CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- kdiskmark project kdiskmark, fedoraproject fedora +1 moreKDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper:...7.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...5.5 Medium
- mozilla firefoxWhen a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should...8.1 High
- techvill paymoneyPayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE). The vulnerability exists...8.0 High
- razormist loan management systemLoan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows...9.8 Critical
- razormist loan management systemLoan Management System version 1.0 suffers from a persistent cross site scripting vulnerability.5.4 Medium
- techvill paymoneyPayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket. The...5.4 Medium
- garage management system project management systemGarage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several...5.4 Medium
- garage management system project management systemGarage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of...8.8 High
- hospital information system project information systemHospital Information System version 1.0 suffers from a remote SQL injection vulnerability that...9.8 Critical
- osuosl twisted vnc authentication proxyVNCAuthProxy authentication bypass vulnerability9.8 Critical
- primekey ejbcaAn issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to possible...9.8 Critical
- idera yellowfin business intelligenceCross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business...5.4 Medium
- yellowfinbi business intelligenceIncorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to...9.0 Critical
hunspellOSS-FuzzUNKNOWN READ in AffixMgr::suffix_checkNo scorecycloneddsOSS-FuzzSegv on unknown address in ddsi_config_initNo scorefluent-bitOSS-FuzzStack-buffer-overflow in flb_env_var_translateNo score- unisharp laravel filemanagerUniSharp Laravel Filemanager directory traversal vulnerability6.5 Medium
- libexpat project libexpat, debian linux, fedoraproject fedora +3 more +5 morelibexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c.8.1 High
- adtran sr506n firmware, sr510n firmware +1 moreSmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via...9.8 Critical
- rust-lang cargoExtracting malicious crates can fill the file system4.8 Medium
- rust-lang cargoExtracting malicious crates can corrupt arbitrary files4.6 Medium
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreA NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the...7.1 High
- google androidIn sysmmu_unmap of TBD, there is a possible out of bounds write due to a missing bounds check....7.8 High
- google androidIn smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper...6.7 Medium
- smarty, debian linux +1 moreSmarty Cross-site Scripting vulnerability in pages that use smarty_function_mailto5.4 Medium
- aerocms project aerocmsAeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component...8.8 High
- transtek mojodat fixed asset managementThe mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote...9.8 Critical
- transtek mojodat fixed asset managementThe mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote...5.3 Medium
- transtek mojodat fixed asset managementThe mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote...7.5 High
- transtek mojodat fixed asset managementThe mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote...9.8 Critical
- cuppacmsThe component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user...6.5 Medium
- cuppacmsCuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both...8.8 High
- pentasecurity wapplesPenta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges...7.8 High
- pentasecurity wapplesAn arbitrary file download vulnerability in the downloadAction() function of Penta Security...6.5 Medium
- pentasecurity wapplesWAPPLES through 6.0 has a hardcoded systemi account accessible via db/wp.no1 (as configured in...9.8 Critical
- pentasecurity wapplesPenta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access...8.8 High
- thingsboardCross site Scripting (XSS) in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being...5.4 Medium
- crestron airmediaA vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in...7.8 High
- crestron airmediaInsufficient access control vulnerability was discovered in the Crestron AirMedia Windows...8.8 High
- genymobile genymotion desktopGenymotion Desktop v3.2.1 was discovered to contain a DLL hijacking vulnerability which allows...7.8 High
- moodle, fedoraproject fedora +1 moreMoodle Cross-site Scripting vulnerability5.4 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a...8.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of...6.5 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a...8.4 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting....5.4 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an...6.5 Medium
- ibm control deskIBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by...3.7 Low
- ibm control deskIBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session...4.3 Medium
- nokia 1350 optical management systemIn NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP...6.1 Medium
- Show moreLoading…