CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- nokia 1350 optical management systemAn issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists...6.5 Medium
- nokia 1350 optical management systemAn issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/*...6.1 Medium
- nokia 1350 optical management systemAn issue was discovered in NOKIA 1350OMS R14.2. Multiple Relative Path Traversal issues exist in...6.5 Medium
- nokia 1350 optical management systemAn issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /cgi-bin/R14...6.1 Medium
- adobe bridgeAdobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability5.5 Medium
- adobe bridgeAdobe Bridge DCM File Parsing Use-After-Free Information Disclosure Vulnerability5.5 Medium
- adobe bridgeAdobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge SGI File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge SVG File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe bridgeAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- processmakerProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile...8.8 High
- d8s-python project d8s-pythonThe d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- d8s-xml project d8s-xmlThe d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- d8s-netstrings project d8s-netstringsThe d8s-netstrings for python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- d8s-grammars project d8s-grammarsThe d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- d8s-math project d8s-mathThe d8s-math for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- d8s-json project d8s-jsonThe d8s-json for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- d8s-archives project d8s-archivesThe d8s-archives for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component,...9.8 Critical
- d8s-strings project d8s-stringsThe d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- bpcbt smartvistaSmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm...8.8 High
- d8s-utility project d8s-utilityThe d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- d8s-mpeg project d8s mpegThe d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- d8s-asns project d8s-asnsThe d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- fabasoft cloud enterprise clientThe folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege...7.8 High
- d8s-html project d8s-htmlThe d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus pdfs project pdfsThe d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- d8s-pdfs project d8s-pdfsThe d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- d8s-ip-addresses project d8s-ip-addressesThe d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus ip addresses project ip addressesThe d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus dicts project dictsThe d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus dates project datesThe d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus domains project domainsThe d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus domains project domainsThe d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus uuids project uuidsThe d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus urls project urlsThe d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- democritus urls project urlsThe d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus urls project urlsThe d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor...9.8 Critical
- tenda ac21 firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function:...7.5 High
- tenda ac21 firmwareTenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand.7.5 High
- tenda ac21 firmware]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime.7.5 High
- tenda ac21 firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function:...7.5 High
- tenda ac21 firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName.7.5 High
- tenda ac21 firmwareTenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function:...7.5 High
- Show moreLoading…