CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- ihatetobudget project ihatetobudgetBminusl IHateToBudget v1.5.7 employs a weak password policy which allows attackers to potentially...9.8 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-oldcore Improper Authorization check for inactive users8.1 High
- open-policy-agent opa, openpolicyagent open policy agent +1 moreOPA Compiler: Bypass of WithUnsafeBuiltins using `with` keyword to mock functions7.4 High
- jitsi** DISPUTED ** Jitsi-2.10.5550 was discovered to contain a vulnerability in its web UI which...6.1 Medium
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreCisco SD-WAN vManage Software Unauthenticated Access to Messaging Services Vulnerability7.5 High
- cisco webex teams, webex meetings desktop app +1 moreCisco Webex Meetings App Character Interface Manipulation Vulnerability4.3 Medium
- cisco small business rv series router firmware, rv110w firmware, rv130 firmware +2 more +4 moreCisco Small Business RV110W, RV130, RV130W, and RV215W Routers IPSec VPN Server Authentication Bypass Vulnerability4.0 Medium
- netgear r6200Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0...8.8 High
- qnap photo stationDeadBolt Ransomware10.0 Critical
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Generic in jgraph/drawio4.3 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Generic in jgraph/drawio5.3 Medium
- apache jamesSTARTTLS command injection in Apache JAMES7.5 High
- synck mailform pro cgiMailform Pro CGI 4.3.1 and earlier allow a remote unauthenticated attacker to obtain the user...5.9 Medium
- planex cs-qr10 firmware, cs-qr20 firmware, planex communications inc. smacam cs-qr10 and smacam night vision cs-qr20 +2 moreMissing protection mechanism for alternate hardware interface in SmaCam CS-QR10 all versions and...6.8 Medium
- allied telesis k.k. centrecom ar260s v2, allied-telesis centrecom ar260s firmware +1 moreUse of hard-coded credentials for the telnet server of CentreCOM AR260S V2 firmware versions...9.8 Critical
- allied telesis k.k. centrecom ar260s v2, allied-telesis centrecom ar260s firmware +1 moreOS command injection vulnerability in the telnet function of CentreCOM AR260S V2 firmware...8.8 High
- ricoh device software manager, ricoh company, ltd. installer of device software manager +1 moreUntrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20...7.8 High
- allied telesis k.k. centrecom ar260s v2, allied-telesis centrecom ar260s firmware +1 moreOS command injection vulnerability in GUI setting page of CentreCOM AR260S V2 firmware versions...8.8 High
- allied telesis k.k. centrecom ar260s v2, allied-telesis centrecom ar260s firmware +1 moreUndocumented hidden command that can be executed from the telnet function of CentreCOM AR260S V2...8.8 High
- alfasado powercms, alfasado inc. powercms xmlrpc api +1 morePowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending...9.8 Critical
- jib project jibRemote Code Execution (RCE)5.6 Medium
- eclipse miloDenial of Service (DoS)5.9 Medium
- plextracThe PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response...5.3 Medium
- plextracThe PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts...7.5 High
- plextracThe PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission...8.8 High
phpOSS-FuzzHeap-use-after-free in user_wrapper_opendirNo scoregeosOSS-FuzzHeap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::CoorNo scorebluezOSS-FuzzUNKNOWN READ in write_keyNo scorebluezOSS-FuzzHeap-double-free in fuzz_textfile.cNo score- vim, vim vim/vim +1 moreNULL Pointer Dereference in vim/vim6.1 Medium
- netgear r8000 firmwareBuffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to...9.8 Critical
- tenda g3 firmwareIn Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused...9.8 Critical
- dlink dap-1650 firmwareIn D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer...9.8 Critical
- phicomm fir151b firmware, fir300b firmware, fir302e firmware +1 more +3 morePhicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to...7.2 High
- fpt g-97rg3 firmware, g-97rg6m firmware +1 moreFPT G-97RG6M R4.2.98.035 and G-97RG3 R4.2.43.078 are vulnerable to Remote Command Execution in...8.8 High
- phicomm fir151b firmware, fir300b firmware, fir302e firmware +1 more +3 morePhicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were...7.2 High
- phicomm fir151b firmware, fir300b firmware, fir302e firmware +1 more +3 morePhicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to...7.2 High
- kubevelaVelaUX APIServer vulnerable to Authentication Bypass by Capture-replay8.2 High
- tenda g3 firmwareIn Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a...9.8 Critical
- gocdGoCD Windows installations outside default location inadequately restrict installation file permissions5.0 Medium
- appsup-dart joseJOSE vulnerable to resource exhaustion via specifically crafted JWE5.3 Medium
- mangadex-downloader project mangadex-downloadermangadex-downloader vulnerable to unauthorized file reading5.3 Medium
- xiuno xiunobbsCross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web...6.1 Medium
- nagios xiNagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the...4.8 Medium
- nagios xiNagios XI before v5.8.7 was discovered to contain multiple cross-site scripting (XSS)...6.1 Medium
- nagios xiNagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib_name...9.8 Critical
- nagios xiNagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR...6.1 Medium
- nagios xiNagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the...4.8 Medium
- nagios xiNagios XI before v5.8.7 was discovered to contain a cross-site scripting (XSS) vulnerability via...6.1 Medium
- linbreux wikmdWikmd Cross-site Scripting vulnerability6.1 Medium
- Show moreLoading…