CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.5.0 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol...4.7 Medium
- ghostA user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9...5.3 Medium
- harttle liquidjsInformation Exposure5.3 Medium
- auth0 jsonwebtoken, node-jsonwebtoken +1 morejsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC5.0 Medium
- auth0 jsonwebtoken, node-jsonwebtoken +1 morejsonwebtoken unrestricted key type could lead to legacy keys usage5.9 Medium
- iofinnet tss-libCollision of hash values in github.com/bnb-chain/tss-lib9.1 Critical
- misp-project mispIn MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates...6.1 Medium
- ayacms project ayacmsAyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php9.8 Critical
- mozilla firefoxMozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory...8.8 High
- mozilla firefoxMozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team...8.8 High
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreA flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user...5.5 Medium
- nbnbk project nbnbkDefault version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the...9.8 Critical
- nbnbk project nbnbkA Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the...6.5 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Stored in microweber/microweber5.1 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreCross-Site Request Forgery (CSRF) in ikus060/rdiffweb5.3 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreOpen Redirect in ikus060/rdiffweb5.9 Medium
- ayacms project ayacmsAyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php9.8 Critical
- ayacms project ayacmsAyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers...8.8 High
- classcms project classcmshere is an arbitrary file upload vulnerability in the file management function module of...9.8 Critical
- inhabit move crmInhabit Systems Pty Ltd Move CRM version 4, build 260 was discovered to contain a cross-site...5.4 Medium
- mozilla firefoxDuring startup, a graphics driver with an unexpected name could lead to a stack-buffer overflow...6.5 Medium
- pythoncharmers python-futurePython Charmers Future denial of service vulnerability7.5 High
- wheel project wheelpypa/wheel vulnerable to Regular Expression denial of service (ReDoS)7.5 High
- python setuptoolspypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)5.9 Medium
- mozilla firefox, firefox mobile +1 moreA website that had permission to access the microphone could record audio without the audio...4.3 Medium
- mozilla firefoxWhen visiting a website with an overly long URL, the user interface would start to hang. Due to...6.5 Medium
- mozilla firefox for ios, firefox mobile +1 moreInternal URLs are protected by a secret UUID key, which could have been leaked to web page...6.5 Medium
- mozilla firefoxWhen closed or sent to the background, Firefox for Android would not properly record and persist...6.1 Medium
- mozilla firefoxUnder certain circumstances, a JavaScript alert (or prompt) could have been shown while another...4.3 Medium
- mozilla firefoxWhen clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be...8.8 High
- mozilla firefoxBy generally accepting and passing resource handles across processes, a compromised content...6.5 Medium
- mozilla firefoxWhen scanning QR codes, Firefox for Android would have allowed navigation to some URLs that do...4.3 Medium
- mozilla firefoxIf Firefox was installed to a world-writable directory, a local privilege escalation could occur...7.0 High
- mozilla firefox, firefox for ios +1 moreThe search term could have been specified externally to trigger SQL injection. This vulnerability...9.8 Critical
- mozilla vpnMozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or...7.8 High
- simple client management system project client management systemA Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple...5.4 Medium
- mozilla firefoxIf a domain name contained a RTL character, it would cause the domain to be rendered to the right...4.3 Medium
- mozilla firefoxWhen transitioning in and out of fullscreen mode, a graphics object was not correctly protected;...6.5 Medium
- baidu baidunetdiskUntrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker...6.7 Medium
- destiny chatdestiny.gg chat main.go websocket.Upgrader cross-site request forgery4.3 Medium
- ahorner text-helpers, texthelpers project texthelpers +1 moreahorner text-helpers translation.rb reverse tabnabbing6.3 Medium
- mozilla vpn android 1.1.0, vpn ios 1.0.7, vpn windows +1 more +3 moreAn OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could...7.6 High
- dataprobe iboot-pdu fw, iboot-pdu4-n20 firmware, iboot-pdu4a-n15 firmware +10 more +12 moreDataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially...5.3 Medium
- dataprobe iboot-pdu fw, iboot-pdu4-n20 firmware, iboot-pdu4a-n15 firmware +10 more +12 moreDataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where...5.3 Medium
- dataprobe iboot-pdu fw, iboot-pdu4-n20 firmware, iboot-pdu4a-n15 firmware +10 more +12 moreDataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP...5.3 Medium
- dataprobe iboot-pdu fw, iboot-pdu4-n20 firmware, iboot-pdu4a-n15 firmware +10 more +12 moreDataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected...8.6 High
- dataprobe iboot-pdu fw, iboot-pdu4-n20 firmware, iboot-pdu4a-n15 firmware +10 more +12 moreDataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the affected...5.3 Medium
- dataprobe iboot-pdu fw, iboot-pdu4-n20 firmware, iboot-pdu4a-n15 firmware +10 more +12 moreDataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s...9.8 Critical
- dataprobe iboot-pdu fw, iboot-pdu4-n20 firmware, iboot-pdu4a-n15 firmware +10 more +12 moreDataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specific...9.8 Critical
- Show moreLoading…