CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- dynamic transaction queuing system project transaction queuing systemAn arbitrary file upload vulnerability in /queuing/admin/ajax.php?action=save_settings of Dynamic...7.2 High
- gmaolinx linx sphereA directory traversal vulnerability in the component SCS.Web.Server.SPI/1.0 of Linx Sphere LINX 7...7.5 High
- dragino lg01 lora firmwareDragino Lora LG01 18ed40 IoT v4.3.4 was discovered to contain a Cross-Site Request Forgery in the...3.5 Low
- dragino lg01 lora firmwareThe web portal of Dragino Lora LG01 18ed40 IoT v4.3.4 has the directory listing at the URL https:...7.5 High
- tenda ax12 firmwareTenda AX12 V22.03.01.16_cn is vulnerable to command injection via goform/fast_setting_internet_set.8.8 High
- redmineRedmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to...6.1 Medium
- rathena fluxcprAthena FluxCP Service Desk Image URL view.php cross site scripting3.5 Low
- rainygao docsys, mxsdoc project mxsdoc +1 moreRainyGao DocSys getReposAllUsers.do getReposAllUsers sql injection6.3 Medium
- redmineRedmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to...6.1 Medium
- arm valhall gpu kernel driverAn issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non...8.8 High
- netty, debian linux +1 moreHAProxyMessageDecoder Stack Exhaustion DoS5.3 Medium
- bluetooth core specificationBluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an...7.5 High
- bluetooth core specificationBluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an...7.5 High
- amazon cloudwatch agent, aws amazon-cloudwatch-agent +1 moreAmazon CloudWatch Agent for Windows has Privilege Escalation Vector7.1 High
- unspecified yikes-inc-easy-mailchimp-extender plugin, yikesplugins easy forms for mailchimp +1 moreyikes-inc-easy-mailchimp-extender Plugin add_field_to_form.php cross site scripting2.6 Low
- logrhythmLogrhythm Web Console 7.4.9 allows for HTML tag injection through Contextualize Action -> Create...6.1 Medium
assimpOSS-FuzzHeap-buffer-overflow in Assimp::ObjFileImporter::createVertexArrayNo score- nuxt framework, nuxt/framework +1 moreCross-site Scripting (XSS) - DOM in nuxt/framework6.1 Medium
- nuxt framework, nuxt/framework +1 moreCross-site Scripting (XSS) - Reflected in nuxt/framework6.1 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq6.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq4.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq9.8 Critical
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System ajax_represent.php sql injection6.3 Medium
- docsys project docsysRainyGao DocSys ZIP File Decompression path traversal4.7 Medium
- pallidlight online-course-selection-system, pallidlight online course selection system project online course selection system +1 morepallidlight online-course-selection-system cross site scripting3.5 Low
- fs-blog project fs-blogzbl1996 FS-Blog Title cross site scripting3.5 Low
- slixmpp project slixmppSlixmpp lacks SSL Certificate hostname validation in XMLStream7.5 High
libredwgOSS-FuzzHeap-buffer-overflow in bit_read_BBNo scorelibredwgOSS-FuzzHeap-buffer-overflow in bit_read_BNo score- getsentry sentryInvite code reuse via cookie manipulation in sentry6.4 Medium
- call-cc chickenegg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package...9.8 Critical
- nodau project nodauTicklishHoneyBee nodau db.c sql injection5.5 Medium
- radare radare2, radareorg radareorg/radare2 +1 moreInteger Overflow or Wraparound in radareorg/radare26.1 Medium
- morontt zend-blog-number-2, zend-blog-2 project zend-blog-2 +1 moremorontt zend-blog-number-2 Comment Comment.php cross-site request forgery4.3 Medium
- pyrdfa3 project pyrdfa3RDFlib pyrdfa3 __init__.py _get_option cross site scripting3.5 Low
- freshrssInsecure file access in FreshRSS6.5 Medium
- cube cube.jsSQl injection in cube-js9.6 Critical
- zephyrproject zephyrbt: host: Wrong key validation check8.6 High
- codecentric spring boot admin, spring-boot-admin +1 moreSpring Boot Admins integrated notifier support allows arbitrary code execution8.1 High
- akeneo product information management, pim-community-dev +1 moreRemote php code execution in Akeneo PIM8.8 High
- ibm cloud transformation advisor, transformation advisor +1 moreIBM Cloud Transformation Advisor cross-site scripting4.4 Medium
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow in xrdp9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreInteger Overflow in xrdp8.2 High
- neutrinolabs xrdp, debian linux +1 moreOut-of-Bound Read in libxrdp7.5 High
- neutrinolabs xrdp, debian linux +1 moreOut-of-Bound Read in xrdp0.0 None
- neutrinolabs xrdp, debian linux +1 moreOut-of-Bound Read in xrdp0.0 None
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow in xrdp9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow occurs in xrdp9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreOut of Bound Write in xrdp9.1 Critical
- neutrinolabs xrdp, debian linux +1 moreBuffer Overflow in xrdp6.5 Medium
- Show moreLoading…