Skip to content
OpenAdvisories

Archive

December 2021

Vulnerabilities first published in this month (UTC), newest first.

← November 2021 2021 / December January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

166 results · Clear filters · Feed

  • Critical 9.6
    CVE-2021-45610

    Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0…

  • Critical 9.6
    CVE-2021-45611

    Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects DC112A before 1.…

  • Critical 9.6
    CVE-2021-45612

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5…

  • Critical 9.6
    CVE-2021-45613

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5…

  • Critical 9.6
    CVE-2021-45614

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1…

  • Critical 9.6
    CVE-2021-45615

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5…

  • Critical 9.6
    CVE-2021-45616

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 3.…

  • Critical 9.8
    CVE-2021-45617

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5…

  • Critical 9.6
    CVE-2021-45618

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0…

  • Critical 9.6
    CVE-2021-45619

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects EX6200v2 before …

  • Critical 9.6
    CVE-2021-45620

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5…

  • Critical 9.6
    CVE-2021-45621

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5…

  • Critical 9.6
    CVE-2021-45622

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5…

  • Critical 9.6
    CVE-2021-45624

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7000v2 before 1…

  • Critical 9.6
    CVE-2021-45625

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects XR300 before 1.0…

  • Critical 9.6
    CVE-2021-45626

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK20 before 2.6…

  • Critical 9.6
    CVE-2021-45627

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.…

  • Critical 9.6
    CVE-2021-45628

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5…

  • Critical 9.6
    CVE-2021-45629

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.…

  • Critical 10.0
    CVE-2021-45630

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5…

  • Critical 9.6
    CVE-2021-45631

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR40 before 2.5…

  • Critical 9.6
    CVE-2021-45632

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.…

  • Critical 9.6
    CVE-2021-45633

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.…

  • Critical 9.6
    CVE-2021-45634

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.…

  • Critical 9.6
    CVE-2021-45635

    Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects CBR750 before 4.…

  • Critical 9.6
    CVE-2021-45638

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D622…

  • Critical 9.1
    CVE-2021-45650

    Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R7000 before 1.0.11.110, R790…

  • Critical 9.6
    CVE-2021-45652

    Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK352 before 4.4.0.10, RBR35…

  • Critical 9.6
    CVE-2021-45654

    NETGEAR XR1000 devices before 1.0.0.58 are affected by disclosure of sensitive information.

  • Critical 9.0
    CVE-2021-4072

    Cross-site Scripting (XSS) - Stored in elgg/elgg

    elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    Elgg elgg/elgg elgg/elgg Packagist
  • Critical 9.1
    CVE-2021-43985

    mySCADA myPRO

    An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.

    mySCADA myPRO
  • Critical 10.0
    CVE-2021-43981

    mySCADA myPRO

    mySCADA myPRO: Versions 8.20.0 and prior has a feature to send emails, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.

    mySCADA myPRO
  • Critical 10.0
    CVE-2021-44453

    mySCADA myPRO

    mySCADA myPRO: Versions 8.20.0 and prior has a vulnerable debug interface which includes a ping utility, which may allow an attacker to inject arbitrary operating system commands.

    mySCADA myPRO
  • Critical 10.0
    CVE-2021-43984

    mySCADA myPRO

    mySCADA myPRO: Versions 8.20.0 and prior has a feature where the firmware can be updated, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.

    mySCADA myPRO
  • Critical 10.0
    CVE-2021-22657

    mySCADA myPRO

    mySCADA myPRO: Versions 8.20.0 and prior has a feature where the API password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.

    mySCADA myPRO
  • Critical 9.8
    CVE-2021-43987

    mySCADA myPRO

    An additional, nondocumented administrative account exists in mySCADA myPRO Versions 8.20.0 and prior that is not exposed through the web interface, which cannot be deleted or changed through the regular web interface.

    mySCADA myPRO
  • Critical 10.0
    CVE-2021-23198

    mySCADA myPRO

    mySCADA myPRO: Versions 8.20.0 and prior has a feature where the password can be specified, which may allow an attacker to inject arbitrary operating system commands through a specific parameter.

    mySCADA myPRO
  • Critical 9.8
    CVE-2021-44548

    Apache Solr information disclosure vulnerability through DataImportHandler

    An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows UNC path resulting in an SMB network call being made from the Solr host to another host on the network. If the attacker has wider access to …

    Apache Software Foundation Apache Solr org.apache.solr:solr-parent Maven
  • Critical 9.4
    CVE-2021-21952

    An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_security …

  • Critical 9.8
    CVE-2021-40417 EPSS 16%

    When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decodi…