CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- telosalliance omnia mpx node firmwareAn unauthenticated command injection vulnerability in the product license validation function of...9.8 Critical
- offis dcmtkDCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.7.5 High
- enhancesoft osticket, osticket osticket/osticket +1 moreCross-site Scripting (XSS) - Reflected in osticket/osticket8.0 High
- google chrome, chromium v8 +1 moreType confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to...8.8 High
- vim, vim vim/vim, neovim +2 moreUse After Free in vim/vim7.8 High
- vim, vim vim/vim +1 moreHeap-based Buffer Overflow in vim/vim7.8 High
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud Talk guests can continue to receive video streams from call after being removed from a conversation4.8 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's disabled download shares still allow download through preview images2.6 Low
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server has no password length limit when creating a user as an administrator2.4 Low
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's calendar name length not validated before writing to database3.5 Low
- ibm websphere automation for ibm cloud pak for watson aiops, websphere automation for cloud pak for watson aiops +1 moreIBM WebSphere Automation for IBM Cloud Pak for Watson AIOps information disclosure5.7 Medium
- ibm websphere automation for ibm cloud pak for watson aiopsIBM WebSphere Automation for IBM Cloud Pak for Watson AIOps security bypass5.3 Medium
- ibm db2u, db2 on cloud pak for data, db2 warehouse on cloud pak for data +2 moreIBM Db2U cross-site request forgery4.3 Medium
- ibm db2, db2u, db2 warehouse +2 moreIBM Db2U cross-site respect forgery6.5 Medium
- delta electronics dialinkICSA-22-307-03 Delta Industrial Automation DIALink Path traversal8.1 High
- ibm api connectIBM API Connect HOST header injection5.4 Medium
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro...7.1 High
- snakeyamlRemote Code execution in SnakeYAML8.3 High
- festo bus module cpx-e-ep firmware, bus node cpx-fb32 firmware, bus node cpx-fb33 firmware +151 more +153 moreIncomplete Documentation of remote functions in FESTO products.9.8 Critical
- asus nas-m25, nas-m25 firmware +1 moreOS command injection in ASUS M25 NAS9.8 Critical
- axiell iguanaReflected XSS in Axiell Iguana CMS6.1 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a race condition. This could lead to local denial of service in wlan...4.7 Medium
- tenda ac6 firmwareTenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).7.5 High
- xiongmaitech mbd6304t, nbd6808t-pl, mbd6304t firmware +141 more +143 moreMultiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and...8.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check. This could lead to local denial of...5.5 Medium
- ff4jff4j is vulnerable to Remote Code Execution (RCE)9.8 Critical
- gl-inet goodcloudIn GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel.5.9 Medium
- gl-inet goodcloudIn GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change...7.4 High
- teleniasoftware tvoxTelenia Software s.r.l TVox before v22.0.17 was discovered to contain a remote code execution ...9.8 Critical
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8020 +1 moreIn wlan driver, there is a race condition, This could lead to local denial of service in wlan...4.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8019 +1 moreIn wlan driver, there is a race condition, This could lead to local denial of service in wlan...4.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn sensor driver, there is a possible buffer overflow due to a missing bounds check. This could...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8023 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn npu driver, there is a memory corruption due to a use after free. This could lead to local...5.5 Medium
- ni labview command line interfaceIncorrect default permissions in the installation folder for NI LabVIEW Command Line Interface ...7.8 High
- c-data web management system, cdatatec c-data web management system +1 moreC-DATA Web Management System GET Parameter jumpto.php argument injection6.3 Medium
- google androidIn getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about...7.8 High
- google androidIn fdt_path_offset_namelen of fdt_ro.c, there is a possible out of bounds read due to an...4.4 Medium
- google androidIn phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to...6.7 Medium
- google androidIn a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL...5.5 Medium
- google androidIn trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to...7.8 High
- google androidIn Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This...4.4 Medium
- google androidIn mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive...7.8 High
- google androidIn Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This...4.4 Medium
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System customer.php builtin_echo cross site scripting3.5 Low
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-235292841References: N/A9.8 Critical
- google androidIn cd_SsParseMsg of cd_SsCodec.c, there is a possible crash due to a missing null check. This...7.5 High
- google androidIn ConvertUtf8ToUcs2 of radio_hal_utils.cpp, there is a possible out of bounds write due to a...6.7 Medium
- Show moreLoading…