CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- rgb2hex project rgb2hex rgb2hex redos 4.3 Medium
- flitto express-param flitto express-param fetchParams.js parameter pollution 6.3 Medium
- valtech idp test client, idp test clients +1 more valtech IDP Test Client main.py cross-site request forgery 4.3 Medium
- tbdev project tbdev Yuna Scatari TBDev usersearch.php get_user_icons cross site scripting 3.5 Low
- apple keynote rf Keynote rumble.rb cross site scripting 3.5 Low
- vova07 yii2 fileapi widget, yii2 fileapi widget project fileapi widget +1 more vova07 Yii2 FileAPI Widget UploadAction.php run cross site scripting 3.5 Low
- ariadne component library, ariadne-cms ariadne component library +1 more Ariadne Component Library Url.php server-side request forgery 5.5 Medium
- exciting printer Exciting Printer Argument prepare_page.rb command injection 5.5 Medium
- froxlor, froxlor froxlor/froxlor +1 more Improper Authorization in froxlor/froxlor 6.5 Medium
- froxlor, froxlor froxlor/froxlor +1 more Cross-Site Request Forgery (CSRF) in froxlor/froxlor 3.5 Low
- usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos 9.8 Critical
- usememos memos, usememos/memos +1 more Cross-site Scripting (XSS) - Stored in usememos/memos 8.3 High
- mellium sasl mellium.im/sasl authentication failure due to insufficient nonce randomness 9.8 Critical
- openvswitch, debian linux +1 more An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch. 9.8 Critical
- openvswitch, debian linux +1 more An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch. 9.8 Critical
-
python-ujsonMageia Updated python-ujson packages fix security vulnerability No score -
io.apiman:apiman-distro-vertxMaven,io.apiman:apiman-gateway-platforms-vertxMaven +1 more Apiman Vert.x Gateway has Transitive Hazelcast connection caching issue 8.1 High - sterc google analytics dashboard for modx Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scripting 3.5 Low
- ghostlander phoenixcoin ghostlander Phoenixcoin main.cpp accept denial of service 3.5 Low
- m-files client Incorrect Implementation of Authentication Algorithm 4.8 Medium
- kbase metrics KBase Metrics methods_upload_user_stats.py upload_user_data sql injection 5.5 Medium
- go-macaron csrf Macaron csrf csrf.go missing secure attribute 3.7 Low
- aerouk imageserve aerouk imageserve cross site scripting 2.6 Low
- aerouk imageserve aerouk imageserve File viewer.php path traversal 3.1 Low
- joget dx Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting 3.5 Low
- itext rups iText RUPS XfaFile.java xml external entity reference 5.5 Medium
- m-files server Insertion of Sensitive Information into Log File 4.4 Medium
- adminserv project adminserv Chris92de AdminServ adminserv.php cross site scripting 3.5 Low
- adminserv project adminserv Chris92de AdminServ adminserv.php cross site scripting 3.5 Low
- ceph A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to... 7.8 High
- pastebinit project pastebinit pastebinit server.go pasteHandler path traversal 3.5 Low
- apache kylin Apache Kylin: Command injection by Diagnosis Controller 9.8 Critical
- apache kylin Apache Kylin: Command injection by Useless configuration 8.8 High
- modbus tools poll, modbustools modbus poll +1 more Modbus Tools Modbus Poll mbp File mbpoll.exe buffer overflow 6.3 Medium
- modbus tools slave, modbustools modbus slave +1 more Modbus Tools Modbus Slave mbs File mbslave.exe buffer overflow 6.3 Medium
- lead management system project management system, sourcecodester lead management system +1 more SourceCodester Lead Management System login.php sql injection 7.3 High
-
polkit-default-privsopenSUSE Security update for polkit-default-privs No score - froxlor, froxlor froxlor/froxlor +1 more Argument Injection in froxlor/froxlor 5.3 Medium
- usememos memos, usememos/memos +1 more Improper Handling of Insufficient Permissions or Privileges in usememos/memos 8.4 High
- netgear r6400v2 firmware, r6700v3 firmware, r6900p firmware +6 more +8 more Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This... 7.4 High
- tp-link tl-wr902ac firmware TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute... 8.8 High
- tenda a15 firmware Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at ... 9.8 Critical
- tenda a15 firmware Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd parameter at ... 9.8 Critical
- tenda a15 firmware Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at ... 9.8 Critical
- tenda a15 firmware Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at ... 9.8 Critical
- tenda a15 firmware Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at ... 9.8 Critical
- tenda a15 firmware Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey3 parameter at ... 9.8 Critical
- tenda a15 firmware Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd_5g parameter at ... 9.8 Critical
- tenda a15 firmware Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at ... 9.8 Critical
- tenda a15 firmware Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security_5g parameter... 9.8 Critical
- Show olderLoading…