CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- ami aptio, aptio v, intel nuc m15 laptop kit lapbc510 firmware +1 more +3 moreStack overflow vulnerability in SMI handler on SmmSmbiosElog.8.8 High
- ami aptio, intel nuc m15 laptop kit lapbc510 firmware, nuc m15 laptop kit lapbc710 firmware +2 moreArbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase.7.2 High
- ami aptio, aptio v, intel nuc m15 laptop kit lapbc510 firmware +1 more +3 moreThe stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI phase.8.2 High
- stealjs stealsteal Inefficient Regular Expression Complexity vulnerability via string variable7.5 High
- wasm3 project wasm3WASM3 Improper Input Validation vulnerability7.5 High
- smokepingIn the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows...7.5 High
- debian logcheckIn the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to...9.8 Critical
- zutty project zuttyIn Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.9.8 Critical
- smokepingIn the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a...6.5 Medium
- jflyfox jfinal cmsFinal CMS 5.1.0 is vulnerable to SQL Injection.9.8 Critical
- pagekitPagekit vulnerable to Unrestricted Upload of File with Dangerous Type9.8 Critical
- testlinkTestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan...8.8 High
- cloudreveCloudreve - Stored XSS5.4 Medium
- intel ssd 600p firmware, ssd 660p firmware, ssd 665p firmware +27 more +29 moreProtection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged...7.9 High
- intel ssd 600p firmware, ssd 660p firmware, ssd 665p firmware +27 more +29 moreImproper authentication in firmware for some Intel(R) SSD DC Products may allow an...5.3 Medium
- intel ssd 600p firmware, ssd 660p firmware, ssd 665p firmware +27 more +29 moreProtection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged...4.1 Medium
- apache inlongDeserialization attack in Apache InLong prior to version 1.3.0 allows RCE via JDBC8.8 High
- microweber, microweber microweber/microweber +1 moreCode Injection in display of tag title on saving tags in microweber/microweber4.3 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...5.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...6.5 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary)....4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...4.3 Medium
- kayrasoftSQL Injection in Kayrasoft9.4 Critical
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm5.4 Medium
- microweber, microweber microweber/microweber +1 moreHTML code Injection in template search keyword in microweber/microweber4.3 Medium
- festo control block cpx-cec-c1 (no. 567347), control block cpx-cmxx (no. 555667), cpx-cec-c1 firmware +1 more +3 moreFesto: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Function7.5 High
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm6.3 Medium
- apache kafkaUnauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers7.5 High
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm6.3 Medium
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm7.1 High
- zyxel gs1900 series firmware, gs1900-10hp firmware, gs1900-16 firmware +8 more +10 moreAn insufficient entropy vulnerability caused by the improper use of randomness sources with low...5.9 Medium
wabtOSS-FuzzContainer-overflow in wabt::interp::BinaryReaderInterp::BeginFunctionBodyNo scorexstreamOSS-FuzzSecurity exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpecNo score- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreResponse body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte range7.5 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 moreResponse body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header7.3 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 morePartial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header7.3 High
- owasp modsecurity core rule set, debian linux, fedoraproject fedora +2 morePartial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header7.3 High
- safe fme serverSafe Software FME Server v2022.0.1.1 and below was discovered to contain a Path Traversal...9.1 Critical
- microsoft endpoint configuration managerMicrosoft Endpoint Configuration Manager Spoofing Vulnerability7.5 High
- grafana, fedoraproject fedora +1 moreAuthentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin6.6 Medium
- apple ios, ipados, macos +2 more +4 moreThe issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6,...7.8 High
- apple ios, ipados, safari +2 more +4 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari...8.8 High
- apple ios, ipados, macos +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6...7.8 High
- apple ios, ipados, macos +3 more +5 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ios, ipados, safari +4 more +6 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in...8.8 High
- apple ios, ipados, macos +2 more +4 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12...5.5 Medium
- Show moreLoading…