CVEs published December 18, 2022
36 CVEs were published on December 18, 2022: 0 critical, 8 high.
- Published
- 36
- Critical
- 0
- High
- 8
- Medium
- 10
- Low
- 17
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Shoplazza LifeStyle
- 6
- ctrlo lenio
- 5
- flatpressblog/flatpress
- 2
- 3D City Database OGC Web Feature Service
- 1
- as
- 1
- cgriego active_attr · active_attr
- 1
- django-openipam
- 1
- drogatkin TJWS2
- 1
- ewxrjk sftpserver
- 1
- kapetan dns · DNS
- 1
High 8
- CVE-2022-4606PHP Remote File Inclusion in flatpressblog/flatpressflatpressblog/flatpress
- CVE-2022-47515An issue was discovered in drachtio-server before 0.8.20.
- CVE-2022-47516An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20.
- CVE-2022-47517An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19.
- CVE-2022-47518An issue was discovered in the Linux kernel before 6.0.11.
- CVE-2022-47519An issue was discovered in the Linux kernel before 6.0.11.
- CVE-2022-47520An issue was discovered in the Linux kernel before 6.0.11.
- CVE-2022-47521An issue was discovered in the Linux kernel before 6.0.11.
Medium, low and unrated 28
- CVE-2020-36617ewxrjk sftpserver parse.c sftp_parse_path uninitialized pointerewxrjk sftpserver
- CVE-2021-4247OWASP NodeGoat Query Parameter research.js denial of serviceOWASP NodeGoat
- CVE-2021-4248kapetan dns Request.cs entropykapetan dns · DNS
- CVE-2021-4249xml-conduit DOCTYPE Entity Expansion Parse.hs infinite loopxml-conduit
- CVE-2021-4250cgriego active_attr Regex boolean_typecaster.rb call denial of servicecgriego active_attr · active_attr
- CVE-2021-4251as include.cdn.php getFullURL cross site scriptingas
- CVE-2021-4252WP-Ban ban-options.php toggle_checkbox cross site scriptingWP-Ban
- CVE-2021-4253ctrlo lenio Ticket Lenio.pm cross site scriptingctrlo lenio
- CVE-2021-4254ctrlo lenio Notice main.tt cross site scriptingctrlo lenio
- CVE-2021-4255ctrlo lenio contractor.tt cross site scriptingctrlo lenio
- CVE-2021-4256ctrlo lenio index.tt cross site scriptingctrlo lenio
- CVE-2021-4257ctrlo lenio Task task.tt cross site scriptingctrlo lenio
- CVE-2022-4592luckyshot CRMx index.php commentdelete sql injectionluckyshot CRMx
- CVE-2022-4593retra-system cross site scriptingretra-system
- CVE-2022-4594drogatkin TJWS2 WarRoller.java deployWar path traversaldrogatkin TJWS2
- CVE-2022-4595django-openipam exposed_hosts.html cross site scriptingdjango-openipam
- CVE-2022-4596Shoplazza Add Blog Post cross site scriptingShoplazza
- CVE-2022-4597Shoplazza LifeStyle Create Product v2_products cross site scriptingShoplazza LifeStyle
- CVE-2022-4598Shoplazza LifeStyle Announcement cross site scriptingShoplazza LifeStyle
- CVE-2022-4599Shoplazza LifeStyle Product cross site scriptingShoplazza LifeStyle
- CVE-2022-4600Shoplazza LifeStyle Product Carousel cross site scriptingShoplazza LifeStyle
- CVE-2022-4601Shoplazza LifeStyle Shipping/Member Discount/Icon cross site scriptingShoplazza LifeStyle
- CVE-2022-4602Shoplazza LifeStyle Review Flow cross site scriptingShoplazza LifeStyle
- CVE-2022-4603ppp pppdump pppdump.c dumpppp array indexppp
- CVE-2022-4604wp-english-wp-admin Plugin english-wp-admin.php register_endpoints cross-site request forgerywp-english-wp-admin Plugin
- CVE-2022-4605Cross-site Scripting (XSS) - Stored in flatpressblog/flatpressflatpressblog/flatpress
- CVE-2022-46073D City Database OGC Web Feature Service xml external entity reference3D City Database OGC Web Feature Service
- CVE-2022-47514An XML external entity (XXE) injection vulnerability in XML-RPC.NET before 2.5.0 allows remote authenticated users to conduct server-side re