CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- bpcbt smartvista cardgenAn issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows...7.5 High
- bpcbt smartvista front-endSmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the...8.8 High
- ibm websphere application server, websphere application server liberty +1 moreIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server...5.4 Medium
- aenrich a\+hrdaEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive...7.5 High
- aenrich a\+hrdaEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control....7.5 High
- aenrich a\+hrdaEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion...8.1 High
- bpcbt smartvista cardgenA Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to...6.5 Medium
- haystacksoftware arq backupArq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption....4.9 Medium
- wpchill gallery photoblocks, gallery photoblocks (wordpress plugin) +1 moreWordPress Gallery PhotoBlocks plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities4.1 Medium
- webhelpagency word search puzzles, wha word search puzzles game (wordpress plugin) +1 moreWordPress Word Search Puzzles game plugin <= 2.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- baxter spectrum wireless battery module (wbm), spectrum iq 35700bax3 firmware, sigma spectrum 35700bax2 firmware +2 more +4 moreFormat String vulnerability5.0 Medium
- baxter spectrum wireless battery module (wbm), spectrum iq 35700bax3 firmware, sigma spectrum 35700bax2 firmware +2 more +4 moreFormat String vulnerability3.1 Low
- baxter spectrum wireless battery module (wbm), spectrum iq 35700bax3 firmware, sigma spectrum 35700bax2 firmware +2 more +4 moreUnencrypted internal storage of security credentials4.2 Medium
- samsung contacts provider, samsung mobile com.android.providers.contacts +1 moreImproper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to...6.6 Medium
- samsung emailImproper access control and intent redirection in Samsung Email prior to 6.1.70.20 allows...4.0 Medium
- google android, samsung mobile devices +1 moreA use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker...4.4 Medium
- samsung passImproper access control vulnerability in Samsung pass prior to version 4.0.03.1 allow physical...3.9 Low
- baxter spectrum wireless battery module (wbm), spectrum iq 35700bax3 firmware, sigma spectrum 35700bax2 firmware +2 more +4 moreUnauthenticated network reconfiguration via TCP/UDP5.5 Medium
- samsung editor liteImproper access control vulnerability in Editor Lite prior to version 4.0.40.14 allows attackers...5.9 Medium
- samsung group sharingImproper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15...4.0 Medium
- samsung group sharingImproper access control in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14...4.0 Medium
- samsung photo editor, google android, samsung mobile devices +2 moreImproper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows...1.9 Low
- google android, samsung mobile devices +1 morePath traversal vulnerability in CallBGProvider prior to SMR Sep-2022 Release 1 allows attacker to...4.0 Medium
- google android, samsung mobile devices +1 moreCustom permission misuse vulnerability in SystemUI prior to SMR Sep-2022 Release 1 allows...5.9 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in Telecom application prior to SMR Sep-2022 Release 1...4.0 Medium
- google android, samsung mobile devices +1 moreIntent redirection in Photo Editor prior to SMR Sep-2022 Release 1 allows attacker to get...3.3 Low
- google android, samsung mobile devices +1 moreImproper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local...1.9 Low
- samsung pay, pay kr +1 morePending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63...5.0 Medium
- google android, samsung mobile devices +1 moreImproper Authorization vulnerability in setDualDARPolicyCmd prior to SMR Sep-2022 Release 1...5.1 Medium
- samsung galaxy watch plugin, samsung mobile com.samsung.android.waterplugin +1 moreImproper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior...5.9 Medium
- samsung pay, pay kr +1 morePending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63...5.0 Medium
- samsung pay, pay kr +1 morePending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to...5.0 Medium
- samsung galaxy watch plugin, samsung mobile com.samsung.android.waterplugin +1 moreImproper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to...6.6 Medium
- samsung mobile waterplugin, samsung galaxy watch plugin +1 moreImproper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to...5.9 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in...4.4 Medium
- google android, samsung mobile devices +1 moreOut of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker...4.0 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText...4.4 Medium
- samsung passImproper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical...1.8 Low
- samsung smarttagpluginImproper input validation vulnerability in SmartTagPlugin prior to version 1.2.21-6 allows...5.7 Medium
- google android, samsung mobile devices +1 moreUse after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to...4.9 Medium
- google android, samsung mobile devices +1 moreUse after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022...4.9 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText...4.4 Medium
- samsung smart switch pcDLL hijacking vulnerability in Smart Switch PC prior to version 4.3.22083_3 allows attacker to...6.2 Medium
- Show moreLoading…