackApp bookstackapp/bookstack ssddanbrown/bookstack Packagist
  • Medium 5.3
    CVE-2021-29847

    BMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user …

    IBM Power System S821LC Server (8001-12C)
  • High 8.8
    CVE-2021-27859

    Missing authorization vulnerability in FatPipe software

    A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows an authenticated, remote attacker with read-only privileges to create an account with administ…

    FatPipe IPVPN WARP MPVPN
  • Medium 5.3
    CVE-2021-27858 Scanner template

    Missing authorization vulnerability in FatPipe software

    A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote attacker to access at least the URL "/fpui/jsp/index.jsp" leading to unknown impact, …

    FatPipe WARP MPVPN IPVPN
  • High 7.5
    CVE-2021-27857

    FatPipe software allows unauthenticated configuration download

    A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, unauthenticated attacker to download a configuration archive. The attacker needs to …

    FatPipe IPVPN WARP MPVPN
  • High 8.8
    CVE-2021-27855

    FatPipe software allows privilege escalation

    FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote, authenticated attacker with read-only privileges to grant themselves administrative privileges. Older versions of FatPipe software may also be vulnerable. Th…

    FatPipe WARP MPVPN IPVPN
  • Critical 9.8
    CVE-2021-27856 Scanner template

    FatPipe software administrative account with no password

    FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administrative privileges and no password. Older versions of FatPipe software may also be vulnerable. The FatPipe advisory identif…

    FatPipe MPVPN IPVPN WARP
  • Unscored —
    CVE-2021-44655 Public exploit

    Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. …

  • Unscored —
    CVE-2021-44653 Public exploit

    Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel aut…