CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- hcl software bigfix insights for vulnerability remediationHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation6.4 Medium
- hcl software bigfix insights for vulnerability remediationHCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper certificate validation6.4 Medium
- cortexproject cortexAlertmanager can expose local files content via specially crafted config6.5 Medium
- ibm cognos analyticsIBM Cognos Analytics cross-site scripting6.1 Medium
- ibm cognos analyticsIBM Cognos Analytics data manipulation6.5 Medium
- ibm cognos analyticsIBM Cognos Analytics information disclosure5.3 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM URL Redirection to Untrusted Site Security feature bypass3.5 Low
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- ibm cognos analyticsIBM Cognos Analytics server-side request forgery6.5 Medium
- ibm spectrum scaleIBM Spectrum Scale directory traversal6.8 Medium
- silverstripe subsitesSilverStripe Subsite weakens file permissions7.5 High
- solarwinds hybrid cloud observability (hco)/ solarwinds platform, platform +1 moreSensitive Data Disclosure Vulnerability5.5 Medium
- hikvision ds-3wf01c-2n/o, ds-3wf01c-2n\/o firmware, ds-3wf0ac-2nt +1 more +3 moreThe web server of some Hikvision wireless bridge products have an access control vulnerability...9.1 Critical
- beardev joomsportJoomSport < 5.2.8 - Unauthenticated SQLi9.8 Critical
- popup manager project manager, unknown popup manager +1 morePopup Manager <= 1.6.6 - Unauthenticated Stored XSS4.3 Medium
- cedcommerce wholesale market for woocommerceWholesale Market for WooCommerce < 1.0.7 - Unauthenticated Arbitrary File Download7.5 High
- cedcommerce smsa shipping for woocommerceSMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File Download6.5 Medium
- popup manager project manager, unknown popup manager +1 morePopup Manager <= 1.6.6 - Unauthenticated Arbitrary Popup Deletion4.3 Medium
- noorsplugin responsive lightbox2Responsive Lightbox2 < 1.0.4 - Contributor+ Stored XSS5.4 Medium
- unknown quizlordQuizlord <= 2.0 - Admin+ Stored XSS4.8 Medium
- unknown flowplayer video playerFlowplayer Video Player < 1.0.5 - Contributor+ Stored XSS5.4 Medium
- unknown directoristDirectorist < 7.4.4 - Subscriber+ Sensitive Information Disclosure6.5 Medium
- cedcommerce wholesale market for woocommerceWholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File Download4.9 Medium
- 10web photo gallery by 10web, photo gallery +1 morePhoto Gallery < 1.8.3 - Stored XSS via CSRF5.4 Medium
- noor alam checkout for paypalCheckout for PayPal < 1.0.14 - Contributor+ Stored XSS5.4 Medium
- ultimatemember jobboardwpJobBoardWP < 1.2.2 - Unauthenticated Arbitrary File Upload7.5 High
- noorsplugin easy video playerEasy Video Player < 1.2.2.3 - Contributor+ Stored XSS5.4 Medium
- genetechsolutions pie register, unknown registration forms +1 morePie Register < 3.8.1.3 - Unauthenticated Arbitrary User Deletion6.5 Medium
- unknown videojs html5 playerVideojs HTML5 Player < 1.1.9 - Contributor+ Stored XSS5.4 Medium
- Show moreLoading…