CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- tenda ac21 firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo.7.5 High
- tenda ac21 firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi.7.5 High
- tenda ac21 firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd,...7.5 High
- tenda ac21 firmwareTenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function:...7.5 High
- gettext override translations project override translations, unknown gettext override translations +1 moreGettext override translations < 2.0.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- diywebmastery slickr flickrSlickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- learningtimes badgeos, badgeos badgos +1 moreBadgeOS < 3.7.1.3 - Subscriber+ SQLi8.8 High
- ketchup restaurant reservations project restaurant reservations, unknown ketchup restaurant reservations +1 moreKetchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi9.8 Critical
- ketchup restaurant reservations project restaurant reservations, unknown ketchup restaurant reservations +1 moreKetchup Restaurant Reservations <= 1.0.0 - Unauthenticated Stored XSS6.1 Medium
- scroll to top project to top, unknown scroll to top +1 moreScroll To Top < 1.4.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- cagewebdev float to top buttonFloat to Top Button <= 2.3.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- codepeople form builder cpForm Builder CP < 1.2.32 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown wordpress ping optimizer, wordpress ping optimizer project ping optimizer +1 moreWordPress Ping Optimizer < 2.35.1.3.0 - Arbitrary Settings Update via CSRF4.3 Medium
- freehtmldesigns site offline, unknown site offline or coming soon or maintenance mode +1 moreSite Offline < 1.5.3 - Access Bypass4.3 Medium
- democritus urls project urlsThe d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- bpcbt smartvistaSmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the...8.8 High
- tauriTauri Filesystem Scope can be Partially Bypassed2.6 Low
- opswat metadefenderA stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13...5.4 Medium
- tinyproxy project tinyproxyTinyproxy commit 84f203f and earlier does not process HTTP request lines in the process_request()...7.5 High
- trend micro apex oneA vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service could allow an...9.8 Critical
- safe fme serverSafe Software FME Server v2022.0.1.1 and below does not employ server-side validation.7.1 High
- safe fme serverSafe Software FME Server v2022.0.1.1 and below contains a cross-site scripting (XSS)...9.6 Critical
- enlightenmentenlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it...7.8 High
- glpi-project glpiTeclib GLPI Remote Code Execution Vulnerability9.8 Critical
- linux kernelA flaw use after free in the Linux kernel video4linux driver was found in the way user triggers...7.8 High
- basixonline nex-forms, unknown nex-forms – ultimate form builder – contact forms and much more +1 moreNEX-Forms < 7.9.7 - Authenticated SQLi8.8 High
- cozmoslabs translatepress, unknown translate multilingual sites – translatepress +1 moreTranslatepress Multilinugal < 2.3.3 - Admin+ SQLi8.8 High
- dylanjkotze zephyr project managerZephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi9.8 Critical
- axiosys bento4An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in...5.5 Medium
- axiosys bento4An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in...5.5 Medium
- profanity project profanityprofanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can...7.5 High
- vuetifyjs vuetifyCross-site Scripting (XSS)4.6 Medium
- moderncampus omni cmsModern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '" OR 1 ...9.8 Critical
bluezOSS-FuzzHeap-buffer-overflow in element_endNo score- debian linux, linux kernel, fedoraproject fedora +1 more +3 moredrivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive...5.5 Medium
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vim7.8 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreCross-Site Request Forgery (CSRF) in ikus060/rdiffweb6.5 Medium
- netic group exportThe Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization...5.3 Medium
- librenms, librenms librenms/librenms +1 moreCross-site Scripting (XSS) - Stored in librenms/librenms5.6 Medium
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreImproper Authentication in snipe/snipe-it4.3 Medium
KernelLinuxALSA: bcd2000: Fix a UAF bug on the error path of probingNo scoreKernelLinuxKVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0No scoreKernelLinuxKVM: x86: Mark TSS busy during LTR emulation _after_ all fault checksNo scoreKernelLinuxdrm/nouveau: fix another off-by-one in nvbios_addrNo scoreKernelLinuxnetfilter: nf_tables: fix null deref due to zeroed list headNo scoreKernelLinuxusbnet: Fix linkwatch use-after-free on disconnectNo scoreKernelLinuxbtrfs: reject log replay if there is unsupported RO compat flagNo scoreKernelLinuxscsi: sg: Allow waiting for commands to complete on removed deviceNo scoreKernelLinuxmd-raid10: fix KASAN warningNo scoreKernelLinuxMIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACKNo score- Show moreLoading…