CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- openmrs appointment scheduling moduleOpenMRS Appointment Scheduling Module AppointmentTypeValidator.java validateFieldName cross site scripting3.5 Low
- widoco project widocoWidoco WidocoUtils.java unZipIt path traversal4.5 Medium
- nsupdate nsupdate.infonsupdate.info CSRF Cookie base.py cookie httponly flag3.7 Low
- fallstudie project fallstudieDHBW Fallstudie Login passport.js sql injection5.5 Medium
- dropbox merouDropbox merou SSH Public Key public_key.py add_public_key injection6.3 Medium
- rockwell automation studio 5000 logix emulateRockwell Automation Studio 5000 Logix Emulate Vulnerable to a Remote Code Execution Vulnerability7.8 High
sentinelonePyPI,sentinelone-sdkPyPI,sentinelonesdkPyPI +2 moreSentinelOne impersonated via PyPI packagesNo score- hazelcast, hazelcast hazelcast-jet +1 moreHazelcast connection caching9.1 Critical
- systemdA vulnerability was found in systemd. This security flaw can cause a local information leak due...5.5 Medium
- openmrs openmrs-module-referenceapplication, reference application +1 moreOpenMRS openmrs-module-referenceapplication User App Page UserAppPageController.java post cross site scripting3.5 Low
- indeed utilIndeed Engineering util ViewExportedVariablesServlet.java appendTo cross site scripting2.6 Low
- openmrs openmrs-module-referenceapplication, reference application +1 moreOpenMRS openmrs-module-referenceapplication userApp.gsp cross site scripting3.5 Low
- dolibarr project timesheet project project timesheetdolibarr_project_timesheet Form cross-site request forgery4.3 Medium
- moodle-block sitenews project sitenewsmoodle-block_sitenews block_sitenews.php get_content cross-site request forgery4.3 Medium
- freepbx arimanager, sangoma freepbx +1 moreFreePBX arimanager Views cross site scripting3.5 Low
- morgawr muonMorgawr Muon handler.clj random values3.1 Low
- microsoft binwalkReFirm Labs binwalk Archive Extraction extractor.py symlink5.0 Medium
- cocagne pysrpcocagne pysrp _ctsrp.py calculate_x information exposure2.6 Low
- nagios ncpa, cross platform agent +1 moreNagios NCPA tail.html cross site scripting3.5 Low
- openmrs html form entry ui framework integration module, htmlformentryui +1 moreOpenMRS HTML Form Entry UI Framework Integration Module cross site scripting3.5 Low
- freebpx voicemailFreeBPX voicemail Settings ssettings.php cross site scripting2.4 Low
- freebpx voicemailFreePBX voicemail page.voicemail.php cross site scripting3.5 Low
- oxidized web project web, ytti oxidized web +1 moreytti Oxidized Web conf_search.haml cross site scripting3.5 Low
- flatpressFlatPress Media Manager Plugin panel.mediamanager.file.php main cross site scripting3.5 Low
ca-certificates-mozillaSUSESecurity update for ca-certificates-mozillaNo score- httpserver project httpserverRamseyK httpserver URI ResourceHost.cpp getResource path traversal5.3 Medium
- iet-ou open media player, open media player +1 moreIET-OU Open Media Player timedtext.php webvtt cross site scripting3.5 Low
- flatpressFlatPress File Delete panel.mediamanager.file.php doItemActions path traversal5.5 Medium
- email-existence project email-existenceemail-existence index.js redos3.0 Low
- markdown-itmarkdown-it html_re.js redos3.5 Low
- freeradiusIn freeradius, the EAP-PWD function compute_password_element() leaks information about the...7.5 High
- linuxserver heimdall application dashboardHeimdall Application Dashboard through 2.5.4 allows reflected XSS via "Application name" to the ...5.4 Medium
- usememos memos, usememos/memos +1 moreDenial of Service in usememos/memos7.6 High
- trueconf serverA SQL injection issue in the web API in TrueConf Server 5.2.0.10225 allows remote unauthenticated...9.8 Critical
- trueconf serverA SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 allows a low...8.8 High
- dedecmsdedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no...9.8 Critical
- h3c secpath f100-c-g3 firmware, secpath f500-6gw firmware, secpath f5010 firmware +8 more +10 moreh3c firewall <= 3.10 ESS6703 has a privilege bypass vulnerability.9.8 Critical
- hillstonenet sc-6000-wv02 firmware, sc-6000-wv04 firmware, sc-6000-wv08 firmware +1 more +3 morehttps://www.hillstonenet.com.cn/ Hillstone Firewall SG-6000 <= 5.0.4.0 is vulnerable to Incorrect...9.8 Critical
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests...5.9 Medium
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of unauthenticated traceroute host from remote...3.7 Low
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of unauthenticated search for devices. After...5.3 Medium
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server...7.5 High
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of unauthenticated enable or disable SSHD...3.7 Low
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of server-side request forgery (SSRF). An...7.5 High
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of sensitive information leakage. After...2.7 Low
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of unrestricted upload of file. After obtaining...7.2 High
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of unrestricted download of file. After...6.5 Medium
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of using of hard-coded cryptographic key. An...7.5 High
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of unauthenticated request of AES crypto key....5.3 Medium
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of unauthenticated request of MQTT credentials....7.5 High
- Show moreLoading…