December 2021

6 results · Clear filters · Feed

• Medium 6.6
  CVE-2021-44832 Public exploit EPSS 98%

  Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

  Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control o…

  Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
  Dec 28, 2021
• Medium 6.8
  CVE-2021-45511 Public exploit EPSS 19%

  Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 202…

  Dec 26, 2021
• Medium 5.9
  CVE-2021-45105 Public exploit EPSS 100%

  Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

  Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a craf…

  Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
  Dec 18, 2021
• Medium 4.3
  CVE-2021-43908 Public exploit

  Visual Studio Code Spoofing Vulnerability

  Visual Studio Code Spoofing Vulnerability

  Microsoft Visual Studio Code
  Dec 15, 2021
• Medium 5.5
  CVE-2021-43224 Public exploit

  Windows Common Log File System Driver Information Disclosure Vulnerability

  Windows Common Log File System Driver Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Dec 15, 2021
• Medium 6.1
  CVE-2021-40154 Public exploit

  NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration re…

  Dec 1, 2021