CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- sonicjs SonicJS through 0.6.0 allows file overwrite. It has the following mutations that are used for... 9.1 Critical
- orchest orchest vulnerable to cross-site request forgery that allows control of a user instance 8.1 High
- dell hybrid client, hybrid client (dhc) +1 more Dell Hybrid Client below 1.8 version contains a Zip Slip Vulnerability in UI. A guest privilege... 6.5 Medium
- dell hybrid client, hybrid client (dhc) +1 more Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service... 5.0 Medium
- quizandsurveymaster quiz and survey master, expresstech quiz and survey master (wordpress plugin) +1 more WordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerability 3.8 Low
- cisco catalyst 9800-40 firmware, catalyst 9800-80 firmware, catalyst 9800-cl firmware +2 more +4 more Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability 7.4 High
- cisco sd-wan, catalyst sd-wan manager, sd-wan vmanage +2 more +4 more Cisco SD-WAN Software Arbitrary File Corruption Vulnerability 6.7 Medium
- cisco ios, ios xe +1 more Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability 8.6 High
- mojoportal mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows... 8.8 High
- cisco ios xe, ios xe software +1 more Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability 8.6 High
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability 7.9 High
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software Web UI Command Injection Vulnerability 5.5 Medium
- cisco ios xe sd-wan, sd-wan, sd-wan solution +3 more +5 more Cisco SD-WAN Arbitrary File Deletion Vulnerability 5.5 Medium
- cisco ios xe software, ios xe +1 more Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability 8.6 High
- cisco ios xe, ios xe software +1 more Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability 8.6 High
- cisco sd-wan vmanage, sd-wan +1 more Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability 5.3 Medium
- cisco sd-wan, sd-wan solution, sd-wan vbond orchestrator +2 more +4 more Cisco SD-WAN Software Privilege Escalation Vulnerabilities 7.8 High
- cisco ios xe, ios xe software +1 more Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability 6.5 Medium
- cisco sd-wan, catalyst sd-wan manager, catalyst sd-wan +5 more +7 more Cisco SD-WAN Software Privilege Escalation Vulnerability 7.8 High
- cisco wireless lan controller (wlc), wireless lan controller software +1 more Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability 7.4 High
- cisco aironet 1542d firmware, aironet 1542i firmware, aironet 1562d firmware +24 more +26 more Cisco Access Points VLAN Bypass from Native VLAN Vulnerability 4.7 Medium
- cisco duo Cisco Duo for macOS Authentication Bypass Vulnerability 6.1 Medium
- lief-project lief LIEF vulnerable to denial of service through segmentation fault 6.5 Medium
- phpgurukul dairy farm shop management system Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via bwdate-report-ds.php file. 9.8 Critical
- actian psql, zen +1 more If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15... 8.8 High
- phpgurukul bus pass management system Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS)... 6.1 Medium
- phpgurukul bus pass management system Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the... 9.8 Critical
- realvnc vnc server, vnc viewer +1 more RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege... 7.8 High
- phpgurukul dairy farm shop management system Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via sales-report-ds.php file. 9.8 Critical
- htmly Directory Traversal vulnerability in htmly before 2.8.1 allows remote attackers to perform... 8.1 High
- adobe experience manager AEM Reflected XSS Arbitrary code execution 5.4 Medium
- booking ultra pro (wordpress plugin), bookingultrapro booking ultra pro appointments booking calendar +1 more WordPress Booking Ultra Pro plugin <= 1.1.4 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability 6.1 Medium
- booking ultra pro (wordpress plugin), bookingultrapro booking ultra pro appointments booking calendar +1 more WordPress Booking Ultra Pro plugin <= 1.1.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities 5.4 Medium
- solarwinds orion platform, platform +1 more Stored and DOM XSS in QoE Applications: Orion Platform 6.1 Medium
- bosch bvms, vjd-7513, video management system +1 more +3 more Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and... 7.4 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle No groups filtering in H5P activity attempts report 4.3 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle Minor SQL injection risk in admin user browsing 9.8 Critical
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 more Moodle Stored Cross-site Scripting and page denial of service 7.1 High
- moodle Moodle remote code execution 9.8 Critical
- ivanti connect secure, pulsesecure pulse connect secure +1 more Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling,... 5.4 Medium
- innovaphone firmware AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified... 7.2 High
- spsoftmobile applock AppLock version 7.9.29 allows an attacker with physical access to the device to bypass biometric... 6.6 Medium
- joplinapp joplin Joplin Remote Code Execution 7.8 High
- gridea Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client... 7.8 High
- comment guestbook project guestbook, mibuthu comment guestbook (wordpress plugin) +1 more WordPress Comment Guestbook plugin <= 0.8.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 4.8 Medium
- spacexchimp social media follow buttons bar, space x-chimp social media follow buttons bar (wordpress plugin) +1 more WordPress Social Media Follow Buttons Bar plugin <= 4.73 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 4.8 Medium
- solarwinds orion platform Orion Platform SQL Injection Privilege Escalation Vulnerability 8.8 High
- ping identity pingcentral PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with... 5.4 Medium
- billing system project project system project Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id... 7.2 High
- billing system project project system project Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id... 7.2 High
- Show olderLoading…