CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- x.org x server, debian linux, fedoraproject fedora +2 more +4 moreA vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function...7.8 High
- freeradiusA flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed...6.5 Medium
- freeradiusIn freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to...7.5 High
- logrocket-oauth2-example project logrocket-oauth2-examplelogrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username...9.8 Critical
- vmware esxi, fusion, workstation +2 moreVMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB...8.2 High
- vmware vrealize log insightvRealize Network Insight (vRNI) directory traversal vulnerability in vRNI REST API. A malicious...7.5 High
- vmware vrealize network insightvRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI...9.8 Critical
- vmware access, cloud foundation, identity manager connector +2 moreVMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability....5.3 Medium
- vmware access, identity manager, cloud foundation +2 moreVMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution...7.2 High
- proxmox virtual environmentA reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2...9.0 Critical
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreAn issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 5.16-rc6. amvdec_set_canvases in drivers...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 5.16-rc6. free_charger_irq() in drivers/power...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 5.16-rc6. _rtw_init_xmit_priv in drivers...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net...5.5 Medium
- linux kernelAn issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband...5.5 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreAn issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc...5.5 Medium
- github enterprise serverIncorrect authorization in GitHub Enterprise Server token generation leading to full admin access7.2 High
- arcadyan vrv9506jac23 firmwareThe login password of the web administrative dashboard in Arcadyan Wifi routers VRV9506JAC23 is...6.5 Medium
- arcadyan vrv9506jac23 firmwareMultiple stored cross-site scripting (XSS) vulnerabilities in Arcadyan Wifi routers VRV9506JAC23...5.4 Medium
- iconics genesis64Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in...6.3 Medium
rootcertsMageiaUpdated rootcerts packages fix security vulnerabilityNo scoreadmeshMageiaUpdated admesh packages fix security vulnerabilityNo score- delta electronics industrial automation dialink, deltaww dialink +1 moreDelta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a...9.8 Critical
- kingspan tms300 cs, tms300 cs firmware +1 moreDue to the lack of adequately implemented access-control rules, all versions Kingspan TMS300 CS...9.8 Critical
- daikin svmpc1, svmpc2 +1 moreDaikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to...7.5 High
- daikin svmpc1, svmpc2 +1 moreDaikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an...9.8 Critical
- altair hyperview playerAltair HyperView Player versions 2021.1.0.27 and prior perform operations on a memory buffer but...7.8 High
- altair hyperview playerAltair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized...7.8 High
- altair hyperview playerAltair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized...7.8 High
- altair hyperview playerAltair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of...7.8 High
- oxilab image hover effects ultimate, biplob018 image hover effects ultimate (image gallery, effects, lightbox, comparison or magnifier) +1 moreThe Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site...5.5 Medium
- demonisblack demon image annotationdemon image annotation <= 5.0 - Improper Input Restriction Validation6.5 Medium
- keycloakKeycloak vulnerable to path traversal via double URL encoding9.1 Critical
- redhat keycloak, red hat single sign-on 7, single sign-on 7.6 for rhel 7 +9 more +11 moreKeycloak: session takeover with oidc offline refreshtokens6.8 Medium
- tibco jasperreports server, tibco software inc. jasperreports server - developer edition, jasperreports server for aws marketplace +1 more +3 moreTIBCO JasperReports Server Stored XSS Vulnerability9.0 Critical
- tibco jasperreports server, tibco software inc. jasperreports server - community edition, jasperreports server - developer edition +2 more +4 moreTIBCO JasperReports Server XSS Issue on Roles8.4 High
- tibco jasperreports server, tibco software inc. jasperreports server - community edition, jasperreports server - developer edition +2 more +4 moreTIBCO JasperReports Server RCE Vulnerability9.1 Critical
- rails rails-html-sanitizer, debian linux, rubyonrails rails html sanitizers +2 morerails-html-sanitizer contains an incomplete fix for an XSS vulnerability6.1 Medium
- rails rails-html-sanitizer, debian linux, rubyonrails rails html sanitizers +2 morePossible XSS vulnerability with certain configurations of rails-html-sanitizer7.2 High
- loofah project loofah, rails rails-html-sanitizer, debian linux +1 more +3 moreImproper neutralization of data URIs allows XSS in rails-html-sanitizer6.1 Medium
- rails rails-html-sanitizer, debian linux, rubyonrails rails html sanitizers +2 moreInefficient Regular Expression Complexity in rails-html-sanitizer7.5 High
- flavorjones loofahUncontrolled Recursion in Loofah7.5 High
- flavorjones loofah, debian linux +1 moreImproper neutralization of data URIs may allow XSS in Loofah6.1 Medium
- flavorjones loofahInefficient Regular Expression Complexity in Loofah7.5 High
- typo3TYPO3 contains Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration5.7 Medium
- Show moreLoading…