CVEs published December 4, 2022
11 CVEs were published on December 4, 2022: 2 critical, 5 high.
- Published
- 11
- Critical
- 2
- High
- 5
- Medium
- 4
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- 2kblater 2kb Amazon Affiliates Store
- 1
- Oren Hahiashvili Oceanwp sticky header
- 1
Critical 2
High 5
- CVE-2022-46405Mastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue) by creating bot accounts that follow attacke
- CVE-2022-46410An issue was discovered in Veritas NetBackup Flex Scale through 3.0.
- CVE-2022-46411An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100.
- CVE-2022-46412An issue was discovered in Veritas NetBackup Flex Scale through 3.0.
- CVE-2022-46413An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100.
Medium, low and unrated 4
- CVE-2022-35730WordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)Oren Hahiashvili Oceanwp sticky header
- CVE-2022-40968WordPress 2kb Amazon Affiliates Store Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)2kblater 2kb Amazon Affiliates Store
- CVE-2022-35507A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows
- CVE-2022-46391AWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.