Skip to content
OpenAdvisories

Archive

December 2021

Vulnerabilities first published in this month (UTC), newest first.

← November 2021 2021 / December January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

166 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-36564

    Deserialization of Untrusted Data in topthink/framework

    ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php.

    topthink/framework Packagist
  • Critical 9.8
    CVE-2021-43931

    Distributed Data Systems WebHM

    The authentication algorithm of the WebHMI portal is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

    Distributed Data Systems WebHMI
  • Critical 10.0
    CVE-2021-43936 Public exploit EPSS 36%

    Distributed Data Systems WebHM

    The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.

    Distributed Data Systems WebHMI
  • Critical 9.8
    CVE-2021-43676

    Path manipulation in matyhtf/framework

    matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php.

    matyhtf/framework Packagist
  • Critical 9.8
    CVE-2021-44278

    Path traversal in librenms/librenms

    Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php.

    librenms/librenms Packagist
  • Critical 9.0
    CVE-2021-40333

    Weak default credential associated with TCP port 26

    Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi En…

    Hitachi Energy FOX61x XCM20 ICS / OT