CVEs published December 11, 2022
9 CVEs were published on December 11, 2022: 1 critical, 0 high.
- Published
- 9
- Critical
- 1
- High
- 0
- Medium
- 6
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- thorsten/phpmyfaq
- 3
- nuxt/framework
- 2
- pallidlight online-course-selection-system
- 1
- RainyGao DocSys
- 1
- SourceCodester Canteen Management System
- 1
- zbl1996 FS-Blog
- 1
Critical 1
Medium, low and unrated 8
- CVE-2022-4400zbl1996 FS-Blog Title cross site scriptingzbl1996 FS-Blog
- CVE-2022-4401pallidlight online-course-selection-system cross site scriptingpallidlight online-course-selection-system
- CVE-2022-4402RainyGao DocSys ZIP File Decompression path traversalRainyGao DocSys
- CVE-2022-4403SourceCodester Canteen Management System ajax_represent.php sql injectionSourceCodester Canteen Management System
- CVE-2022-4408Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2022-4409Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2022-4413Cross-site Scripting (XSS) - Reflected in nuxt/frameworknuxt/framework
- CVE-2022-4414Cross-site Scripting (XSS) - DOM in nuxt/frameworknuxt/framework