CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- book store management system project store management systemA cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows...5.4 Medium
- six apart ltd. movable typeCross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable...6.1 Medium
- six apart ltd. movable typeImproper validation of syntactic correctness of input vulnerability exist in Movable Type series....6.5 Medium
- markdown preview enhanced project preview enhancedAn issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to...9.8 Critical
- markdown preview enhanced project preview enhancedMarkdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a...9.8 Critical
- simple phone book\/directory web app project phone book\/directory web appSimple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- online leave management system project leave management systemOnline Leave Management System v1.0 was discovered to contain an arbitrary file upload...7.2 High
- online leave management system project leave management systemOnline Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS)...4.8 Medium
- casbin casdoorCasdoor arbitrary file deletion vulnerability via uploadFile function8.1 High
- metinfoA Cross-Site Request Forgery (CSRF) in the Administrator List of MetInfo v7.7 allows attackers to...8.8 High
- unimo udr-ja1616 firmware, unimo technology co., ltd udr-ja1604/udr-ja1608/udr-ja1616, unimo udr-ja1604 firmware +1 more +3 moreImproper authentication vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10...8.8 High
- cybozu remote service, cybozu, inc. cybozu remote service +1 moreUncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a...7.5 High
- unimo udr-ja1616 firmware, unimo technology co., ltd udr-ja1604/udr-ja1608/udr-ja1616, unimo udr-ja1604 firmware +1 more +3 moreOS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1...8.8 High
- sanitization management system project management systemSanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page...7.2 High
- trendnet tew-820ap firmwareA stack overflow vulnerability exists in TrendNet Wireless AC Easy-Upgrader TEW-820AP (Version v1...8.8 High
- hope-boot project hope-boothope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution (RCE).9.8 Critical
- zzcmsAn issue was discovered in ZZCMS 2022. There is a cross-site scripting (XSS) vulnerability in...5.4 Medium
- skycaijiSkycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin...9.8 Critical
- rapidscada rapid scadaRapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross Site Scripting (XSS).6.1 Medium
- typoraTypora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in...6.1 Medium
- omron cx-programmerStack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may...7.8 High
- six apart ltd. movable typeImproper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series...7.2 High
- omron cx-programmerOut-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to...7.8 High
- omron cx-programmerUse-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to...7.8 High
- hector cabrera wordpress popular posts, wordpress popular posts project popular posts +1 moreExternal initialization of trusted variables or data stores vulnerability exists in WordPress...7.5 High
- unimo udr-ja1616 firmware, unimo technology co., ltd udr-ja1604/udr-ja1608/udr-ja1616, unimo udr-ja1604 firmware +1 more +3 moreHidden functionality vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1...8.8 High
- coder-chain gdut project gdut, csliuwy coder-chain gdut +1 morecsliuwy coder-chain_gdut cross site scripting3.5 Low
- maku maku-bootmaku-boot Scheduled Task AbstractScheduleJob.java doExecute injection6.3 Medium
- rapid7 insightvm, nexpose +1 moreRapid7 Nexpose Update Validation Issue4.4 Medium
- basercmsbaserCMS vulnerable to stored Cross-site Scripting4.8 Medium
- shift tech inc. bingo!cms, shift-tech bingo\!cms +1 moreAuthentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4...9.8 Critical
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreGuests can trigger deadlock in Linux netback driver T[his CNA information record relates to...5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreGuests can trigger deadlock in Linux netback driver T[his CNA information record relates to...5.5 Medium
- basercmsbaserCMS vulnerable to stored Cross-site Scripting4.8 Medium
- tp-link re300 v1, re3000 firmware +1 moretdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to...5.5 Medium
- buffalo bhr-4grv firmware, dwr-hp-g300nh firmware, dwr-pg firmware +73 more +75 moreAuthentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent...8.8 High
- buffalo bhr-4grv firmware, dwr-hp-g300nh firmware, dwr-pg firmware +52 more +54 moreHidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent...6.8 Medium
- ricoh aficio sp 4210n firmware, ricoh company, ltd. aficio sp 4210n +1 moreCross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05...4.8 Medium
- debian linux, linux kernel +1 moreGuests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to...6.5 Medium
- buffalo hw-450hp-zwe firmware, wzr-300hp firmware, wzr-450hp-cwt firmware +7 more +9 moreUse of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network...6.5 Medium
- unknown easy wp smtpWordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)9.1 Critical
- unknown easy wp smtpWordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Arbitrary File Deletion8.7 High
- unknown easy wp smtpWordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory Traversal6.8 Medium
- dev4press gd bbpress attachmentsWordPress GD bbPress Attachments Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
DSInternals.CommonNuGetDSInternals Credential Roaming Elevation of Privilege Vulnerability6.3 Medium- contest gallery gallery, contest-gallery contest gallery +1 moreWordPress Contest Gallery Plugin <= 13.1.0.9 is vulnerable to Cross Site Scripting (XSS)6.1 Medium
- armemberplugin armemberWordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalation9.8 Critical
- yith woocommerce gift cards, yithemes yith woocommerce gift cards +1 moreWordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload9.8 Critical
- proofpoint enterprise protectionProofpoint Enterprise Protection perl eval() arbitrary command execution7.2 High
- proofpoint enterprise protectionProofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"9.6 Critical
- Show moreLoading…