CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- linbreux wikmdWikmd vulnerable to Local File Enumeration when accessing /list7.5 High
- parse-community parse-serverParse Server vulnerable to brute force guessing of user sensitive data via search patterns8.6 High
- fluxcd flux2, helm-controller, helm +2 moreFlux2 Helm Controller denial of service7.7 High
- codeprojects online driving school, online driving school project project driving school project +1 morecodeprojects Online Driving School login.php sql injection7.3 High
- codeprojects online driving school, online driving school project project driving school project +1 morecodeprojects Online Driving School registration.php unrestricted upload6.3 Medium
- rubygems, rubygems rubygems.org +1 moreRubyGems allows creation of users with arbitrary unverified emails8.3 High
- tenda ac18 firmwareTenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via...9.8 Critical
- tenda ac18 firmwareTenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via...9.8 Critical
- tenda ac18 firmwareTenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via...9.8 Critical
- tenda ac18 firmwareTenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via...9.8 Critical
- tenda ac18 firmwareTenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via...9.8 Critical
- tenda ac18 firmwareTenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via...9.8 Critical
- python-poetry poetryPoetry Argument Injection vulnerability can lead to local Code Execution7.3 High
- python-poetry poetryPoetry's Untrusted Search Path can lead to Local Code Execution on Windows7.3 High
- netgear r6200 firmware, r6300 firmware +1 moreNETGEAR R6200_V2 firmware versions through R6200v2-V1.0.3.12_10.1.11 and R6300_V2 firmware...8.8 High
- sophos firewallMultiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super...7.2 High
- honeywell trend iq411 firmware, trend iq412 firmware, trend iq422 firmware +2 more +4 moreThe Trend Controls IC protocol through 2022-05-06 allows Cleartext Transmission of Sensitive...6.5 Medium
drupal/permissions_by_termPackagistThis module enables you to set content permissions based on taxonomy terms. The module doesn't sufficiently restrict access to translated and unpublished nodes. This vulnerability is mitigated by the…No scoredrupal/permissions_by_termPackagistThis module enables you to restrict content via taxonomy terms and related permissions. The module doesn't sufficiently restrict cached content in certain circumstances. This vulnerability is mitigate…No score- dlink dir-1960 firmwareD-Link DIR-1960 firmware DIR-1960_A1_1.11 was discovered to contain a buffer overflow via srtcat...7.5 High
drupal/nextPackagistThe Next.js module provides an inline preview for content. Authenticated requests are made to Drupal to fetch JSON:API content and render them in an iframe from the decoupled Next.js site. The current…No score- tenda g3 firmwareIn Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused...9.8 Critical
- xhyve project xhyvexhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component...6.5 Medium
- xhyve project xhyvexhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component...9.8 Critical
- xhyve project xhyvexhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component...6.5 Medium
- phicomm fir151b firmware, fir300b firmware, fir302e firmware +1 more +3 morePhicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to...7.2 High
- eigen\&wijzer ouderapp project ouderappWeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted...7.5 High
- ftcmsftcms 2.1 poster.PHP has a XSS vulnerability. The attacker inserts malicious JavaScript code into...6.1 Medium
- ftcmsIn ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which...8.8 High
- php-fusion phpfusion, phpfusion phpfusion/phpfusion +1 moreUnverified Password Change in phpfusion/phpfusion9.6 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups8.1 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference7.1 High
- blink1 blink1control2Blink1Control2 uses weak password encryption7.5 High
- activitywatchActivityWatch vulnerable to DNS rebinding attack8.8 High
- outbyte pc repairOutbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is...7.8 High
- securonix snyprAn injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an...8.7 High
- ddmal mei2volpianoMEI2Volpiano is vulnerable to XML External Entity (XXE), leading to a Denial of Service (DoS)7.5 High
- rust-osdev linked-list-allocatorlinked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend`8.4 High
- linux kernelA flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a...7.8 High
- linux kernel, netapp h300s firmware, h410c firmware +4 more +6 moreA flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit...7.8 High
- opensuse factory, suse opensuse factory +1 moreslurm: %post for slurm-testsuite operates as root in user owned directory6.5 Medium
- suse rancherRancher: Downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB)9.1 Critical
- suse rancherRancher: Failure to properly sanitize credentials in cluster template answers9.9 Critical
- suse rancherRancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object9.9 Critical
clamavSUSESecurity update for clamavNo scoreghostscriptOSS-FuzzUNKNOWN WRITE in Ins_ISECTNo scoreperfettoOSS-FuzzHeap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptorNo scorearrow-javaOSS-FuzzSecurity exception in java.base/java.nio.Bits.reserveMemoryNo score- sqlalchemy mako, debian linux +1 moremako is vulnerable to Regular Expression Denial of Service7.5 High
- accommodation-system project accommodation-system, php crafts accommodation system (wordpress plugin) +1 moreWordPress Accommodation System plugin <= 1.0.1 - Missing Access Control vulnerability7.6 High
- Show moreLoading…