Archive

28 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /28 January 2022 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 6.6

CVE-2021-44832 Public exploit EPSS 98%

Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control o…

Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven

Dec 28, 2021
Medium 6.4

CVE-2021-35032

A vulnerability in the 'libsal.so' of the Zyxel GS1900 series firmware version 2.60 could allow an authenticated local …

Zyxel GS1900 series firmware Network devices

Dec 28, 2021
Medium 6.8

CVE-2021-35031

A vulnerability in the TFTP client of Zyxel GS1900 series firmware, XGS1210 series firmware, and XGS1250 series firmwar…

Zyxel GS1900 series firmware XGS1250 series firmware XGS1210 series firmware Network devices

Dec 28, 2021
Medium 6.6

CVE-2021-4179

Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

LiveHelperChat livehelperchat/livehelperchat

Dec 28, 2021
Medium 4.3

CVE-2021-4177

Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat

livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information

LiveHelperChat livehelperchat/livehelperchat

Dec 28, 2021