Skip to content
OpenAdvisories

Archive

December 2021

Vulnerabilities first published in this month (UTC), newest first.

7 results · Clear filters · Feed

  • High 8.1
    CVE-2021-44207 Exploited EPSS 17%

    Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

    KEV Dec 23, 2024
  • High 7.5
    CVE-2021-22054 Exploited Public exploit EPSS 100%

    VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and…

    KEV Mar 9, 2026
  • High 7.8
    CVE-2021-1048 Exploited

    In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lea…

    KEV May 23, 2022
  • High 7.1
    CVE-2021-43890 Exploited · Ransomware EPSS 11%

    Windows AppX Installer Spoofing Vulnerability

    We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as Em…

    KEV Dec 15, 2021
  • High 7.8
    CVE-2021-43226 Exploited · Ransomware Public exploit

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    KEV Oct 6, 2025
  • High 7.5
    CVE-2021-43798 Exploited Public exploit EPSS 89%

    Grafana path traversal

    Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url…

    KEV Oct 9, 2025
  • High 8.1
    CVE-2021-23758 Exploited Public exploit EPSS 83%

    Deserialization of Untrusted Data

    All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

    KEV Aug 26, 2026