CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- microsoft powershell, powershell 7.2, powershell 7.3 +30 more +32 morePowerShell Remote Code Execution Vulnerability8.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Graphics Component Information Disclosure Vulnerability5.5 Medium
- niceforyou linear emerge e3 access control firmwareNortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0...6.1 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +282 more +284 moreTransient DOS due to loop with unreachable exit condition in WLAN while processing an incoming...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8096au firmware +244 more +246 moreInformation disclosure due to buffer over-read in WLAN firmware while parsing security context...8.2 High
- vmware esxi, cloud foundation +1 moreVMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted...3.3 Low
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability in the content library service. A...5.3 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an information disclosure vulnerability due to the logging of...5.5 Medium
- vmware esxi, cloud foundation +1 moreVMware ESXi contains a memory corruption vulnerability that exists in the way it handles a...8.8 High
- sick rfu610-10600 firmware, rfu610-10601 firmware, rfu610-10603 firmware +9 more +11 moreUse of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a...6.5 Medium
- citrix application delivery controller (adc) and gateway, application delivery controller firmware, gateway, citrix adc +1 more +3 moreUnauthenticated remote arbitrary code execution9.8 Critical
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Office Graphics Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Office Graphics Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Office Graphics Remote Code Execution Vulnerability7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, mdm9150 firmware +44 more +46 moreMemory corruption in camera due to buffer copy without checking size of input in Snapdragon Auto,...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, mdm9150 firmware +56 more +58 moreMemory corruption in camera due to improper validation of array index in Snapdragon Auto,...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +77 more +79 moreDenial of service in modem due to reachable assertion while processing reconfiguration message in...7.5 High
- qualcomm, inc. snapdragon mobile, snapdragon wearables, qualcomm sd429 firmware, sd 8 gen1 5g firmware +14 more +16 moreMemory corruption in SPI buses due to improper input validation while reading address...8.4 High
- qualcomm, inc. snapdragon mobile, snapdragon wearables, qualcomm sd429 firmware, sd 8 gen1 5g firmware +14 more +16 moreMemory corruption in i2c buses due to improper input validation while reading address...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +195 more +197 moreMemory corruption in MODEM due to Improper Validation of Array Index while processing GSTK...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca6390 firmware +60 more +62 moreDenial of service in Modem due to reachable assertion while processing the common config...7.5 High
- qualcomm, inc. snapdragon mobile, qualcomm ar8035 firmware, qca8081 firmware +22 more +24 moreDenial of service in Modem due to reachable assertion while processing SIB1 with invalid SCS and...7.5 High
- qualcomm, inc. snapdragon mobile, qualcomm ar8035 firmware, qca8081 firmware +7 more +9 moreDenial of service in Modem due to reachable assertion in Snapdragon Mobile7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8017 firmware +123 more +125 moreDenial of service in Modem module due to improper authorization while error handling in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +202 more +204 moreMemory corruption in MODEM UIM due to usage of out of range pointer offset while decoding command...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +96 more +98 morePossible memory corruption in kernel while performing memory access due to hypervisor not...8.4 High
- qualcomm, inc. snapdragon compute, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6310 firmware +47 more +49 moreDenial of service due to reachable assertion in modem while processing filter rule from...5.5 Medium
- qualcomm, inc. snapdragon mobile, qualcomm ar8035 firmware, qca8081 firmware +12 more +14 moreDenial of service in MODEM due to reachable assertion while processing configuration from network...7.5 High
- qualcomm, inc. snapdragon mobile, qualcomm ar8035 firmware, qca8081 firmware +22 more +24 moreDenial of service in MODEM due to reachable assertion while processing SIB1 with invalid...7.5 High
- microsoft outlook for android, outlook +1 moreOutlook for Android Elevation of Privilege Vulnerability6.3 Medium
- google androidIn SendIncDecRestoreCmdPart2 of NxpMfcReader.cc, there is a possible out of bounds read due to a...5.5 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +170 more +172 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...4.9 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +166 more +168 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...5.5 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +170 more +172 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...4.9 Medium
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants) +170 more +172 moreA vulnerability has been identified in SIMATIC Drive Controller family (All versions < V3.0.1),...7.5 High
- msi wrapperEXEMSI MSI Wrapper Versions prior to 10.0.50 and at least since version 6.0.91 will introduce a...7.8 High
- pacparser project pacparserpacparser pacparser.c pacparser_find_proxy buffer overflow5.3 Medium
- linux-loader project linux-loaderrust-vmm linux-loader vulnerable to Out-of-bounds Read4.0 Medium
mpl-candy-machinecrates.ioCandy Machine Set Collection During Mint Missing CheckNo scorempl-bubblegumcrates.io,mpl-token-metadatacrates.io +1 moreCreator Verification Error when Bubblegum ActivateNo score- sap business objects business intelligence platform (web intelligence), business objects business intelligence platform +1 moreDue to a missing authentication check, SAP Business Objects Business Intelligence Platform (Web...4.3 Medium
- sap netweaver as for java (http provider service), netweaver application server java +1 moreDue to insufficient input validation, SAP NetWeaver AS Java (HTTP Provider Service) - version 7...6.1 Medium
- netty, debian linux +1 moreNetty vulnerable to HTTP Response splitting from assigning header value iterator6.5 Medium
- sap solution manager (diagnostic agent), solution manager +1 moreSAP Solution Manager (Diagnostic Agent) - version 7.20, allows an authenticated attacker on...6.0 Medium
- booster for woocommerce, pluggabl booster for woocommerce, pluggabl llc booster plus for woocommerce +1 more +3 moreBooster for WooCommerce - Custom Role Creation/Deletion via CSRF6.5 Medium
- themographics listingoListingo < 3.2.7 - Unauthenticated Arbitrary File Upload9.8 Critical
- boxystudio cooked, gora tech llc cooked pro +1 moreCooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection9.8 Critical
- stylemixthemes motors, motors - car dealer\, classifieds \& listing +1 moreMotors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File Upload8.8 High
- livemesh addons for elementor, unknown livemesh addons for elementor +1 moreLivemesh Addons for Elementor < 7.2.4 - Admin+ Stored XSS4.8 Medium
- dpdgroup woocommerce shippingWooCommerce Shipping - DPD baltic < 1.2.11 - Admin+ Stored XSS4.8 Medium
- Show moreLoading…