CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- cyface terms and conditions module, django terms and conditions project terms and conditions +1 morecyface Terms and Conditions Module views.py returnTo redirect5.5 Medium
- boston sleep sliceBoston Sleep slice Layout cross site scripting2.4 Low
- oc-server3 project oc-server3Opencaching Deutschland oc-server3 Login Page login.tpl cross site scripting4.3 Medium
- oc-server3 project oc-server3Opencaching Deutschland oc-server3 Cachelist cachelists.tpl cross site scripting3.5 Low
- oc-server3 project oc-server3Opencaching Deutschland oc-server3 Cookie start.tpl cross site scripting3.5 Low
- axiomatic bento4Axiomatic Bento4 mp42aac heap-based overflow6.3 Medium
- neuroml jlemsjLEMS JUtil.java unpackJar path traversal6.3 Medium
- starter-public-edition-4 project starter-public-edition-4starter-public-edition-4 cross site scripting3.5 Low
- 1j01 mind-map1j01 mind-map app.coffee cross site scripting3.5 Low
- ubi reader project reader, unspecified ubi reader +1 moreUBI Reader UBIFS File output.py ubireader_extract_files path traversal5.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemr8.1 High
- roxlukas lmeveroxlukas LMeve Login Page sql injection6.3 Medium
- bigbluebuttonImproper access control to polling votes4.3 Medium
- rockwell automation compact guardlogix, compactlogix 5370, controllogix 5570 +8 more +10 moreRockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack8.6 High
- rockwell automation micrologix 1100 & 1400 controllers, micrologix 1400-a, micrologix 1400-b/c +5 more +7 moreRockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting Attack7.1 High
- rockwell automation micrologix 1100, micrologix 1400-a, micrologix 1400-b/c +2 more +4 moreMicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack7.5 High
- delta electronics dopsoftDelta Electronics DOPSoft Out-of-bounds Read3.3 Low
- contiki-ngContiki-NG contains NULL Pointer Dereference in BLE L2CAP module2.9 Low
- bigbluebuttonBigBlueButton contains Response leaks in anonymous polls5.7 Medium
- powerisoA memory corruption vulnerability exists in the VHD File Format parsing CXSPARSE record...7.8 High
- adobe illustratorAdobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe illustratorAdobe Illustrator Out-of-Bound Read Memory leak5.5 Medium
- adobe illustratorAdobe Illustrator Out-of-Bound Read Memory leak5.5 Medium
- adobe illustratorAdobe Illustrator Out-of-Bound Read Memory leak5.5 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Incorrect Authorization Security feature bypass4.3 Medium
- adobe campaign, campaign classic (acc) +1 moreAdobe Campaign Classic Server-Side Request Forgery Arbitrary file system read6.5 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- google androidIn placeCall of TelecomManager.java, there is a possible way to determine whether an app is...5.5 Medium
- openbmb xagent, trellix endpoint security agent +1 moreTrellix xAgent permission bypass vulnerability5.5 Medium
- wpvar wp shamsi, wp shamsi – افزونه تاریخ شمسی و فارسی ساز وردپرس +1 moreWP Shamsi <= 4.1.0 - Missing Authorization to Arbitrary Plugin Deactivation6.5 Medium
- bigbluebuttonBigBlueButton contains Improper Preservation of Permissions for whiteboard2.7 Low
- apache zeppelinApache Zeppelin: Stored XSS in note permissions5.4 Medium
- apache zeppelinApache Zeppelin: Arbitrary file deletion vulnerability6.5 Medium
- bigbluebuttonBigBlueButton contains Incorrect Authorization for setting emoji status2.7 Low
- linux kernelA stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes...7.8 High
- bigbluebuttonBigBlueButton subject to Ineffective user bans4.3 Medium
- sick sim2000 firmwarePassword recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13...9.8 Critical
- netgear rax30 firmwareThe default console presented to users over telnet (when enabled) is restricted to a subset of...7.8 High
- netgear rax30 firmwareA support user exists on the device and appears to be a backdoor for Technical Support staff. The...8.8 High
- netgear nighthawk ax11000 firmware, nighthawk ax1800 firmware, nighthawk ax2400 firmware +3 more +5 moreThe “puhttpsniff” service, which runs by default, is susceptible to command injection due to...8.8 High
- aerocms project aerocmsAeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information ...7.5 High
- aerocms project aerocmsIn AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source...7.2 High
- Show moreLoading…