CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
ca-certificatesTuxCareUpdate of ca-certificatesNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo score- proofpoint enterprise protectionProofpoint Enterprise Protection Local Privilege Escalation7.8 High
- azure aad-pod-identity, microsoft azure ad pod identity +1 moreAAD Pod Identity obtaining token with backslash5.3 Medium
- kyvernokyverno verifyImages rule bypass possible with malicious proxy/registry8.1 High
- apache karafApache Karaf: JDBC JAAS LDAP injection9.8 Critical
alloc-cortex-mcrates.iocrate has been renamed to `embedded-alloc`No score- openstack kolla, openstack +1 moreOpenStack Kolla sudo privilege escalation vulnerability8.8 High
- openstackA privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git...8.8 High
- smoothiecharts smoothie chartsCross-site Scripting (XSS)5.4 Medium
- lite-dev-server project lite-dev-serverDirectory Traversal7.5 High
- patriksimek vm2Arbitrary Code Execution9.8 Critical
- abacus-ext-cmdline project abacus-ext-cmdlineCommand Injection7.4 High
- wildix wmsWildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23...9.8 Critical
- isode m-vaultIsode M-Vault 16.0v0 through 17.x before 17.0v24 can crash upon an LDAP v1 bind request.7.5 High
- corel roxio creator ljbRoxio Creator LJB starts another program with an unquoted file path. Since a registered Windows...6.7 Medium
- search docconvdocconv pdf_ocr.go ConvertPDFImages os command injection6.3 Medium
- tatoeba tatoeba2tatoeba2 Profile Name cross site scripting3.5 Low
- pig-vector project pig-vectorpig-vector LogisticRegression.java LogisticRegression temp file2.5 Low
- mingsoft mcmsMingsoft MCMS Article save cross site scripting3.5 Low
- sslh project sslhsslh Packet Dumping probe.c hexdump format string5.6 Medium
- collective.contact.widget project collective.contact.widgetcollective.contact.widget widgets.py title cross site scripting3.5 Low
- ep-3bookingsystem ep-3 bookingsystemep3-bs cross site scripting3.5 Low
- squirrel installers generated by squirrel.windows, squirrel.windows project squirrel.windows +1 moreSquirrel.Windows is both a toolset and a library that provides installation and update...7.8 High
- ali irani auto upload images, auto upload images project upload images +1 moreAuto Upload Images Settings setting-page.php cross-site request forgery4.3 Medium
- ali irani auto upload images, auto upload images project upload images +1 moreAuto Upload Images cross site scripting3.5 Low
- unknown wp-banWP-Ban ban-options.php cross site scripting3.5 Low
- daloradius, lirantal lirantal/daloradius +1 moreSensitive Cookie Without 'HttpOnly' Flag in lirantal/daloradius5.3 Medium
- omron cx-driveUse after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute...7.8 High
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Reflected in microweber/microweber2.7 Low
- covid-19 directory on vaccination system project directory on vaccination systemA Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on...6.1 Medium
- covid-19 directory on vaccination system project directory on vaccination systemSourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross...6.1 Medium
- zenphotoStored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a...4.8 Medium
- haxx curl, apple macos, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreA use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually...5.9 Medium
- haxx curl, fedoraproject fedora, netapp active iq unified manager +7 more +9 moreA vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep...7.5 High
- docomo \+ message, kddi corporation, ntt docomo, inc., and softbank corp. +message app for android and for ios, ntt docomo +message app for android and for ios, and softbank +message app for android and for ios +1 moreKDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability...5.4 Medium
- ndk-design ndkadvancedcustomizationfieldsA cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows...6.1 Medium
- zyxel nbg7510 firmwareA DNS misconfiguration was found in Zyxel NBG7510 firmware versions prior to V1.00(ABZY.3)C0,...5.3 Medium
- nokia fastmile firmwareNokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin...8.4 High
- nokia fastmile firmwareNokia Fastmile 3tg00118abad52 is affected by an authenticated path traversal vulnerability which...6.5 Medium
- katlings pyambic-pentameterkatlings pyambic-pentameter cross-site request forgery4.3 Medium
- bird-lg project bird-lgsileht bird-lg layout.html cross site scripting3.5 Low
- studygolangstudygolang search.go Search cross site scripting4.3 Medium
- studygolangstudygolang topics.js cross site scripting3.5 Low
- panicsteve w2wikipanicsteve w2wiki Markdown index.php toHTML cross site scripting3.5 Low
- imprint cms project cms, unspecified imprint cms +1 moreImprint CMS ViewHelpers.cs SearchForm cross site scripting3.5 Low
- simpleriskSimpleRisk common.js checkAndSetValidation cross site scripting3.5 Low
- phpredisadmin project phpredisadminphpRedisAdmin cross-site request forgery4.3 Medium
- tad discuss project discuss, unspecified tad discuss +1 moretad_discuss cross site scripting3.5 Low
- webdetails cpf, hitachi community plugin framework +1 moreWebdetails cpf DependenciesPackage.java cross site scripting3.5 Low
- Show moreLoading…