CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- blackboard learnBlackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering...6.5 Medium
exiv2OSS-FuzzHeap-buffer-overflow in Exiv2::MemIo::readNo scoreghostscriptOSS-FuzzHeap-use-after-free in xps_tifsSeekProcNo score- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vim7.8 High
- oretnom23 expense management systemExpense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- debian linux, libvncserver project libvncserver +1 morelibvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup().7.5 High
- hyperledger indy-nodeRemote code execution in Indy's NODE_UPGRADE transaction8.8 High
- davs2 project davs2PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function...5.5 Medium
- telosalliance omnia mpx node firmwareA local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node...9.8 Critical
k8s.io/apimachineryGoKubernetes apimachinery packages vulnerable to unbounded recursion in JSON or YAML parsing7.5 High- influxdata influxdbinfluxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing...9.8 Critical
- garage management system project management systemA stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0...5.4 Medium
- garage management system project management systemAn access control issue in the component print.php of Garage Management System v1.0 allows...5.3 Medium
- databasirServer-Side Request Forgery (SSRF) vulnerability in Databasir7.6 High
- diagrams drawio, jgraph jgraph/drawio +1 moreImproper Access Control in jgraph/drawio5.3 Medium
- publiccmsServer-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms...9.8 Critical
- dell alienware update, command update, update +1 more +3 moreDell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local...7.8 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0...5.5 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0...8.1 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0...8.1 High
- drakkan sftpgoRecovery codes abuse in SFTPGo8.3 High
- nodebbAccount takeover via SSO plugins in NodeBB8.8 High
- binary project binarySlice Memory Allocation with Excessive Size Value in binary8.8 High
- qualcomm, inc. snapdragon auto, qualcomm msm8996au firmware +1 moreMemory corruption in multimedia due to buffer overflow while processing count variable from...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +144 more +146 moreMemory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto,...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +152 more +154 moreMemory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +143 more +145 moreMemory corruption due to incorrect pointer arithmetic when attempting to change the endianness in...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +105 more +107 moreMemory corruption due to buffer overflow occurs while processing invalid MKV clip which has...7.3 High
- qualcomm, inc. snapdragon auto, qualcomm sa8540p firmware, sa9000p firmware +2 moreMemory corruption in multimedia due to improper length check while copying the data in Snapdragon...8.4 High
- qualcomm, inc. snapdragon auto, qualcomm apq8096au firmware, msm8996au firmware +17 more +19 moreMemory corruption in multimedia due to improper check on the messages received. in Snapdragon Auto8.4 High
- qualcomm, inc. snapdragon auto, qualcomm qca6574au firmware, qca6696 firmware +7 more +9 moreMemory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon...8.4 High
- qualcomm, inc. snapdragon auto, qualcomm apq8096au firmware, qam8295p firmware +15 more +17 moreDenial of service in multimedia due to uncontrolled resource consumption while parsing an...6.2 Medium
- qualcomm, inc. snapdragon auto, qualcomm apq8096au firmware, qam8295p firmware +15 more +17 moreMemory corruption in multimedia due to improper check on received export descriptors in...8.4 High
- qualcomm, inc. snapdragon auto, qualcomm sa8540p firmware, sa9000p firmware +2 moreMemory corruption in multimedia due to improper validation of array index in Snapdragon Auto8.4 High
- qualcomm, inc. snapdragon auto, qualcomm apq8096au firmware +1 moreMemory corruption in multimedia driver due to untrusted pointer dereference while reading data...8.4 High
- qualcomm, inc. snapdragon consumer iot, qualcomm qcs410 firmware, qcs610 firmware +6 more +8 moreMemory corruption in graphic driver due to use after free while calling multiple threads...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +143 more +145 moreMemory corruption in audio due to lack of check of invalid routing address into APR Routing table...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, qca6390 firmware +85 more +87 moreDevices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in...7.7 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +57 more +59 morePotential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +197 more +199 moreAn out-of-bounds read can occur while parsing a server certificate due to improper length check...8.2 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +31 more +33 moreOut of bounds writing is possible while verifying device IDs due to improper length check before...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm apq8017 firmware, apq8053 firmware +93 more +95 moreMemory corruption due to out of bound read while parsing a video file in Snapdragon Auto,...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8017 firmware, apq8037 firmware +166 more +168 moreA null pointer dereference may potentially occur during RSA key import in Snapdragon Auto,...6.2 Medium
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm qca6391 firmware, qcm6490 firmware +28 more +30 moreDue to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +108 more +110 moreOut of bound write in DSP service due to improper bound check for response buffer size in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +99 more +101 moreNon-secure region can try modifying RG permissions of IO space xPUs due to improper input...9.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, csrb31024 firmware +46 more +48 morePossible authentication bypass due to improper order of signature verification and hashing in the...7.3 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd 8 gen1 5g firmware, sm7450 firmware +13 more +15 morePossible address manipulation from APP-NS while APP-S is configuring an RG where it tries to...6.8 Medium
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd 8 gen1 5g firmware, sm7450 firmware +13 more +15 moreImproper checking of AP-S lock bit while verifying the secure resource group permissions can lead...6.8 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +127 more +129 morePossible authentication bypass due to improper order of signature verification and hashing in the...7.3 High
- Show moreLoading…