CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- apple ipados, tvos, iphone os +2 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2...7.8 High
- apple macosAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS...5.5 Medium
- apple ipados, macos, tvos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS...7.2 High
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS...8.6 High
- apple ipados, macos, tvos +2 more +4 moreThis issue was addressed with improved data protection. This issue is fixed in iOS 16.2 and...5.5 Medium
- apple ipados, macos, tvos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS...9.8 Critical
- apple macosA type confusion issue was addressed with improved checks. This issue is fixed in macOS Monterey...7.8 High
- apple ipados, macos, iphone os +2 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6...7.8 High
- apple ipados, macos, watchos +1 more +3 moreAn issue existed in the parsing of URLs. This issue was addressed with improved input validation....9.8 Critical
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2,...5.5 Medium
- apple ipados, macos, iphone os +2 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 15.6...7.8 High
- feehi feehicmsFeehiCMS Cross Site Scripting vulnerability5.4 Medium
- thingsboardCross Site Scripting (XSS) vulnerability in Things Board 3.4.1 allows remote attackers to...9.6 Critical
- feehi feehicmsFeehiCMS Cross Site Scripting vulnerability5.4 Medium
- feehi feehicmsFeehiCMS Cross Site Scripting vulnerability5.4 Medium
- feehi feehicmsFeehiCMS Cross Site Scripting vulnerability5.4 Medium
- apple ipados, macos, iphone os +2 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15...7.8 High
- apple macos, ipados, iphone os +2 moreAn access issue was addressed with additional sandbox restrictions on third-party apps. This...4.3 Medium
- apple ipados, macos, iphone os +2 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS...5.3 Medium
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6...7.8 High
- apple ios, iphone os +1 moreAn out-of-bounds read issue existed that led to the disclosure of kernel memory. This was...5.5 Medium
- apple ipados, macos, iphone os +2 moreAn out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS...7.8 High
- apple ios, iphone os, macos +1 more +3 moreAn issue existed with the file paths used to store website data. The issue was resolved by...5.3 Medium
- chbrown rfc6902chbrown rfc6902 pointer.ts prototype pollution5.5 Medium
- eyoucmsCross Site Scripting (XSS) vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to...5.4 Medium
- vtimecn 188jianzhanCross site scripting vulnerability in 188Jianzhan 2.10 allows attackers to execute arbitrary code...5.4 Medium
- seacmsAn issue was discovered in /Upload/admin/admin_notify.php in Seacms 11.4 allows attackers to...9.8 Critical
- feehi feehicmsFeehiCMS Unrestricted Upload vulnerability5.4 Medium
- feehi feehicmsFeehiCMS Cross Site Scripting vulnerability6.1 Medium
- replicator project replicatorreplicator vulnerable to Deserialization of Untrusted Data9.8 Critical
- feehi feehicmsFeehiCMS Cross Site Scripting vulnerability6.1 Medium
- easyjs easywebpack-clieasywebpack-cli Path Traversal vulnerability5.3 Medium
- netgate acme, pfsense +1 moreCross Site Scripting (XSS) vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME...6.1 Medium
- feehi feehicmsFeehiCMS vulnerable to Cross Site Scripting6.1 Medium
- ibarn project ibarnFile upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5...8.8 High
- ibm spectrum protect plusIBM Spectrum Protect Plus information disclosure6.8 Medium
- helmHelm contains Denial of service through schema file5.3 Medium
- helmHelm vulnerable to Denial of service via NULL Pointer Dereference5.3 Medium
- tendermint-light-client project tendermint-light-client, informalsystems tendermint-rs, tendermint-light-client-js project tendermint-light-client-js +1 more +3 moreLight client verification not taking into account chain ID5.4 Medium
- maciej bis permalink manager lite, permalink manager lite project manager lite +1 morePermalink Manager Lite <= 2.2.20.3 - Authenticated Stored Cross-Site Scripting6.4 Medium
- motorola moto e20, moto e20 firmware +1 moreImproper access control of bootloader function was discovered in Motorola Mobility Motorola e20...4.6 Medium
- nasir179125 mega addons for wpbakery page builderMega Addons For WPBakery Page Builder <= 4.3.0 - Authenticated (Subscriber+) Settings Update7.1 High
- helmHelm vulnerable to Denial of service through string value parsing5.3 Medium
- debian linux, openidc mod auth openidc +1 moreOpen Redirect in oidc_validate_redirect_url()4.7 Medium
- metersphereMetersphere is vulnerable to Path Injection.7.7 High
kimageformatsOSS-FuzzHeap-use-after-free in HEIFHandler::ensureDecoderNo score- apache atlasApache Atlas: zip path traversal in import functionality8.8 High
- wordpressWP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding5.9 Medium
- quanos schema st4 example web templates, weidmueller 19 iot md01 lan h4 s0011 firmware, fp iot md01 4eu s2 00000 firmware +7 more +9 moreQuaonos Schema ST4 example templates prone to XSS6.1 Medium
- Show moreLoading…