CVE List - 2022 / December
Showing 1801 - 1900 of 2356 CVEs for December 2022 (Page 19 of 24)
| CVE ID | Date | Title |
|---|---|---|
| CVE-2022-46872 | 2022-12-22 | An attacker who compromised a content process could have partially... |
| CVE-2022-46873 | 2022-12-22 | Because Firefox did not implement the <code>unsafe-hashes</code> CSP directive, an... |
| CVE-2022-46874 | 2022-12-22 | A file with a long filename could have had its... |
| CVE-2022-46875 | 2022-12-22 | The executable file warning was not presented when downloading .atloc... |
| CVE-2022-46877 | 2022-12-22 | By confusing the browser, the fullscreen notification could have been... |
| CVE-2022-46878 | 2022-12-22 | Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the... |
| CVE-2022-46879 | 2022-12-22 | Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell... |
| CVE-2022-46880 | 2022-12-22 | A missing check related to tex units could have led... |
| CVE-2022-46881 | 2022-12-22 | An optimization in WebGL was incorrect in some cases, and... |
| CVE-2022-46882 | 2022-12-22 | A use-after-free in WebGL extensions could have led to a... |
| CVE-2022-46883 | 2022-12-22 | Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the... |
| CVE-2022-46885 | 2022-12-22 | Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing... |
| CVE-2022-47926 | 2022-12-22 | AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php |
| CVE-2022-47931 | 2022-12-22 | IO FinNet tss-lib before 2.0.0 allows a collision of hash... |
| CVE-2022-47895 | 2022-12-22 | In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File"... |
| CVE-2022-47896 | 2022-12-22 | In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable... |
| CVE-2022-45347 | 2022-12-22 | Apache ShardingSphere-Proxy: MySQL authentication bypass |
| CVE-2022-23541 | 2022-12-22 | jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC |
| CVE-2022-23540 | 2022-12-22 | jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() |
| CVE-2022-23556 | 2022-12-22 | CodeIgniter is vulnerable to IP address spoofing when using proxy |
| CVE-2022-38658 | 2022-12-22 | HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service |
| CVE-2022-46170 | 2022-12-22 | CodeIgniter is vulnerable to improper authentication via Session Handlers |
| CVE-2022-35646 | 2022-12-22 | IBM Security Verify Governance, Identity Manager security bypass |
| CVE-2022-22461 | 2022-12-22 | IBM Security Verify Governance, Identity Manager information disclosure |
| CVE-2022-43857 | 2022-12-22 | IBM Navigator for i information disclosure |
| CVE-2022-3805 | 2022-12-22 | The Jeg Elementor Kit plugin for WordPress is vulnerable to... |
| CVE-2022-3794 | 2022-12-22 | The Jeg Elementor Kit plugin for WordPress is vulnerable to... |
| CVE-2022-43858 | 2022-12-22 | IBM Navigator for i information disclosure |
| CVE-2022-43859 | 2022-12-22 | IBM Navigator for i SQL injection |
| CVE-2022-43860 | 2022-12-22 | IBM Navigator for i SQL injection |
| CVE-2022-22456 | 2022-12-22 | IBM Security Verify Governance, Identity Manager cross-site scripting |
| CVE-2022-22458 | 2022-12-22 | IBM Security Verify Governance, Identity Manager information disclosure |
| CVE-2022-22457 | 2022-12-22 | IBM Security Verify Governance, Identity Manager information disclosure |
| CVE-2022-45798 | 2022-12-22 | A link following vulnerability in the Damage Cleanup Engine component... |
| CVE-2022-22449 | 2022-12-22 | IBM Security Verify Governance, Identity Manager information disclosure |
| CVE-2022-23513 | 2022-12-22 | Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpoint |
| CVE-2022-23539 | 2022-12-22 | jsonwebtoken unrestricted key type could lead to legacy keys usage |
| CVE-2021-32692 | 2022-12-23 | Activity Watch vulnerable to command execution on macOS via printAppTitle.scpt |
| CVE-2022-28228 | 2022-12-23 | Out-of-bounds read was discovered in YDB server. An attacker could... |
| CVE-2022-28229 | 2022-12-23 | The hash functionality in userver before 42059b6319661583b3080cab9b595d4f8ac48128 allows attackers to... |
| CVE-2022-38757 | 2022-12-23 | CVE-2022-38757 ZENworks |
| CVE-2022-40011 | 2022-12-23 | Cross Site Scripting (XSS) vulnerability in typora through 1.38 allows... |
| CVE-2022-43551 | 2022-12-23 | A vulnerability exists in curl <7.87.0 HSTS check that could... |
| CVE-2022-44565 | 2022-12-23 | An improper access validation vulnerability exists in airMAX AC <8.7.11,... |
| CVE-2022-44567 | 2022-12-23 | A command injection vulnerability exists in Rocket.Chat-Desktop <3.8.14 that could... |
| CVE-2022-45706 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow... |
| CVE-2022-45707 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow... |
| CVE-2022-45708 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow... |
| CVE-2022-45709 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple command injection... |
| CVE-2022-45710 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows... |
| CVE-2022-45711 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection... |
| CVE-2022-45712 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow... |
| CVE-2022-45714 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow... |
| CVE-2022-45715 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows... |
| CVE-2022-45716 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow... |
| CVE-2022-45717 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection... |
| CVE-2022-45718 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow... |
| CVE-2022-45719 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow... |
| CVE-2022-45720 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows... |
| CVE-2022-45721 | 2022-12-23 | IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow... |
| CVE-2022-46492 | 2022-12-23 | nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file... |
| CVE-2022-46560 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a... |
| CVE-2022-46561 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a... |
| CVE-2022-46562 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a... |
| CVE-2022-46563 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a... |
| CVE-2022-46566 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a... |
| CVE-2022-46568 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a... |
| CVE-2022-46569 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a... |
| CVE-2022-46570 | 2022-12-23 | D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a... |
| CVE-2022-46641 | 2022-12-23 | D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection... |
| CVE-2022-46642 | 2022-12-23 | D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection... |
| CVE-2022-4665 | 2022-12-23 | Unrestricted Upload of File with Dangerous Type in ampache/ampache |
| CVE-2022-4683 | 2022-12-23 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in usememos/memos |
| CVE-2022-4684 | 2022-12-23 | Improper Access Control in usememos/memos |
| CVE-2022-4686 | 2022-12-23 | Authorization Bypass Through User-Controlled Key in usememos/memos |
| CVE-2022-4687 | 2022-12-23 | Incorrect Use of Privileged APIs in usememos/memos |
| CVE-2022-4688 | 2022-12-23 | Improper Authorization in usememos/memos |
| CVE-2022-4689 | 2022-12-23 | Improper Access Control in usememos/memos |
| CVE-2022-4690 | 2022-12-23 | Cross-site Scripting (XSS) - Stored in usememos/memos |
| CVE-2022-4691 | 2022-12-23 | Cross-site Scripting (XSS) - Stored in usememos/memos |
| CVE-2022-4692 | 2022-12-23 | Cross-site Scripting (XSS) - Stored in usememos/memos |
| CVE-2022-4694 | 2022-12-23 | Cross-site Scripting (XSS) - Stored in usememos/memos |
| CVE-2022-4695 | 2022-12-23 | Cross-site Scripting (XSS) - Stored in usememos/memos |
| CVE-2022-4719 | 2022-12-23 | Business Logic Errors in ikus060/rdiffweb |
| CVE-2022-4720 | 2022-12-23 | Open Redirect in ikus060/rdiffweb |
| CVE-2022-4721 | 2022-12-23 | Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb |
| CVE-2022-4722 | 2022-12-23 | Authentication Bypass by Primary Weakness in ikus060/rdiffweb |
| CVE-2022-4723 | 2022-12-23 | Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb |
| CVE-2022-4724 | 2022-12-23 | Improper Access Control in ikus060/rdiffweb |
| CVE-2022-47524 | 2022-12-23 | F-Secure SAFE Browser 19.1 before 19.2 for Android allows an... |
| CVE-2022-47633 | 2022-12-23 | An image signature validation bypass vulnerability in Kyverno 1.8.3 and... |
| CVE-2022-47938 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel... |
| CVE-2022-47939 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel... |
| CVE-2022-47940 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel... |
| CVE-2022-47941 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel... |
| CVE-2022-47942 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel... |
| CVE-2022-47943 | 2022-12-23 | An issue was discovered in ksmbd in the Linux kernel... |
| CVE-2022-47945 | 2022-12-23 | ThinkPHP Framework before 6.0.14 allows local file inclusion via the... |
| CVE-2022-47946 | 2022-12-23 | An issue was discovered in the Linux kernel 5.10.x before... |
| CVE-2022-33324 | 2022-12-23 | Denial-of-Service Vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series |