25 December 2021

32 results · Feed

• High 8.2
  CVE-2021-35055

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  Dec 25, 2021
• High 8.2
  CVE-2021-37560

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  Dec 25, 2021
• High 8.2
  CVE-2021-37561

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  Dec 25, 2021
• High 8.2
  CVE-2021-37584

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  Dec 25, 2021
• High 8.2
  CVE-2021-37563

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  Dec 25, 2021
• High 8.2
  CVE-2021-32467

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  Dec 25, 2021
• High 8.2
  CVE-2021-32468

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  Dec 25, 2021
• High 8.2
  CVE-2021-32469

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  Dec 25, 2021
• High 8.2
  CVE-2021-37562

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  Dec 25, 2021
• High 8.2
  CVE-2021-37566

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  Dec 25, 2021
• High 8.2
  CVE-2021-37569

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  Dec 25, 2021
• High 8.2
  CVE-2021-37568

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  Dec 25, 2021
• High 8.2
  CVE-2021-37583

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  Dec 25, 2021
• High 8.2
  CVE-2021-37571

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  Dec 25, 2021
• High 8.2
  CVE-2021-37567

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  Dec 25, 2021
• High 8.2
  CVE-2021-37565

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  Dec 25, 2021
• High 8.2
  CVE-2021-37564

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  Dec 25, 2021
• High 8.2
  CVE-2021-37570

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  Dec 25, 2021
• High 8.2
  CVE-2021-37572

  MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  Dec 25, 2021
• Medium 6.5
  CVE-2021-41788

  MediaTek microchips, as used in NETGEAR devices through 2021-12-13 and other devices, mishandle attempts at Wi-Fi authe…

  Dec 25, 2021
• High 7.1
  CVE-2021-4166

  Out-of-bounds Read in vim/vim

  vim is vulnerable to Out-of-bounds Read

  vim vim/vim vim vim Debian Ubuntu Alpine
  Dec 25, 2021
• Unscored —
  RUSTSEC-2021-0133

  cargo-download is unmaintained

  The cargo download subcommand (via cargo-download crate) is broken and maintainer has disappeared from GitHub and hasn't had any commits for a year. Using this downloader will result to corrupted crates. Maintainer has not responded to maintenance takeover. J…

  cargo-download crates.io
  Dec 25, 2021
• Medium 4.3
  CVE-2021-4162

  Cross-Site Request Forgery (CSRF) in archivy/archivy

  archivy is vulnerable to Cross-Site Request Forgery (CSRF)

  archivy archivy/archivy archivy PyPI
  Dec 25, 2021
• Unscored —
  CVE-2021-45484

  In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG.

  Dec 25, 2021
• Unscored —
  CVE-2021-45485 Public exploit

  In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 25, 2021
• Unscored —
  CVE-2021-45486

  In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 25, 2021
• Unscored —
  CVE-2021-45487

  In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.

  Dec 25, 2021
• Unscored —
  CVE-2021-45488

  In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.

  Dec 25, 2021
• Unscored —
  CVE-2021-45489

  In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG.

  Dec 25, 2021
• Unscored —
  CVE-2021-45481

  In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::creat…

  qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine
  Dec 25, 2021
• Unscored —
  CVE-2021-45482

  In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability …

  qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine
  Dec 25, 2021
• Unscored —
  CVE-2021-45483

  In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-…

  qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine
  Dec 25, 2021