CVEs published in December 2022
2,895 vulnerabilities, 265 critical, 5 exploited.
- nvidia cloud gaming, vgpu software (guest driver) - linux, vgpu software (virtual gpu manager), nvidia cloud gaming (guest driver), nvidia cloud gaming (virtual gpu manager), virtual gpu +2 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler,...7.1 High
- nvidia cloud gaming, gpu display driver, vgpu software (virtual gpu manager), nvidia cloud gaming (virtual gpu manager) +2 morenvidia-graphics-drivers-legacy-390xx - security update5.5 Medium
- debian linux, nvidia gpu display driver, cloud gaming +2 more +4 morenvidia-graphics-drivers-legacy-390xx - security update6.8 Medium
- nvidia gpu display driver, gpu display driver for linux +1 moreNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data ta…4.4 Medium
- nvidia cloud gaming, vgpu software (guest driver) - windows, nvidia cloud gaming (guest driver), virtual gpu +2 moreNVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an...7.8 High
- nvidia gpu display driver, gpu display driver for windows +1 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an...8.5 High
- debian linux, nvidia gpu display driver, cloud gaming +2 more +4 morenvidia-graphics-drivers-legacy-390xx - security update7.8 High
- nvidia cloud gaming, vgpu software (guest driver) - windows, nvidia cloud gaming (guest driver), virtual gpu +2 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an...8.8 High
- esri portal for arcgis, arcgis enterprise +1 moreServer Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)7.5 High
- esri portal for arcgis, arcgis enterprise +1 moreServer Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)7.5 High
- esri portal for arcgis, arcgis enterprise +1 moreHTML injection in accountswitcher-callback.html (10.9.1, 10.8.1 and 10.7.1 only)6.1 Medium
- esri portal for arcgis, arcgis quickcapture +1 moreReflected XSS vulnerability in Portal for ArcGIS6.1 Medium
- esri portal for arcgis, arcgis enterprise +1 moreUnvalidated redirect in Portal for ArcGIS6.1 Medium
- esri portal for arcgis, arcgis enterprise +1 moreReflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)6.1 Medium
- esri portal for arcgis, arcgis enterprise +1 moreReflected XSS vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)6.1 Medium
- esri portal for arcgis, arcgis enterprise +1 morePortal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only)8.6 High
- esri portal for arcgis, arcgis enterprise +1 moreReflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)6.1 Medium
- esri portal for arcgisThe allowedProxyHosts property is not fully honored in ArcGIS Enterprise (10.8.1 and 10.7.1 only)7.5 High
- devolutions serverGotify server XSS vulnerability in the application image file upload6.1 Medium
- meterspherePath Traversal In MeterSpere allows file upload to any path7.4 High
- w3 unicornw3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross site scripting3.5 Low
- healthit code-validator-apiONC code-validator-api XML CodeValidatorApiConfiguration.java vocabularyValidationConfigurations xml external entity reference5.5 Medium
- twitter-post-fetcher project twitter-post-fetcherTwitter-Post-Fetcher Link Target twitterFetcher.js reverse tabnabbing4.2 Medium
github.com/fkie-cad/yapscanGoYapscan's report receiver server vulnerable to path traversal and log injection7.5 High- kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 moreCri-o: /etc/passwd tampering privesc7.8 High
- usememos memos, usememos/memos +1 moreImproper Handling of Values in usememos/memos9.8 Critical
- usememos memos, usememos/memos +1 moreCross-Site Request Forgery (CSRF) in usememos/memos6.5 Medium
- usememos memos, usememos/memos +1 moreCross-Site Request Forgery (CSRF) in usememos/memos8.3 High
- usememos memos, usememos/memos +1 moreImproper Verification of Source of a Communication Channel in usememos/memos8.6 High
- usememos memos, usememos/memos +1 moreIncorrectly Specified Destination in a Communication Channel in usememos/memos8.3 High
- usememos memos, usememos/memos +1 moreCross-Site Request Forgery (CSRF) in usememos/memos6.3 Medium
- usememos memos, usememos/memos +1 moreCross-Site Request Forgery (CSRF) in usememos/memos6.7 Medium
- usememos memos, usememos/memos +1 moreCross-Site Request Forgery (CSRF) in usememos/memos6.5 Medium
- radare radare2, radareorg radareorg/radare2 +1 moreNULL Pointer Dereference in radareorg/radare24.4 Medium
- usememos memos, usememos/memos +1 moreCross-site Scripting (XSS) - Stored in usememos/memos8.6 High
- usememos memos, usememos/memos +1 moreCross-site Scripting (XSS) - Stored in usememos/memos7.6 High
- usememos memos, usememos/memos +1 moreCross-site Scripting (XSS) - Stored in usememos/memos8.0 High
- reprisesoftware reprise license managerXSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote...6.1 Medium
- instedd nuntiumInSTEDD Nuntium geopoll_controller.rb timing discrepancy3.1 Low
- flatpressFlatPress Setup main.lib.php cross site scripting2.4 Low
- flatpressFlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting2.4 Low
- flatpressFlatPress Admin Area admin.entry.list.php cross site scripting3.5 Low
- hotcrpHotCRP cross site scripting2.4 Low
- talend open studio for mdmTalend Open Studio for MDM SystemStorageWrapper.java xml external entity reference5.5 Medium
- mikebharris simple php link shortenersimple_php_link_shortener index.php sql injection5.5 Medium
- challenge websitechallenge website sql injection5.5 Medium
- centic9 jgit-cookbookcentic9 jgit-cookbook temp file3.1 Low
- alpine project alpineAuthentication bypass in Alpine6.5 Medium
- alpine project alpineURL access filters bypass in Alpine7.5 High
- openshift osin, redhat openshift osin, openshift container platform +2 moreOpenShift OSIN CheckClientSecret timing discrepancy2.6 Low
- Show moreLoading…