CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +127 more +129 moreMemory corruption occurs while processing command received from HLOS due to improper length check...8.4 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS...7.8 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS...7.8 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS...7.8 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS...7.8 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo...7.8 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo...7.8 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo...7.8 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo...7.8 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo...7.8 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo...7.8 High
- irfanviewIrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo...7.8 High
- syncoveryAn issue in the component post_applogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9...9.8 Critical
- syncoverySuper Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to...5.4 Medium
- bolt cmsBolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user...8.8 High
- ni configuration managerAn improper input validation in NI System Configuration Manager before 22.5 may allow a...7.8 High
- pdssoftware pds vista 7The ‘document’ parameter of PDS Vista 7’s /application/documents/display.aspx page is vulnerable...6.5 Medium
- globalnorthstar northstar club managementThere are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar...10.0 Critical
hunspellOSS-FuzzHeap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<chNo scorebzip2Debianbzip2 - bugfix updateNo score- jettison, debian linux +1 moreStack Buffer Overflow in Jettison6.5 Medium
- jettison, debian linux +1 moreStack Buffer Overflow in Jettison6.5 Medium
- huawei emui, harmonyos, magic ui +2 moreDouble free vulnerability in the storage module. Successful exploitation of this vulnerability...9.8 Critical
- syncoverySuper Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to...8.8 High
- unknown migration, backup, staging – wpvivid, wpvivid migration\, backup\, staging +1 moreWPvivid Backup < 0.9.76 - Admin+ Arbitrary File Read4.9 Medium
- huawei emui, harmonyos +1 moreThe HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of...9.8 Critical
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreAuthentication headers exposed on by Nextcloud Server6.4 Medium
- hcl software travelerHCL Traveler is susceptible to a Reflected Cross-Site Scripting vulnerability in the web admin (LotusTraveler.nsf)7.5 High
- nextcloud files access control, kiteworks security-advisories +1 moreFile list exposure in Nextcloud Files Access Control2.6 Low
- pandatix go-cvssOut-of-bounds Read in go-cvss7.5 High
- scylladb scyllaUninitialized memory read in LZ4 decompression leads to authentication bypass in Scylla8.1 High
- fiberhome an5506-02-b firmwareA stored cross-site scripting (XSS) vulnerability in the auth_settings component of FiberHome...5.4 Medium
- tendacn ac15 firmware, ac18 firmware +1 moreTenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered...9.8 Critical
- tendacn ac15 firmware, ac18 firmware +1 moreTenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered...9.8 Critical
- stealjs stealsteal vulnerable to Regular Expression Denial of Service via input variable7.5 High
- totolink a720r firmwareTOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability...7.2 High
- totolink a720r firmwareTOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability...7.2 High
- tenhot tws-100 firmwareThere is a remote code execution (RCE) vulnerability in Tenhot TWS-100 V4.0-201809201424 router...9.8 Critical
- stealjs stealsteal vulnerable to Prototype Pollution via optionName variable9.8 Critical
- stealjs stealsteal vulnerable to Regular Expression Denial of Service via source and sourceWithComments7.5 High
- f5 njsNginx NJS v0.7.7 was discovered to contain a segmentation violation via njs_utf8_next at src...5.5 Medium
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- nikon nis-elements viewerThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- Show moreLoading…