CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- siemens parasolid, parasolid v33.1, parasolid v34.0 +4 more +6 moreA vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34...7.8 High
- siemens parasolid, parasolid v33.1, parasolid v34.0 +4 more +6 moreA vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34...7.8 High
- siemens parasolid, parasolid v33.1, parasolid v34.0 +4 more +6 moreA vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34...7.8 High
- siemens parasolid, parasolid v33.1, parasolid v34.0 +4 more +6 moreA vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34...7.8 High
- siemens parasolid, parasolid v33.1, parasolid v34.0 +5 more +7 moreA vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34...7.8 High
- siemens polarion almA vulnerability has been identified in Polarion ALM (All versions). The affected application...5.4 Medium
- siemens scalance sc622-2c, scalance sc626-2c, scalance sc632-2c +17 more +19 moreA vulnerability has been identified in SCALANCE SC622-2C (All versions < V2.3), SCALANCE SC622-2C...7.1 High
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, ruggedcom rm1224 lte\(4g\) eu firmware +261 more +263 moreAffected devices do not check the TFTP blocksize correctly. This could allow an authenticated...5.1 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, ruggedcom rm1224 lte\(4g\) eu firmware +252 more +254 moreAffected devices store the CLI user passwords encrypted in flash memory. Attackers with physical...5.2 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, ruggedcom rm1224 lte\(4g\) eu firmware +252 more +254 moreAffected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an...7.1 High
- gym management system project management systemGym Management System v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).4.5 Medium
- aerocms project aerocmsAeroCMS v0.0.1 is vulnerable to ClickJacking.6.1 Medium
- aerocms project aerocmsAeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).6.5 Medium
- aerocms project aerocmsAeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via add_post...4.8 Medium
- aerocms project aerocmsThe approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.7.2 High
- aerocms project aerocmsAeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter.4.9 Medium
- siemens apogee pxc compact (bacnet), apogee pxc compact (p2 ethernet), apogee pxc modular (bacnet) +12 more +14 moreA vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions < V3.5.5), APOGEE...8.8 High
- siemens mendix email connectorA vulnerability has been identified in Mendix Email Connector (All versions < V2.0.0). Affected...8.1 High
- f-secure atlantDenial-of-Service (DoS) Vulnerability4.3 Medium
- jettison project jettison, debian linux +1 moreJettison Out-of-bounds Write vulnerability7.5 High
- hutool, stleary json-java +1 morehutool-json stack overflow vulnerability7.5 High
- hutoolhutool-json vulnerable to memory exhaustion7.5 High
- hutool, stleary json-java +1 morejson stack overflow vulnerability7.5 High
- jettison project jettison, debian linux +1 moreJettison Out-of-bounds Write vulnerability7.5 High
- siemens jt2go, teamcenter visualization v13.2, teamcenter visualization v13.3 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions), Teamcenter Visualization V13.2 (All...3.3 Low
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp200), siprotec 5 6md85 (cp300) +96 more +98 moreA vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP200) (All versions...5.3 Medium
- arris nvg443b firmwareA cross-site scripting (XSS) vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to...6.1 Medium
- ip-com ew9 firmwareIP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the...9.8 Critical
- wasm3 project wasm3wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation...5.5 Medium
- siemens simatic wincc oa v3.15, simatic wincc oa v3.16, simatic wincc oa v3.17 +2 more +4 moreA vulnerability has been identified in SIMATIC WinCC OA V3.15 (All versions), SIMATIC WinCC OA V3...5.4 Medium
- microsoft office 2019 for mac, office ltsc for mac 2021, office +1 more +3 moreMicrosoft Outlook for Mac Spoofing Vulnerability7.5 High
- microsoft windows 11 version 22h2, windows 11 +1 moreDirectX Graphics Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft edge, edge (chromium-based), edge chromium +1 more +3 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +19 more +21 moreWindows Kernel Denial of Service Vulnerability6.5 Medium
- microsoft windows sysmonMicrosoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability7.8 High
- microsoft terminal, windows terminal for windows 10, windows terminal for windows 11 +2 moreWindows Terminal Remote Code Execution Vulnerability7.8 High
- microsoft azure network watcher agent, azure network watcher vm extension +1 moreAzure Network Watcher Agent Security Feature Bypass Vulnerability5.5 Medium
- microsoft defender, windows 10 version 1607, windows 10 version 1809 +15 more +17 moreWindows SmartScreen Security Feature Bypass Vulnerability5.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft office, visio, 365 apps +6 more +8 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office Visio Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +5 more +7 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Graphics Remote Code Execution Vulnerability7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office OneNote Remote Code Execution Vulnerability7.8 High
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +4 more +6 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.8 High
- microsoft windows subsystem for linux (wsl2), windows subsystem for linux, windows 10 version 1809 +11 more +13 moreWindows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- microsoft raw image extensionRaw Image Extension Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +19 more +21 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- Show moreLoading…