CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- google android, samsung mobile devices +1 moreImproper access control vulnerability in ContactListStartActivityHelper in Phone prior to SMR Dec...4.0 Medium
- canon vitrea viewCanon Medical Informatics Vitrea Vision 7.7.76.1 does not adequately enforce access controls. An...6.5 Medium
- micro focus operations bridge manager, operations bridge- containerized, microfocus operations bridge +2 moreCVE-2022-38754 - Micro Focus Operations Bridge Manager and OpsBridge Containerized - Cross Site Scripting (XSS)8.0 High
- goteleport teleportTeleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an...6.5 Medium
- arubanetworks airwaveBroken Access Control for some Web-based Management URLs in AirWave Management Platform8.1 High
- arubanetworks airwaveBroken Access Control for some Web-based Management URLs in AirWave Management Platform8.1 High
- arubanetworks airwaveBroken Access Control for some Web-based Management URLs in AirWave Management Platform8.1 High
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in Brocade Fabric OS software v9.1.1, v9.0.1e, v8.2.3c, v7.4.2j, and earlier...9.8 Critical
- redhat openshiftA flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve...8.1 High
- redhat openshiftThe response header has not enabled X-FRAME-OPTIONS, Which helps prevents against Clickjacking...4.8 Medium
- annyshow duxcmsannyshow DuxCMS cross-site request forgery4.3 Medium
- annyshow duxcmsannyshow DuxCMS Article edit cross site scripting2.4 Low
- avast antivirus, script shield, nortonlifelock avast antivirus +2 moreAswjsflt.dll in Avast Antivirus windows caused a crash of the Mozilla Firefox browser due to heap corruption7.7 High
- libp2p go-libp2p, protocol libp2p +1 morego-libp2p denial of service vulnerability from lack of resource management7.5 High
- ge cimplicityGE CIMPLICITY Out-of-bounds Write7.8 High
- ge cimplicityGE CIMPLICITY Access of Uninitialized Pointer7.8 High
- ge cimplicityGE CIMPLICITY Access of Uninitialized Pointer7.8 High
- ge cimplicityGE CIMPLICITY Heap-based Buffer Overflow7.8 High
- ge cimplicityGE CIMPLICITY Untrusted Pointer Dereference7.8 High
- containerdcontainerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak5.7 Medium
- certifi, certifi python-certifi, netapp e-series performance analyzer +2 more +4 moreRemoval of TrustCor root certificate6.8 Medium
- libp2p js-libp2p, protocol libp2p +1 morelibp2p denial of service vulnerability from lack of resource management7.5 High
- ibm content navigatorIBM Content Navigator code execution7.5 High
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreA vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreMultiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreMultiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreA vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreMultiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA...5.3 Medium
- cisco ata 190 firmware, ata 191 firmware, ata 192 firmware +1 more +3 moreMultiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA...5.3 Medium
- ibm business process manager, business automation workflow +1 moreIBM Business Process Manager cross-site scripting5.4 Medium
- go standard library net/http, os, golang go +2 moreRestricted file access on Windows in os and net/http7.5 High
- devolutions remote desktop managerElevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3...8.8 High
- apache manifoldcfApache ManifoldCF: LDAP Injection Vulnerability - ActiveDirectory Authorities5.3 Medium
- paddlepaddlePaddlePaddle vulnerable to Code Injection10.0 Critical
- paddlepaddlePaddlePaddle Out-of-bounds Read vulnerability7.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreAppliance mode iControl REST vulnerability8.7 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreiControl SOAP vulnerability8.8 High
- linuxfoundation mirage firewallqubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users...7.5 High
- jenkins sonar gerrit, jenkins project sonar gerrit plugin +1 moreJenkins Sonar Gerrit Plugin vulnerable to Cross-Site Request Forgery6.5 Medium
- jenkins spring config, jenkins project spring config plugin +1 moreCross-site Scripting in Jenkins Spring Config Plugin5.4 Medium
- jenkins custom build properties, jenkins project custom build properties plugin +1 moreJenkins Custom Build Properties Plugin vulnerable to Cross-site Scripting5.4 Medium
- gitea, jenkins project gitea plugin +1 moreJenkins Gitea Plugin vulnerable to Cleartext Transmission of Sensitive Information4.3 Medium
- jenkins checkmarx, jenkins project checkmarx plugin +1 moreStored XSS vulnerability in Jenkins Checkmarx Plugin5.4 Medium
- jenkins google login, jenkins project google login plugin +1 moreJenkins Google Login Plugin Open Redirect vulnerability6.1 Medium
- jenkins plot, jenkins project plot plugin +1 moreJenkins Plot Plugin XML External Entity Reference vulnerability9.8 Critical
- iliasILIAS before 7.16 allows External Control of File Name or Path.6.5 Medium
- iliasILIAS before 7.16 has an Open Redirect.6.1 Medium
- iliasILIAS before 7.16 allows XSS.5.4 Medium
- iliasILIAS before 7.16 allows OS Command Injection.8.8 High
- ayacms project ayacmsAyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE).9.8 Critical
- Show moreLoading…