CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- planetestream planet estreamIn Planet eStream before 6.72.10.07, multiple Stored Cross-Site Scripting (XSS) vulnerabilities...5.4 Medium
- planetestream planet estreamPlanet eStream before 6.72.10.07 allows attackers to call restricted functions, and perform...9.1 Critical
- planetestream planet estreamIn Planet eStream before 6.72.10.07, a Reflected Cross-Site Scripting (XSS) vulnerability exists...6.1 Medium
- planetestream planet estreamPlanet eStream before 6.72.10.07 allows a remote attacker (who is a publisher or admin) to obtain...7.2 High
- snipeitapp snipe-itSnipe-IT allows attackers to check whether a user account exists5.3 Medium
- snipeitapp snipe-itSnipe-IT vulnerable to Cross Site Scripting for View Assigned Assets5.4 Medium
- simmeth lieferantenmanagerAn issue was discovered in Simmeth Lieferantenmanager before 5.6. Due to errors in session...7.5 High
- simmeth lieferantenmanagerAn issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can download...7.5 High
- simmeth lieferantenmanagerAn issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can inject raw SQL...9.8 Critical
- simmeth lieferantenmanagerAn issue was discovered in Simmeth Lieferantenmanager before 5.6. In the design of the API, a...6.5 Medium
- simmeth lieferantenmanagerAn issue was discovered in Simmeth Lieferantenmanager before 5.6. An attacker can make various...9.1 Critical
- simmeth lieferantenmanagerAn issue was discovered in /DS/LM_API/api/SelectionService/InsertQueryWithActiveRelationsReturnId...5.4 Medium
- zkteco zem500 firmware, zem510 firmware, zem560 firmware +7 more +9 moreCertain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive...7.5 High
- intelbras wifiber 120ac inmesh firmwareIntelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users,...8.8 High
- dns-stats hedgehog** DISPUTED ** ** UNSUPPPORTED WHEN ASSIGNED **** UNSUPPORTED WHEN ASSIGNED ** ** DISPUTED ** A...4.1 Medium
- nintendo arms, mario kart 7, mario kart 8 +6 more +8 moreThe Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other...9.8 Critical
- braveBrave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private...6.5 Medium
- braveBrave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted...6.5 Medium
- braveBrave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted...6.5 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemr6.7 Medium
- microweber, microweber microweber/microweber +1 moreUnrestricted Upload of File with Dangerous Type in microweber/microweber4.7 Medium
- com.ritense.valtimo web, graphite project graphite +1 moreGraphite Web Absolute Time Range cross site scripting3.5 Low
- com.ritense.valtimo web, graphite project graphite +1 moreGraphite Web Template Name cross site scripting3.5 Low
- com.ritense.valtimo web, graphite project graphite +1 moreGraphite Web Cookie cross site scripting3.5 Low
- openmrs appointment scheduling moduleOpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross site scripting3.5 Low
- sanitization management system project management system, sourcecodester sanitization management system +1 moreSourceCodester Sanitization Management System Admin Login sql injection6.3 Medium
- amazon aws sdk, aws software development kit +1 moreAWS SDK XML Parser XpathUtils.java XpathUtils server-side request forgery5.5 Medium
- json5, fedoraproject fedora +1 morePrototype Pollution in JSON5 via Parse Method7.1 High
- modern tribe panel builder plugin, tri panel builder +1 moreModern Tribe Panel Builder Plugin SearchFilter.php add_post_content_filtered_to_search_sql sql injection5.5 Medium
- aveva intouch access anywhereAVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal...7.5 High
- ibm aix, vios +1 moreIBM AIX privilege escalation8.4 High
- ibm aix, vios +1 moreIBM AIX denial of service6.2 Medium
- ibm aix, vios +1 moreIBM AIX denial of service6.2 Medium
- ibm aix, vios +1 moreIBM AIX denial of service6.2 Medium
- ibm aix, vios +1 moreIBM AIX denial of service6.2 Medium
- ibm aix, vios +1 moreIBM AIX denial of service6.2 Medium
- ibm aix, vios +1 moreIBM AIX denial of service6.2 Medium
- ibm aix, vios +1 moreIBM AIX denial of service6.2 Medium
- properfraction profilepress, paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress +1 moreProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5 Medium
- properfraction profilepress, paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress +1 moreProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Form Settings5.5 Medium
- pjsip pjproject, pjsip +1 moreHeap buffer overflow in pjproject when decoding STUN message6.5 Medium
hyper-staticfilecrates.iohyper-staticfile's location header incorporates user input, allowing open redirectNo score- mitsubishi electric corporation melipc series mi5122-vw, melsec iq-r series r12ccpu-v, mitsubishi melipc mi5122-vw firmware +43 more +45 moreDenial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series7.5 High
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreAn issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in...5.5 Medium
- thinkphpThinkPHP Framework vulnerable to remote code execution9.8 Critical
- linux kernelAn issue was discovered in ksmbd in the Linux kernel before 5.19.2. There is an out-of-bounds...8.1 High
- linux kernelAn issue was discovered in ksmbd in the Linux kernel before 5.19.2. There is a heap-based buffer...8.8 High
- linux kernelAn issue was discovered in ksmbd in the Linux kernel before 5.19.2. fs/ksmbd/smb2pdu.c omits a...7.5 High
- linux kernelAn issue was discovered in ksmbd in the Linux kernel before 5.18.18. fs/ksmbd/smb2pdu.c lacks...8.1 High
- linux kernelAn issue was discovered in ksmbd in the Linux kernel before 5.19.2. fs/ksmbd/smb2pdu.c has a use...9.8 Critical
- Show moreLoading…