Archive
13 December 2022
Vulnerabilities first published on this day (UTC), newest first.
222 results · Feed
-
Medium 6.1
Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered…
-
Low 3.3
VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox…
-
High 8.8
VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious …
-
Medium 5.5
The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A m…
-
Medium 5.3CVE-2022-31698 EPSS 48%
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with ne…
-
Medium 6.3
Outlook for Android Elevation of Privilege Vulnerability
Outlook for Android Elevation of Privilege Vulnerability
-
Medium 6.5
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a low-privileged remote …
-
Critical 9.8
Unauthenticated remote arbitrary code execution
Unauthenticated remote arbitrary code execution
KEV Dec 13, 2022 -
Medium 5.5
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…
-
Medium 6.5
AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).
-
High 7.8
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.…
-
Medium 6.1
Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_templa…
-
High 7.5
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…
-
Medium 6.5
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU62x firmware version < 2.21 allows a low-privileged remote …
-
High 7.8
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.…
-
High 8.1
A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1 (A…
-
High 7.8
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.…
-
High 7.8
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.…
-
Low 2.7
Affected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an …
-
Medium 6.1
AeroCMS v0.0.1 is vulnerable to ClickJacking.
-
Medium 6.1
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…
-
Critical 9.8
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…
-
High 7.8
A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.…
-
Medium 6.5
A vulnerability has been identified in SCALANCE SC622-2C (6GK5622-2GS00-2AC2) (All versions < V2.3), SCALANCE SC622-2C …
-
Medium 6.5
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a low-privileged remote…
-
Medium 4.5
Gym Management System v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).
-
Medium 5.3
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…
-
Medium 4.9
AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter.
-
Medium 4.8
AeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via add_post.php. This vulnerabilit…
-
High 7.5
A vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All vers…
-
Medium 6.5
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU65x firmware version < v2.21 allows a low-privileged remote…
-
Medium 5.4
A vulnerability has been identified in Polarion ALM (All versions < V2304.0). The affected application contains a Host …
-
High 7.2
The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.
-
Critical 9.8
A command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 M…
-
Medium 6.5
Affected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an authenticated attacker…
-
Medium 5.7
Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device c…
-
High 8.1
A vulnerability has been identified in Mendix Email Connector (All versions < V2.0.0). Affected versions of the module …
-
High 7.5CVE-2022-45688 Public exploit
json stack overflow vulnerability
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
-
High 8.8
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethe…
-
High 7.5
hutool-json stack overflow vulnerability
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.