Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2022

71 records · 7 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2022-1471
    69This week

    Remote Code execution in SnakeYAML

    CriticalCVSS 9.8WeaponizedEPSS 99%

    snakeyaml project · snakeyamlDec 1, 2022

  • CVE-2022-4257
    52Plan

    C-DATA Web Management System GET Parameter jumpto.php argument injection

    CriticalCVSS 9.8No exploitEPSS 43%

    cdatatec · c-data web management systemDec 1, 2022

  • CVE-2022-4262
    72This week

    Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted

    HighCVSS 8.8KEVWeaponizedEPSS 23%

    google · chromeDec 2, 2022

  • CVE-2022-46164
    53Plan

    Account takeover via prototype vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 47%

    nodebb · nodebbDec 5, 2022

  • CVE-2022-46169
    99Now

    Unauthenticated Command Injection

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    cacti · cactiDec 5, 2022

  • CVE-2022-43548
    36Monitor

    A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insufficient IsAllowedHost c

    HighCVSS 8.1No exploitEPSS 14%

    nodejs · node.jsDec 5, 2022

  • CVE-2020-6627
    43Plan

    The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_b

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    seagate · stcg2000300 firmwareDec 6, 2022

  • CVE-2022-45359
    43Plan

    WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload

    CriticalCVSS 9.8No exploitEPSS 13%

    yithemes · yith woocommerce gift cardsDec 6, 2022

  • CVE-2022-45025
    49Plan

    Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF fil

    CriticalCVSS 9.8Proof of conceptEPSS 34%

    markdown preview enhanced project · markdown preview enhancedDec 6, 2022

  • CVE-2022-41622
    63This week

    iControl SOAP vulnerability

    HighCVSS 8.8WeaponizedEPSS 92%

    f5 · big-iq centralized managementDec 7, 2022

  • CVE-2022-41800
    57Plan

    Appliance mode iControl REST vulnerability

    HighCVSS 8.7WeaponizedEPSS 76%

    f5 · big-ip access policy managerDec 7, 2022

  • CVE-2022-46770
    60This week

    qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumpt

    HighCVSS 7.5WeaponizedEPSS 22%

    linuxfoundation · mirage firewallDec 7, 2022

  • CVE-2022-45504
    35Monitor

    An issue in the component tpi_systool_handle(0) (/goform/SysToolRestoreSet) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to

    HighCVSS 7.5No exploitEPSS 18%

    tenda · w6-s firmwareDec 8, 2022

  • CVE-2021-3437
    44Plan

    Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or den

    CriticalCVSS 9.8No exploitEPSS 15%

    hp · omen gaming hubDec 12, 2022

  • CVE-2022-45957
    33Monitor

    ZTE ZXHN-H108NS router with firmware version H108NSV1.0.7u_ZRD_GR2_A68 is vulnerable to remote stack buffer overflow.

    HighCVSS 7.5No exploitEPSS 10%

    zte · zxhn-h108ns firmwareDec 12, 2022

  • CVE-2022-3900
    45Plan

    Cooked Pro < 1.7.5.7 - Unauthenticated PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 18%

    boxystudio · cookedDec 12, 2022

  • CVE-2022-3921
    45Plan

    Listingo < 3.2.7 - Unauthenticated Arbitrary File Upload

    CriticalCVSS 9.8No exploitEPSS 21%

    themographics · listingoDec 12, 2022

  • CVE-2022-45275
    33Monitor

    An arbitrary file upload vulnerability in /queuing/admin/ajax.php?action=save_settings of Dynamic Transaction Queuing System v1.0 allows att

    HighCVSS 7.2No exploitEPSS 15%

    dynamic transaction queuing system project · dynamic transaction queuing systemDec 12, 2022

  • CVE-2022-31698
    35Monitor

    The vCenter Server contains a denial-of-service vulnerability in the content library service.

    MediumCVSS 5.3No exploitEPSS 47%

    vmware · cloud foundationDec 13, 2022

  • CVE-2022-4223
    59Plan

    The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities suc

    HighCVSS 8.8Proof of conceptEPSS 80%

    pgadmin · pgadmin 4Dec 13, 2022

  • CVE-2022-27518
    71This week

    Unauthenticated remote arbitrary code execution

    CriticalCVSS 9.8KEVWeaponizedEPSS 6%

    citrix · application delivery controller firmwareDec 13, 2022

  • CVE-2022-41076
    52Plan

    PowerShell Remote Code Execution Vulnerability

    HighCVSS 8.5No exploitEPSS 60%

    microsoft · powershellDec 13, 2022

  • CVE-2022-44666
    43Plan

    Windows Contacts Remote Code Execution Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 41%

    microsoft · windows 10Dec 13, 2022

  • CVE-2022-44690
    60This week

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 82%

    microsoft · sharepoint foundationDec 13, 2022

  • CVE-2022-44698
    74This week

    Windows SmartScreen Security Feature Bypass Vulnerability

    MediumCVSS 5.4KEVWeaponizedEPSS 76%

    microsoft · windows 10 1607Dec 13, 2022

  • CVE-2022-37155
    47Plan

    RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to execute arbitrary code via the _oups parameter.

    HighCVSS 8.8No exploitEPSS 39%

    spip · spipDec 13, 2022

  • CVE-2022-42139
    40Plan

    Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL.

    HighCVSS 8.8No exploitEPSS 18%

    deltaww · dvw-w02w2-e2 firmwareDec 13, 2022

  • CVE-2022-46443
    46Plan

    mesinkasir Bangresto 1.0 is vulnberable to SQL Injection via the itemqty%5B%5D parameter.

    HighCVSS 8.8Proof of conceptEPSS 37%

    bangresto project · bangrestoDec 14, 2022

  • CVE-2022-38488
    43Plan

    logrocket-oauth2-example through 2020-05-27 allows SQL injection via the /auth/register username parameter.

    CriticalCVSS 9.8No exploitEPSS 14%

    logrocket-oauth2-example project · logrocket-oauth2-exampleDec 14, 2022

  • CVE-2022-46768
    37Monitor

    File name information disclosure vulnerability in Zabbix Web Service Report Generation

    MediumCVSS 5.9No exploitEPSS 47%

    zabbix · web service report generationDec 15, 2022

  • CVE-2022-27498
    38Monitor

    A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10

    MediumCVSS 6.5No exploitEPSS 38%

    lansweeper · lansweeperDec 15, 2022

  • CVE-2022-29517
    52Plan

    A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0.

    HighCVSS 8.8No exploitEPSS 57%

    lansweeper · lansweeperDec 15, 2022

  • CVE-2022-42856
    68This week

    A type confusion issue was addressed with improved state handling.

    HighCVSS 8.8KEVWeaponizedEPSS 8%

    apple · safariDec 15, 2022

  • CVE-2022-42867
    45Plan

    A use after free issue was addressed with improved memory management.

    HighCVSS 8.8No exploitEPSS 34%

    apple · safariDec 15, 2022

  • CVE-2022-46689
    42Plan

    A race condition was addressed with additional validation.

    HighCVSS 7.0WeaponizedEPSS 48%

    apple · safariDec 15, 2022

  • CVE-2022-4606
    50Plan

    PHP Remote File Inclusion in flatpressblog/flatpress

    CriticalCVSS 9.8No exploitEPSS 35%

    flatpress · flatpressDec 18, 2022

  • CVE-2022-44456
    60This week

    CONPROSYS HMI System (CHS) Ver.3.4.4?and earlier allows a remote unauthenticated attacker to execute an arbitrary OS command on the server w

    CriticalCVSS 9.8No exploitEPSS 69%

    contec · conprosys hmi systemDec 18, 2022

  • CVE-2022-3876
    26Monitor

    Click Studios Passwordstate API authorization

    MediumCVSS 6.5No exploitEPSS 0%

    clickstudios · passwordstateDec 19, 2022

  • CVE-2022-4063
    42Plan

    InPost Gallery < 2.1.4.1 - Unauthenticated LFI to RCE

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    pluginus · inpost galleryDec 19, 2022

  • CVE-2022-45942
    42Plan

    A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4.

    HighCVSS 8.8No exploitEPSS 21%

    baijiacms project · baijiacmsDec 20, 2022

  • CVE-2022-40624
    44Plan

    pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    pfsense · pfblockerngDec 20, 2022

  • CVE-2022-46020
    51Plan

    WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.

    CriticalCVSS 9.8Proof of conceptEPSS 38%

    wbce · wbce cmsDec 20, 2022

  • CVE-2022-3184
    42Plan

    Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where the device’s existing firmware allows unauthenticated u

    CriticalCVSS 9.8No exploitEPSS 11%

    dataprobe · iboot-pdu4-n20 firmwareDec 21, 2022

  • CVE-2022-41654
    23Monitor

    An authentication bypass vulnerability exists in the newsletter subscription functionality of Ghost Foundation Ghost 5.9.4.

    MediumCVSS 4.3No exploitEPSS 18%

    ghost · ghostDec 22, 2022

  • CVE-2022-41697
    27Monitor

    A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4.

    MediumCVSS 5.3Proof of conceptEPSS 20%

    ghost · ghostDec 22, 2022

  • CVE-2022-1529
    40Plan

    An attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading t

    HighCVSS 8.8No exploitEPSS 17%

    mozilla · firefoxDec 22, 2022

  • CVE-2022-1802
    43Plan

    If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution

    HighCVSS 8.8Proof of conceptEPSS 26%

    mozilla · firefoxDec 22, 2022

  • CVE-2022-26485
    69This week

    Removing an XSLT parameter during processing could have lead to an exploitable use-after-free.

    HighCVSS 8.8KEVWeaponizedEPSS 14%

    mozilla · firefoxDec 22, 2022

  • CVE-2022-26486
    69This week

    An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape.

    CriticalCVSS 9.6KEVWeaponizedEPSS 2%

    mozilla · firefoxDec 22, 2022

  • CVE-2022-2200
    42Plan

    If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading t

    HighCVSS 8.8No exploitEPSS 23%

    mozilla · firefoxDec 22, 2022

  • CVE-2022-23513
    34Monitor

    Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpoint

    MediumCVSS 5.3Proof of conceptEPSS 42%

    pi-hole · adminlteDec 22, 2022

  • CVE-2022-40897
    24Monitor

    Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted packag

    MediumCVSS 5.9No exploitEPSS 2%

    python · setuptoolsDec 22, 2022

  • CVE-2022-47938
    44Plan

    An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2.

    MediumCVSS 6.5No exploitEPSS 60%

    linux · linux kernelDec 23, 2022

  • CVE-2022-47939
    54Plan

    An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2.

    CriticalCVSS 9.8No exploitEPSS 49%

    linux · linux kernelDec 23, 2022

  • CVE-2022-45711
    45Plan

    IP-COM M50 V15.11.0.33(10768) was discovered to contain a command injection vulnerability via the hostname parameter in the formSetNetCheckT

    CriticalCVSS 9.8No exploitEPSS 20%

    ip-com · m50 firmwareDec 23, 2022

  • CVE-2022-43551
    35Monitor

    A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP.

    HighCVSS 7.5No exploitEPSS 16%

    haxx · curlDec 23, 2022

  • CVE-2022-23854
    45Plan

    AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user

    HighCVSS 7.5Proof of conceptEPSS 49%

    aveva · intouch access anywhereDec 23, 2022

  • CVE-2022-47945
    48Plan

    ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_o

    CriticalCVSS 9.8Proof of conceptEPSS 30%

    thinkphp · thinkphpDec 23, 2022

  • CVE-2022-47949
    46Plan

    The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execu

    CriticalCVSS 9.8No exploitEPSS 23%

    nintendo · animal crossing\Dec 24, 2022

  • CVE-2021-4277
    21Monitor

    fredsmith utils Filename screenshot_sync predictable state

    MediumCVSS 5.3No exploitEPSS 0%

    utils project · utilsDec 25, 2022

  • CVE-2022-37706
    40Plan

    enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library fun

    HighCVSS 7.8WeaponizedEPSS 5%

    enlightenment · enlightenmentDec 25, 2022

  • CVE-2022-40005
    46Plan

    Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6

    HighCVSS 8.8No exploitEPSS 35%

    intelbras · wifiber 120ac inmesh firmwareDec 25, 2022

  • CVE-2021-45466
    56Plan

    In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to a

    CriticalCVSS 9.8No exploitEPSS 55%

    control-webpanel · webpanelDec 26, 2022

  • CVE-2021-45467
    60This week

    In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.ph

    CriticalCVSS 9.8Proof of conceptEPSS 70%

    control-webpanel · webpanelDec 26, 2022

  • CVE-2022-4120
    44Plan

    Stop Spammers Security < 2022.6 - Unauthenticated PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 18%

    trumani · stop spammersDec 26, 2022

  • CVE-2022-4732
    39Monitor

    Unrestricted Upload of File with Dangerous Type in microweber/microweber

    HighCVSS 7.2No exploitEPSS 38%

    microweber · microweberDec 27, 2022

  • CVE-2022-48194
    45Plan

    TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS

    HighCVSS 8.8Proof of conceptEPSS 33%

    tp-link · tl-wr902ac firmwareDec 30, 2022

  • CVE-2022-4855
    46Plan

    SourceCodester Lead Management System login.php sql injection

    CriticalCVSS 9.8No exploitEPSS 24%

    lead management system project · lead management systemDec 30, 2022

  • CVE-2022-43396
    52Plan

    Apache Kylin: Command injection by Useless configuration

    HighCVSS 8.8No exploitEPSS 55%

    apache · kylinDec 30, 2022

  • CVE-2022-47126
    39Monitor

    Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn parameter at /goform/WifiBasicSet.

    CriticalCVSS 9.8No exploitEPSS 0%

    tenda · a15 firmwareDec 30, 2022

  • CVE-2023-0028
    38Monitor

    Cross-site Scripting (XSS) - Stored in linagora/twake

    MediumCVSS 5.4No exploitEPSS 56%

    linagora · twakeDec 31, 2022