CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email...6.5 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain...6.2 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which...4.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which...4.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which...4.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which...4.3 Medium
- davedoesdev python-jwtPython-jwt subject to Authentication Bypass by Spoofing9.1 Critical
- dell cloudlinkDell CloudLink 7.1.3 and all earlier versions contain an Authentication Bypass Using an Alternate...9.3 Critical
- dell cloudlinkDell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A...9.4 Critical
- dell cyber recovery, powerprotect cyber recovery +1 moreDell PowerProtect Cyber Recovery versions before 19.11.0.2 contain an authentication bypass...9.8 Critical
- linux kernelA vulnerability was found in the Linux kernel, where accessing a deallocated instance in...5.5 Medium
- libraw, debian linux +1 moreIn LibRaw, an out-of-bounds read vulnerability exists within the "LibRaw::adobe_copy_pixel()"...5.5 Medium
- librawIn LibRaw, there is a memory corruption vulnerability within the "crxFreeSubbandData()" function ...5.5 Medium
- librawIn LibRaw, there is an out-of-bounds read vulnerability within the "LibRaw::parseSonySRF()"...5.5 Medium
- libraw, debian linux +1 moreIn LibRaw, there is an out-of-bounds write vulnerability within the "new_node()" function (libraw...5.5 Medium
- libraw, debian linux +1 moreIn LibRaw, an out-of-bounds read vulnerability exists within the get_huffman_diff() function ...5.5 Medium
- libraw, debian linux +1 moreIn LibRaw, an out-of-bounds read vulnerability exists within the "simple_decode_row()" function ...5.5 Medium
- dedecmsDedeCMS V5.7.97 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at ...6.1 Medium
- softlinkint oliver v5 libraryAn arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via...7.5 High
- callrail phone call tracking, callrail, inc. callrail phone call tracking (wordpress plugin) +1 moreWordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)6.1 Medium
- mp3-jplayer project mp3-jplayer, simon ward mp3-jplayer (wordpress plugin) +1 moreWordPress MP3 jPlayer plugin <= 2.7.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities5.4 Medium
- easy org chart project org chart, pluginlyspeaking easy org chart (wordpress plugin) +1 moreWordPress Easy Org Chart plugin <= 3.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- apache shenyuApache ShenYu Admin Improper Privilege Management8.8 High
- weave.works gitopsWeave GitOps Enterprise before 0.9.0-rc.5 has a cross-site scripting (XSS) bug allowing a...5.4 Medium
- contiki-ngOut-of-bounds write when decompressing 6LoWPAN payload in Contiki-NG6.8 Medium
- contiki-ngOut-of-bounds read when decompressing UDP header5.9 Medium
- contiki-ngOut-of-bounds read in the uIP buffer module5.9 Medium
- francoisjacquet francoisjacquet/rosariosis, rosariosis +1 moreCross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis8.0 High
- arm bifrost gpu kernel driver, midgard gpu kernel driver, valhall gpu kernel driver +2 moreAn issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make...6.5 Medium
- simple task scheduling system project task scheduling systemSimple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- simple task scheduling system project task scheduling systemSimple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- simple task scheduling system project task scheduling systemSimple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- xxyopen novel-plusNovel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config...9.8 Critical
- xxyopen novel-plusNovel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the...7.5 High
- hashicorp boundaryHashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the...9.9 Critical
libresslOSS-FuzzStack-buffer-overflow in CBS_stowNo score- google chromeInappropriate implementation in Extensions in Google Chrome prior to 105.0.5195.52 allowed a...6.5 Medium
- google chromeType Confusion in MathML in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to...8.8 High
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8021 +1 moreIn wlan driver, there is a possible missing bounds check, This could lead to local denial of...5.5 Medium
- matrix-org matrix-js-sdk, matrix javascript sdk +1 morePrototype pollution in matrix-js-sdk8.2 High
- samba, fedoraproject fedora +1 moreSamba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which...7.5 High
- google chrome, fedoraproject fedora +1 moreUse after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed...8.8 High
- debian linux, linux kernel +1 moreFound Linux Kernel flaw in the i740 driver. The Userspace program could pass any values to the...5.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in iframe Sandbox in Google Chrome prior to 105.0.5195.52 allowed a...6.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195...6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who...8.8 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a...6.5 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52...4.3 Medium
- google chrome, fedoraproject fedora, google linux and chrome os +2 moreHeap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195...8.8 High
- Show moreLoading…