CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- frrouting, debian linux +1 moreAn out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation...9.1 Critical
frropenSUSESecurity update for frrNo score- msi micro-star international feature navigatorAn issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows attackers to...5.5 Medium
- msi micro-star international feature navigatorAn issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows attackers to...7.1 High
- msi micro-star international feature navigatorAn issue in the Feature Navigator of Micro-Star International MSI Feature Nagivator v1.0.1808...7.1 High
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in ConnectionFactory.java in sazanrjb InventoryManagementSystem 1.0...7.5 High
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0...7.5 High
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows...7.5 High
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows...7.5 High
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0...7.5 High
- hotel management system project management systemMultiple persistent cross-site scripting (XSS) vulnerabilities in index.php in tramyardg Hotel...5.4 Medium
- ark-web a-formCross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for...6.1 Medium
hunspellOSS-FuzzHeap-buffer-overflow in SfxEntry::addNo score- lighttpd, debian linux +1 moreIn lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid...7.5 High
- pebbletemplates pebble templatesPebble Templates protection mechanism bypass can lead to arbitrary code execution9.8 Critical
- oretnom23 simple online book store systemIn Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description...5.4 Medium
- library management system project management systemIn Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to...9.8 Critical
- sysaid help deskSysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.6.1 Medium
- sysaid help deskSysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.6.1 Medium
- sysaid help deskSysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.6.1 Medium
- sysaid help deskSysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.6.1 Medium
- getgophish gophishOpen Redirect5.4 Medium
- diffplug goomphArbitrary File Write via Archive Extraction (Zip Slip)5.3 Medium
hunspellOSS-FuzzSegv on unknown address in HashMgr::add_wordNo scorehunspellOSS-FuzzUse-of-uninitialized-value in SfxEntry::test_conditionNo scorewasm3OSS-FuzzHeap-use-after-free in AcquireCodePageWithCapacityNo scoreh3OSS-FuzzGlobal-buffer-overflow in _getBaseCellNeighborNo score- apache calciteApache Calcite: potential XEE attacks9.8 Critical
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moremm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double...5.5 Medium
- debian linux, linux kernel +1 moreUse-after-free in io_uring in Linux Kernel7.8 High
fluent-bitOSS-FuzzHeap-double-free in flb_sds_destroyNo scorelcmsOSS-FuzzUNKNOWN WRITE in from8to16No scorehunspellOSS-FuzzStack-buffer-overflow in PfxEntry::test_conditionNo scoreapache-commons-configurationOSS-FuzzSecurity exception in java.base/java.util.Collections$UnmodifiableCollection.forEachNo scorehunspellOSS-FuzzHeap-buffer-overflow in AffixMgr::redundant_conditionNo score- pdftk-java project pdftk-javaPDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf...7.5 High
- libconfuse project libconfuse, fedoraproject fedora +1 morecfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.8.8 High
- harborHarbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logs7.4 High
- casbin casdoorCasdoor arbitrary file write vulnerability9.1 Critical
- gravitl netmakerNetmaker vulnerable to Insufficient Granularity of Access Control8.8 High
- hyperledger indy-nodeHyperledger Indy DOS vulnerability7.5 High
- inkdrop markdown niceMarkdown-Nice v1.8.22 vulnerable to Cross-site Scripting5.4 Medium
- aivhub active intelligence visualizationAn issue was discovered in Active Intelligent Visualization 5. The Vdc header is used in a SQL...9.8 Critical
- man2html project man2htmlIn man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next...5.5 Medium
- man2html project man2htmlIn man2html 1.6g, a specific string being read in from a file will overwrite the size parameter...5.5 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreOS Command Injection in jgraph/drawio7.0 High
- moby, fedoraproject fedora +1 moreMoby vulnerability relating to supplementary group permissions5.3 Medium
- openkmOpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.5.4 Medium
- wso2 enterprise integratorAn issue was discovered in WSO2 Enterprise Integrator 6.4.0. A Reflected Cross-Site Scripting ...6.1 Medium
- wso2 enterprise integratorAn issue was discovered in WSO2 Enterprise Integrator 6.4.0. A Reflected Cross-Site Scripting ...6.1 Medium
- Show moreLoading…