Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2021

79 records · 15 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2021-33265
    43Plan

    D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability

    CriticalCVSS 9.8No exploitEPSS 13%

    dlink · dir-809 firmwareDec 1, 2021

  • CVE-2021-33266
    44Plan

    D-Link DIR-809 devices with firmware through DIR-809Ax_FW1.12WWB03_20190410 were discovered to contain a stack buffer overflow vulnerability

    CriticalCVSS 9.8No exploitEPSS 16%

    dlink · dir-809 firmwareDec 1, 2021

  • CVE-2021-44352
    43Plan

    A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18_multi device via the list parameter in a post request in g

    CriticalCVSS 9.8No exploitEPSS 13%

    tendacn · ac15 firmwareDec 3, 2021

  • CVE-2021-23758
    94Now

    Deserialization of Untrusted Data

    CriticalCVSS 9.8KEVWeaponizedEPSS 82%

    ajaxpro.2 project · ajaxpro.2Dec 3, 2021

  • CVE-2021-24917
    60This week

    WPS Hide Login < 1.9.1 - Protection Bypass with Referer-Header

    HighCVSS 7.5WeaponizedEPSS 72%

    wpserveur · wps hide loginDec 6, 2021

  • CVE-2021-24931
    63This week

    Secure Copy Content Protection and Content Locking < 2.8.2 - Unauthenticated SQL Injection

    CriticalCVSS 9.8WeaponizedEPSS 78%

    ays-pro · secure copy content protection and content lockingDec 6, 2021

  • CVE-2021-43936
    50Plan

    Distributed Data Systems WebHM

    CriticalCVSS 9.8Proof of conceptEPSS 35%

    webhmi · webhmi firmwareDec 6, 2021

  • CVE-2021-42125
    59Plan

    An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to

    HighCVSS 8.8No exploitEPSS 81%

    ivanti · avalancheDec 7, 2021

  • CVE-2021-42127
    59Plan

    A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execu

    CriticalCVSS 9.8No exploitEPSS 65%

    ivanti · avalancheDec 7, 2021

  • CVE-2021-42129
    58Plan

    A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform

    HighCVSS 8.8No exploitEPSS 77%

    ivanti · avalancheDec 7, 2021

  • CVE-2021-42130
    54Plan

    A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Ser

    HighCVSS 8.8No exploitEPSS 62%

    ivanti · avalancheDec 7, 2021

  • CVE-2021-42131
    55Plan

    A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privi

    HighCVSS 8.8No exploitEPSS 66%

    ivanti · avalancheDec 7, 2021

  • CVE-2021-42132
    56Plan

    A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform

    HighCVSS 8.8No exploitEPSS 70%

    ivanti · avalancheDec 7, 2021

  • CVE-2021-40859
    61This week

    Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management app

    CriticalCVSS 9.8Proof of conceptEPSS 71%

    auerswald · compact 5500r firmwareDec 7, 2021

  • CVE-2021-43798
    87Now

    Grafana path traversal

    HighCVSS 7.5KEVWeaponizedEPSS 88%

    grafana · grafanaDec 7, 2021

  • CVE-2021-38759
    44Plan

    Raspberry Pi OS through 5.10 has the raspberry default password for the pi account.

    CriticalCVSS 9.8Proof of conceptEPSS 15%

    raspberrypi · raspberry pi os liteDec 7, 2021

  • CVE-2021-20038
    99Now

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthentic

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    sonicwall · sma 200 firmwareDec 8, 2021

  • CVE-2021-20039
    59Plan

    Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenti

    HighCVSS 8.8WeaponizedEPSS 78%

    sonicwall · sma 200 firmwareDec 8, 2021

  • CVE-2021-20040
    38Monitor

    A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or

    HighCVSS 7.5No exploitEPSS 25%

    sonicwall · sma 200 firmwareDec 8, 2021

  • CVE-2021-20041
    36Monitor

    An unauthenticated and remote adversary can consume all of the device's CPU due to crafted HTTP requests sent to SMA100 /fileshare/sonicfile

    HighCVSS 7.5No exploitEPSS 21%

    sonicwall · sma 200 firmwareDec 8, 2021

  • CVE-2021-20043
    42Plan

    A Heap-based buffer overflow vulnerability in SonicWall SMA100 getBookmarks method allows a remote authenticated attacker to potentially exe

    HighCVSS 8.8No exploitEPSS 23%

    sonicwall · sma 200 firmwareDec 8, 2021

  • CVE-2021-20044
    47Plan

    A post-authentication remote command injection vulnerability in SonicWall SMA100 allows a remote authenticated attacker to execute OS system

    HighCVSS 8.8No exploitEPSS 40%

    sonicwall · sma 200 firmwareDec 8, 2021

  • CVE-2021-20045
    47Plan

    A buffer overflow vulnerability in SMA100 sonicfiles RAC_COPY_TO (RacNumber 36) method allows a remote unauthenticated attacker to potential

    CriticalCVSS 9.8No exploitEPSS 25%

    sonicwall · sma 200 firmwareDec 8, 2021

  • CVE-2021-27860
    77This week

    Arbitrary file upload vulnerability in FatPipe software

    HighCVSS 8.8KEVWeaponizedEPSS 39%

    fatpipeinc · ipvpn firmwareDec 8, 2021

  • CVE-2021-43527
    44Plan

    NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-

    CriticalCVSS 9.8No exploitEPSS 17%

    mozilla · nssDec 8, 2021

  • CVE-2021-44529
    99Now

    A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code wit

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    ivanti · endpoint manager cloud services applianceDec 8, 2021

  • CVE-2021-3817
    51Plan

    SQL Injection in wbce/wbce_cms

    CriticalCVSS 9.8Proof of conceptEPSS 38%

    wbce · wbce cmsDec 9, 2021

  • CVE-2021-43803
    44Plan

    Unexpected server crash in Next.js

    HighCVSS 7.5No exploitEPSS 47%

    vercel · next.jsDec 9, 2021

  • CVE-2021-44228
    100Now

    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    apache · log4jDec 10, 2021

  • CVE-2021-43813
    34Monitor

    Directory Traversal in Grafana

    MediumCVSS 4.3No exploitEPSS 57%

    grafana · grafanaDec 10, 2021

  • CVE-2021-41805
    45Plan

    HashiCorp Consul Enterprise before 1.8.17, 1.9.x before 1.9.11, and 1.10.x before 1.10.4 has Incorrect Access Control.

    HighCVSS 8.8Proof of conceptEPSS 34%

    hashicorp · consulDec 12, 2021

  • CVE-2021-44515
    99Now

    Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in th

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    zohocorp · manageengine desktop centralDec 12, 2021

  • CVE-2021-44848
    28Monitor

    In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whet

    MediumCVSS 5.3Proof of conceptEPSS 22%

    cybelesoft · thinfinity virtualuiDec 12, 2021

  • CVE-2021-40856
    45Plan

    Auerswald COMfortel 1400 IP and 2600 IP before 2.8G devices allow Authentication Bypass via the /about/../ substring.

    HighCVSS 7.5Proof of conceptEPSS 50%

    auerswald · comfortel 3600 ip firmwareDec 13, 2021

  • CVE-2021-44152
    57Plan

    An issue was discovered in Reprise RLM 14.2.

    CriticalCVSS 9.8Proof of conceptEPSS 58%

    reprisesoftware · reprise license managerDec 13, 2021

  • CVE-2021-24946
    61This week

    Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection

    CriticalCVSS 9.8WeaponizedEPSS 72%

    webnus · modern events calendar liteDec 13, 2021

  • CVE-2021-39935
    71This week

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before

    HighCVSS 7.5KEVWeaponizedEPSS 36%

    gitlab · gitlabDec 13, 2021

  • CVE-2021-4104
    54Plan

    Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

    HighCVSS 7.5Proof of conceptEPSS 80%

    apache · log4jDec 14, 2021

  • CVE-2021-39312
    53Plan

    True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read

    HighCVSS 7.5Proof of conceptEPSS 77%

    trueranker · true rankerDec 14, 2021

  • CVE-2021-42063
    31Monitor

    A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50.

    MediumCVSS 6.1Proof of conceptEPSS 23%

    sap · knowledge warehouseDec 14, 2021

  • CVE-2021-45046
    96Now

    Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack

    CriticalCVSS 9.0KEVWeaponizedEPSS 99%

    apache · log4jDec 14, 2021

  • CVE-2021-4044
    45Plan

    Invalid handling of X509_verify_cert() internal errors in libssl

    HighCVSS 7.5Proof of conceptEPSS 50%

    openssl · opensslDec 14, 2021

  • CVE-2021-43829
    53Plan

    Unrestricted Upload of Files in Patrowl

    HighCVSS 8.8No exploitEPSS 59%

    patrowl · patrowlmanagerDec 14, 2021

  • CVE-2021-36450
    43Plan

    Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications NEWUINAV parameter.

    MediumCVSS 6.1Proof of conceptEPSS 64%

    verint · workforce optimizationDec 15, 2021

  • CVE-2021-41560
    42Plan

    OpenCATS through 0.9.6 allows remote attackers to execute arbitrary code by uploading an executable file via lib/FileUtility.php.

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    opencats · opencatsDec 15, 2021

  • CVE-2021-45043
    40Plan

    HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter.

    HighCVSS 7.5Proof of conceptEPSS 33%

    hd-network real-time monitoring system project · hd-network real-time monitoring systemDec 15, 2021

  • CVE-2021-43226
    62This week

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    microsoft · windows 10 1507Dec 15, 2021

  • CVE-2021-43883
    35Monitor

    Windows Installer Elevation of Privilege Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 12%

    microsoft · windows 10Dec 15, 2021

  • CVE-2021-43890
    61This week

    Windows AppX Installer Spoofing Vulnerability

    HighCVSS 7.1KEVWeaponizedEPSS 11%

    microsoft · app installerDec 15, 2021

  • CVE-2021-0920
    55Plan

    In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition.

    MediumCVSS 6.4KEVWeaponizedEPSS 0%

    linux · linux kernelDec 15, 2021

  • CVE-2021-43891
    35Monitor

    Visual Studio Code Remote Code Execution Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 13%

    microsoft · visual studio codeDec 15, 2021

  • CVE-2021-1048
    61This week

    In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free.

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    google · androidDec 15, 2021

  • CVE-2021-4119
    47Plan

    Improper Access Control in bookstackapp/bookstack

    CriticalCVSS 9.8No exploitEPSS 26%

    bookstackapp · bookstackDec 15, 2021

  • CVE-2021-45092
    51Plan

    Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath paramete

    CriticalCVSS 9.8Proof of conceptEPSS 40%

    cybelesoft · thinfinity virtualuiDec 16, 2021

  • CVE-2021-42912
    38Monitor

    FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability.

    HighCVSS 8.8No exploitEPSS 10%

    fiberhome · an5506-01-a firmwareDec 16, 2021

  • CVE-2021-41843
    30Monitor

    An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from al

    MediumCVSS 6.5No exploitEPSS 12%

    open-emr · openemrDec 17, 2021

  • CVE-2021-22054
    90Now

    VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5

    HighCVSS 7.5KEVWeaponizedEPSS 99%

    vmware · workspace one uem consoleDec 17, 2021

  • CVE-2021-23450
    48Plan

    All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

    CriticalCVSS 9.8No exploitEPSS 30%

    linuxfoundation · dojoDec 17, 2021

  • CVE-2021-45105
    53Plan

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    MediumCVSS 5.9Proof of conceptEPSS 99%

    apache · log4jDec 18, 2021

  • CVE-2021-44224
    57Plan

    Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier

    HighCVSS 8.2No exploitEPSS 82%

    apache · http serverDec 20, 2021

  • CVE-2021-44790
    68This week

    Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

    CriticalCVSS 9.8Proof of conceptEPSS 96%

    apache · http serverDec 20, 2021

  • CVE-2020-19316
    36Monitor

    OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17.

    HighCVSS 8.8No exploitEPSS 2%

    laravel · frameworkDec 20, 2021

  • CVE-2021-24750
    46Plan

    WP Visitor Statistics (Real Time Traffic) < 4.8 - Subscriber+ SQL Injection

    HighCVSS 8.8Proof of conceptEPSS 38%

    codepress · visitor statisticsDec 21, 2021

  • CVE-2021-44207
    67This week

    Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

    HighCVSS 8.1KEVWeaponizedEPSS 17%

    acclaimsystems · usaherdsDec 21, 2021

  • CVE-2021-36750
    36Monitor

    ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVau

    HighCVSS 8.1Proof of conceptEPSS 13%

    zendesk · enc datavaultDec 22, 2021

  • CVE-2021-21881
    50Plan

    An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0

    CriticalCVSS 9.9Proof of conceptEPSS 36%

    lantronix · premierwave 2050 firmwareDec 22, 2021

  • CVE-2021-21892
    48Plan

    A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QE

    CriticalCVSS 9.9No exploitEPSS 30%

    lantronix · premierwave 2050 firmwareDec 22, 2021

  • CVE-2021-21924
    32Monitor

    A specially-crafted HTTP request can lead to SQL injection.

    MediumCVSS 6.5No exploitEPSS 20%

    advantech · r-seenetDec 22, 2021

  • CVE-2021-31558
    27Monitor

    Delta Electronics DIAEnergie (Update A)

    MediumCVSS 6.1No exploitEPSS 10%

    deltaww · diaenergieDec 22, 2021

  • CVE-2021-40417
    44Plan

    When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decoding parameters that we

    CriticalCVSS 9.8No exploitEPSS 15%

    blackmagicdesign · davinci resolveDec 22, 2021

  • CVE-2021-40418
    44Plan

    When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property

    CriticalCVSS 9.8No exploitEPSS 17%

    blackmagicdesign · davinci resolveDec 22, 2021

  • CVE-2021-45461
    45Plan

    FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40, or 16.0.18.41 is installed, allows remote attackers to exec

    CriticalCVSS 9.8No exploitEPSS 21%

    sangoma · restappsDec 22, 2021

  • CVE-2021-45511
    60This week

    Certain NETGEAR devices are affected by authentication bypass.

    CriticalCVSS 9.8WeaponizedEPSS 17%

    netgear · ac2100 firmwareDec 25, 2021

  • CVE-2021-45232
    65This week

    security vulnerability on unauthorized access.

    CriticalCVSS 9.8Proof of conceptEPSS 86%

    apache · apisix dashboardDec 27, 2021

  • CVE-2021-43857
    52Plan

    Gerapy may contain remote code execution vulnerability

    HighCVSS 8.8Proof of conceptEPSS 55%

    gerapy · gerapyDec 27, 2021

  • CVE-2021-43858
    46Plan

    User privilege escalation in MinIO

    HighCVSS 8.8Proof of conceptEPSS 35%

    minio · minioDec 27, 2021

  • CVE-2021-44832
    55Plan

    Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

    MediumCVSS 6.6Proof of conceptEPSS 97%

    apache · log4jDec 28, 2021

  • CVE-2021-45427
    45Plan

    Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal.

    CriticalCVSS 9.8No exploitEPSS 19%

    emerson · xweb300d evo firmwareDec 30, 2021

  • CVE-2021-20150
    33Monitor

    Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard.

    MediumCVSS 5.3Proof of conceptEPSS 40%

    trendnet · tew-827dru firmwareDec 30, 2021