CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- typo3TYPO3 vulnerable to Arbitrary Code Execution via Form Framework7.5 High
- typo3TYPO3 contains Insufficient Session Expiration after Password Reset5.4 Medium
- typo3TYPO3 vulnerable to Improper Authentication in Frontend Login5.9 Medium
- typo3TYPO3 subject to Uncontrolled Recursion resulting in Denial of Service5.9 Medium
- typo3 html-sanitizer, html sanitizer +1 moreCross-Site Scripting Protection bypass in HTML Sanitizer6.1 Medium
- apache cxfApache CXF SSRF Vulnerability9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreA missing check related to tex units could have led to a use-after-free and potentially...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe executable file warning was not presented when downloading .atloc and .ftploc files, which...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA file with a long filename could have had its filename truncated to remove the valid extension,...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker who compromised a content process could have partially escaped the sandbox to read...8.6 High
- netapp altavault ost plug-in, fas\/aff baseboard management controller, hci baseboard management controller +4 more +6 moreX.509 Policy Constraints Double Locking7.5 High
- apache cxfApache CXF directory listing / code exfiltration7.5 High
- google android google search app, search +1 morePath Traversal in Android Google Search App8.9 High
- secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +10 more +12 moreUnwanted debug tool5.7 Medium
wabtOSS-FuzzUNKNOWN WRITE in void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> >No scorehunspellOSS-FuzzHeap-buffer-overflow in AffixMgr::cpdcase_checkNo scorelibredwgOSS-FuzzHeap-buffer-overflow in dwg_decode_INSERT_privateNo scorerelease-notes-susemanagerSUSE,release-notes-susemanager-proxySUSE +1 moreSecurity update for SUSE Manager Server 4.2No scorespacewalk-javaSUSE,spacewalk-webSUSE,susemanager-sync-dataSUSE +2 moreSecurity update for SUSE Manager Server 4.2No score- wiesemann & theis com-server ++, com-server 20ma, com-server highspeed 100basefx +29 more +31 moreWiesemann & Theis: Multiple products prone to missing authentication through spoofing8.0 High
- auth0 passport-wsfed-saml2Passport-wsfed-saml2 vulnerable to Authentication Bypass for WSFed authentication5.3 Medium
- enalean tuleapTuleap MediaWiki standalone "readers" can also edit pages4.3 Medium
- enalean tuleapTuleap dashboards vulnerable to Incorrect Authorization4.3 Medium
- sap solution manager (enterprise search), solution manager +1 moreIn SAP Solution Manager (Enterprise Search) - versions 740, and 750, an unauthenticated attacker...6.1 Medium
- sap disclosure managementSAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain...6.5 Medium
- sap sourcing, sourcing and sap contract lifecycle management, contract lifecycle manager +2 moreDue to improper input sanitization in SAP Sourcing and SAP Contract Lifecycle Management -...4.3 Medium
- sap netweaver process integrationAn unauthenticated attacker over the network can attach to an open interface exposed through JNDI...9.9 Critical
- sap netweaver process integrationAn unauthenticated user can attach to an open interface exposed through JNDI by the Messaging...9.4 Critical
- sap business planning and consolidationIn some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750,...8.5 High
- sap business objects business intelligence platform, businessobjects business intelligence platform +1 moreSAP Business Objects Platform - versions 420, and 430, allows an attacker with normal BI user...9.9 Critical
- sap commerce webservices 2.0 (swagger ui), commerce webservices 2.0 +1 moreDue to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions...8.0 High
- sap basisDue to the unrestricted scope of the RFC function module, SAP BASIS - versions 731, 740, 750, 751...8.8 High
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Office Graphics Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Office Graphics Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise +1 moreMicrosoft Office Graphics Remote Code Execution Vulnerability7.8 High
- sick rfu650-10100 firmware, rfu650-10101 firmware, rfu650-10102 firmware +4 more +6 moreUse of a Broken or Risky Cryptographic Algorithm in SICK RFU65x firmware version < v2.21 allows a...6.5 Medium
- sick rfu630-04100 firmware, rfu630-04100s01 firmware, rfu630-04101 firmware +21 more +23 moreUse of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a...6.5 Medium
- sick rfu620-10100 firmware, rfu620-10101 firmware, rfu620-10102 firmware +18 more +20 moreUse of a Broken or Risky Cryptographic Algorithm in SICK RFU62x firmware version < 2.21 allows a...6.5 Medium
- siemens mendix workflow commons, mendix workflow commons v2.1, mendix workflow commons v2.3 +2 moreA vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0). Affected...8.1 High
- atos unify openscape 4000 assistant, unify openscape 4000 manager +1 moreA command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and...9.8 Critical
- niceforyou linear emerge e3 access control firmwareCertain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to...6.1 Medium
- siemens scalance x204rna (hsr), scalance x204rna (prp), scalance x204rna eec (hsr) +7 more +9 moreA vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE...7.5 High
- siemens scalance x204rna (hsr), scalance x204rna (prp), scalance x204rna eec (hsr) +7 more +9 moreA vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE...5.3 Medium
- siemens scalance x204rna (hsr), scalance x204rna (prp), scalance x204rna eec (hsr) +7 more +9 moreA vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE...9.8 Critical
- siemens scalance x204rna (hsr), scalance x204rna (prp), scalance x204rna eec (hsr) +7 more +9 moreA vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE...7.5 High
- siemens scalance x204rna (hsr), scalance x204rna (prp), scalance x204rna eec (hsr) +7 more +9 moreA vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE...5.5 Medium
- siemens scalance x204rna (hsr), scalance x204rna (prp), scalance x204rna eec (hsr) +7 more +9 moreA vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE...6.1 Medium
- Show moreLoading…