5 December 2022

56 results · Clear filters · Feed

• Medium 6.5
  CVE-2022-41807

  Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-a…

  KYOCERA Document Solutions Kyocera Document Solutions MFPs and printers
  Dec 5, 2022
• Medium 4.8
  CVE-2022-41830

  Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated…

  KYOCERA Document Solutions Kyocera Document Solutions MFPs and printers
  Dec 5, 2022
• Medium 4.9
  CVE-2022-42706

  An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified thro…

  asterisk asterisk asterisk Debian Ubuntu Alpine
  Dec 5, 2022
• Medium 6.5
  CVE-2022-42705

  A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a rem…

  asterisk asterisk asterisk Debian Ubuntu Alpine
  Dec 5, 2022
• Medium 5.4
  CVE-2022-43097 Public exploit

  Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scripti…

  Dec 5, 2022
• Medium 6.1
  CVE-2022-43487

  Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attack…

  Salon Booking System Salon booking system
  Dec 5, 2022
• Medium 6.1
  CVE-2022-43556

  Concrete CMS vulnerable to cross-site scripting in the text input field

  Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XSS in the text input field since the result dashboard page output is not sanitized. The Concrete CMS security team has ranked this 4.2 with CVSS v3.1 vector AV:N/AC:H…

  concrete5/concrete5 Packagist
  Dec 5, 2022
• Medium 5.3
  CVE-2022-43504

  Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to …

  WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu
  Dec 5, 2022
• Medium 4.6
  CVE-2022-43442

  Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow…

  FUJI SOFT +F FS040U software
  Dec 5, 2022
• Medium 5.4
  CVE-2022-43706

  Cross-site scripting (XSS) vulnerability in the Web UI of StackStorm versions prior to 3.8.0 allowed logged in users wi…

  Dec 5, 2022
• Medium 6.1
  CVE-2022-43497

  Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inj…

  WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu
  Dec 5, 2022
• Medium 6.1
  CVE-2022-43479

  Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users …

  SHIRASAGI Project SHIRASAGI
  Dec 5, 2022
• Medium 6.1
  CVE-2022-43500

  Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inj…

  WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu
  Dec 5, 2022
• Medium 5.4
  CVE-2022-43499

  Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker…

  SHIRASAGI Project SHIRASAGI
  Dec 5, 2022
• Medium 5.3
  CVE-2022-43557

  BD BodyGuard™ Pumps – RS-232 Interface Vulnerability

  The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected…

  Becton, Dickinson and Company (BD) BodyGuard™ Pump
  Dec 5, 2022
• Medium 6.1
  CVE-2021-34181

  Cross Site Scripting (XSS) vulnerability in TomExam 3.0 via p_name parameter to list.thtml.

  Dec 5, 2022