CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
libsassOSS-FuzzSegv on unknown address in Sass::unifyComplexNo scorerailsDebianrails - regression updateNo score- github cmark-gfm, fedoraproject fedora +1 moreUncontrolled Resource Consumption in cmark-gfm7.5 High
- mplayerhq mencoder, mplayer, debian linux +2 moreCertain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of...5.5 Medium
- mplayerhq mencoder, mplayer, debian linux +2 moreCertain The MPlayer Project products are vulnerable to Divide By Zero via the function...5.5 Medium
- mplayerhq mencoder, mplayer, debian linux +2 moreCertain The MPlayer Project products are vulnerable to Buffer Overflow via the function...5.5 Medium
- mplayerhq mencoder, mplayer, debian linux +2 moreCertain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits()...5.5 Medium
- mplayerhq mplayer, debian linux +1 moreThe MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function...5.5 Medium
- mplayerhq mencoder, mplayer, debian linux +2 moreCertain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi...5.5 Medium
- mplayerhq mencoder, mplayer, debian linux +2 moreCertain The MPlayer Project products are vulnerable to Buffer Overflow via function...5.5 Medium
- mplayerhq mencoder, mplayer, debian linux +2 moreCertain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video ...5.5 Medium
- mplayerhq mencoder, mplayer, debian linux +2 moreCertain The MPlayer Project products are vulnerable to Out-of-bounds Read via function...5.5 Medium
- mplayerhq mencoder, debian linux +1 moreThe MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function...5.5 Medium
- google chromeUse after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker...7.5 High
- xpdfreader xpdfXPDF v4.04 was discovered to contain a stack overflow via the function Catalog::countPageTree()...5.5 Medium
- gpac, gpac gpac/gpac +1 moreUncontrolled Recursion in gpac/gpac5.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105...5.4 Medium
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreOut of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker...8.8 High
popplerUbuntupoppler regressionNo score- hoyoverse mhyprot2The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not...6.5 Medium
- totolink a7000ru firmwareTOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability...9.8 Critical
- apple webobjectsProject Wonder WebObjects vulnerable to Arbitrary HTTP Header Injection and Cross-site Scripting6.1 Medium
- onedev project onedevOnedev v7.4.14 contains a path traversal vulnerability which allows attackers to access...8.8 High
- nintendo game boy color, game boy color firmware +1 moreNintendo Game Boy Color Mobile Adapter GB Tetsuji memory corruption5.0 Medium
- gocron project gocronouqiang gocron Cross-site scripting vulnerability6.1 Medium
- axiosys bento4Buffer overflow vulnerability in function AP4_MemoryByteStream::WritePartial in mp42aac in Bento4...6.5 Medium
- axiosys bento4An memory leak issue was discovered in AP4_StdcFileByteStream::Create in mp42ts in Bento4 v1.6.0...6.5 Medium
- linux kernelA null pointer dereference issue was discovered in fs/io_uring.c in the Linux kernel before 5.15...5.5 Medium
- sigstore cosignVulnerabilities with blob verification in sigstore cosign5.5 Medium
- glpi-project glpiStored Cross Site Scripting (XSS) through global search in GLPI6.8 Medium
- glpi-project glpiSQL injection through plugin controller in GLPI5.5 Medium
- glpi-project glpiSQL injection in GLPI10.0 Critical
- glpi-project glpiBlind Server-Side Request Forgery (SSRF) in GLPI3.5 Low
- glpi-project glpiCross site scripting (XSS) via registration API in GLPI6.3 Medium
- glpi-project glpiLeak of sensitive information through login page error in GLPI5.3 Medium
- hitachi energy microscada pro sys600, microscada x sys600 +1 moreA vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This…5.3 Medium
- hitachi energy microscada x sys600A vulnerability exists during the start of the affected SYS600, where an input validation flaw causes a buffer-overflow while reading a specific configuration file. Subsequently SYS600 will fail to st…7.5 High
- hitachi energy microscada pro sys600, microscada x sys600 +1 moreA vulnerability exists in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server. The vulnerability may cause a denial-of-…7.5 High
- hitachi energy microscada x sys600A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-servi…7.5 High
- palo alto networks cortex xdr agentCortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File5.5 Medium
- ibm maximo asset management, maximo application suite +1 moreIBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive...5.3 Medium
- feehi cmsFeehi CMS host header injection vulnerability6.1 Medium
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 moreUser enumeration vulnerability in MB connect line and Helmholz products5.3 Medium
- ionicabizau ionicabizau/parse-url, parse-url project parse-url +1 moreServer-Side Request Forgery (SSRF) in ionicabizau/parse-url9.1 Critical
- dependencytrack frontend, zabbix, fedoraproject fedora +2 moreReflected XSS in the backurl parameter of Zabbix Frontend4.8 Medium
- Show moreLoading…