CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- ge inet 900 firmware, inet ii 900 firmware, sd1 firmware +5 more +7 moreCertain General Electric Renewable Energy products store cleartext credentials in flash memory....4.6 Medium
- ge inet 900 firmware, inet ii 900 firmware, sd1 firmware +5 more +7 moreCertain General Electric Renewable Energy products have a hidden feature for unauthenticated...9.8 Critical
- ge inet 900 firmware, inet ii 900 firmware, sd1 firmware +5 more +7 moreCertain General Electric Renewable Energy products allow attackers to use a code to trigger a...9.1 Critical
- ge inet 900 firmware, inet ii 900 firmware, sd1 firmware +5 more +7 moreCertain General Electric Renewable Energy products download firmware without an integrity check....9.8 Critical
- ge inet 900 firmware, inet ii 900 firmware, sd1 firmware +5 more +7 moreCertain General Electric Renewable Energy products have inadequate encryption strength. This...9.8 Critical
- control-webpanel webpanelIn CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker...9.8 Critical
- control-webpanel webpanelIn CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a...9.8 Critical
- illumos, joyent smartos, omniosce omnios +2 more +4 moreAn issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS...5.5 Medium
- philips myvue, vue pacs, speech +1 more +3 moreIn Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream function allows...6.5 Medium
- fastrack reflex 2.0 firmwarefastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows physically proximate attackers to...8.1 High
- fastrack reflex 2.0 firmwarefastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows a Remote attacker to cause a...7.5 High
- fastrack reflex 2.0 firmwarefastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows a Remote attacker to change the...5.3 Medium
- fastrack reflex 2.0 firmwarefastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows an Unauthenticated Remote...7.5 High
- ht slider range for amazon affiliates project slider range for amazon affiliates, php curl class project curl class, ptwooplugins invoicing with invoicexpress for woocommerce +3 more +5 morephp-mod/curl allows Cross-site Scripting6.1 Medium
- capexweb project capexwebShilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request.9.8 Critical
- codesys v3 containing the cmpusermgr, control for beaglebone, control for empc-a\/imx6 +62 more +64 moreCODESYS V3 prone to Inadequate Password Hashing7.8 High
- pilz pmcIn Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's...7.5 High
- sierrawireless airlink mobility managerSierra Wireless AirLink Mobility Manager (AMM) before 2.17 mishandles sessions and thus an...9.8 Critical
- illumos, oracle solaris +1 moreAn issue was discovered in Illumos in Nexenta NexentaStor 4.0.5 and 5.1.2, and other products....8.1 High
- pilz pmcIn Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker...5.3 Medium
- lenovo aio300-23isu firmware, aio310-20iap firmware, aio510-22ish firmware +133 more +135 moreRealtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and...7.8 High
- citrix gateway, application delivery controller firmware +1 moreIn certain Citrix products, information disclosure can be achieved by an authenticated VPN user...6.5 Medium
- sierrawireless mgosSierra Wireless MGOS before 3.15.2 and 4.x before 4.3 allows attackers to read log files via a...6.5 Medium
- sierrawireless aleosThe ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4...9.8 Critical
- opera miniThe Opera Mini application 47.1.2249.129326 for Android allows remote attackers to spoof the...6.5 Medium
- styler praat scripts project praat scriptsstyler_praat_scripts Slash file_segmenter.praat denial of service4.3 Medium
- search docconvdocconv XMLToText memory allocation4.3 Medium
- starcounter-jack json-patchStarcounter-Jack JSON-Patch prototype pollution6.3 Medium
- flat project flathughsk flat index.js unflatten prototype pollution6.3 Medium
- keking kkfileviewkkFileView picturesPreview setWatermarkAttribute cross site scripting3.5 Low
- school dormitory management system project dormitory management system, sourcecodester school dormitory management system +1 moreSourceCodester School Dormitory Management System Admin Login sql injection7.3 High
- blood bank management system project bank management system, code-projects blood bank management system +1 moreSourceCodester Blood Bank Management System User Registration cross site scripting4.3 Medium
- blood bank management system project bank management system, code-projects blood bank management system +1 moreSourceCodester Blood Bank Management System login.php sql injection7.3 High
- barronwaffles dwc network server emulator, dwc network server emulator project network server emulator +1 morebarronwaffles dwc_network_server_emulator gs_database.py update_profile sql injection6.3 Medium
- freepbx cdr, sangoma freepbx +1 moreFreePBX cdr Cdr.class.php ajaxHandler sql injection5.5 Medium
- venganzasdelpasado venganzas del pasadoVenganzas del Pasado cross site scripting3.5 Low
- hide files on github project files on githubHide Files on GitHub options.js addEventListener cross site scripting3.5 Low
- asrashley dash-liveasrashley dash-live DOM Node media.js ready cross site scripting3.5 Low
- cronvel tree-kit, tree kit project kit +1 morecronvel tree-kit prototype pollution5.5 Medium
cryptsetupOSS-FuzzHeap-buffer-overflow in BITLK_read_sbNo score- myapneamyapnea Title cross site scripting2.4 Low
- fredsmith utilsfredsmith utils Filename screenshot_sync predictable state2.6 Low
- httpster project httpsterSimbCo httpster server.coffee fs.realpathSync path traversal5.5 Medium
- calsign apde, android processing development environment project processing development environment +1 moreCalsign APDE ZIP File CopyBuildTask.java handleExtract path traversal5.5 Medium
- go-macaron i18nMacaron i18n i18n.go redirect5.5 Medium
- usememos memos, usememos/memos +1 moreImproper Removal of Sensitive Information Before Storage or Transfer in usememos/memos8.1 High
- planetestream planet estreamPlanet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video...9.8 Critical
- planetestream planet estreamPlanet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie ...6.5 Medium
- planetestream planet estreamGetFile.aspx in Planet eStream before 6.72.10.07 allows ..\ directory traversal to read arbitrary...6.5 Medium
- planetestream planet estreamPlanet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative...8.8 High
- Show moreLoading…