CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- discourseDiscourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an...7.2 High
- wolfsslwolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the...5.9 Medium
- apache airflowOverly permissive umask for daemons4.7 Medium
- apache airflowSession Fixation9.8 Critical
- apache ofbizRegular Expression Denial of Service (ReDoS) vulnerability in Apache OFBiz7.5 High
- apache ofbizJava Deserialization via RMI Connection from the Solr plugin of Apache OFBiz9.8 Critical
- apache ofbizServer-Side Template Injection affecting the ecommerce plugin of Apache OFBiz7.5 High
- apache ofbizUnauth Path Traversal with file corruption affecting the Birt plugin of Apache OFBiz9.8 Critical
- apache ofbizUnauth Stored XSS vulnerability in the Birt plugin of Apache OFBiz5.4 Medium
- mediawikiAn issue was discovered in the MediaWiki through 1.38.2. The community configuration pages for...4.9 Medium
- garage management system project management systemGarage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS)...5.4 Medium
- garage management system project management systemGarage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...8.8 High
- oretnom23 clinic\'s patient management systemClinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- miniblog.core project miniblog.coreMiniblog.Core v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the...4.8 Medium
- blogengine blogengine.netBlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the...4.8 Medium
- mybatis mapperMapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids...9.8 Critical
- keking kkfileviewkkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the...6.5 Medium
- oretnom23 online food ordering systemOnline Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- libdwarf project libdwarf, fedoraproject fedora +1 morelibdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.8.8 High
- avaya ip officeAvaya IP Office Privilege Escalation Vulnerability7.8 High
ghostscriptOSS-FuzzHeap-buffer-overflow in ttfOutliner__BuildGlyphOutlineAuxNo scorelibrawOSS-FuzzUse-of-uninitialized-value in init_main_qtableNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in Ins_NPUSHWNo scorelcmsOSS-FuzzNegative-size-param in PackChunkyBytesNo score- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreAn issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A...5.5 Medium
- linux kernel, netapp hci baseboard management controller +1 moreAn issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged...7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreAn issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of...4.7 Medium
- bluez, canonical ubuntu linux, debian linux +2 moreBlueZ before 5.59 allows physically proximate attackers to cause a denial of service because...8.8 High
- bluez, canonical ubuntu linux, debian linux +2 moreBlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because...8.8 High
- grafana grafana-image-rendererGrafana Image Renderer leaking files8.3 High
- debian linux, owasp modsecurity core rule set +1 moreModsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass...9.8 Critical
- elrond go, elrondnetwork elrond-go +1 moreelrond-go MultiESDTNFTTransfer call on a SC address with missing function name7.5 High
- linux kernelAn issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after...5.5 Medium
- containers podman, redhat enterprise linux server, enterprise linux workstation +2 moreThe version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190...5.3 Medium
- containers podman, redhat enterprise linux server, enterprise linux workstation +2 moreThe version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190...7.5 High
- openstack keystone, [unknown] openstack-keystone, redhat openstack platform +2 more +4 moreA flaw was found in OpenStack. The application credential tokens can be used even after they have...6.6 Medium
- redhat openshiftA credentials leak was found in the OpenShift Container Platform. The private key for the...6.5 Medium
- samsung mtowerSamsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer...7.5 High
- samsung mtowerSamsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer...7.5 High
- linux kernelA flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver...6.5 Medium
- sos project sos, ovirt log collector +1 moresosreport Exposure of Sensitive Information vulnerability5.5 Medium
- keycloak, redhat single sign-on +1 moreKeycloak vulnerable to Stored Cross site Scripting (XSS) when loading default roles3.8 Low
- redhat advanced cluster management for kubernetesA vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for...6.5 Medium
- redhat advanced cluster securityA flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were...8.8 High
- redhat openshift container platformIn OpenShift Container Platform, a user with permissions to create or modify Routes can craft a...6.3 Medium
- canaan avalon asic miner firmwareAn access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated...7.5 High
- innosilicon t3t\+ firmwareInnoSilicon T3T+ t2t+_soc_20190911_151433.swu was discovered to contain a remote code execution ...8.8 High
- innosilicon a10 firmwareInnoSilicon A10 a10_20200924_120556 was discovered to contain a remote code execution (RCE)...8.8 High
- jinglemining jasminer x4 server firmwareThe Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port...9.8 Critical
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection...7.1 High
- Show moreLoading…