Skip to content
OpenAdvisories

Archive

22 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /22 January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

117 results · Feed

  • High 8.8
    CVE-2021-21911

    A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-S…

  • High 8.8
    CVE-2021-21910

    A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-S…

  • Medium 6.0
    CVE-2021-21909

    Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. …

  • High 7.5
    CVE-2021-23228

    Delta Electronics DIAEnergie (Update A)

    DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.QueryString”.

    Delta Electronics DIAEnergie ICS / OT
  • Medium 6.0
    CVE-2021-21908

    Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attem…

  • Medium 6.5
    CVE-2021-31558 EPSS 11%

    Delta Electronics DIAEnergie (Update A)

    DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAE_hierarchyHandler.ashx”.

    Delta Electronics DIAEnergie ICS / OT
  • High 7.5
    CVE-2021-44544

    Delta Electronics DIAEnergie (Update A)

    DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter “name” of the script “HandlerEnergyType.ashx”.

    Delta Electronics DIAEnergie ICS / OT
  • High 7.5
    CVE-2021-44471

    Delta Electronics DIAEnergie (Update A)

    DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script “DIAE_HandlerAlarmGroup.ashx”.

    Delta Electronics DIAEnergie ICS / OT
  • Medium 4.9
    CVE-2021-21907

    A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC M…

  • High 8.2
    CVE-2021-21906

    Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module …

  • High 8.2
    CVE-2021-21905

    Stack-based buffer overflow vulnerability exists in how the CMA readfile function of Garrett Metal Detectors iC Module …

  • Medium 6.5
    CVE-2021-36886

    WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.5.9).

    CipherCoin Contact Form 7 Database Addon – CFDB7 (WordPress plugin) Web / CMS
  • Critical 9.1
    CVE-2021-21904

    A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Vers…

  • Critical 9.8
    CVE-2021-21903

    A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Mod…

  • High 7.5
    CVE-2021-21902

    An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC Mo…

  • Critical 9.8
    CVE-2021-21901

    A stack-based buffer overflow vulnerability exists in the CMA check_udp_crc function of Garrett Metal Detectors’ iC Mod…

  • Medium 4.9
    CVE-2021-21896

    A directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050…

  • Critical 9.1
    CVE-2021-21895

    A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.…

  • Critical 9.1
    CVE-2021-21894

    A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.…

  • Critical 9.9
    CVE-2021-21892 EPSS 30%

    A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave …

  • Critical 9.1
    CVE-2021-21891

    A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierW…

  • Critical 9.1
    CVE-2021-21890

    A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierW…

  • Medium 6.1
    CVE-2021-36885

    WordPress Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

    Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Contact Form 7 Database Addon – CFDB7 WordPress plugin (versions <= 1.2.6.1).

    CipherCoin Contact Form 7 Database Addon – CFDB7 (WordPress plugin) Web / CMS
  • Critical 9.9
    CVE-2021-21889

    A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 …

  • Critical 9.1
    CVE-2021-21888

    An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix Premi…

  • Critical 9.1
    CVE-2021-21887

    A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix Premier…

  • High 7.2
    CVE-2021-21885

    A directory traversal vulnerability exists in the Web Manager FsMove functionality of Lantronix PremierWave 2050 8.9.0.…

  • Medium 4.3
    CVE-2021-21886

    A directory traversal vulnerability exists in the Web Manager FSBrowsePage functionality of Lantronix PremierWave 2050 …

  • Critical 9.1
    CVE-2021-21884

    An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2…

  • Critical 9.9
    CVE-2021-21883

    An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWav…

  • Critical 9.9
    CVE-2021-21882

    An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8…

  • Critical 9.9
    CVE-2021-21881 Scanner template EPSS 37%

    An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix Pre…

  • High 7.2
    CVE-2021-21880

    A directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.…

  • Critical 9.9
    CVE-2021-21879

    A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8…

  • Medium 4.9
    CVE-2021-21878

    A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix Pre…

  • Critical 9.1
    CVE-2021-21877

    Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authent…

  • Critical 9.1
    CVE-2021-21876

    Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authentic…

  • Critical 9.1
    CVE-2021-21875

    A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter. An attacker can mak…

  • Critical 9.1
    CVE-2021-21874

    A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can ma…

  • Critical 9.1
    CVE-2021-21873

    A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can ma…