CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- craftcms craft cmsCraft CMS discloses password hashes7.5 High
- sangoma asteriskIn Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an...7.5 High
- ivanti endpoint managerXML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to...7.8 High
- ivanti connect secure, neurons for zero-trust access, policy secure +2 moreAn unauthenticated attacker can cause a denial-of-service to the following products: Ivanti...7.5 High
- ivanti connect secure, neurons for zero-trust access, policy secure +2 moreAn unauthenticated attacker can cause a denial-of-service to the following products: Ivanti...7.5 High
- google android, mediatek, inc. mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8321, mt8385, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ccci, there is a possible out of bounds write due to improper input validation. This could...6.7 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt7902, mt7921, mt8167s, mt8168, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8518, mt8532, mt8675, mt8695, mt8696, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797, yoctoproject yocto +2 moreIn Wi-Fi, there is a possible memory access violation due to a logic error. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6765, mt6768, mt6771, mt6779, mt6785, mt6833, mt6853, mt6873, mt6877, mt6885, mt6983, mt7663, mt7668, mt7902, mt7921, mt7933, mt8168, mt8365, mt8518, mt8532, mt8666, mt8667, mt8675, mt8695, mt8696, mt8766, mt8768, mt8786, mt8789, mt8791, mt8797, yoctoproject yocto +2 moreIn Wi-Fi, there is a possible out of bounds write due to improper input validation. This could...6.7 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6873, mt6877, mt6879, mt6883, mt6895, mt6983, mt8168, mt8365, mt8385, mt8666, mt8667, mt8675, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8797, yoctoproject yocto +2 moreIn Wi-Fi, there is a possible out of bounds write due to improper input validation. This could...6.7 Medium
- google android, mediatek, inc. mt6789, mt6855, mt6895, mt6983, mt8781 +1 moreIn throttling, there is a possible out of bounds write due to an incorrect calculation of buffer...6.7 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6855, mt6873, mt6877, mt6893, mt8791 +1 moreIn isp, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6855, mt6873, mt6877, mt6893, mt8791 +1 moreIn isp, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8168, mt8365, mt8766, mt8781, mt8791 +1 moreIn display, there is a possible out of bounds write due to an incorrect bounds check. This could...6.7 Medium
- google android, mediatek, inc. mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8168, mt8365, mt8675, mt8766, mt8781, mt8791 +1 moreIn display, there is a possible out of bounds write due to an incorrect bounds check. This could...6.7 Medium
- google android, mediatek, inc. mt6789, mt6855, mt6895, mt6983, mt8168, mt8365, mt8781 +1 moreIn throttling, there is a possible out of bounds write due to an incorrect calculation of buffer...6.7 Medium
- google android, mediatek, inc. mt6789, mt6855, mt6879, mt6895, mt6983, mt8781 +1 moreIn gz, there is a possible memory corruption due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6895, mt6983 +1 moreIn isp, there is a possible out of bounds write due to a race condition. This could lead to local...6.4 Medium
- ivanti endpoint managerA privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that...9.8 Critical
- zte otcp firmwareZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper...6.5 Medium
- zkteco zktimeA default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0...7.5 High
- tomexamCross Site Scripting (XSS) vulnerability in TomExam 3.0 via p_name parameter to list.thtml.5.4 Medium
- oceanwp sticky header, oren hahiashvili oceanwp sticky header +1 moreWordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- 2kblater 2kb amazon affiliates storeWordPress 2kb Amazon Affiliates Store Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
open62541OSS-FuzzHeap-buffer-overflow in _rrparseNo scoregpacOSS-FuzzHeap-use-after-free in gf_odf_vvc_cfg_read_bsNo scoreclaimcrates.io`claim` is UnmaintainedNo scoreclamavDebianclamav - new upstream versionNo score- veritas access appliance, netbackup flex scale appliance +1 moreAn issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through...9.8 Critical
- veritas access appliance, netbackup flex scale appliance +1 moreAn issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through...8.8 High
- veritas netbackup flex scale applianceAn issue was discovered in Veritas NetBackup Flex Scale through 3.0. A non-privileged user may...8.8 High
- veritas access appliance, netbackup flex scale appliance +1 moreAn issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through...8.8 High
- veritas netbackup flex scale applianceAn issue was discovered in Veritas NetBackup Flex Scale through 3.0. An attacker with non-root...8.8 High
- joinmastodon mastodonMastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue)...7.5 High
- awstats, debian linux, fedoraproject fedora +2 moreAWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net:...6.1 Medium
- proxmox mail gateway, virtual environment, pve http server +2 moreProxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when...9.8 Critical
- proxmox mail gateway, virtual environment, pve http server +2 moreA response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and...7.1 High
openscOSS-FuzzStack-buffer-overflow in sc_pkcs15init_rmdirNo scorerelicOSS-FuzzHeap-buffer-overflow in dv_copyNo scorerelicOSS-FuzzUse-of-uninitialized-value in bn_trimNo score- google chromeInappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote...8.8 High
- dot tech smart campus systemDot Tech Smart Campus System findUser information disclosure4.3 Medium
- itsourcecode human resource management systemSourceCodester Human Resource Management System employeeview.php cross site scripting3.5 Low
- itsourcecode human resource management systemSourceCodester Human Resource Management System employeeadd.php sql injection4.7 Medium
- shaoxing background management systemShaoxing Background Management System Bd sql injection6.3 Medium
- house rental system project rental system, unspecified house rental system +1 moreHouse Rental System POST Request tenant-engine.php unrestricted upload6.3 Medium
- house rental system project rental system, unspecified house rental system +1 moreHouse Rental System POST Request search-property.php sql injection6.3 Medium
- house rental system project rental system, unspecified house rental system +1 moreHouse Rental System view-property.php sql injection6.3 Medium
- human resource management system project resource management system, itsourcecode human resource management system +1 moreSourceCodester Human Resource Management System Content-Type employee.php unrestricted upload7.3 High
- Show moreLoading…