CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- apple ipados, macos, safari +3 more +5 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple icloud, icloud for windows, ipados +5 more +7 moreA logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2,...6.5 Medium
- apple macosAn out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple ipados, macos, safari +3 more +5 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...8.8 High
- apple ipados, macos, tvos +2 more +4 moreA spoofing issue existed in the handling of URLs. This issue was addressed with improved input...6.5 Medium
- apple ipados, tvos, watchos +1 more +3 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple icloud, icloud for windows, ipados +4 more +6 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple icloud, icloud for windows, ipados +5 more +7 moreA logic issue was addressed with improved state management. This issue is fixed in Safari 16.2,...5.5 Medium
- apple ipados, macos, tvos +2 more +4 moreAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +3 more +5 moreA race condition was addressed with additional validation. This issue is fixed in tvOS 16.2,...7.0 High
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- arm mbed tls, fedoraproject fedora +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap...9.8 Critical
- arm mbed tls, fedoraproject fedora +1 moreAn issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access...5.3 Medium
- alistgo alistAlist vulnerable to Path Traversal9.8 Critical
- exactsoftware exact synergyAn arbitrary file upload vulnerability in the profile picture upload function of Exact Synergy...7.8 High
- collective.task project collective.taskcollective.task table.py AssignedGroupColumn cross site scripting3.5 Low
- django-photologue project django-photologuedjango-photologue Default Template photo_detail.html cross site scripting3.5 Low
- national sleep research resource sleepdata.org, sleepdata +1 moreNational Sleep Research Resource sleepdata.org cross site scripting3.5 Low
- roots soil, soil plugin +1 moreRoots soil Plugin CleanUpModule.php language_attributes cross site scripting3.5 Low
- unspecified vexim2, virtual exim project exim 2 +1 morevexim2 cross site scripting3.5 Low
- calendarxpCalendarXP cross site scripting3.5 Low
- wso2 carbon-registryWSO2 carbon-registry Request Parameter cross site scripting3.5 Low
- wso2 carbon-registryWSO2 carbon-registry Advanced Search advancedSearchForm-ajaxprocessor.jsp cross site scripting3.5 Low
- opencaching oc-server3Opencaching Deutschland oc-server3 varset.inc.php cross site scripting3.5 Low
- european environment agency eionet.contreg, eea eionet content registry +1 moreEuropean Environment Agency eionet.contreg cross site scripting3.5 Low
- docsys project docsysRainyGao DocSys path traversal5.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreUnrestricted Upload of File with Dangerous Type in openemr/openemr7.6 High
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemr8.8 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Input Validation in openemr/openemr7.1 High
- oretnom23 expense trackerA cross-site scripting (XSS) vulnerability in Expense Tracker 1.0 allows attackers to execute...5.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Generic in openemr/openemr6.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemr7.3 High
- zed-3 voip simplicity asgBeijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 (20181130-16:12) has a Weak...9.8 Critical
- zed-3 voip simplicity asgBeijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 (20181130-16:12) is vulnerable...6.1 Medium
- apple ipados, macos, safari +3 more +5 moreA use after free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, tvos +2 more +4 moreThe issue was addressed with improved handling of caches. This issue is fixed in iOS 16.2 and...5.5 Medium
- apple ipados, macos, tvos +2 more +4 moreThis issue was addressed by enabling hardened runtime. This issue is fixed in iOS 16.2 and iPadOS...5.5 Medium
- apple ipados, macos, tvos +2 more +4 moreA race condition was addressed with improved state handling. This issue is fixed in tvOS 16.2,...7.0 High
- apple ipados, macos, iphone os +2 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.2 and...5.5 Medium
- apple ipados, macos, iphone os +2 moreThis issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2,...8.8 High
- apple ipados, macos, watchos +1 more +3 moreMultiple issues were addressed by removing the vulnerable code. This issue is fixed in iOS 16.2...5.5 Medium
- apple ios, ipados, macos +3 more +5 moreA type confusion issue was addressed with improved state handling. This issue is fixed in Safari...8.8 High
- apple ipados, macos, tvos +1 more +3 moreA logic issue was addressed with improved state management. This issue is fixed in tvOS 16.2,...7.1 High
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6...5.5 Medium
- apple macosAn access issue was addressed with improved access restrictions. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, safari +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS...6.5 Medium
- apple ipados, tvos, iphone os +2 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS...7.8 High
- apple ipados, tvos, watchos +1 more +3 moreAn access issue existed with privileged API calls. This issue was addressed with additional...7.8 High
- Show moreLoading…