CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- linux kernelAn issue was discovered in ksmbd in the Linux kernel before 5.19.2. fs/ksmbd/smb2misc.c has an...6.5 Medium
- f-secure safeF-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack.5.4 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreImproper Access Control in ikus060/rdiffweb8.4 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb6.3 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAuthentication Bypass by Primary Weakness in ikus060/rdiffweb7.2 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb6.6 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreOpen Redirect in ikus060/rdiffweb6.1 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreBusiness Logic Errors in ikus060/rdiffweb5.7 Medium
- usememos memos, usememos/memos +1 moreCross-site Scripting (XSS) - Stored in usememos/memos7.6 High
- usememos memos, usememos/memos +1 moreCross-site Scripting (XSS) - Stored in usememos/memos5.7 Medium
- usememos memos, usememos/memos +1 moreCross-site Scripting (XSS) - Stored in usememos/memos7.1 High
- usememos memos, usememos/memos +1 moreCross-site Scripting (XSS) - Stored in usememos/memos8.3 High
- usememos memos, usememos/memos +1 moreCross-site Scripting (XSS) - Stored in usememos/memos7.1 High
- usememos memos, usememos/memos +1 moreImproper Access Control in usememos/memos8.3 High
- usememos memos, usememos/memos +1 moreImproper Authorization in usememos/memos8.8 High
- usememos memos, usememos/memos +1 moreIncorrect Use of Privileged APIs in usememos/memos8.1 High
- usememos memos, usememos/memos +1 moreAuthorization Bypass Through User-Controlled Key in usememos/memos8.6 High
- usememos memos, usememos/memos +1 moreImproper Access Control in usememos/memos7.6 High
- usememos memos, usememos/memos +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in usememos/memos4.3 Medium
- ampache, ampache ampache/ampache +1 moreUnrestricted Upload of File with Dangerous Type in ampache/ampache3.1 Low
- dlink dir-846 firmwareD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the...9.9 Critical
- dlink dir-846 firmwareD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the...9.9 Critical
- dlink dir-882 a1 firmwareD-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the Password...7.2 High
- dlink dir-882 a1 firmwareD-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the Key parameter...7.2 High
- dlink dir-882 a1 firmwareD-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the...7.2 High
- dlink dir-882 a1 firmwareD-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the Password...7.2 High
- dlink dir-882 a1 firmwareD-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the Password...7.2 High
- dlink dir-882 a1 firmwareD-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the PSK parameter...7.2 High
- dlink dir-882 a1 firmwareD-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the Password...7.2 High
- dlink dir-882 a1 firmwareD-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the Password...7.2 High
- nbnbk project nbnbknbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file...6.5 Medium
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter...9.8 Critical
- ip-com m50 firmwareIP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname...9.8 Critical
- rocket.chatA command injection vulnerability exists in Rocket.Chat-Desktop <3.8.14 that could allow an...9.8 Critical
- ui airfiber 60-hd firmware, airfiber 60-lr firmware, airfiber 60-xg firmware +3 more +5 moreAn improper access validation vulnerability exists in airMAX AC <8.7.11, airFiber 60/LR <2.6.2,...5.3 Medium
- typoraCross Site Scripting (XSS) vulnerability in typora through 1.38 allows remote attackers to run...6.1 Medium
- microfocus zenworks, micro focus zenworks asset management, zenworks configuration management (zcm) +2 more +4 moreCVE-2022-38757 ZENworks7.2 High
- Show moreLoading…