CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- qualcomm apq8096au firmware, mdm9640 firmware, mdm9645 firmware +6 more +8 moreMemory corruption in Core8.4 High
- cycle-import-check project cycle-import-checkCommand Injection7.4 High
gitDebiangit - regression updateNo score- fp newsletter project newsletter"Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data9.1 Critical
- fp newsletter project newsletter"Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data9.1 Critical
- fp newsletter project newsletterAn issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension...9.1 Critical
- fp newsletter project newsletterMultiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter)9.1 Critical
- master-quiz project master-quizTYPO3-EXT-SA-2022-018: Multiple vulnerabilities in extension "Master-Quiz" (fp_masterquiz)6.5 Medium
- change password for frontend users project password for frontend usersTYPO3 vulnerable to Insufficient Session Expiration5.4 Medium
- passhunt project passhuntPasshunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code...9.8 Critical
- vsphere selfuse project selfusevSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code...9.8 Critical
- mozilla firefoxMozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the...8.8 High
- mozilla firefox, debian linux +1 moreBy confusing the browser, the fullscreen notification could have been delayed or suppressed,...4.3 Medium
- mozilla firefoxBecause Firefox did not implement the <code>unsafe-hashes</code> CSP directive, an attacker who...8.8 High
- mozilla firefox, debian linux +1 moreAn out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited...8.8 High
- python3-restfulapi project python3-restfulapiPython3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and...9.8 Critical
- bangresto project bangrestomesinkasir Bangresto 1.0 is vulnberable to SQL Injection via the itemqty%5B%5D parameter.8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...8.8 High
- debian linux, fedoraproject fedora, the xorg project xorg-x11-server +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs because the handler for the...8.8 High
- x.org x server, debian linux, fedoraproject fedora +1 more +3 moreA vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the...8.8 High
- github enterprise serverPath traversal in GitHub Enterprise Server leading to remote code execution in GitHub Pages8.8 High
- github enterprise serverImproper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE9.8 Critical
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f...7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/manage_brand...7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client...7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user...7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories...7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories...7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products...7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products...7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=.7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=product_per_brand...7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=view_product&id=.7.2 High
- helmet store showroom project store showroomHelmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated...8.8 High
- helmet store showroom project store showroomHelmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).6.1 Medium
- helmet store showroom project store showroomHelmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection.9.8 Critical
- helmet store showroom site project store showroom siteThere is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability...9.8 Critical
- collective.dms.basecontent project collective.dms.basecontentcollective.dms.basecontent column.py renderCell cross site scripting3.5 Low
- bspkrs mcpmappingviewer, mcp mapping viewer project mapping viewer +1 morebspkrs MCPMappingViewer ZIP File RemoteZipHandler.java extractZip path traversal6.3 Medium
- scif scifioscifio ZIP File DefaultSampleFilesService.java downloadAndUnpackResource path traversal6.3 Medium
- quarkslab binbloomBinbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at ...7.8 High
- asus aura syncThe MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to...7.8 High
- dlink dir-3040 firmwareD-Link DIR-3040 device with firmware 120B03 was discovered to contain a command injection...9.8 Critical
- google chromeUse after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to...8.8 High
- google chromeUse after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote...8.8 High
- google chromeUse after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker...8.8 High
- google chromeUse after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to...8.8 High
- google chromeUse after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker...8.8 High
- Show moreLoading…