CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreWindows Event Tracing Denial of Service Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +16 more +18 moreWindows Remote Access Connection Manager Information Disclosure Vulnerability5.5 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreRemote Procedure Call Runtime Remote Code Execution Vulnerability8.1 High
- microsoft defender for endpoint, defender for endpoint for mac +1 moreMicrosoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability7.8 High
- microsoft dynamics 365, dynamics crm (on-premises) 9.0, dynamics crm (on-premises) 9.1 +2 moreMicrosoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows GDI Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Graphics Component Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +19 more +21 moreWindows ALPC Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Denial of Service Vulnerability7.5 High
- microsoft windows 11 version 21h2, windows 11 +1 moreWindows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Distributed File System (DFS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows TCP/IP Remote Code Execution Vulnerability9.8 Critical
- microsoft dynamics 365, dynamics crm (on-premises) 9.0, dynamics crm (on-premises) 9.1 +2 moreMicrosoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows Kerberos Elevation of Privilege Vulnerability8.1 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows Kerberos Elevation of Privilege Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h1 +7 more +9 moreWindows Secure Channel Denial of Service Vulnerability8.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Credential Roaming Service Elevation of Privilege Vulnerability7.3 High
- microsoft .net framework, .net framework 3.5 and 4.6/4.6.2, .net framework 3.5 and 4.8.1 +1 more +3 more.NET Framework Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Photo Import API Elevation of Privilege Vulnerability7.0 High
- onedev project onedevAccess Control Bypass in Onedev9.0 Critical
- crafter software cms, craftercms crafter cms +1 moreImproper Control of Dynamically-Managed Code Resources in Crafter Studio6.4 Medium
- crafter software cms, craftercms crafter cms +1 moreImproper Control of Dynamically-Managed Code Resources in Crafter Studio6.4 Medium
- matrix irc bridge, matrix-org matrix-appservice-irc +1 moreParsing issue in matrix-org/node-irc leading to room takeovers8.8 High
- crestron airmediaA vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in...8.8 High
- matrix irc bridge, matrix-org matrix-appservice-irc +1 moreIRC mode parameter confusion in matrix-appservice-irc4.3 Medium
- typo3User Enumeration via Response Timing in TYPO35.3 Medium
- typo3Missing check for expiration time of password reset token in TYPO35.4 Medium
- typo3Stored Cross-Site Scripting via FileDumpController6.5 Medium
- typo3Denial of Service via Page Error Handling in TYPO3/cms5.9 Medium
- typo3Cross-Site Scripting in typo3/cms-core6.5 Medium
- siderolabs talos, talos linux +1 moreTalos worker join token can be used to get elevated access level to the Talos API7.2 High
- typo3 html-sanitizer, html sanitizer +1 moreBypass of Cross-Site Scripting Protection in typo3/html-sanitizer6.1 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreWeak Password Requirements in ikus060/rdiffweb7.1 High
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (cmc) +1 moreUnder certain conditions SAP BusinessObjects Business Intelligence Platform Central Management...5.3 Medium
- sap access control, sap se grc access control emergency access management +1 moreSAP GRC Access control Emergency Access Management allows an authenticated attacker to access a...7.5 High
- sap netweaver application server abap, sap se netweaver as abap (sap gui for html within the fiori launchpad) +1 moreAn attacker with no prior authentication could craft and send malicious script to SAP GUI for...6.1 Medium
- sap netweaver enterprise portal, sap se netweaver enterprise portal (kmc) +1 moreSAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user...6.1 Medium
- sap netweaver application server abap, sap se netweaver as abap +1 moreAn attacker with basic business user privileges could craft and upload a malicious file to SAP...5.4 Medium
- Show moreLoading…