CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- apple ios, ipados, ios and ipados +1 more +3 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7...2.4 Low
- apple ios, ipados, safari +2 more +4 moreA logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS...4.3 Medium
- apple ios, ipados, macos +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6...5.5 Medium
- apple macos, safari +1 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...9.8 Critical
- apple ios, ipados, macos +2 more +4 moreThis issue was addressed with improved checks. This issue is fixed in iOS 15.7 and iPadOS 15.7,...5.5 Medium
- apple ios, ipados, ios and ipados +1 more +3 moreThis issue was addressed with improved checks. This issue is fixed in iOS 16, iOS 15.7 and iPadOS...4.3 Medium
- jeesnsA stored cross-site scripting (XSS) vulnerability in the /weibo/list component of Jeesns v2.0.0...5.4 Medium
- personnummerpersonnummer/dart vulnerable to Improper Input Validation5.3 Medium
- valine.js valineValine code injection vulnerability9.6 Critical
- opensuse leap, leap micro, leap 15.3 +4 more +6 morepermissions: chkstat does not check for group-writable parent directories or target files in safeOpen()4.4 Medium
- msi centerMicro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability...7.8 High
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- ucms project ucmsUCMS v1.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Import...6.1 Medium
- forgerock ldap connectorLDAP Connector: When startTLS is used then LDAP connector ignores the wrong password9.3 Critical
- linux-pam, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreThe Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for...9.8 Critical
- wedding planner project plannerWedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking_id...9.8 Critical
- supremainc biostar 2A vulnerability in Suprema Bio Star 2 v2.8.16 allows attackers to escalate privileges to System...8.8 High
- kubernetes cri-oCRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure7.1 High
- bigfile bigfileagentBigFileAgent arbitrary file execution vulnerability7.8 High
- hanssak securegate, weblink +1 moreSecureGate authentication bypass vulnerability8.8 High
- neo information systems co., ltd home ap nis-hap11ac, neoinfosys nis-hap11ac firmware +1 moreNeo Information Sys. NIS-HAP11AC remote access and manipulation vulnerability8.8 High
- western digital wd discoveryWD Discovery's Use of Weak Hashing Algorithm for Code Signing5.3 Medium
- janobe interview management systemInterview Management System v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- trend micro mobile security for enterprise, trend micro, inc. micro mobile security for enterprise, trendmicro mobile security +2 moreA potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for...9.1 Critical
- trend micro apex oneA link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro...7.3 High
- trend micro apex oneA security link following local privilege escalation vulnerability in Trend Micro Apex One and...7.8 High
- trend micro apex oneA vulnerability in Trend Micro Apex One and Apex One as a Service could allow an attacker to...7.5 High
- trend micro apex oneAn origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could...5.5 Medium
- trend micro apex one, apex one and apex one as a service +1 moreImproper validation of some components used by the rollback mechanism in Trend Micro Apex One and...7.2 High
- trendmicro housecall, trend micro housecall (consumer) +1 moreA vulnerability on Trend Micro HouseCall version 1.62.1.1133 and below could allow a local...7.8 High
- trendmicro security, trend micro security (consumer), trend micro, inc. micro security (consumer) +2 moreTrend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information...5.5 Medium
- trendmicro security, trend micro security (consumer), trend micro, inc. micro security (consumer) +2 moreTrend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information...5.5 Medium
- trendmicro security, trend micro security (consumer), trend micro, inc. micro security (consumer) +2 moreTrend Micro Security 2022 (consumer) has a link following vulnerability where an attacker with...7.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap buffer overflow issue was found in ImageMagick. When an application processes a malformed...5.5 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can...5.9 Medium
- ibm spectrum protect plusVersions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private...5.9 Medium
- necta llc wifi mouse (mouse server), necta wifi mouse server +1 moreNecta WiFi Mouse (Mouse Server) client-side authentication bypass9.8 Critical
- openwrtOpenwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the...7.5 High
- jetbrains intellij ideaThe installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order...7.5 High
- easycorp zentaoZentao Demo15 is vulnerable to Directory Traversal. The impact is: obtain sensitive information ...7.5 High
- Show moreLoading…