CVEs published December 24, 2022
14 CVEs were published on December 24, 2022: 1 critical, 1 high.
- Published
- 14
- Critical
- 1
- High
- 1
- Medium
- 8
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Graphite Web · graphite-web
- 3
- AWS SDK · com.amazonaws:aws-android-sdk-mobile-client
- 1
- json5
- 1
- microweber/microweber
- 1
- Modern Tribe Panel Builder Plugin
- 1
- openemr/openemr
- 1
- OpenMRS Appointment Scheduling Module
- 1
- SourceCodester Sanitization Management System
- 1
Critical 1
High 1
Medium, low and unrated 12
- CVE-2020-36626Modern Tribe Panel Builder Plugin SearchFilter.php add_post_content_filtered_to_search_sql sql injectionModern Tribe Panel Builder Plugin
- CVE-2022-4725AWS SDK XML Parser XpathUtils.java XpathUtils server-side request forgeryAWS SDK · com.amazonaws:aws-android-sdk-mobile-client
- CVE-2022-4726SourceCodester Sanitization Management System Admin Login sql injectionSourceCodester Sanitization Management System
- CVE-2022-4727OpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross site scriptingOpenMRS Appointment Scheduling Module
- CVE-2022-4728Graphite Web Cookie cross site scriptingGraphite Web · graphite-web
- CVE-2022-4729Graphite Web Template Name cross site scriptingGraphite Web · graphite-web
- CVE-2022-4730Graphite Web Absolute Time Range cross site scriptingGraphite Web · graphite-web
- CVE-2022-4732Unrestricted Upload of File with Dangerous Type in microweber/microwebermicroweber/microweber
- CVE-2022-4733Cross-site Scripting (XSS) - Stored in openemr/openemropenemr/openemr
- CVE-2022-47932Brave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns
- CVE-2022-47933Brave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme.
- CVE-2022-47934Brave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file tha