CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- arubanetworks aos-cxMultiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX....4.3 Medium
- arubanetworks aos-cxMultiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX....4.3 Medium
- arubanetworks aos-cxA vulnerability in the web-based management interface of AOS-CX could allow a remote...8.8 High
- arubanetworks aos-cxAuthenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via...7.2 High
- arubanetworks aos-cxMultiple vulnerabilities exist in the AOS-CX command line interface that could lead to...7.8 High
- arubanetworks aos-cxMultiple vulnerabilities exist in the AOS-CX command line interface that could lead to...7.8 High
- arubanetworks aos-cxAOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially...8.8 High
- arubanetworks aos-cxAOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially...8.8 High
- hp aruba virtual intranet accessA vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating...5.9 Medium
- wp libre form project libre form, libreform wp libre form 2 (wordpress plugin) +1 moreWordPress WP Libre Form 2 plugin <= 2.0.8 - Unauthenticated Sensitive Information Disclosure vulnerability7.3 High
- f-secure atlant, linux security, withsecure f-secure linux security 64 f-secure atlant +2 moreDenial-of-Service (DoS) Vulnerability4.3 Medium
- eset endpoint encryption, full disk encryption, eset, spol. s r.o. eset endpoint encryption +1 more +3 moreStack Overflow in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows6.5 Medium
- mythemeshop launcher, launcher: coming soon & maintenance mode (wordpress plugin) +1 moreWordPress Launcher: Coming Soon & Maintenance Mode plugin <= 1.0.11 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- okta active directory agentOkta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update...3.9 Low
- totolink a3002r firmwareTOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the...7.5 High
- totolink a3002r firmwareIn TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is...9.8 Critical
- totolink a3002r firmwareTOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via ...7.5 High
- tenda g3 firmwareIn Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the getsinglepppuser function has a buffer...9.8 Critical
- totolink a3002r firmwareTOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions...9.8 Critical
- totolink a860r firmwareIn TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered,...9.8 Critical
- totolink a860r firmwareIn TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer...9.8 Critical
- totolink a860r firmwareIn TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow...7.5 High
- totolink a860r firmwareTOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi.9.8 Critical
- totolink a860r firmwareIn TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly...9.8 Critical
- fortinet fortisoarAn improper neutralization of special elements used in a template engine vulnerability [CWE-1336]...6.3 Medium
- fortinet fortiosAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS...4.6 Medium
- fortinet fortiadcAn improper privilege management vulnerability [CWE-269] in FortiADC versions 6.2.1 and below, 6...6.3 Medium
- fortinet fortimailAn improper neutralization of input during web page generation vulnerability [CWE-79] in the...5.4 Medium
- fortinet fortisoarAn improper privilege management vulnerability [CWE-269] in Fortinet FortiSOAR before 7.2.1...7.0 High
- fortinet fortisoarMultiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiSOAR before 7.2.1...6.3 Medium
- fortinet fortiosA missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the keytab...2.3 Low
- fortinet fortiap, fortiap-s, fortiap-u +2 more +4 moreAn improper neutralization of special elements [CWE-89] used in an OS command vulnerability [CWE...7.8 High
- fortinet fortiosA improper verification of source of a communication channel in Fortinet FortiOS with IPS engine...6.8 Medium
rubySUSESecurity update for rubyNo score- francoisjacquet francoisjacquet/rosariosis, rosariosis +1 moreImproper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis8.1 High
- chatwoot, chatwoot chatwoot/chatwoot +1 moreImproper Authorization in chatwoot/chatwoot7.6 High
- hitachi raid manager storage replication adapterOS Command Injection Vulnerability in RAID Manager Storage Replication Adapter7.2 High
- hitachi raid manager storage replication adapterInformation Exposure Vulnerability in RAID Manager Storage Replication Adapter9.0 Critical
- zyxel nas326 firmwareA format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could...9.8 Critical
pcapplusplusOSS-FuzzHeap-buffer-overflow in pcpp::HttpRequestFirstLine::parseVersionNo scorec-blosc2OSS-FuzzHeap-use-after-free in ndlz4_decompressNo score- gpacGPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing...7.8 High
- rstudio connectRStudio Connect is affected by an Open Redirect issue. The vulnerability could allow an attacker...6.1 Medium
- patriksimek vm2vm2 vulnerable to Sandbox Escape before v3.9.1110.0 Critical
- rizinRizin Out-of-bounds Write vulnerability in Lua binary plugin7.8 High
- rizinRizin Double Free in bobj.c when using qnx binary plugin7.8 High
- rizinRizin Out-of-bounds Write vulnerability in dyld cache binary plugin7.8 High
- rizinRizin Out-of-bounds Write vulnerability in Mach-O binary plugin7.8 High
- rizinRizin Out-of-bounds Write vulnerability in pyc/marshal.c7.8 High
- squiz matrixSquiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to...5.3 Medium
- Show moreLoading…