CVEs published December 31, 2022
13 CVEs were published on December 31, 2022: 2 critical, 1 high.
- Published
- 13
- Critical
- 2
- High
- 1
- Medium
- 6
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 13
Most affected products
- froxlor/froxlor
- 2
- usememos/memos · github.com/usememos/memos
- 2
- Ariadne Component Library · arc/web
- 1
- Exciting Printer
- 1
- flitto express-param · express-param
- 1
- mellium.im/sasl
- 1
- rf Keynote · keynote
- 1
- rgb2hex
- 1
- valtech IDP Test Client
- 1
- vova07 Yii2 FileAPI Widget · vova07/yii2-fileapi-widget
- 1
Critical 2
High 1
Medium, low and unrated 10
- CVE-2018-25061rgb2hex redosrgb2hex
- CVE-2017-20160flitto express-param fetchParams.js parameter pollutionflitto express-param · express-param
- CVE-2014-125028valtech IDP Test Client main.py cross-site request forgeryvaltech IDP Test Client
- CVE-2014-125027Yuna Scatari TBDev usersearch.php get_user_icons cross site scriptingYuna Scatari TBDev
- CVE-2017-20159rf Keynote rumble.rb cross site scriptingrf Keynote · keynote
- CVE-2017-20158vova07 Yii2 FileAPI Widget UploadAction.php run cross site scriptingvova07 Yii2 FileAPI Widget · vova07/yii2-fileapi-widget
- CVE-2017-20157Ariadne Component Library Url.php server-side request forgeryAriadne Component Library · arc/web
- CVE-2017-20156Exciting Printer Argument prepare_page.rb command injectionExciting Printer
- CVE-2022-4867Cross-Site Request Forgery (CSRF) in froxlor/froxlorfroxlor/froxlor
- CVE-2022-4868Improper Authorization in froxlor/froxlorfroxlor/froxlor