CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- archerydms archeryArchery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the...9.8 Critical
- safe fme serverSafe Software FME Server v2022.0.1.1 and below was discovered to contain a XML External Entity ...8.5 High
- shopxian cmsAn issue was discovered in Shopxian CMS 3.0.0. There is a CSRF vulnerability that can delete the...4.3 Medium
- microsoft .net, .net core, fedoraproject fedora +10 more +12 more.NET Core and Visual Studio Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- amandaIn Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An...3.3 Low
- mendix saml, siemens mendix saml (mendix 7 compatible), mendix saml (mendix 8 compatible) +2 more +4 moreA vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions <...9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 moreWindows Graphics Component Information Disclosure Vulnerability6.5 Medium
- microsoft sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016, sharepoint foundation 2013 service pack 1 +5 more +7 moreMicrosoft SharePoint Remote Code Execution Vulnerability8.8 High
- sap host agent, sap se host agent (saposcol) +1 moreUnder certain conditions, the application SAP BusinessObjects Business Intelligence Platform ...4.9 Medium
- sharkfest foundation wireshark, fedoraproject fedora +1 moreInfinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0...6.3 Medium
- online leave management system project leave management systemOnline Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- online leave management system project leave management systemOnline Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- online leave management system project leave management systemOnline Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- ucms project ucmsUCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.9.8 Critical
- appsmithAn issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed...4.3 Medium
- appsmithAppsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side...8.8 High
- linksys e5350 firmwareOn Linksys E5350 WiFi Router with firmware version 1.0.00.037 and lower, (and potentially other...7.5 High
- freshworks freshservice agent, freshservice probe +1 moreFreshService macOS Agent < 4.4.0 and FreshServce Linux Agent < 3.4.0 are vulnerable to TLS Man-in...8.1 High
- freshworks freshservice agentFreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux...8.1 High
- anydeskAn issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.3. An unnecessarily open...6.5 Medium
- anydeskAn issue was discovered in AnyDesk before 6.2.6 and 6.3.x before 6.3.5. An upload of an arbitrary...8.8 High
- cuppacmsCuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability via the File...9.8 Critical
- cuppacmsCuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at /table_manager...6.1 Medium
- slims senayan library management systemSLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side...9.8 Critical
- slims senayan library management systemSLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting ...6.1 Medium
- go standard library net/url, golang go +1 moreFailure to strip relative path components in net/url7.5 High
- matrix dendriteSignature checks not applied to some retrieved missing events7.3 High
- garage management system project management systemGarage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- garage management system project management systemGarage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- church management system project management systemChurch Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- shopwareAcess control list bypassed via crafted specific URLs6.3 Medium
- shopwareSensitive data in backend customer module5.4 Medium
- omron cx-programmerOmron CX-Programmer7.8 High
- hitachi energy microscada x sys600A vulnerability exists in the Workplace X WebUI in which an authenticated user is able to execute any MicroSCADA internal scripts irrespective of the authenticated user's role.8.5 High
- photospace gallery project gallery, dean oakley photospace gallery (wordpress plugin) +1 moreWordPress Photospace Gallery plugin <= 2.3.5 - Broken Access Control vulnerability5.4 Medium
- dell chengming 3900 firmware, cpg bios, inspiron 14 plus 7420 firmware +23 more +25 moreDell BIOS versions contain a Stack-based Buffer Overflow vulnerability. A local authenticated...7.1 High
- dell chengming 3900 firmware, cpg bios, inspiron 14 plus 7420 firmware +23 more +25 moreDell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated...3.0 Low
- dell chengming 3900 firmware, cpg bios, inspiron 14 plus 7420 firmware +23 more +25 moreDell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches...2.0 Low
- dell chengming 3900 firmware, cpg bios, inspiron 14 plus 7420 firmware +23 more +25 moreDell BIOS versions contain an Improper Neutralization of Null Byte vulnerability. A local...2.3 Low
- dell chengming 3900 firmware, cpg bios, inspiron 14 plus 7420 firmware +23 more +25 moreDell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability....2.3 Low
- dell chengming 3900 firmware, cpg bios, inspiron 14 plus 7420 firmware +23 more +25 moreDell BIOS versions contain an Information Exposure vulnerability. A local authenticated...2.3 Low
- dell chengming 3900 firmware, cpg bios, inspiron 14 plus 7420 firmware +23 more +25 moreDell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated...3.0 Low
- forcepoint cloud security gateway, data loss prevention (dlp), data loss prevention +5 more +7 moreImproper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine...7.5 High
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu +35 more +37 moreA CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that...9.8 Critical
- tp-link m7350 firmwareThe web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected...9.8 Critical
- gpac, gpac gpac/gpac +1 moreBuffer Over-read in gpac/gpac7.8 High
- graphql-java project graphql-javagraphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources7.5 High
- torguard vpnTorguard VPN 4.8, has a vulnerability that allows an attacker to dump sensitive information, such...7.5 High
clamavopenSUSESecurity update for clamavNo score- Show moreLoading…