CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- feminer wms, warehouse management system project management system +1 moreFeMiner wms unrestricted upload6.3 Medium
- videolan vlc media player, debian linux +1 moreAn integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows...7.8 High
- vim, vim vim/vim +1 moreHeap-based Buffer Overflow in vim/vim4.0 Medium
- apache commons net, debian linux +1 moreApache Commons Net's FTP client trusts the host from PASV response by default6.5 Medium
- migueldeicaza swifttermSwiftTerm vulnerable to arbitrary command execution7.1 High
phpxmlrpc/phpxmlrpcPackagistphpxmlrpc vulnerable to argument injectionNo score- datadog guarddogArbitrary file write when scanning a specially-crafted local PyPI package5.8 Medium
github.com/mittwald/kube-httpcacheGokube-httpcache is vulnerable to Cross-Site Request Forgery (CSRF)No score- kibokolabs chained quizChained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Facebook App ID5.5 Medium
- kibokolabs chained quizChained Quiz <= 1.3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting via Mailchimp API Key5.5 Medium
- kibokolabs chained quizChained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via ipf6.1 Medium
- kibokolabs chained quizChained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf6.1 Medium
- kibokolabs chained quizChained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf6.1 Medium
- kibokolabs chained quizChained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsf6.1 Medium
- kibokolabs chained quizChained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef6.1 Medium
- kibokolabs chained quizChained Quiz <= 1.3.2.2 - Reflected Cross-Site Scripting via dn6.1 Medium
- kibokolabs chained quizChained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via ip6.1 Medium
- kibokolabs chained quizChained Quiz <= 1.3.2.3 - Reflected Cross-Site Scripting via date6.1 Medium
- horner automation remote compact controller (rcc) 972, hornerautomation rcc972 firmware +1 moreHorner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an...7.5 High
- horner automation remote compact controller (rcc) 972, hornerautomation rcc972 firmware +1 moreHorner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device...9.8 Critical
- horner automation remote compact controller (rcc) 972, hornerautomation rcc972 firmware +1 moreThe Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with...7.5 High
- kibokolabs chained quizChained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Question Deletion5.4 Medium
- kibokolabs chained quizChained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Submitted Response Deletion5.4 Medium
- kibokolabs chained quizChained Quiz <= 1.3.2.4 - Cross-Site Request Forgery to Arbitrary Quiz Deletion and Copying5.4 Medium
- clastix capsuleCapsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace8.8 High
- goauthentik authentikauthentik vulnerable to unauthorized user creation and potential account takeover8.1 High
- discourseAny authenticated Discourse user can create an unlisted topic4.3 Medium
ghostscriptOSS-FuzzUNKNOWN WRITE in gdev_mem_open_scan_lines_interleavedNo score- m-files web, server +1 moreIncorrect privilege assignment in M-Files Web Server2.0 Low
- algan prens student information systemIDOR in Prens Student Information System8.8 High
- algan prens student information systemSQL Injection in Prens Student Information System9.8 Critical
prettytable-rscrates.ioprettytable-rs: Force cast a &Vec<T> to &[T] may lead to undefined behaviorNo score- apache tapestryApache Tapestry prior to version 4 (EOL) allows RCE though deserialization of untrusted input9.8 Critical
- tenda ac6 firmwareTenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function...6.5 Medium
- tenda ac6 firmwareTenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function...6.5 Medium
- tenda i22 firmwareTenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the formWx3AuthorizeSet...7.5 High
- tenda i22 firmwareTenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the appData parameter in...7.5 High
- tenda i22 firmwareTenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the ping1 parameter in...7.5 High
- tenda i22 firmwareTenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the index parameter in...7.5 High
- tenda i22 firmwareTenda i22 V1.0.0.3(4687) is vulnerable to Cross Site Request Forgery (CSRF) via function...6.5 Medium
- tenda i22 firmwareTenda i22 V1.0.0.3(4687) is vulnerable to Cross Site Request Forgery (CSRF) via function...6.5 Medium
- tenda i22 firmwareTenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the list parameter in...7.5 High
- tenda i22 firmwareTenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the index parameter in...7.5 High
- tendacn ac6 firmwareTenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the time parameter in...7.5 High
- tendacn ac6 firmwareTenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the schedStartTime...7.5 High
- tendacn ac6 firmwareTenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the wpapsk_crypto...7.5 High
- tendacn ac6 firmwareTenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the schedEndTime...7.5 High
- tendacn ac6 firmwareTenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the list parameter in...7.5 High
- tendacn ac6 firmwareTenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the time parameter in...7.5 High
- tendacn ac6 firmwareTenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the timeZone parameter...7.5 High
- Show moreLoading…