Skip to content
OpenAdvisories

Archive

December 2021

Vulnerabilities first published in this month (UTC), newest first.

← November 2021 2021 / December January 2022 →
  1. 176
  2. 238
  3. 331
  4. 41
  5. 57
  6. 655
  7. 7135
  8. 8138
  9. 954
  10. 1033
  11. 112
  12. 123
  13. 13108
  14. 14116
  15. 15255
  16. 1644
  17. 1766
  18. 183
  19. 193
  20. 2073
  21. 2166
  22. 22117
  23. 2394
  24. 2417
  25. 2532
  26. 26244
  27. 2755
  28. 2828
  29. 2921
  30. 3050
  31. 3134
All Critical High Medium Low Exploited only Public exploit

418 results · Clear filters · Feed

  • High 8.2
    CVE-2021-45643

    Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6400v2 before 1.0.4…

  • High 8.2
    CVE-2021-45645

    Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects RBS50Y before 2.7.0.…

  • High 7.9
    CVE-2021-45649

    Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6400v2 before 1.0.4.84, R670…

  • High 7.4
    CVE-2021-45651

    Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK50 before 2.7.3.22, RBR50 …

  • High 7.1
    CVE-2021-45656

    Certain NETGEAR devices are affected by server-side injection. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.…

  • High 7.1
    CVE-2021-45657

    Certain NETGEAR devices are affected by server-side injection. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.…

  • High 7.1
    CVE-2021-45658

    Certain NETGEAR devices are affected by server-side injection. This affects D7800 before 1.0.1.58, DM200 before 1.0.0.6…

  • High 7.1
    CVE-2021-45659

    Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.1…

  • High 7.1
    CVE-2021-45660

    Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.1…

  • High 7.1
    CVE-2021-45661

    Certain NETGEAR devices are affected by server-side injection. This affects RBK40 before 2.5.1.16, RBR40 before 2.5.1.1…

  • High 8.4
    CVE-2021-45679

    Certain NETGEAR devices are affected by privilege escalation. This affects R6900P before 1.3.3.140, R7000 before 1.0.11…

  • High 7.5
    CVE-2018-25023

    Use of Uninitialized Resource in smallvec

    An issue was discovered in the smallvec crate before 0.6.13 for Rust. It can create an uninitialized value of any type, including a reference type.

    smallvec rust-smallvec rust-smallvec Debian Ubuntu crates.io
  • High 8.2
    CVE-2021-35055

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  • High 8.2
    CVE-2021-37560

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  • High 8.2
    CVE-2021-37561

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  • High 8.2
    CVE-2021-37584

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  • High 8.2
    CVE-2021-37563

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  • High 8.2
    CVE-2021-32467

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  • High 8.2
    CVE-2021-32468

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  • High 8.2
    CVE-2021-32469

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  • High 8.2
    CVE-2021-37562

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protecte…

  • High 8.2
    CVE-2021-37566

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  • High 8.2
    CVE-2021-37569

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  • High 8.2
    CVE-2021-37568

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  • High 8.2
    CVE-2021-37583

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  • High 8.2
    CVE-2021-37571

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  • High 8.2
    CVE-2021-37567

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  • High 8.2
    CVE-2021-37565

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  • High 8.2
    CVE-2021-37564

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  • High 8.2
    CVE-2021-37570

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  • High 8.2
    CVE-2021-37572

    MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. (A…

  • High 7.1
    CVE-2021-4166

    Out-of-bounds Read in vim/vim

    vim is vulnerable to Out-of-bounds Read

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2021-23490

    Regular Expression Denial of Service (ReDoS)

    The package parse-link-header before 2.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the checkHeader function.

    parse-link-header npm
  • High 7.5
    CVE-2021-23574

    Prototype Pollution

    All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of [CVE-2020-28442](https://snyk.io/vuln/SNYK-JS-JSDATA-1023655).

    js-data npm
  • High 7.5
    CVE-2021-23772

    Arbitrary File Write

    This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the de…

    github.com/kataras/iris github.com/kataras/iris/v12 Go
  • High 7.5
    CVE-2021-43989

    mySCADA myPRO

    mySCADA myPRO Versions 8.20.0 and prior stores passwords using MD5, which may allow an attacker to crack the previously retrieved password hashes.

    mySCADA myPRO
  • High 7.5
    CVE-2021-43854

    Inefficient Regular Expression Complexity in nltk

    NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service (ReDoS) attac…

    nltk nltk nltk nltk Debian Ubuntu PyPI
  • High 7.8
    CVE-2021-4118

    Deserialization of Untrusted Data in pytorchlightning/pytorch-lightning

    pytorch-lightning is vulnerable to Deserialization of Untrusted Data

    pytorchlightning pytorchlightning/pytorch-lightning lightning pytorch-lightning PyPI
  • High 8.2
    CVE-2021-23175

    NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply ind…

    NVIDIA NVIDIA GeForce Experience Software
  • High 7.5
    CVE-2021-45462

    In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF.