CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.0 High
- ansys spaceclaimThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.0 High
- mplayerhq mplayerMplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c.5.5 Medium
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection.8.8 High
- mplayerhq mencoder, mplayer +1 moreCertain The MPlayer Project products are vulnerable to Buffer Overflow via function...5.5 Medium
- mplayerhq mencoder, mplayer +1 moreCertain The MPlayer Project products are vulnerable to Buffer Overflow via function...5.5 Medium
- milesight video management systems, video management systems firmware +1 moreVulnerability in Milesight Video Management Systems (VMS)7.5 High
- mplayerhq mencoder, mplayer +1 moreCertain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of...7.8 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component,...8.8 High
- qsmart next project nextQsmart Next v4.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability.6.1 Medium
- ecisolutions printanista managed print serviceThe login form /Login in ECi Printanista Hub (formerly FMAudit Printscout) through 2022-06-27...5.9 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore5.8 Medium
- ezviz cs-c6n-a0-1c2wfr, cs-c6n-a0-1c2wfr firmware +1 moreImproper Initialization vulnerability in local server authentication logic7.6 High
- ezviz cs-c3w-a0-3h4wfrl, cs-c6n-a0-1c2wfr, cs-c6n-b0-1g2wf +7 more +9 moreStack-Based Buffer Overflow Vulnerability in the EZVIZ Motion Detection component9.9 Critical
- crushftpAn issue was discovered in CrushFTP 9. The creation of a new user through the /WebInterface...4.8 Medium
- stealjs stealsteal vulnerable to Prototype Pollution via requestedVersion variable9.8 Critical
- stealjs stealsteal vulnerable to Prototype Pollution via key variable in babel.js9.8 Critical
- nokia fastmile 5g receiver firmwareAn issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281. Bluetooth on the...4.3 Medium
- airties air 4920 firmware, air 4921 firmware, air 4971 firmware +2 moreAn issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change...9.1 Critical
- ionicabizau ionicabizau/parse-url, parse-url project parse-url +1 moreMisinterpretation of Input in ionicabizau/parse-url9.4 Critical
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreCross-Site Request Forgery (CSRF) in ikus060/rdiffweb8.8 High
- osstech openam, openam consortium (openam consortium edition) +1 moreOpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect...6.1 Medium
tufPyPIPython-TUF vulnerable to incorrect threshold signature computation for new root metadataNo scoretypo3/cms-corePackagistTYPO3 HTML Sanitizer Bypasses Cross-Site Scripting Protection6.1 Medium- axiosys bento4An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in...6.5 Medium
- axiosys bento4An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function...6.5 Medium
pageflowRubyGemsPageflow vulnerable to insecure direct object reference in membership update endpointNo scorepageflowRubyGemsPageflow vulnerable to sensitive user data extraction via Ransack query injectionNo score- church management system project management systemChurch Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- church management system project management systemChurch Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- thinkphpThinkPHP deserialization vulnerability9.8 Critical
- event management system project management systemEvent Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via...7.2 High
- Show moreLoading…