CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- about rentals. inc. rentals (wordpress plugin), about-rentals project about-rentals +1 moreWordPress About Rentals plugin <= 1.5 - Missing Access Control vulnerability7.3 High
- about-me project about-me, alessio caiazza about me (wordpress plugin) +1 moreWordPress About Me plugin <= 1.0.12 - Broken Access Control vulnerability7.6 High
- cognex 3d-a1000 dimensioning system, 3d-a1000 dimensioning system firmware +1 moreCognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security9.1 Critical
- cognex 3d-a1000 dimensioning system, 3d-a1000 dimensioning system firmware +1 moreCognex 3D-A1000 Dimensioning System Improper Output Neutralization for Logs5.3 Medium
- cognex 3d-a1000 dimensioning system, 3d-a1000 dimensioning system firmware +1 moreCognex 3D-A1000 Dimensioning System Missing Authentication for Critical Function9.8 Critical
- tinyexr project tinyexrtinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component...7.8 High
- assimpOpen Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation...6.5 Medium
- growthbookGrowthBook account creation and file upload vulnerability in self-hosted configurations7.5 High
- kayako samouraiSamourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin. The attacker...4.3 Medium
- ericcornelissen shescapeShescape Inefficient Regular Expression Complexity vulnerability5.9 Medium
- silverwaregames, mesosoi silverwaregames-io-issue-tracker +1 moreSilverwareGames.io used == for hashing instead of ===5.9 Medium
- gluu oxauthGluu Oxauth before v4.4.1 vulnerable to Server-Side Request Forgery attacks via a crafted request_uri parameter9.8 Critical
- elrond go, elrondnetwork elrond-go +1 moreElrond go can execute on same context checks in VM6.5 Medium
- ysoft safeqAn issue was discovered in YSoft SAFEQ 6 before 6.0.72. Incorrect privileges were configured as...7.8 High
- dell alienware m15 r6 firmware, chengming 3980 firmware, chengming 3988 firmware +397 more +399 moreDell BIOS versions contain an Insecure Automated Optimization vulnerability. A local...7.9 High
- dell alienware m15 r6 firmware, chengming 3980 firmware, chengming 3988 firmware +397 more +399 moreDell BIOS versions contain a stack-based buffer overflow vulnerability. A local attacker could...7.5 High
- dell alienware m15 r6 firmware, chengming 3980 firmware, chengming 3988 firmware +397 more +399 moreDell BIOS contains a race condition vulnerability. A local attacker could exploit this...6.1 Medium
- dell alienware m15 r6 firmware, chengming 3980 firmware, chengming 3988 firmware +397 more +399 moreDell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated...6.1 Medium
- crime reporting system project reporting systemPersistent cross-site scripting (XSS) in Crime Reporting System 1.0 allows a remote attacker to...5.4 Medium
- discourse discourse-chatDiscourse-Chat Cross-Site Scripting issue for channel names and descriptions5.4 Medium
- ems project emsSQL injection vulnerability exists in the school information query interface (repschoolproj.php)...7.5 High
- rizinOut-of-bounds write when parsing DEX files in Rizin7.8 High
- circuitverseCircuitVerse potential RCE vulnerability via Oj.load8.8 High
clamavSUSESecurity update for clamavNo score- watchguard firewareWatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell...7.8 High
- watchguard firewareA stored cross-site scripting (XSS) vulnerability exists in the management web interface of...5.4 Medium
- reactphp httpReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent5.3 Medium
- watchguard firewareAn integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote...9.8 Critical
- nextcloud password policy, kiteworks security-advisories +1 moreNextcloud Password Policy's generated passwords are not fully validated by HIBPValidator2.7 Low
- feehi feehicmsFeehiCMS has an arbitrary file upload vulnerability9.8 Critical
- iobit malware fighterIObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated...6.7 Medium
- pcprotect endpointPCProtect Endpoint prior to v5.17.470 for Microsoft Windows lacks tamper protection, allowing...6.7 Medium
- watchguard firewareWatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve...7.5 High
- openremoteAn issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code...9.8 Critical
- freebsd** UNSUPPORTED WHEN ASSIGNED ** sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial...7.5 High
- golang go, fedoraproject fedora +1 moregolang.org/x/net/http2 Denial of Service vulnerability7.5 High
- google android, mediatek, inc. mt6879, mt6895, mt6983, mt8321, mt8385, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789 +1 moreIn aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead...6.7 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6895, mt6983, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn MtkEmail, there is a possible escalation of privilege due to fragment injection. This could...7.8 High
- google android, mediatek, inc. mt6735, mt6739, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8797 +1 moreIn preloader (usb), there is a possible out of bounds write due to a missing bounds check. This...6.6 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6753, mt6761, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8168, mt8183, mt8321, mt8365, mt8385, mt8666, mt8675, mt8765, mt8768, mt8786, mt8788, mt8797 +1 moreIn rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could...6.7 Medium
- google android, mediatek, inc. mt6779, mt6781, mt6785, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8512a, mt8518, mt8519 m1v1, mt8519 p1v1, mt8791, mt8797, mt8798, yoctoproject yocto +2 moreIn audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead...6.7 Medium
- google android, mediatek, inc. mt6779, mt6781, mt6785, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8512a, mt8518, mt8791, mt8797, mt8798, yoctoproject yocto +2 moreIn audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This...6.7 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8791, mt8797 +1 moreIn vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead...6.7 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8791, mt8797 +1 moreIn vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead...4.4 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8791, mt8797 +1 moreIn vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead...4.4 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8791, mt8797 +1 moreIn vow, there is a possible undefined behavior due to an API misuse. This could lead to local...6.7 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8791, mt8797 +1 moreIn vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead...6.7 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8791, mt8797 +1 moreIn vow, there is a possible out of bounds read due to an integer overflow. This could lead to...4.4 Medium
- google android, mediatek, inc. mt6853, mt6855, mt6873, mt6877, mt6883, mt6885, mt6893, mt6895, mt6983, mt8791, mt8797 +1 moreIn vow, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6769, mt6781, mt6785, mt6833, mt6855, mt6877, mt6879, mt6893, mt6983, mt8791, mt8797 +1 moreIn vow, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- Show moreLoading…