Skip to content
OpenAdvisories

Archive

22 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /22 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

28 results · Clear filters · Feed

  • Critical 9.4
    CVE-2021-21952

    An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_security …

  • Critical 9.8
    CVE-2021-40417 EPSS 16%

    When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decodi…

  • Critical 9.8
    CVE-2021-40418 EPSS 18%

    When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assi…

  • Critical 9.1
    CVE-2021-21904

    A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Vers…

  • Critical 9.8
    CVE-2021-21903

    A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Mod…

  • Critical 9.8
    CVE-2021-21901

    A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Mod…

  • Critical 9.1
    CVE-2021-21895

    A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.…

  • Critical 9.1
    CVE-2021-21894

    A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.…

  • Critical 9.9
    CVE-2021-21892 EPSS 30%

    A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave …

  • Critical 9.1
    CVE-2021-21891

    A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierW…

  • Critical 9.1
    CVE-2021-21890

    A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierW…

  • Critical 9.9
    CVE-2021-21889

    A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 …

  • Critical 9.1
    CVE-2021-21888

    An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix Premi…

  • Critical 9.1
    CVE-2021-21887

    A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix Premier…

  • Critical 9.1
    CVE-2021-21884

    An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2…

  • Critical 9.9
    CVE-2021-21883

    An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWav…

  • Critical 9.9
    CVE-2021-21882

    An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8…

  • Critical 9.9
    CVE-2021-21881 Scanner template EPSS 37%

    An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix Pre…

  • Critical 9.9
    CVE-2021-21879

    A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8…

  • Critical 9.1
    CVE-2021-21877

    Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authent…

  • Critical 9.1
    CVE-2021-21876

    Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authentic…

  • Critical 9.1
    CVE-2021-21875

    A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter. An attacker can mak…

  • Critical 9.1
    CVE-2021-21874

    A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can ma…

  • Critical 9.1
    CVE-2021-21873

    A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can ma…

  • Critical 9.9
    CVE-2021-21872

    An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix Prem…

  • Critical 9.8
    CVE-2021-45459

    Command Injection in node-windows

    lib/cmd.js in the node-windows package before 1.0.0-beta.6 for Node.js allows command injection via the PID parameter.

    node-windows npm
  • Critical 10.0
    CVE-2021-40394

    An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7…

    gerbv gerbv Debian Ubuntu
  • Critical 10.0
    CVE-2021-40393

    An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7…

    gerbv gerbv Debian Ubuntu