Archive

30 December 2021

Vulnerabilities first published on this day (UTC), newest first.

← November 2021 2021 / December /30 January 2022 →

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

High 7.2

CVE-2021-43861

Incorrect sanitisation function leads to `XSS`

Mermaid is a Javascript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. Prior to version 8.13.8, malicious diagrams can run javascript code at diagram readers' machines. Us…

mermaid-js mermaid node-mermaid mermaid Debian Ubuntu npm

Dec 30, 2021
High 7.5

CVE-2021-4185

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injecti…

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine

Dec 30, 2021
High 7.5

CVE-2021-4182

Crash in the RFC 7468 dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or…

Wireshark Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine

Dec 30, 2021
High 7.5

CVE-2021-4181

Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injectio…

Wireshark Foundation Wireshark wireshark wireshark Debian Azure Linux Alpine

Dec 30, 2021
High 7.5

CVE-2021-4190

Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture f…

Wireshark Foundation Wireshark wireshark wireshark Debian Azure Linux

Dec 30, 2021
High 7.5

CVE-2021-4184

Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packe…

Wireshark Foundation Wireshark wireshark wireshark Debian Azure Linux Alpine

Dec 30, 2021