CVEs published December 6, 2022
94 CVEs were published on December 6, 2022: 8 critical, 32 high.
- Published
- 94
- Critical
- 8
- High
- 32
- Medium
- 46
- Low
- 7
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 14
Most affected products
- Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- 49
- WPecommerce, Alexanderfoxc Easy WP SMTP
- 3
- Fortinet FortiADC
- 2
- proofpoint enterprise_protection
- 2
- tensorflow · tensorflow-cpu +1
- 2
- ArjunSharda Passeo · passeo
- 1
- bpampuch pdfmake
- 1
- Contest Gallery
- 1
- FastCMS
- 1
- Fortinet FortiOS · Fortinet FortiProxy
- 1
Critical 8
- CVE-2022-42699WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)WPecommerce, Alexanderfoxc Easy WP SMTP
- CVE-2022-42888WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege EscalationReputeinfosystems ARMember
- CVE-2022-45359WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File UploadYITH WooCommerce Gift Cards
- CVE-2022-46332Proofpoint Enterprise Protection (PPS/PoD) XSS in "Attachment Names"proofpoint enterprise_protection
- CVE-2022-46161Code injection in pdfmakebpampuch pdfmake
- CVE-2020-6627The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_b
- CVE-2022-44900A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackepy7zr
- CVE-2022-46383RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 has exposed a privile
High 32
- CVE-2022-45829WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Arbitrary File DeletionWPecommerce, Alexanderfoxc Easy WP SMTP
- CVE-2022-46333Proofpoint Enterprise Protection perl eval() arbitrary command executionproofpoint enterprise_protection
- CVE-2022-23475dalorRadius full account take overlirantal daloradius
- CVE-2022-43867IBM Spectrum Scale command executionIBM Spectrum Scale
- CVE-2022-46154Arbitrary file access in KodExplorerkalcaddle KodExplorer
- CVE-2022-23470Arbitrary file access in the Galaxy data analysis platformgalaxyproject galaxy
- CVE-2022-35843An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, 7.0.0 through 7.0.7, Fortinet FortiOS · Fortinet FortiProxy
- CVE-2022-38123Insufficient validation of plugin filesSecomea GateManager
- CVE-2022-39090In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39091In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39092In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39093In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39094In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39095In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39096In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39097In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39098In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39099In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39100In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39101In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39102In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-41325An integer overflow in the VNC module in VideoLAN VLC Media Player through 3.0.17.4 allows attackers, by tricking a user into opening a craf
- CVE-2022-4147Quarkus CORS filter allows simple GET and POST requests with invalid Origin to proceed.quarkus-2 · io.quarkus:quarkus-vertx-http
- CVE-2022-41902Out of bounds write in grappler in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-42756In sensor driver, there is a possible buffer overflow due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42776In UscAIEngine service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42777In power management service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42778In windows manager service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44030Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks.
- CVE-2022-44289Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.topthink/framework
- CVE-2022-45548AyaCMS v3.1.2 has an Arbitrary File Upload vulnerability.
- CVE-2022-46382RackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 has Insecure Permissi
Medium, low and unrated 54
- CVE-2022-45833WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory TraversalWPecommerce, Alexanderfoxc Easy WP SMTP
- CVE-2022-45816WordPress GD bbPress Attachments Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)Milan Petrovic GD bbPress Attachments
- CVE-2022-45848WordPress Contest Gallery Plugin <= 13.1.0.9 is vulnerable to Cross Site Scripting (XSS)Contest Gallery
- CVE-2022-23466DOM-based cross-site scripting (XSS) in teler dashboardkitabisa teler · teler.app
- CVE-2022-34361IBM Sterling Secure Proxy information disclosureIBM Sterling Secure Proxy
- CVE-2022-23472Use of insecure random number generator in PasseoArjunSharda Passeo · passeo
- CVE-2022-33875An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability in Fortinet FortiADC version 7.1.0, veFortinet FortiADC
- CVE-2022-33876Multiple instances of improper input validation vulnerability in Fortinet FortiADC version 7.1.0, version 7.0.0 through 7.0.2 and version 6.Fortinet FortiADC
- CVE-2022-38379Improper neutralization of input during web page generation [CWE-79] in FortiSOAR 7.0.0 through 7.0.3 and 7.2.0 may allow an authenticated aFortinet FortiSOAR
- CVE-2022-30305An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to 3.1.5 and FortiDeceptorFortinet FortiSandbox · Fortinet FortiDeceptor
- CVE-2022-40680A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiOS 6.0.7 - 6.0.15, 6.2.2 - 6.2.12, 6Fortinet FortiProxy · Fortinet FortiOS
- CVE-2022-40209WP Smart Import plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)Xylus Themes WP Smart Import
- CVE-2022-34881Information Exposure Vulnerability in JP1/Automatic OperationHitachi JP1/Automatic Operation
- CVE-2022-46151Reflected XSSpinterest querybook
- CVE-2022-39106In sensor driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39129In face detect driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39130In face detect driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39131In camera driver, there is a possible memory corruption due to improper locking.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39132In camera driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39133In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39134In audio driver, there is a use after free due to a race condition.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-40603A cross-site scripting (XSS) vulnerability in the CGI program of Zyxel ZyWALL/USG series firmware versions 4.30 through 4.72, VPN series firZyxel ZyWALL/USG series firmware · Zyxel VPN series firm… +2
- CVE-2022-41910Heap out of bounds read in `QuantizeAndDequantizeV2` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-42754In npu driver, there is a memory corruption due to a use after free.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42755In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42757In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42758In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42759In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42760In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42761In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42762In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42763In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42764In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42765In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42766In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42767In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42768In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42769In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42770In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42771In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42772In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42773In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42774In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42775In camera driver, there is a possible memory corruption due to improper locking.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42779In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42780In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42781In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42782In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-4296TP-Link TL-WR740N ARP resource consumptionTP-Link TL-WR740N
- CVE-2022-4300FastCMS Template edit injectionFastCMS
- CVE-2022-4314Improper Privilege Management in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-43363Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website.
- CVE-2022-43369AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component search.php.
- CVE-2022-45326An XML external entity (XXE) injection vulnerability in Kwoksys Kwok Information Server before v2.9.5.SP31 allows remote authenticated users