CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8011 +1 moreIn wlan driver, there is a possible missing permission check, This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8010 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8009 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8008 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8004 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8018 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8017 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8016 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...3.3 Low
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8015 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...3.3 Low
- quarkusQuarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed7.5 High
- zyxel atp series firmware, usg flex series firmware, vpn series firmware +20 more +22 moreA cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware...4.7 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn power management service, there is a missing permission check. This could lead to set up power...7.8 High
linuxUbuntu,linux-awsUbuntu,linux-aws-5.0Ubuntu +59 more +61 more[Unknown description]7.0 High- seagate stcg2000300 firmware, stcg3000300 firmware, stcg4000300 firmware +2 moreThe web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300...9.8 Critical
- datadog guarddogGuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package5.8 Medium
- avast, avast avg antivirus, nortonlifelock avast and avg antivirus +2 moreAvast and AVG Antivirus for Windows vulnerable to Privilege Escalation7.3 High
github.com/prometheus/prometheusGo,github.com/prometheus/prometheus/v2Go +1 morePrometheus vulnerable to basic authentication bypass7.2 High- ami megarac spx12, megarac spx13, megarac sp-x +2 moreAMI MegaRAC User Enumeration Vulnerability7.5 High
- ami megarac spx12, megarac spx13, megarac sp-x +2 moreMegaRAC Default Credentials Vulnerability8.3 High
- ami megarac spx12, megarac spx13, megarac sp-x +2 moreMegaRAC Default Credentials Vulnerability7.5 High
- nodebbAccount takeover via prototype vulnerability9.4 Critical
- cactiUnauthenticated Command Injection9.8 Critical
- microsoft windows firewall, zabbix, zabbix agent (msi packages) +1 more +3 moreZabbix Agent installer adds “allow all TCP any any” firewall rule6.5 Medium
- openrazerOut of Bounds Read in OpenRazer Driver4.4 Medium
- dependencytrack frontendX-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode5.3 Medium
- amentotech workreapWorkreap - Freelance Marketplace and Directory < 2.6.3 - Subscriber+ Private Message Disclosure via IDOR7.5 High
- premio chaty, unknown floating chat widget: contact chat icons, telegram chat, line, wechat, email, sms, call button +1 moreChaty < 3.0.3 - Admin+ SQLi7.2 High
- unknown clerk, clerk.io +1 moreClerk < 4.0.0 - Authentication Bypass and API Keys Disclosure7.5 High
- unknown wpupper share buttons, wpupper share buttons project share buttons +1 moreWPUpper Share Buttons <= 3.42 - Admin+ Stored XSS4.8 Medium
- postmagthemes demo import, unknown postmagthemes demo import +1 morePostmagThemes Demo <= 1.0.7 - Admin+ Arbitrary File Upload7.2 High
- unknown wp csv exporter, wp csv exporter project csv exporter +1 moreWP CSV Exporter < 1.3.7 - Admin+ SQLi7.2 High
- unknown wp oauth server (oauth authentication), wp-oauth wp oauth server +1 moreWP OAuth Server < 3.4.2 - Client Secret Regeneration via CSRF6.5 Medium
- advanced wp columns project wp columns, unknown advanced wp columns +1 moreAdvanced WP Columns <= 2.0.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- themeum wp page builderWP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site4.8 Medium
- unknown wp oauth server (oauth authentication), wp-oauth wp oauth server +1 moreWP OAuth Server < 4.2.2 - Admin+ Stored XSS4.8 Medium
- activity track uji countdownUji Countdown < 2.3.1 - Admin+ Stored XSS4.8 Medium
- addonspress advanced import, unknown advanced import : one click import for wordpress or theme demo data +1 moreAdvanced Import < 1.3.8 - Arbitrary Plugin Installation & Activation via CSRF6.5 Medium
- Show moreLoading…