Skip to content
OpenAdvisories

Archive

December 2021

Vulnerabilities first published in this month (UTC), newest first.

← November 2021 2021 / December January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 8.1
    CVE-2021-44207 Exploited EPSS 17%

    Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

    KEV Dec 23, 2024
  • High 7.5
    CVE-2021-22054 Exploited Public exploit EPSS 100%

    VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and…

    KEV Mar 9, 2026
  • High 7.8
    CVE-2021-1048 Exploited

    In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lea…

    linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
    KEV May 23, 2022
  • Medium 6.4
    CVE-2021-0920 Exploited

    In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to loc…

    linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
    KEV May 23, 2022
  • High 7.1
    CVE-2021-43890 Exploited · Ransomware EPSS 11%

    Windows AppX Installer Spoofing Vulnerability

    We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as Em…

    Microsoft App Installer
    KEV Dec 15, 2021
  • High 7.8
    CVE-2021-43226 Exploited · Ransomware Public exploit

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Oct 6, 2025
  • Critical 9.0
    CVE-2021-45046 Exploited · Ransomware Public exploit EPSS 100%

    Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

    It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-defaul…

    Apache Software Foundation Apache Log4j apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
    KEV May 1, 2023
  • Medium 6.8
    CVE-2021-39935 Exploited EPSS 36%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions star…

    GitLab GitLab gitlab Web / CMS Ubuntu
    KEV Feb 3, 2026
  • Critical 9.8
    CVE-2021-44515 Exploited EPSS 100%

    Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the serve…

    KEV Dec 10, 2021
  • Critical 10.0
    CVE-2021-44228 Exploited · Ransomware Public exploit EPSS 100%

    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who …

    Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
    KEV Dec 10, 2021
  • Critical 9.8
    CVE-2021-27860 Exploited EPSS 40%

    Arbitrary file upload vulnerability in FatPipe software

    A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The FatPipe advisory identi…

    FatPipe IPVPN WARP MPVPN
    KEV Jan 10, 2022
  • Critical 9.8
    CVE-2021-20038 Exploited · Ransomware Public exploit EPSS 100%

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows…

    SonicWall SonicWall SMA100 Network devices
    KEV Jan 28, 2022
  • Critical 9.8
    CVE-2021-44529 Exploited · Ransomware Public exploit EPSS 99%

    A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execu…

    KEV Mar 25, 2024
  • High 7.5
    CVE-2021-43798 Exploited Public exploit EPSS 89%

    Grafana path traversal

    Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url…

    Grafana Grafana github.com/grafana/grafana grafana Web / CMS Alpine Go
    KEV Oct 9, 2025
  • High 8.1
    CVE-2021-23758 Exploited Public exploit EPSS 83%

    Deserialization of Untrusted Data

    All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

    AjaxNetProfessional NuGet
    KEV Aug 26, 2026