CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- furqan node-whois, furqansofware node whois +1 moreFurqan node-whois index.coffee prototype pollution6.3 Medium
- knexjs knexKnex.js has a limited SQL injection vulnerability7.5 High
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreAn issue was discovered in the Linux kernel before 6.0.11. Missing validation of...7.8 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreAn issue was discovered in the Linux kernel before 6.0.11. Missing offset validation in drivers...7.1 High
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreAn issue was discovered in the Linux kernel before 6.0.11. Missing validation of...7.8 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreAn issue was discovered in the Linux kernel before 6.0.11. Missing validation of the number of...7.8 High
- drachtio drachtio-serverAn issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows...7.5 High
- drachtio drachtio-serverAn issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows...7.5 High
- drachtio drachtio-serverAn issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a...7.5 High
- xml-rpc.net project xml-rpc.netAn XML external entity (XXE) injection vulnerability in XML-RPC.NET before 2.5.0 allows remote...8.8 High
- 3d city database ogc web feature service3D City Database OGC Web Feature Service xml external entity reference5.5 Medium
- flatpress, flatpressblog flatpressblog/flatpress +1 morePHP Remote File Inclusion in flatpressblog/flatpress8.8 High
- flatpress, flatpressblog flatpressblog/flatpress +1 moreCross-site Scripting (XSS) - Stored in flatpressblog/flatpress6.0 Medium
- wp-english-wp-admin project wp-english-wp-adminwp-english-wp-admin Plugin english-wp-admin.php register_endpoints cross-site request forgery4.3 Medium
- samba pppppp pppdump pppdump.c dumpppp array index4.3 Medium
- shoplazza lifestyleShoplazza LifeStyle Review Flow cross site scripting3.5 Low
- shoplazza lifestyleShoplazza LifeStyle Shipping/Member Discount/Icon cross site scripting3.5 Low
- shoplazza lifestyleShoplazza LifeStyle Product Carousel cross site scripting3.5 Low
- shoplazza lifestyleShoplazza LifeStyle Product cross site scripting3.5 Low
- shoplazza lifestyleShoplazza LifeStyle Announcement cross site scripting3.5 Low
- shoplazza lifestyleShoplazza LifeStyle Create Product v2_products cross site scripting3.5 Low
- unspecified shoplazza, shoplazza lifestyle +1 moreShoplazza Add Blog Post cross site scripting3.5 Low
- django-openipam project django-openipamdjango-openipam exposed_hosts.html cross site scripting3.5 Low
- drogatkin tjws2drogatkin TJWS2 WarRoller.java deployWar path traversal6.3 Medium
- retra-system project retra-systemretra-system cross site scripting3.5 Low
- crmx project crmxluckyshot CRMx index.php commentdelete sql injection6.3 Medium
- ctrlo lenioctrlo lenio Task task.tt cross site scripting3.5 Low
- ctrlo lenioctrlo lenio index.tt cross site scripting3.5 Low
- ctrlo lenioctrlo lenio contractor.tt cross site scripting3.5 Low
- ctrlo lenioctrlo lenio Notice main.tt cross site scripting3.5 Low
- ctrlo lenioctrlo lenio Ticket Lenio.pm cross site scripting3.5 Low
- unknown wp-banWP-Ban ban-options.php toggle_checkbox cross site scripting3.5 Low
- as project asas include.cdn.php getFullURL cross site scripting3.5 Low
- active attr project attr, cgriego active attr +1 morecgriego active_attr Regex boolean_typecaster.rb call denial of service3.5 Low
- haskell xml-conduitxml-conduit DOCTYPE Entity Expansion Parse.hs infinite loop4.3 Medium
- kapetan dnskapetan dns Request.cs entropy5.6 Medium
- owasp nodegoatOWASP NodeGoat Query Parameter research.js denial of service4.3 Medium
- ewxrjk sftpserverewxrjk sftpserver parse.c sftp_parse_path uninitialized pointer4.6 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by insufficient warnings6.9 Medium
- libetpan project libetpanIn libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap...5.5 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by insecure credential storage6.0 Medium
- hcl software dominoHCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.9.8 Critical
- hcl software dominoHCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView9.8 Critical
- hcl software dominoHCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.9.8 Critical
- hcl software notesHCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView9.8 Critical
- hcl software notesHCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView9.8 Critical
- hcl software notesHCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView9.8 Critical
- bigbluebuttonBigBlueButton vulnerable to Insertion of Sensitive Information Into Sent Data6.5 Medium
- mschaef totomschaef toto Email Parameter cross site scripting3.5 Low
- mschaef totomschaef toto Todo List cross site scripting3.5 Low
- Show moreLoading…