CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- elvexys isos, isos firmware +1 morehard coded credentials in elvexys ISOS firmwares4.5 Medium
- elvexys streamxauthentication bypass in elvexys StreamX using StreamView HTML component with public web server feature7.5 High
- elvexys streamxpath traversal in elvexys StreamX using StreamView HTML component with public web server feature6.5 Medium
- yola yolapiyolapi metadata.py render_description cross site scripting3.5 Low
- farcry solr pro project solr proFarCry Solr Pro Plugin Search solrProSearch.cfc cross site scripting3.5 Low
- shred cillashred cilla Search search.jsp cross site scripting3.5 Low
- json2htmlmoappi Json2html json2html.js cross site scripting4.3 Medium
- catalyst-plugin-session project catalyst-plugin-sessionCatalyst-Plugin-Session Session ID Session.pm _load_sessionid cross site scripting3.5 Low
- jmpotato pomashJmPotato Pomash editor.html cross site scripting2.4 Low
- managewp broken link checkerBroken Link Checker < 1.11.20 - Admin+ Cross-Site Scripting4.8 Medium
- getharvest chosenHarvest Chosen abstract-chosen.coffee AbstractChosen cross site scripting3.5 Low
- mellivora project mellivoraNakiami Mellivora Admin Panel user.inc.php print_user_ip_log cross site scripting2.4 Low
- gnuboard youngcart5gnuboard youngcart5 menu_list_update.php cross site scripting3.5 Low
- liuos project liuosLiuOS vulnerable to Authorization Bypass through User-Controlled Key9.2 Critical
- amazon efs-utils, elastic file system container storage interface driver +1 moreRace condition during concurrent TLS mounts in efs-utils4.2 Medium
- elrond go, elrondnetwork elrond-go +1 moreElrond go Processing: fallback search of SCRs when not found in the main cache7.2 High
- goauthentik authentikauthentik allows existing authenticated users to create arbitrary accounts6.4 Medium
- goauthentik authentikauthentik vulnerable to Improper Authentication via invitation URL token reuse9.4 Critical
- usememos memos, usememos/memos +1 moreImproper Access Control in usememos/memos8.6 High
- usememos memos, usememos/memos +1 moreInsufficient Granularity of Access Control in usememos/memos8.6 High
- usememos memos, usememos/memos +1 moreAuthorization Bypass Through User-Controlled Key in usememos/memos8.6 High
- usememos memos, usememos/memos +1 moreAuthorization Bypass Through User-Controlled Key in usememos/memos8.3 High
- usememos memos, usememos/memos +1 moreImproper Access Control in usememos/memos6.3 Medium
- usememos memos, usememos/memos +1 moreImproper Access Control in usememos/memos8.3 High
- usememos memos, usememos/memos +1 moreImproper Privilege Management in usememos/memos4.2 Medium
- usememos memos, usememos/memos +1 moreImproper Access Control in usememos/memos8.2 High
- usememos memos, usememos/memos +1 moreAuthorization Bypass Through User-Controlled Key in usememos/memos8.2 High
- usememos memos, usememos/memos +1 moreIncorrect Use of Privileged APIs in usememos/memos7.3 High
- usememos memos, usememos/memos +1 moreImproper Authorization in usememos/memos8.2 High
- usememos memos, usememos/memos +1 moreAuthorization Bypass Through User-Controlled Key in usememos/memos8.1 High
- usememos memos, usememos/memos +1 moreAuthorization Bypass Through User-Controlled Key in usememos/memos9.1 Critical
- usememos memos, usememos/memos +1 moreInsufficient Granularity of Access Control in usememos/memos8.2 High
- usememos memos, usememos/memos +1 moreImproper Verification of Source of a Communication Channel in usememos/memos8.6 High
- usememos memos, usememos/memos +1 moreAuthorization Bypass Through User-Controlled Key in usememos/memos8.6 High
- usememos memos, usememos/memos +1 moreAuthorization Bypass Through User-Controlled Key in usememos/memos8.6 High
- usememos memos, usememos/memos +1 moreImproper Restriction of Excessive Authentication Attempts in usememos/memos9.8 Critical
- usememos memos, usememos/memos +1 moreIncorrect Use of Privileged APIs in usememos/memos8.1 High
- huawei ws7100-20, ws7100-20 firmware +1 moreThere is a denial of service vulnerability in the Wi-Fi module of the HUAWEI WS7100-20 Smart WiFi...6.5 Medium
- huawei aslan-al10, aslan-al10 firmware +1 moreHuawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit...5.5 Medium
- huawei aslan-al10, aslan-al10 firmware +1 moreHuawei Aslan Children's Watch has a path traversal vulnerability. Successful exploitation may...7.8 High
- huawei hota-fara-b19, hota-fara-b19 firmware +1 moreThere is an insufficient authentication vulnerability in some Huawei band products. Successful...6.5 Medium
- huawei aslan-al10, aslan-al10 firmware +1 moreHuawei Aslan Children's Watch has an improper input validation vulnerability. Successful...7.5 High
- esri arcgis serverBUG-000152121 - Directory traversal vulnerability in ArcGIS Server.7.5 High
- metersphereServer-Side Request Forgery in Metersphere leads to Cross-Site Scripting7.2 High
- dragonflyoss dragonflyImproper Restriction of XML External Entity Reference in Dragonfly7.0 High
- x-stream xstreamXStream Denial of Service via stack overflow8.2 High
- cloudsync project cloudsynccloudsync LocalFilesystemConnector.java getItem path traversal2.5 Low
- openmrs admin ui moduleOpenMRS Admin UI Module Account Setup AccountPageController.java sendErrorMessage cross site scripting3.5 Low
- openmrs admin ui moduleOpenMRS Admin UI Module Manage Privilege Page privilege.gsp cross site scripting3.5 Low
- openmrs admin ui moduleOpenMRS Admin UI Module location.gsp cross site scripting3.5 Low
- Show moreLoading…