CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- school activity updates with sms notification project activity updates with sms notificationSchool Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity...7.2 High
- craftcms craft cmsCraft CMS Stored Cross-site Scripting in User Addresses Title5.4 Medium
- school activity updates with sms notification project activity updates with sms notificationSchool Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity...7.2 High
- school activity updates with sms notification project activity updates with sms notificationSchool Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity...7.2 High
- digitaldruid hoteldruidThe component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a...9.8 Critical
- tenda rx9 pro firmwareTenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setMacFilterCfg.9.8 Critical
- tenda rx9 pro firmwareTenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/setIPv6Status.9.8 Critical
- tenda rx9 pro firmwareTenda RX9_Pro V22.03.02.10 is vulnerable to Buffer Overflow via httpd/SetNetControlList9.8 Critical
- totolink t6 firmwareIn TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow...9.8 Critical
- totolink t6 firmwareIn TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.9.8 Critical
- totolink t6 firmwareTOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi9.8 Critical
- totolink t6 firmwareTOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi9.8 Critical
- yimihome ywoaywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.8.8 High
- espocrmEspoCRM version 7.1.8 is vulnerable to Unrestricted File Upload allowing attackers to upload...8.8 High
- espocrmCSV Injection in Create Contacts in EspoCRM 7.1.8 allows remote authenticated users to run system...8.0 High
- espocrmCross Site Scripting in Import feature in EspoCRM 7.1.8 allows remote users to run malicious...6.1 Medium
- espocrmEspoCRM version 7.1.8 is vulnerable to Missing Secure Flag allowing the browser to send plain...5.9 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Stored in jgraph/drawio4.3 Medium
- fasterxml woodstox, xstream +1 moreStack Buffer Overflow in Woodstox6.5 Medium
- x-stream xstreamStack Buffer Overflow in xstream6.5 Medium
- login no captcha recaptcha project no captcha recaptcha, unknown login no captcha recaptcha +1 moreLogin No Captcha reCAPTCHA < 1.7 - IP Check Bypass4.3 Medium
- unknown craw data, craw-data project craw-data +1 moreCraw Data <= 1.0.0 - Server Side Request Forgery4.3 Medium
- acnam wp server health statsWP Server Health Stats < 1.7.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- creativemotion titan anti-spam & security, cm-wp titan anti-spam \& security +1 moreTitan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing5.3 Medium
- mra13 affiliates managerAffiliates Manager < 2.9.14 - Admin+ Stored Cross-Site Scripting4.8 Medium
- mra13 affiliates managerAffiliates Manager < 2.9.14 - Affiliate CSV Injection8.0 High
- wp-staging wp staging, unknown wp staging – backup duplicator & migration +1 moreWP STAGING < 2.9.18 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown wp taxonomy import, wp taxonomy import project taxonomy import +1 moreWP Taxonomy Import <= 1.0.4 - Reflected Cross-Site Scripting6.1 Medium
- radiustheme classified listing, unknown classified listing pro - classified ads & business directory plugin +1 moreClassified Listing Pro < 2.0.20 - Reflected Cross-Site Scripting6.1 Medium
- radiustheme classified listing, classima, classima core +4 more +6 moreClassima < 2.1.11 - Reflected Cross-Site Scripting6.1 Medium
- autoptimizeAutoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting4.8 Medium
- unknown wbw currency switcher for woocommerce, wbw plugins currency switcher for woocommerce +1 moreWBW Currency Switcher for WooCommerce < 1.6.6 - Admin+ Stored XSS4.8 Medium
- unknown post smtp mailer/email log, wpexperts post smtp +1 morePost SMTP < 2.1.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- mobileeventsmanager mobile events managerMobile Events Manager < 1.4.8 - Admin+ CSV Injection8.8 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd888 5g firmware, sd 8 gen1 5g firmware +15 more +17 moreMemory corruption in WLAN due to buffer copy without checking size of input while parsing keys in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +90 more +92 moreMemory corruption in display due to time-of-check time-of-use race condition during map or unmap...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8096au firmware, aqt1000 firmware +150 more +152 moreInformation disclosure in WLAN due to improper validation of array index while parsing crafted...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +148 more +150 moreMemory corruption in video due to buffer overflow while parsing ps video clips in Snapdragon Auto...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +105 more +107 moreMemory corruption in video module due to buffer overflow while processing WAV file in Snapdragon...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +139 more +141 moreDenial of service in video due to buffer over read while parsing MP4 clip in Snapdragon Auto,...7.5 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +88 more +90 moreInformation disclosure in video due to buffer over-read while processing avi file in Snapdragon...6.8 Medium
- qualcomm, inc. snapdragon wired infrastructure and networking, qualcomm csr8811 firmware, ipq5010 firmware +58 more +60 moreCryptographic issues in BSP due to improper hash verification in Snapdragon Wired Infrastructure...9.0 Critical
- qualcomm, inc. snapdragon auto, snapdragon consumer iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +49 more +51 moreMemory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in...9.4 Critical
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 morememory corruption in Kernel due to race condition while getting mapping reference in Snapdragon...7.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 moreMemory corruption or temporary denial of service due to improper handling of concurrent...7.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 moreMemory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8017 firmware, apq8053 firmware +127 more +129 moreImproper authorization of a replayed LTE security mode command can lead to a denial of service in...7.5 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca8081 firmware +21 more +23 moreMemory corruption in audio while playing record due to improper list handling in two threads in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, qca6595au firmware +28 more +30 moreMemory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +152 more +154 moreMemory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon...8.4 High
- Show moreLoading…