CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list.7.2 High
- octopus serverIn affected versions of Octopus Deploy it is possible to upload a package to built-in feed with...6.5 Medium
- fortinet fortisoarAn improper neutralization of special elements used in an OS command ('OS Command Injection')...7.2 High
- appwrite, appwrite appwrite/appwrite +1 moreCross-site Scripting (XSS) - Stored in appwrite/appwrite9.0 Critical
- pdfkit project pdfkit, fedoraproject fedora +1 moreCommand Injection7.3 High
- cantoA Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate...9.8 Critical
- singularIn Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows...7.8 High
wiresharkOSS-FuzzHeap-buffer-overflow in get_utf_8_stringNo scoreghostscriptOSS-FuzzStack-buffer-underflow in gs_type2_interpretNo scorexstreamOSS-FuzzSecurity exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpecNo scorehunspellOSS-FuzzHeap-buffer-overflow in SuggestMgr::badcharkey_utfNo score- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreAn issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c...4.7 Medium
- leptonica, debian linux, tesseract-ocr tesseract ocr +2 moreAn issue in the Leptonica linked library (v1.79.0) in Tesseract v5.0.0 allows attackers to cause...6.5 Medium
- oauthlib, fedoraproject fedora +1 moreOAuthLib vulnerable DoS when attacker provides malicious IPV6 URI5.7 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA flaw was found in the Linux kernel. A denial of service flaw may occur if there is a...5.5 Medium
- debian linux, linux kernel, redhat enterprise linux +1 more +3 moreCVE-2022-2905 affecting package kernel for versions less than 5.15.70.1-15.5 Medium
- python, fedoraproject fedora, redhat enterprise linux +5 more +7 moreA flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,...7.5 High
- ubports ubuntu touchUBports Ubuntu Touch 16.04 allows the screen-unlock passcode to be used for a privileged shell...7.8 High
- openvswitchThe TSS (Tuple Space Search) algorithm in Open vSwitch 2.x through 2.17.2 and 3.0.0 allows remote...5.8 Medium
- aeb cruddlcruddl vulnerable to AQL injection through flexSearch9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection9.9 Critical
- samsung tizenrtAn issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security...7.5 High
- samsung tizenrtAn issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). createDB in security...7.5 High
- samsung tizenrtAn issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE)....7.5 High
- samsung tizenrtAn issue was discovered in Samsung TizenRT through 3.0_GBM (and 3.1_PRE). cyassl_connect_step2 in...7.5 High
- school activity updates with sms notification project activity updates with sms notificationSchool Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection...7.2 High
- school activity updates with sms notification project activity updates with sms notificationSchool Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection...7.2 High
- school activity updates with sms notification project activity updates with sms notificationSchool Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection...7.2 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Mentions UI vulnerable to Cross-site Scripting8.9 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Wiki UI Main Wiki Eval Injection vulnerability9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form8.9 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform vulnerable to Cross-site Scripting in the deleted attachments list8.9 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Cross-Site Request Forgery (CSRF) for actions on tags4.3 Medium
- apartment visitor management system project visitor management systemApartment Visitor Management System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Web Parent POM vulnerable to XSS in the attachment history8.9 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreImproper Restriction of Rendered UI Layers or Frames in ikus060/rdiffweb10.0 Critical
- dlink dir-819 firmwareA local file inclusion (LFI) vulnerability in D-Link DIR 819 v1.06 allows attackers to cause a...8.1 High
- tastyigniterTastyIgniter v3.5.0 was discovered to contain a cross-site scripting (XSS) vulnerability which...5.4 Medium
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard8.5 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Old Core vulnerable to Authentication Bypass Using the Login Action7.5 High
- janobe interview management systemInterview Management System v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform Web Templates vulnerable to Missing Authorization and Exposure of Private Personal Information to an Unauthorized Actor7.5 High
- ibm planning analytics workspaceIBM Planning Analytics Local 2.0 allows web pages to be stored locally which can be read by...4.0 Medium
- janobe interview management systemInterview Management System v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- cynet 360Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy...5.3 Medium
- cynet 360Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored...5.3 Medium
- cynet 360Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded...5.3 Medium
- hauk project haukbilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded...7.5 High
- ontrack project ontrackInoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain...9.8 Critical
- Show moreLoading…