# CVEs published 2022-12-17

23 CVEs were published on December 17, 2022: 6 critical, 1 high. Days are UTC.

- [CVE-2022-42453](https://cve.now/CVE-2022-42453.md): HCL BigFix Platform is affected by insufficient warnings (CVSS 6.9, HCL Software BigFix Platform)
- [CVE-2022-38659](https://cve.now/CVE-2022-38659.md): HCL BigFix Platform is affected by insecure credential storage (CVSS 6.0, HCL Software BigFix Platform)
- [CVE-2022-44754](https://cve.now/CVE-2022-44754.md): HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. (CVSS 9.8, HCL Software Domino)
- [CVE-2022-44752](https://cve.now/CVE-2022-44752.md): HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView (CVSS 9.8, HCL Software Domino)
- [CVE-2022-44750](https://cve.now/CVE-2022-44750.md): HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. (CVSS 9.8, HCL Software Domino)
- [CVE-2022-44755](https://cve.now/CVE-2022-44755.md): HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView (CVSS 9.8, HCL Software Notes)
- [CVE-2022-44753](https://cve.now/CVE-2022-44753.md): HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView (CVSS 9.8, HCL Software Notes)
- [CVE-2022-44751](https://cve.now/CVE-2022-44751.md): HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView (CVSS 9.8, HCL Software Notes)
- [CVE-2022-23488](https://cve.now/CVE-2022-23488.md): BigBlueButton vulnerable to Insertion of Sensitive Information Into Sent Data (CVSS 6.5, bigbluebutton)
- [CVE-2021-4246](https://cve.now/CVE-2021-4246.md): roxlukas LMeve Login Page sql injection (CVSS 6.3, roxlukas LMeve)
- [CVE-2022-4567](https://cve.now/CVE-2022-4567.md): Improper Access Control in openemr/openemr (CVSS 8.1, openemr/openemr)
- [CVE-2022-4572](https://cve.now/CVE-2022-4572.md): UBI Reader UBIFS File output.py ubireader\_extract\_files path traversal (CVSS 5.4, UBI Reader · ubi-reader)
- [CVE-2022-4581](https://cve.now/CVE-2022-4581.md): 1j01 mind-map app.coffee cross site scripting (CVSS 3.5, 1j01 mind-map)
- [CVE-2022-4582](https://cve.now/CVE-2022-4582.md): starter-public-edition-4 cross site scripting (CVSS 3.5, starter-public-edition-4)
- [CVE-2022-4583](https://cve.now/CVE-2022-4583.md): jLEMS JUtil.java unpackJar path traversal (CVSS 6.3, jLEMS)
- [CVE-2022-4584](https://cve.now/CVE-2022-4584.md): Axiomatic Bento4 mp42aac heap-based overflow (CVSS 6.3, Axiomatic Bento4)
- [CVE-2022-4585](https://cve.now/CVE-2022-4585.md): Opencaching Deutschland oc-server3 Cookie start.tpl cross site scripting (CVSS 3.5, Opencaching Deutschland oc-server3)
- [CVE-2022-4586](https://cve.now/CVE-2022-4586.md): Opencaching Deutschland oc-server3 Cachelist cachelists.tpl cross site scripting (CVSS 3.5, Opencaching Deutschland oc-server3)
- [CVE-2022-4587](https://cve.now/CVE-2022-4587.md): Opencaching Deutschland oc-server3 Login Page login.tpl cross site scripting (CVSS 4.3, Opencaching Deutschland oc-server3)
- [CVE-2022-4588](https://cve.now/CVE-2022-4588.md): Boston Sleep slice Layout cross site scripting (CVSS 2.4, Boston Sleep slice)
- [CVE-2022-4589](https://cve.now/CVE-2022-4589.md): cyface Terms and Conditions Module views.py returnTo redirect (CVSS 5.5, cyface Terms and Conditions Module · django-termsandconditi…)
- [CVE-2022-4590](https://cve.now/CVE-2022-4590.md): mschaef toto Todo List cross site scripting (CVSS 3.5, mschaef toto)
- [CVE-2022-4591](https://cve.now/CVE-2022-4591.md): mschaef toto Email Parameter cross site scripting (CVSS 3.5, mschaef toto)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-12-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.