CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- neutrinolabs xrdp, debian linux +1 moreOut of Bound Read in xrdp9.1 Critical
- m-files, m-files web +1 moreIncorrect privilege assignment in M-Files Web Server6.5 Medium
- secomea gatemanagerPotential vulnerabilities in GM login process5.5 Medium
- linux kernel, netapp hci baseboard management controller +1 moreA flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is...7.1 High
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreAn incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially...7.8 High
- fedoraproject fedora, openatom openeuler, openeuler 20.03 lts sp1 +2 more +4 moreAfter tar_close(), libtar.c releases the memory pointed to by pointer t. After tar_close() is...6.2 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs5.5 Medium
- funkwhaleUser invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can...5.3 Medium
- kbase doc project docKbase Doc v1.0 was discovered to contain an arbitrary file deletion vulnerability via the...9.1 Critical
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- interspire email marketerInterspire Email Marketer through 6.5.1 allows SQL Injection via the surveys module. An...7.5 High
- zkteco automatic data master serverZKTeco Xiamen Information Technology ZKBio ECO ADMS <=3.1-164 is vulnerable to Cross Site...4.8 Medium
- netgear ax2400 firmwareA network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400...10.0 Critical
- s-cmsS-CMS Contact Information Page cross site scripting3.5 Low
- mingsoft mcmsMingsoft MCMS list sql injection6.3 Medium
- aapanel baotaIn BAOTA linux panel there exists a stored xss vulnerability attackers can use to obtain...5.4 Medium
- rxvt-unicode project rxvt-unicode, fedoraproject extra packages for enterprise linux, fedora +2 moreThe rxvt-unicode package is vulnerable to a remote code execution, in the Perl background...9.8 Critical
- wiresharkCrash in the USB HID protocol dissector in Wireshark 3.6.0 to 3.6.8 allows denial of service via...6.3 Medium
- yiiframework giiYii2 Gii Cross-site Scripting vulnerability5.4 Medium
- redhat openshiftOpenshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the...7.4 High
- western digital my cloud, westerndigital my cloud os +1 moreRemote Backups Application Discloses Stored Credentials4.1 Medium
- western digital my cloud, westerndigital my cloud os +1 moreAuthentication issue with the encrypted volumes and auto mount feature in My Cloud devices4.3 Medium
- symantec messaging gatewayAn authenticated user can embed malicious content with XSS into the admin group policy page.5.4 Medium
- symantec messaging gatewayAn authenticated user who has the privilege to add/edit annotations on the Content tab, can craft...5.4 Medium
- dhis2 dhis2-core, dhis 2 +1 moreCross-site Scripting with user-uploaded files in dhis2-core5.4 Medium
- dhis2 dhis2-core, dhis 2 +1 morePrivilege Chaining with the user admin role in dhis2-core6.7 Medium
- dhis2 dhis2-core, dhis 2 +1 moreSemi-blind Server-Side Request Forgery in dhis2-core5.0 Medium
- go standard library net/http, golang go, http2 +2 more +4 moreExcessive memory growth in net/http and golang.org/x/net/http25.3 Medium
- jetbrains teamcityIn JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default...6.6 Medium
- jetbrains teamcityIn JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port...4.1 Medium
- jetbrains gatewayIn JetBrains JetBrains Gateway before 2022.3 a client could connect without a valid token if the...7.1 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.5.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom...3.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be...6.2 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open...4.0 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS...5.6 Medium
- cisco session initiation protocol (sip) software, ip phone 7811 firmware, ip phone 7821 firmware +11 more +13 moreA vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and...8.1 High
- ipfs go-merkledagProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag7.5 High
- prestashopPotential Information exposure in the upload directory in PrestaShop5.3 Medium
- traefikAuthorization header displayed in the debug logs3.5 Low
- traefikRoutes exposed with an empty TLSOption in traefik8.1 High
- nielsbasjes yauaa, yet another useragent analyzer project another useragent analyzer +1 moreA crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa7.5 High
wabtOSS-FuzzObject-size in wabt::BinaryReaderIR::OnCodeMetadataCountNo scoreKernelLinuxnfs4: Fix kmemleak when allocate slot failedNo scoreKernelLinuxnfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()No scoreKernelLinuxnfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()No scoreKernelLinuxnet: sched: Fix use after free in red_enqueue()No scoreKernelLinuxmISDN: fix possible memory leak in mISDN_register_device()No scoreKernelLinuxrose: Fix NULL pointer dereference in rose_send_frame()No scoreKernelLinuxbtrfs: fix ulist leaks in error paths of qgroup self testsNo score- Show moreLoading…