CVEs published December 30, 2022
99 CVEs were published on December 30, 2022: 34 critical, 24 high.
- Published
- 99
- Critical
- 34
- High
- 24
- Medium
- 32
- Low
- 9
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 17
Most affected products
- vGPU software (guest driver) - Linux, vGPU software (Virtua…
- 16
- Esri ArcGIS Enterprise
- 8
- vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming
- 5
- vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming
- 3
- aerouk imageserve
- 2
- Apache Software Foundation Apache Kylin · org.apache.kylin:…
- 2
- Chris92de AdminServ
- 2
- NVIDIA GPU Display Driver for Linux
- 2
- NVIDIA GPU Display Driver for Windows
- 2
- Esri ArcGIS Quickcapture
- 1
Critical 34
- CVE-2022-44621Apache Kylin: Command injection by Diagnosis ControllerApache Software Foundation Apache Kylin · org.apache.kylin:…
- CVE-2022-46580TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the user_edit_page parameter in the wifi_captive_portal function.
- CVE-2022-46581TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in the tools_nslookup fun
- CVE-2022-46582TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the login_name parameter in the do_graph_auth (sub_4061E0) function
- CVE-2022-46583TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot_type parameter in the wizard_ipv6 (sub_41C380) function.
- CVE-2022-46584TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac
- CVE-2022-46585TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTE_USER parameter in the get_access (sub_45AC2C) function.
- CVE-2022-46586TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac
- CVE-2022-46588TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8)
- CVE-2022-46589TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_option parameter in the tools_netstat (sub_
- CVE-2022-46590TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat_rsname parameter in the tools_netstat (sub_
- CVE-2022-46591TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reject_url parameter in the reject (sub_41BD60) function.
- CVE-2022-46592TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the set_sta_enrollee_pin_5g f
- CVE-2022-46593TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the do_sta_enrollee_wifi func
- CVE-2022-46594TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the update_file_name parameter in the auto_up_fw (sub_420A04) funct
- CVE-2022-46596TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (sub_41DEDC) function.
- CVE-2022-46597TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys_service parameter in the setup_wizard_mydl
- CVE-2022-46598TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the action s
- CVE-2022-46599TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_img (sub_41DBF4) funct
- CVE-2022-46600TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_p
- CVE-2022-46601TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (sub_41DD68) function.
- CVE-2022-47115Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet.
- CVE-2022-47117Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet.
- CVE-2022-47118Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet.
- CVE-2022-47119Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet.
- CVE-2022-47120Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.
- CVE-2022-47121Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet.
- CVE-2022-47122Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd_5g parameter at /goform/WifiBasicSet.
- CVE-2022-47123Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet.
- CVE-2022-47124Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet.
- CVE-2022-47125Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet.
- CVE-2022-47126Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet.
- CVE-2022-47127Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd parameter at /goform/WifiBasicSet.
- CVE-2022-47128Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet.
High 24
- CVE-2022-43396Apache Kylin: Command injection by Useless configurationApache Software Foundation Apache Kylin · org.apache.kylin:…
- CVE-2022-4855SourceCodester Lead Management System login.php sql injectionSourceCodester Lead Management System
- CVE-2022-38203The allowedProxyHosts property is not fully honored in ArcGIS Enterprise (10.8.1 and 10.7.1 only)Esri Portal for ArcGIS
- CVE-2022-38205Portal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only)Esri ArcGIS Enterprise
- CVE-2022-38211Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)Esri ArcGIS Enterprise
- CVE-2022-38212Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)Esri ArcGIS Enterprise
- CVE-2022-34669NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modivGPU software (guest driver) - Windows, NVIDIA Cloud Gaming
- CVE-2022-34670NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause vGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-34671NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-boundsNVIDIA GPU Display Driver for Windows
- CVE-2022-34672NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the secuvGPU software (guest driver) - Windows, NVIDIA Cloud Gaming
- CVE-2022-34676NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to deniavGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-42260NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest VvGPU software (guest driver) - Linux, NVIDIA Cloud Gaming
- CVE-2022-42261NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may leavGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming
- CVE-2022-42262NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may leavGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming
- CVE-2022-42263NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an Integer overflow may lead to denial vGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-42264NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use vGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-42267NVIDIA GPU Display Driver for Windows contains a vulnerability where a regular user can cause an out-of-bounds read, which may lead to code NVIDIA GPU Display Driver for Windows
- CVE-2022-42269NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged lNVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…
- CVE-2022-42270NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson A…
- CVE-2022-44137SourceCodester Sanitization Management System 1.0 is vulnerable to SQL Injection.
- CVE-2022-47116Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the SYSPS parameter at /goform/SysToolChangePwd.
- CVE-2022-48194TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS
- CVE-2022-48196Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
- CVE-2022-4863Improper Handling of Insufficient Permissions or Privileges in usememos/memosusememos/memos · github.com/usememos/memos
Medium, low and unrated 41
- CVE-2017-20155Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scriptingSterc Google Analytics Dashboard for MODX
- CVE-2017-20154ghostlander Phoenixcoin main.cpp accept denial of serviceghostlander Phoenixcoin
- CVE-2022-4861Incorrect Implementation of Authentication AlgorithmM-Files Client
- CVE-2022-4860KBase Metrics methods_upload_user_stats.py upload_user_data sql injectionKBase Metrics
- CVE-2018-25060Macaron csrf csrf.go missing secure attributeMacaron csrf · github.com/go-macaron/csrf
- CVE-2017-20153aerouk imageserve cross site scriptingaerouk imageserve
- CVE-2017-20152aerouk imageserve File viewer.php path traversalaerouk imageserve
- CVE-2022-4859Joget User Profile Menu UserProfileMenu.java submitForm cross site scriptingJoget
- CVE-2017-20151iText RUPS XfaFile.java xml external entity referenceiText RUPS · com.itextpdf:itext-rups
- CVE-2022-4858Insertion of Sensitive Information into Log FileM-Files Server
- CVE-2020-36638Chris92de AdminServ adminserv.php cross site scriptingChris92de AdminServ
- CVE-2020-36637Chris92de AdminServ adminserv.php cross site scriptingChris92de AdminServ
- CVE-2018-25059pastebinit server.go pasteHandler path traversalpastebinit · github.com/jessfraz/pastebinit
- CVE-2022-4857Modbus Tools Modbus Poll mbp File mbpoll.exe buffer overflowModbus Tools Modbus Poll
- CVE-2022-4856Modbus Tools Modbus Slave mbs File mbslave.exe buffer overflowModbus Tools Modbus Slave
- CVE-2022-38204Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)Esri ArcGIS Enterprise
- CVE-2022-38206Reflected XSS vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)Esri ArcGIS Enterprise
- CVE-2022-38207Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only)Esri ArcGIS Enterprise
- CVE-2022-38208Unvalidated redirect in Portal for ArcGISEsri ArcGIS Enterprise
- CVE-2022-38209Reflected XSS vulnerability in Portal for ArcGISEsri ArcGIS Quickcapture
- CVE-2022-38210HTML injection in accountswitcher-callback.html (10.9.1, 10.8.1 and 10.7.1 only)Esri ArcGIS Enterprise
- CVE-2022-34673NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lNVIDIA GPU Display Driver for Linux
- CVE-2022-34674NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pavGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-34675NVIDIA Display Driver for Linux contains a vulnerability in the Virtual GPU Manager, where it does not check the return value from a null-povGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming
- CVE-2022-34677NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause vGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-34678NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause a nuvGPU software (guest driver) - Windows, Linux and vGPU soft…
- CVE-2022-34679NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unhandled return value can lead to avGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-34680NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an ouvGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-34681NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler, where improper input validatvGPU software (guest driver) - Windows, NVIDIA Cloud Gaming
- CVE-2022-34682NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a null-pvGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-34683NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a nuvGPU software (guest driver) - Windows, NVIDIA Cloud Gaming
- CVE-2022-34684NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an off-by-one error may lead to datvGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-42254NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lvGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-42255NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lvGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-42256NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow in index validavGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-42257NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to infvGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-42258NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to denvGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-42259NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to denvGPU software (guest driver) - Linux, vGPU software (Virtua…
- CVE-2022-42265NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to infNVIDIA GPU Display Driver for Linux
- CVE-2022-42266NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an uvGPU software (guest driver) - Windows, NVIDIA Cloud Gaming
- CVE-2022-4864 Argument Injection in froxlor/froxlorfroxlor/froxlor