CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- tenda ac10 firmwareTenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.7.5 High
- sharp multifunction printers, bp-30c25 firmware, bp-30c25t firmware +156 more +158 moreSHARP Multifunction Printer - Command Injection9.1 Critical
- ruoyiy_project RuoYi GenController sql injection5.5 Medium
- dromara hutoolDromara HuTool cn.hutool.core.util.ZipUtil.java resource consumption4.3 Medium
- ucf materiaUniversity of Central Florida Materia API Controller api.php before cross-site request forgery4.3 Medium
- freedom securedropFreedom of the Press SecureDrop gpg-agent.conf symlink7.8 High
- unspecified semanticdrilldown extension, mediawiki semantic drilldown +1 moreSemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross site scripting3.5 Low
- joget dxJoget wflow-core UniversalTheme.java getInternalJsCssLib cross site scripting3.5 Low
- inex ipx-manager, ixp manager +1 moreINEX IPX-Manager list.foil.php cross site scripting3.5 Low
- alinto sogoAlinto SOGo Folder/Mail NSString+Utilities.m cross site scripting3.5 Low
- alinto sogoAlinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting3.5 Low
- sambaSince the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by...9.8 Critical
- red hat satellite server, redhat satellite +1 moreA blind site-to-site request forgery vulnerability was found in Satellite server. It is possible...4.5 Medium
- micro focus groupwise web, microfocus groupwise +1 moreCVE-2022-38756 vulnerability in GW Web prior to 18.4.24.3 Medium
- solarwinds serv-u, serv-u file server +1 moreCross-Site Scripting Vulnerability in Serv-U Web Client5.4 Medium
- mutinyMutiny 7.2.0-10788 suffers from Hardcoded root password.9.8 Critical
- embyIn Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible...6.1 Medium
- vmware vrealize operationsvRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated...4.9 Medium
- vmware vrealize operationsvRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated...7.2 High
- ffmpeg, debian linux, fedoraproject fedora +2 moreAn issue was discovered in the FFmpeg through 3.0. vp3_decode_frame in libavcodec/vp3.c lacks...7.5 High
- paxtechnology a930, paydroid +1 moreThe systool_server in PAX Technology A930 PayDroid 7.1.1 Virgo V04.4.02 20211201 fails to check...7.8 High
- pax a930, paxtechnology paydroid +1 moreThe ADB daemon in PAX Technology A930 PayDroid 7.1.1 Virgo V04.4.02 20211201 allows the execution...6.8 Medium
- paxtechnology a930, paydroid +1 morePAX Technology A930 PayDroid 7.1.1 Virgo V04.4.02 20211201 was discovered to be vulnerable to...6.8 Medium
- paxtechnology paydroidPAX Technology A930 PayDroid 7.1.1 Virgo V04.4.02 20211201 allows root privileged attackers to...6.0 Medium
- broadcom symantec identity governance and administrationAn authenticated user can perform XML eXternal Entity injection in Management Console in Symantec...8.8 High
- broadcom symantec identity governance and administrationAn authenticated administrator who has physical access to the environment can carry out Remote...6.7 Medium
- broadcom symantec identity governance and administrationAn unauthenticated user can access Identity Manager’s management console specific page URLs....5.3 Medium
- ruoyiDeserialization issue discovered in Ruoyi before 4.6.1 allows remote attackers to run arbitrary...9.8 Critical
- solarwinds serv-u, serv-u ftp server +1 moreCommon Key Vulnerability in Serv-U FTP Server7.5 High
- online grading system project grading systemA SQL injection vulnerability in Sourcecodester Online Grading System 1.0 allows remote attackers...9.8 Critical
- bigbluebuttonBigBlueButton contains DoS via failed authToken validation4.3 Medium
- hcl software digital experienceHCL Digital Experience is susceptible to cross-site scripting (XSS)2.0 Low
- hcl software digital experience, hcltech hcl digital experience +1 moreHCL Digital Experience is susceptible to open redirects6.1 Medium
- wpseeds wp user, walkeprashant wp user – custom registration forms, login and user profile +1 moreWP User <= 7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5 Medium
- rsjoomla rsfirewall\!, rsjoomla! rsfirewall! +1 moreRSFirewall < 1.1.25 - IP Block Bypass9.8 Critical
- blocksera cryptocurrency widgets packWordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL Injection9.9 Critical
- apache bookkeeperApache BookKeeper: Java Client Uses Connection to Host that Failed Hostname Verification5.9 Medium
- lansweeperA cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml...9.1 Critical
- lansweeperA directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of...9.9 Critical
- lansweeperA directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality...9.9 Critical
- lansweeperA directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles...9.1 Critical
- lansweeperA stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages...9.1 Critical
- lansweeperA directory traversal vulnerability exists in the TicketTemplateActions.aspx...9.1 Critical
- zabbix web service report generation, agent 2 (msi packages), zabbix-agent2 +2 moreFile name information disclosure vulnerability in Zabbix Web Service Report Generation5.9 Medium
- codepeople corner adCorner Ad <= 1.0.56 - Cross-Site Request Forgery8.8 High
- oferwald transposh wordpress translation, transposh wordpress translation +1 moreTransposh WordPress Translation <= 1.0.9.6 - Authorization Bypass5.3 Medium
- codex editor.jseditor.js contains Code Injection6.1 Medium
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS...5.5 Medium
- apple ipados, macos, tvos +1 more +3 moreThe issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS...7.8 High
- apple ipados, macos, safari +3 more +5 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...8.8 High
- Show moreLoading…