# CVEs published 2022-12-30

99 CVEs were published on December 30, 2022: 34 critical, 24 high. Days are UTC.

- [CVE-2017-20155](https://cve.now/CVE-2017-20155.md): Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scripting (CVSS 3.5, Sterc Google Analytics Dashboard for MODX)
- [CVE-2017-20154](https://cve.now/CVE-2017-20154.md): ghostlander Phoenixcoin main.cpp accept denial of service (CVSS 3.5, ghostlander Phoenixcoin)
- [CVE-2022-4861](https://cve.now/CVE-2022-4861.md): Incorrect Implementation of Authentication Algorithm (CVSS 4.8, M-Files Client)
- [CVE-2022-4860](https://cve.now/CVE-2022-4860.md): KBase Metrics methods\_upload\_user\_stats.py upload\_user\_data sql injection (CVSS 5.5, KBase Metrics)
- [CVE-2018-25060](https://cve.now/CVE-2018-25060.md): Macaron csrf csrf.go missing secure attribute (CVSS 3.7, Macaron csrf · github.com/go-macaron/csrf)
- [CVE-2017-20153](https://cve.now/CVE-2017-20153.md): aerouk imageserve cross site scripting (CVSS 2.6, aerouk imageserve)
- [CVE-2017-20152](https://cve.now/CVE-2017-20152.md): aerouk imageserve File viewer.php path traversal (CVSS 3.1, aerouk imageserve)
- [CVE-2022-4859](https://cve.now/CVE-2022-4859.md): Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting (CVSS 3.5, Joget)
- [CVE-2017-20151](https://cve.now/CVE-2017-20151.md): iText RUPS XfaFile.java xml external entity reference (CVSS 5.5, iText RUPS · com.itextpdf:itext-rups)
- [CVE-2022-4858](https://cve.now/CVE-2022-4858.md): Insertion of Sensitive Information into Log File (CVSS 4.4, M-Files Server)
- [CVE-2020-36638](https://cve.now/CVE-2020-36638.md): Chris92de AdminServ adminserv.php cross site scripting (CVSS 3.5, Chris92de AdminServ)
- [CVE-2020-36637](https://cve.now/CVE-2020-36637.md): Chris92de AdminServ adminserv.php cross site scripting (CVSS 3.5, Chris92de AdminServ)
- [CVE-2018-25059](https://cve.now/CVE-2018-25059.md): pastebinit server.go pasteHandler path traversal (CVSS 3.5, pastebinit · github.com/jessfraz/pastebinit)
- [CVE-2022-44621](https://cve.now/CVE-2022-44621.md): Apache Kylin: Command injection by Diagnosis Controller (CVSS 9.8, Apache Software Foundation Apache Kylin · org.apache.kylin:…)
- [CVE-2022-43396](https://cve.now/CVE-2022-43396.md): Apache Kylin: Command injection by Useless configuration (CVSS 8.8, Apache Software Foundation Apache Kylin · org.apache.kylin:…)
- [CVE-2022-4857](https://cve.now/CVE-2022-4857.md): Modbus Tools Modbus Poll mbp File mbpoll.exe buffer overflow (CVSS 6.3, Modbus Tools Modbus Poll)
- [CVE-2022-4856](https://cve.now/CVE-2022-4856.md): Modbus Tools Modbus Slave mbs File mbslave.exe buffer overflow (CVSS 6.3, Modbus Tools Modbus Slave)
- [CVE-2022-4855](https://cve.now/CVE-2022-4855.md): SourceCodester Lead Management System login.php sql injection (CVSS 7.3, SourceCodester Lead Management System)
- [CVE-2022-38203](https://cve.now/CVE-2022-38203.md): The allowedProxyHosts property is not fully honored in ArcGIS Enterprise (10.8.1 and 10.7.1 only) (CVSS 7.5, Esri Portal for ArcGIS)
- [CVE-2022-38204](https://cve.now/CVE-2022-38204.md): Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only) (CVSS 6.1, Esri ArcGIS Enterprise)
- [CVE-2022-38205](https://cve.now/CVE-2022-38205.md): Portal for ArcGIS has a directory traversal vulnerability (10.9.1, 10.8.1 and 10.7.1 only) (CVSS 8.6, Esri ArcGIS Enterprise)
- [CVE-2022-38206](https://cve.now/CVE-2022-38206.md): Reflected XSS vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only) (CVSS 6.1, Esri ArcGIS Enterprise)
- [CVE-2022-38207](https://cve.now/CVE-2022-38207.md): Reflected XSS vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only) (CVSS 6.1, Esri ArcGIS Enterprise)
- [CVE-2022-38208](https://cve.now/CVE-2022-38208.md): Unvalidated redirect in Portal for ArcGIS (CVSS 6.1, Esri ArcGIS Enterprise)
- [CVE-2022-38209](https://cve.now/CVE-2022-38209.md): Reflected XSS vulnerability in Portal for ArcGIS (CVSS 6.1, Esri ArcGIS Quickcapture)
- [CVE-2022-38210](https://cve.now/CVE-2022-38210.md): HTML injection in accountswitcher-callback.html (10.9.1, 10.8.1 and 10.7.1 only) (CVSS 6.1, Esri ArcGIS Enterprise)
- [CVE-2022-38211](https://cve.now/CVE-2022-38211.md): Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only) (CVSS 7.5, Esri ArcGIS Enterprise)
- [CVE-2022-38212](https://cve.now/CVE-2022-38212.md): Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.8.1 and 10.7.1 only) (CVSS 7.5, Esri ArcGIS Enterprise)
- [CVE-2022-34669](https://cve.now/CVE-2022-34669.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modi (CVSS 8.8, vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming)
- [CVE-2022-34670](https://cve.now/CVE-2022-34670.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause (CVSS 7.8, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-34671](https://cve.now/CVE-2022-34671.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds (CVSS 8.5, NVIDIA GPU Display Driver for Windows)
- [CVE-2022-34672](https://cve.now/CVE-2022-34672.md): NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the secu (CVSS 7.8, vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming)
- [CVE-2022-34673](https://cve.now/CVE-2022-34673.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may l (CVSS 4.4, NVIDIA GPU Display Driver for Linux)
- [CVE-2022-34674](https://cve.now/CVE-2022-34674.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pa (CVSS 6.8, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-34675](https://cve.now/CVE-2022-34675.md): NVIDIA Display Driver for Linux contains a vulnerability in the Virtual GPU Manager, where it does not check the return value from a null-po (CVSS 5.5, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming)
- [CVE-2022-34676](https://cve.now/CVE-2022-34676.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denia (CVSS 7.1, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-34677](https://cve.now/CVE-2022-34677.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause (CVSS 5.5, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-34678](https://cve.now/CVE-2022-34678.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause a nu (CVSS 6.5, vGPU software (guest driver) - Windows, Linux and vGPU soft…)
- [CVE-2022-34679](https://cve.now/CVE-2022-34679.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unhandled return value can lead to a (CVSS 5.5, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-34680](https://cve.now/CVE-2022-34680.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an ou (CVSS 5.5, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-34681](https://cve.now/CVE-2022-34681.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler, where improper input validat (CVSS 5.5, vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming)
- [CVE-2022-34682](https://cve.now/CVE-2022-34682.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a null-p (CVSS 5.5, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-34683](https://cve.now/CVE-2022-34683.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a nu (CVSS 5.5, vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming)
- [CVE-2022-34684](https://cve.now/CVE-2022-34684.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an off-by-one error may lead to dat (CVSS 5.3, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-42254](https://cve.now/CVE-2022-42254.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may l (CVSS 5.3, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-42255](https://cve.now/CVE-2022-42255.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may l (CVSS 5.3, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-42256](https://cve.now/CVE-2022-42256.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow in index valida (CVSS 5.3, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-42257](https://cve.now/CVE-2022-42257.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to inf (CVSS 5.3, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-42258](https://cve.now/CVE-2022-42258.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to den (CVSS 5.3, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-42259](https://cve.now/CVE-2022-42259.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to den (CVSS 4.4, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-42260](https://cve.now/CVE-2022-42260.md): NVIDIA vGPU Display Driver for Linux guest contains a vulnerability in a D-Bus configuration file, where an unauthorized user in the guest V (CVSS 7.8, vGPU software (guest driver) - Linux, NVIDIA Cloud Gaming)
- [CVE-2022-42261](https://cve.now/CVE-2022-42261.md): NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lea (CVSS 7.8, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming)
- [CVE-2022-42262](https://cve.now/CVE-2022-42262.md): NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lea (CVSS 7.1, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming)
- [CVE-2022-42263](https://cve.now/CVE-2022-42263.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an Integer overflow may lead to denial (CVSS 7.1, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-42264](https://cve.now/CVE-2022-42264.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause the use (CVSS 7.1, vGPU software (guest driver) - Linux, vGPU software (Virtua…)
- [CVE-2022-42265](https://cve.now/CVE-2022-42265.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an integer overflow may lead to inf (CVSS 5.3, NVIDIA GPU Display Driver for Linux)
- [CVE-2022-42266](https://cve.now/CVE-2022-42266.md): NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an u (CVSS 5.5, vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming)
- [CVE-2022-42267](https://cve.now/CVE-2022-42267.md): NVIDIA GPU Display Driver for Windows contains a vulnerability where a regular user can cause an out-of-bounds read, which may lead to code (CVSS 7.0, NVIDIA GPU Display Driver for Windows)
- [CVE-2022-42269](https://cve.now/CVE-2022-42269.md): NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged l (CVSS 7.9, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…)
- [CVE-2022-42270](https://cve.now/CVE-2022-42270.md): NVIDIA distributions of Linux contain a vulnerability in nvdla\_emu\_task\_submit, where unvalidated input may allow a local attacker to cause (CVSS 7.8, NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson A…)
- [CVE-2022-44137](https://cve.now/CVE-2022-44137.md): SourceCodester Sanitization Management System 1.0 is vulnerable to SQL Injection. (CVSS 7.2)
- [CVE-2022-46580](https://cve.now/CVE-2022-46580.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the user\_edit\_page parameter in the wifi\_captive\_portal function. (CVSS 9.8)
- [CVE-2022-46581](https://cve.now/CVE-2022-46581.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup\_target parameter in the tools\_nslookup fun (CVSS 9.8)
- [CVE-2022-46582](https://cve.now/CVE-2022-46582.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the login\_name parameter in the do\_graph\_auth (sub\_4061E0) function (CVSS 9.8)
- [CVE-2022-46583](https://cve.now/CVE-2022-46583.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot\_type parameter in the wizard\_ipv6 (sub\_41C380) function. (CVSS 9.8)
- [CVE-2022-46584](https://cve.now/CVE-2022-46584.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d\_vap%d.maclist parameter in the kick\_ban\_wifi\_mac (CVSS 9.8)
- [CVE-2022-46585](https://cve.now/CVE-2022-46585.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTE\_USER parameter in the get\_access (sub\_45AC2C) function. (CVSS 9.8)
- [CVE-2022-46586](https://cve.now/CVE-2022-46586.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d\_vap%d.maclist parameter in the kick\_ban\_wifi\_mac (CVSS 9.8)
- [CVE-2022-46588](https://cve.now/CVE-2022-46588.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sys\_service parameter in the setup\_wizard\_mydlink (sub\_4104B8) (CVSS 9.8)
- [CVE-2022-46589](https://cve.now/CVE-2022-46589.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat\_option parameter in the tools\_netstat (sub\_ (CVSS 9.8)
- [CVE-2022-46590](https://cve.now/CVE-2022-46590.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.netstat\_rsname parameter in the tools\_netstat (sub\_ (CVSS 9.8)
- [CVE-2022-46591](https://cve.now/CVE-2022-46591.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reject\_url parameter in the reject (sub\_41BD60) function. (CVSS 9.8)
- [CVE-2022-46592](https://cve.now/CVE-2022-46592.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps\_sta\_enrollee\_pin parameter in the set\_sta\_enrollee\_pin\_5g f (CVSS 9.8)
- [CVE-2022-46593](https://cve.now/CVE-2022-46593.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps\_sta\_enrollee\_pin parameter in the do\_sta\_enrollee\_wifi func (CVSS 9.8)
- [CVE-2022-46594](https://cve.now/CVE-2022-46594.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the update\_file\_name parameter in the auto\_up\_fw (sub\_420A04) funct (CVSS 9.8)
- [CVE-2022-46596](https://cve.now/CVE-2022-46596.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del\_num parameter in the icp\_delete\_img (sub\_41DEDC) function. (CVSS 9.8)
- [CVE-2022-46597](https://cve.now/CVE-2022-46597.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys\_service parameter in the setup\_wizard\_mydl (CVSS 9.8)
- [CVE-2022-46598](https://cve.now/CVE-2022-46598.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps\_sta\_enrollee\_pin parameter in the action s (CVSS 9.8)
- [CVE-2022-46599](https://cve.now/CVE-2022-46599.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo\_num parameter in the icp\_setlogo\_img (sub\_41DBF4) funct (CVSS 9.8)
- [CVE-2022-46600](https://cve.now/CVE-2022-46600.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps\_sta\_enrollee\_pin parameter in the action set\_sta\_enrollee\_p (CVSS 9.8)
- [CVE-2022-46601](https://cve.now/CVE-2022-46601.md): TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg\_num parameter in the icp\_setbg\_img (sub\_41DD68) function. (CVSS 9.8)
- [CVE-2022-47115](https://cve.now/CVE-2022-47115.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47116](https://cve.now/CVE-2022-47116.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the SYSPS parameter at /goform/SysToolChangePwd. (CVSS 7.5)
- [CVE-2022-47117](https://cve.now/CVE-2022-47117.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47118](https://cve.now/CVE-2022-47118.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47119](https://cve.now/CVE-2022-47119.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47120](https://cve.now/CVE-2022-47120.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security\_5g parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47121](https://cve.now/CVE-2022-47121.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47122](https://cve.now/CVE-2022-47122.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd\_5g parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47123](https://cve.now/CVE-2022-47123.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47124](https://cve.now/CVE-2022-47124.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47125](https://cve.now/CVE-2022-47125.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn\_5g parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47126](https://cve.now/CVE-2022-47126.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47127](https://cve.now/CVE-2022-47127.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-47128](https://cve.now/CVE-2022-47128.md): Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey2 parameter at /goform/WifiBasicSet. (CVSS 9.8)
- [CVE-2022-48194](https://cve.now/CVE-2022-48194.md): TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS (CVSS 8.8)
- [CVE-2022-48196](https://cve.now/CVE-2022-48196.md): Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. (CVSS 7.4)
- [CVE-2022-4863](https://cve.now/CVE-2022-4863.md): Improper Handling of Insufficient Permissions or Privileges in usememos/memos (CVSS 8.4, usememos/memos · github.com/usememos/memos)
- [CVE-2022-4864](https://cve.now/CVE-2022-4864.md): Argument Injection in froxlor/froxlor (CVSS 5.3, froxlor/froxlor)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-12-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.