CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- google android, mediatek, inc. mt6769, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt6983, mt8185, mt8789, mt8791, mt8797 +1 moreIn vow, there is a possible information disclosure due to a symbolic link following. This could...4.4 Medium
- google android, mediatek, inc. mt6789, mt6855, mt6879, mt6895, mt6983 +1 moreIn gz, there is a possible memory corruption due to incorrect error handling. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6875, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983 +1 moreIn teei, there is a possible memory corruption due to an integer overflow. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6875, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983 +1 moreIn teei, there is a possible memory corruption due to a use after free. This could lead to local...6.7 Medium
- google android, mediatek, inc. mt6789, mt6855, mt6879, mt6895, mt6983, mt8168, mt8365 +1 moreIn ged, there is a possible use after free due to improper locking. This could lead to local...6.7 Medium
- f-secure internet gatekeeper, linux security, f-secure and withsecure all f-secure and withsecure endpoint protection products for windows and mac running 32 bit operating system. f-secure linux security 32 f-secure atlant f-secure internet gatekeeper withsecure cloud protection for salesforce withsecure collaboration protection +2 more +4 moreDenial-of-Service (DoS) Vulnerability4.3 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983 +1 moreIn apusys, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983 +1 moreIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, mediatek, inc. mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893 +1 moreIn apusys, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- leogermani wp users exporter, wp-users-exporter project wp-users-exporter +1 moreWP Users Exporter <= 1.4.2 - CSV Injection6.5 Medium
- connekthq ajax load more, dcooney ajax load more – infinite scroll, load more, & lazy load +1 moreWordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read4.9 Medium
- connekthq ajax load more, dcooney ajax load more – infinite scroll, load more, & lazy load +1 moreWordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal4.9 Medium
- cerber wp cerber security\, anti-spam \& malware scan, gioni wp cerber security, anti-spam & malware scan +1 moreWP Cerber Security <= 9.0 - User Enumeration Bypass5.3 Medium
- oxilab image hover effects ultimate, biplob018 image hover effects ultimate (image gallery, effects, lightbox, comparison or magnifier) +1 moreImage Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Media URL6.4 Medium
- gamerz wp-useronlineWP-UserOnline <= 2.88.0 - Authenticated (Admin+) Stored Cross-Site Scripting5.5 Medium
- oxilab image hover effects ultimate, biplob018 image hover effects ultimate (image gallery, effects, lightbox, comparison or magnifier) +1 moreImage Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Video Link6.4 Medium
- fastlinemedia beaver builder, justinbusa beaver builder – wordpress page builder +1 moreBeaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Image URL6.4 Medium
- beardev joomsport, joomsport – for sports: team & league, football, hockey & more +1 moreJoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby7.2 High
- fastlinemedia beaver builder, justinbusa beaver builder – wordpress page builder +1 moreBeaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Text Editor6.4 Medium
- beardev joomsport, joomsport – for sports: team & league, football, hockey & more +1 moreJoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby7.2 High
- fastlinemedia beaver builder, justinbusa beaver builder – wordpress page builder +1 moreBeaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via 'caption'6.4 Medium
- plugins360 all-in-one video galleryThe All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and...7.5 High
- gcornelisse ucontext for clickbankuContext for Clickbank <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- gcornelisse ucontext for amazonuContext for Amazon <= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- adambard link optimizer lite, link optimizer lite project optimizer lite +1 moreLink Optimizer Lite <= 1.4.5 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- berocket stockists manager for woocommerceStockists Manager for Woocommerce <= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting8.8 High
- fastlinemedia beaver builder, justinbusa beaver builder – wordpress page builder +1 moreBeaver Builder – WordPress Page Builder <= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Caption - On Hover6.4 Medium
- visualcomposer visual composer website builder, visual composer website builder, landing page builder, custom theme builder, maintenance mode & coming soon pages +1 moreVisual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title'6.4 Medium
- simple banner project banner, rpetersen29 simple banner – easily add multiple banners/bars/notifications/announcements to the top or bottom of your website +1 moreSimple Banner <= 2.11.0 - Authenticated Stored Cross-Site Scripting6.4 Medium
- gamerz wp-useronlineWP-UserOnline <= 2.87.6 - Authenticated (Admin+) Stored Cross-Site Scripting5.5 Medium
- oferwald transposh wordpress translation, transposh wordpress translation +1 moreTransposh WordPress Translation <= 1.0.9.6 - Unauthorized Settings Change5.3 Medium
- oferwald transposh wordpress translation, transposh wordpress translation +1 moreTransposh WordPress Translation <= 1.0.9.6 - Sensitive Information Disclosure5.3 Medium
- wpvivid migration\, backup\, staging, wpvividplugins wpvivid — backup, migration & staging +1 moreMigration, Backup, Staging – WPvivid <= 0.9.74 - Authenticated (Admin+) PHAR Deserialization7.2 High
- managewp broken link checkerBroken Link Checker <= 1.11.16 - Authenticated (Admin+) PHAR Deserialization7.2 High
- codename065 download managerDownload Manager <= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization8.8 High
- instawp string locatorString Locator <= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization8.8 High
- connekthq ajax load more, dcooney ajax load more – infinite scroll, load more, & lazy load +1 moreWordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization7.5 High
- ecwid ecommerce shopping cart, lightspeedhq ecwid ecommerce shopping cart +1 moreEcwid Ecommerce Shopping Cart <= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update8.8 High
- codename065 download managerDownload Manager <= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion8.1 High
- visualcomposer visual composer website builder, visual composer website builder, landing page builder, custom theme builder, maintenance mode & coming soon pages +1 moreVisual Composer Website Builder <= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block'6.4 Medium
- homescript ultimate sms notifications for woocommerceUltimate SMS Notifications for WooCommerce <= 1.4.1 - CSV Injection6.5 Medium
- arubanetworks aos-cxA vulnerability exists in certain AOS-CX switch models which could allow an attacker with access...6.8 Medium
- arubanetworks aos-cxA vulnerability in the web-based management interface of AOS-CX could allow a remote...5.3 Medium
- arubanetworks aos-cxMultiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX....4.3 Medium
- arubanetworks aos-cxMultiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX....4.3 Medium
- banner cycler project cycler, jkriddle banner cycler +1 moreBanner Cycler <= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting8.8 High
- coleds simple seoSimple SEO <= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- fastlinemedia beaver builder, the beaver builder team beaver builder – wordpress page builder (wordpress plugin) +1 moreWordPress Beaver Builder plugin <= 2.5.4.3 - Broken Access Control vulnerability5.4 Medium
- wpdevart poll, survey, questionnaire and voting system (wordpress plugin), poll\, survey\, questionnaire and voting system +1 moreWordPress Poll, Survey, Questionnaire and Voting system plugin <= 1.7.4 - Authenticated Cross-Site Scripting (XSS) vulnerability4.8 Medium
- wpbookingcalendar booking calendar, wpdevelop/oplugins booking calendar (wordpress plugin) +1 moreWordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity5.4 Medium
- Show moreLoading…