CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- samsung kiesImproper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074...5.5 Medium
- samsung smart switch pcImproper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3...5.5 Medium
- openatom openharmonyIPC in communication subsystem has a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.6.2 Medium
- samsung find my mobileExposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local...3.3 Low
- samsung membersExposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions...2.8 Low
- openharmonymultimedia subsystem has a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.8.8 High
- openharmonyTokensync in security subsystem has a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerabil…6.2 Medium
- openharmonywindowmanager in window subsystem has a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.6.2 Medium
- openatom openharmonyIncorrect configuration of the cJSON library lead a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.7.4 High
- algolplus advanced order export for woocommerce, advanced order export for woocommerce (wordpress plugin) +1 moreWordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability4.8 Medium
- total-soft event calendar, totalsoft event calendar – calendar (wordpress plugin) +1 moreWordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerability6.5 Medium
- better delete revision project delete revision, galerio & urda better delete revision (wordpress plugin) +1 moreWordPress Better Delete Revision plugin <= 1.6.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability4.8 Medium
- captcha code project code, vinoj cardoza captcha code (wordpress plugin) +1 moreWordPress Captcha Code plugin <= 2.7 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- wp-shop wp shop, wp-shop.ru wp shop (wordpress plugin) +1 moreWordPress WP Shop plugin <= 3.9.6 - Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities6.5 Medium
- getresponse, getresponse for wordpress (wordpress plugin) +1 moreWordPress GetResponse plugin <= 5.5.20 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- better font awesome project font awesome, mickey kay better font awesome (wordpress plugin) +1 moreWordPress Better Font Awesome plugin <= 2.0.1 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- add2fav project add2fav, christian salazar add2fav (wordpress plugin) +1 moreWordPress add2fav plugin <= 1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- add user role project user role, nikhil vaghela add user role (wordpress plugin) +1 moreWordPress Add User Role plugin <= 0.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- linux kernelA buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller...5.5 Medium
- contact form by mega forms project form by mega forms, ali khallad contact form by mega forms (wordpress plugin) +1 moreWordPress Contact Form By Mega Forms plugin <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- gvectors wpforo forum, gvectors team wpforo forum (wordpress plugin) +1 moreWordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerability8.8 High
- aioseo all in one seo, all in one seo team in one seo (wordpress plugin) +1 moreWordPress All in One SEO plugin <= 4.2.3.1 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities5.4 Medium
- wpvar wp shamsi, wpvar.com wp shamsi (wordpress plugin) +1 moreWordPress WP Shamsi plugin <= 4.1.1 - Authenticated Plugin Setting change vulnerability4.3 Medium
- rankmath seo, rank math seo (wordpress plugin) +1 moreWordPress Rank Math SEO plugin <= 1.0.95 - Server-Side Request Forgery (SSRF) vulnerability6.8 Medium
- culture object project object, liam gladdy / thirty8 digital culture object (wordpress plugin) +1 moreWordPress Culture Object plugin <= 4.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- mypopups pop-up, pop-ups pop-up (wordpress plugin) +1 moreWordPress Pop-up plugin <= 1.1.5 - Privilege Escalation vulnerability5.4 Medium
- apasionados export post info, export post info (wordpress plugin) +1 moreWordPress Export Post Info plugin <= 1.1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- wp-postratings project wp-postratings, lester 'gamerz' chan wp-postratings (wordpress plugin) +1 moreWP-PostRatings plugin <= 1.89 - Rating increase/decrease via race condition4.3 Medium
- wp-forecast project wp-forecast, hans matzen wp-forecast (wordpress plugin) +1 moreWordPress wp-forecast plugin <= 7.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- linux kernelThere is an UAF vulnerability in vmwgfx driver6.3 Medium
- linux kernelThere is an UAF vulnerability in vmwgfx driver6.3 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreThere is a NULL pointer vulnerability in vmwgfx driver6.3 Medium
- mattermost, mattermost server +1 moreServer-side Denial of Service while processing a specifically crafted JPEG file3.1 Low
- access code feeder project code feeder, alexey trofimov access code feeder (wordpress plugin) +1 moreWordPress Access Code Feeder plugin <= 1.0.3 - Cross-Site Request Forgery (CSRF) vulnerability5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreThere is an out-of-bounds write vulnerability in vmwgfx driver6.3 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn network service, there is a missing permission check. This could lead to local escalation of...7.8 High
- shirne cms project cmsAn issue was discovered in Shirne CMS 1.2.0. There is a Path Traversal vulnerability which could...6.5 Medium
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list.7.2 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list.7.2 High
- Show moreLoading…