Archive

18 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /18 January 2022 →

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Medium 5.9

CVE-2021-45105 Public exploit EPSS 100%

Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a craf…

Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven

Dec 18, 2021
Medium 6.5

CVE-2021-4131

Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)

LiveHelperChat livehelperchat/livehelperchat remdex/livehelperchat Packagist

Dec 18, 2021
Medium 4.3

CVE-2021-4130

Cross-Site Request Forgery (CSRF) in snipe/snipe-it

snipe-it is vulnerable to Cross-Site Request Forgery (CSRF)

snipe snipe/snipe-it snipe/snipe-it Packagist

Dec 18, 2021