CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the mit_ssid_index...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the account parameter at...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the new_account...7.5 High
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the editNameMit...7.5 High
- tenda w30e firmwareTenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda w30e firmwareTenda W30E V1.0.1.25(633) was discovered to contain a stack overflow via the cmdinput parameter...7.5 High
- tenda w6-s firmwareAn issue in the component tpi_systool_handle(0) (/goform/SysToolRestoreSet) of Tenda W6-S v1.0.0...7.5 High
- tenda w6-s firmwareTenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the linkEn parameter at ...7.5 High
- tenda w6-s firmwareTenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at...7.5 High
- tenda w6-s firmwareTenda W6-S v1.0.0.4(510) was discovered to contain a stack overflow via the wl_radio parameter at...7.5 High
- tenda w6-s firmwareAn issue in the component tpi_systool_handle(0) (/goform/SysToolReboot) of Tenda W6-S v1.0.0.4...7.5 High
- tenda w6-s firmwareTenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the...9.8 Critical
- openharmonyTelephony in communication subsystem sends public events with personal data, but the permission is not set.6.2 Medium
- seeddmsWeak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full...9.8 Critical
- tenda a18 firmwareAn access control issue in Tenda A18 v15.13.07.09 allows unauthenticated attackers to access the...7.5 High
- tenda a18 firmwareTenda A18 v15.13.07.09 was discovered to contain a stack overflow via the security_5g parameter...7.5 High
- openatom openharmonyThe appspawn and nwebspawn services were found to be vulnerable to buffer overflow vulnerability due to insufficient input validation.6.8 Medium
- daloradius, lirantal lirantal/daloradius +1 moreMissing Authorization in lirantal/daloradius5.3 Medium
- teledyne flir ax8, flir ax8 firmware +1 moreTeledyne FLIR AX8 Web Service palette.php command injection6.9 Medium
- linzhaoguan pb-cmsLinZhaoguan pb-cms Message Board comment cross site scripting4.3 Medium
- linzhaoguan pb-cmsLinZhaoguan pb-cms IpUtil.getIpAddr cross site scripting3.5 Low
- mingsoft mcmsMingsoft MCMS search.do cross site scripting3.5 Low
- ctf-hacker pwnCTF-hacker pwn delete.html cross-site request forgery4.3 Medium
- ruoyi ruoyi-cloudy_project RuoYi-Cloud JSON cross site scripting3.5 Low
- beetl-bbs project beetl-bbsxiandafu beetl-bbs WebUtils.java cross site scripting3.5 Low
- openatom openharmonyKernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGetres.4.0 Medium
- containers podman, fedoraproject fedora +1 moreBuildah (as part of Podman) vulnerable to Path Traversal3.3 Low
- containers podman, fedoraproject fedora +1 moreBuildah (as part of Podman) vulnerable to Link Following5.3 Medium
- secu secustation firmwareIn certain Secustation products the administrator account password can be read. This affects V2.5...4.9 Medium
- samsung calendarImproper access control vulnerability in Calendar prior to versions 11.6.08.0 in Android Q(10),...3.3 Low
- google android, samsung mobile devices +1 moreExposure of Sensitive Information from an Unauthorized Actor vulnerability in Samsung...4.0 Medium
- google android, samsung mobile devices +1 moreExposure of Sensitive Information to an Unauthorized Actor in Persona Manager prior to Android T...6.8 Medium
- google android, samsung mobile devices +1 moreImproper handling of insufficient permissions vulnerability in setSecureFolderPolicy in...6.2 Medium
- samsung passImproper check or handling of exceptional conditions vulnerability in Samsung Pass prior to...4.8 Medium
- samsung passImproper access control vulnerability in Samsung Pass prior to version 4.0.06.7 allow physical...3.9 Low
- samsung gear iconx pc managerInsufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager...7.1 High
- google android, samsung mobile devices +1 moreTOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022...6.9 Medium
- google android, samsung mobile devices +1 moreInteger overflow vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec...6.9 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in SecTelephonyProvider prior to SMR Dec-2022 Release 1...2.3 Low
- google android, samsung mobile devices +1 moreImplicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1...4.0 Medium
- google android, samsung mobile devices +1 moreExposure of Sensitive Information vulnerability in Samsung Settings prior to SMR Dec-2022 Release...3.3 Low
- google android, samsung mobile devices +1 moreImproper access control vulnerability in RCS call prior to SMR Dec-2022 Release 1 allows local...4.0 Medium
- samsung exynos firmware, samsung mobile devices +1 moreImproper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker...6.5 Medium
- samsung exynos firmware, samsung mobile devices +1 moreImproper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker...6.5 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in Nice Catch prior to SMR Dec-2022 Release 1 allows...4.6 Medium
- google android, samsung mobile devices +1 moreImproper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022...5.7 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in IIccPhoneBook prior to SMR Dec-2022 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreExposure of Sensitive Information vulnerability in kernel prior to SMR Dec-2022 Release 1 allows...4.4 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerabilities in Contacts prior to SMR Dec-2022 Release 1 allows to...4.0 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in ContactListUtils in Phone prior to SMR Dec-2022 Release...4.0 Medium
- Show moreLoading…