CVEs published in December 2021
7 tracked CVEs from 4 vendors had their first vendor advisory published in December 2021: 4 high, 2 in CISA KEV. Newest first.
- Added
CVE-2021-38688High
improper authentication vulnerability has been reported to affect Android App Qfile.
QNAP · 1 advisory - Added
CVE-2021-38687High
QTS: stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station.
QNAP · 1 advisory - Added
CVE-2021-38680Medium
cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Kazoo Server.
QNAP · 1 advisory - Added
CVE-2021-43226HighCISA KEV
Microsoft Windows Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2021-41311High
Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-41309Medium
Jira Service Management: Affected versions of Atlassian Jira Server and Data Center
Atlassian · 1 advisory - Added
CVE-2021-44529UnratedCISA KEV
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
Ivanti · 1 advisory