CVEs published December 29, 2022
19 CVEs were published on December 29, 2022: 2 critical, 7 high.
- Published
- 19
- Critical
- 2
- High
- 7
- Medium
- 9
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 18
Most affected products
- usememos/memos · github.com/usememos/memos
- 11
- com.hazelcast:hazelcast · com.hazelcast.jet:hazelcast-jet +2
- 1
- gotify server · github.com/gotify/server +1
- 1
- metersphere · io.metersphere:metersphere
- 1
- ONC code-validator-api
- 1
- radareorg/radare2
- 1
- Twitter-Post-Fetcher · twitter-fetcher-js
- 1
- w3c Unicorn
- 1
Critical 2
- CVE-2022-36437The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the cluster com.hazelcast:hazelcast · com.hazelcast.jet:hazelcast-jet +2
- CVE-2022-4851Improper Handling of Values in usememos/memosusememos/memos · github.com/usememos/memos
High 7
- CVE-2022-46178Path Traversal In MeterSpere allows file upload to any pathmetersphere · io.metersphere:metersphere
- CVE-2022-4839Cross-site Scripting (XSS) - Stored in usememos/memosusememos/memos · github.com/usememos/memos
- CVE-2022-4840Cross-site Scripting (XSS) - Stored in usememos/memosusememos/memos · github.com/usememos/memos
- CVE-2022-4841Cross-site Scripting (XSS) - Stored in usememos/memosusememos/memos · github.com/usememos/memos
- CVE-2022-4847Incorrectly Specified Destination in a Communication Channel in usememos/memosusememos/memos · github.com/usememos/memos
- CVE-2022-4848Improper Verification of Source of a Communication Channel in usememos/memosusememos/memos · github.com/usememos/memos
- CVE-2022-4849Cross-Site Request Forgery (CSRF) in usememos/memosusememos/memos · github.com/usememos/memos
Medium, low and unrated 10
- CVE-2022-46181Gotify server XSS vulnerability in the application image file uploadgotify server · github.com/gotify/server +1
- CVE-2021-4296w3c Unicorn ValidatorNuMessage.java ValidatorNuMessage cross site scriptingw3c Unicorn
- CVE-2021-4295ONC code-validator-api XML CodeValidatorApiConfiguration.java vocabularyValidationConfigurations xml external entity referenceONC code-validator-api
- CVE-2018-25058Twitter-Post-Fetcher Link Target twitterFetcher.js reverse tabnabbingTwitter-Post-Fetcher · twitter-fetcher-js
- CVE-2022-30519XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password fie
- CVE-2022-4843NULL Pointer Dereference in radareorg/radare2radareorg/radare2
- CVE-2022-4844Cross-Site Request Forgery (CSRF) in usememos/memosusememos/memos · github.com/usememos/memos
- CVE-2022-4845Cross-Site Request Forgery (CSRF) in usememos/memosusememos/memos · github.com/usememos/memos
- CVE-2022-4846Cross-Site Request Forgery (CSRF) in usememos/memosusememos/memos · github.com/usememos/memos
- CVE-2022-4850Cross-Site Request Forgery (CSRF) in usememos/memosusememos/memos · github.com/usememos/memos