# CVEs published 2022-12-03

11 CVEs were published on December 3, 2022: 0 critical, 1 high. Days are UTC.

- [CVE-2021-37533](https://cve.now/CVE-2021-37533.md): Apache Commons Net's FTP client trusts the host from PASV response by default (CVSS 6.5, Apache Software Foundation Apache Commons Net · commons-net…)
- [CVE-2022-3491](https://cve.now/CVE-2022-3491.md): Heap-based Buffer Overflow in vim/vim (CVSS 4.0, vim/vim)
- [CVE-2022-4272](https://cve.now/CVE-2022-4272.md): FeMiner wms unrestricted upload (CVSS 6.3, FeMiner wms)
- [CVE-2022-4273](https://cve.now/CVE-2022-4273.md): SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload (CVSS 7.3, SourceCodester Human Resource Management System)
- [CVE-2022-4274](https://cve.now/CVE-2022-4274.md): House Rental System view-property.php sql injection (CVSS 6.3, House Rental System)
- [CVE-2022-4275](https://cve.now/CVE-2022-4275.md): House Rental System POST Request search-property.php sql injection (CVSS 6.3, House Rental System)
- [CVE-2022-4276](https://cve.now/CVE-2022-4276.md): House Rental System POST Request tenant-engine.php unrestricted upload (CVSS 6.3, House Rental System)
- [CVE-2022-4277](https://cve.now/CVE-2022-4277.md): Shaoxing Background Management System Bd sql injection (CVSS 6.3, Shaoxing Background Management System)
- [CVE-2022-4278](https://cve.now/CVE-2022-4278.md): SourceCodester Human Resource Management System employeeadd.php sql injection (CVSS 4.7, SourceCodester Human Resource Management System)
- [CVE-2022-4279](https://cve.now/CVE-2022-4279.md): SourceCodester Human Resource Management System employeeview.php cross site scripting (CVSS 3.5, SourceCodester Human Resource Management System)
- [CVE-2022-4280](https://cve.now/CVE-2022-4280.md): Dot Tech Smart Campus System findUser information disclosure (CVSS 4.3, Dot Tech Smart Campus System)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-12-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.