CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- bpcbt smartvista front-endSmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm...9.8 Critical
- swftoolsSWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c.5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at ...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap buffer-overflow via getGifDelayTime at ...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer-overflow via getTransparentColor...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via __asan_memcpy at ...5.5 Medium
- j-onasjones mcwebserver, mcwebserver minecraft mod for fabric and quilt project minecraft mod for fabric and quilt, mcwebserver minecraft mod for forge project minecraft mod for forge +2 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') McWebserver Minecraft Mod7.5 High
- drakkan sftpgoXSS Vulnerabilities in WebClient6.1 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS...9.8 Critical
- apple macosThis issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.5...6.5 Medium
- apple ipados, macos, tvos +1 more +3 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6...7.8 High
- apple macos, safari +1 moreA logic issue was addressed with improved state management. This issue is fixed in Safari 15.6,...5.3 Medium
- apple macosThis issue was addressed with improved environment sanitization. This issue is fixed in macOS...8.8 High
- apple ipados, macos, tvos +3 more +5 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7...9.8 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA vulnerability in the ClearPass Policy Manager web-based management interface exists which...8.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an...8.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an...8.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an...8.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an...8.8 High
- hpe integrated lights-out 5 firmwareA local Denial of Service (DoS) and local arbitrary code execution vulnerability that could...7.8 High
- hpe integrated lights-out 5 firmwareA remote potential adjacent denial of service (DoS) and potential adjacent arbitrary code...8.8 High
- hpe integrated lights-out 5 firmwareAn isolated local disclosure of information and potential isolated local arbitrary code execution...7.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an...8.8 High
- hpe integrated lights-out 5 firmwareA potential local adjacent arbitrary code execution vulnerability that could potentially lead to...8.8 High
- zblogcn z-blogphpA security issue was discovered in Z-BlogPHP <= 1.7.2. A Server-Side Request Forgery (SSRF)...9.8 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS...7.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote...7.2 High
- baijiacms project baijiacmsA Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4...8.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an...7.5 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreVulnerabilities in the ClearPass Policy Manager web-based management interface allow remote...7.2 High
- fastly js-compute, js-compute-runtime +1 moreRandom number seed fixed during compilation7.5 High
- huawei ws7200-10 firmwareThere is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of...4.3 Medium
- huawei cv81-wdm fw firmwareA Huawei device has an input verification vulnerability. Successful exploitation of this...7.5 High
- huawei jad-al50 firmwareA permission bypass vulnerability in Huawei cross device task management could allow an attacker...5.5 Medium
- huawei ws7200-10 firmwareThere is a password verification vulnerability in WS7200-10 11.0.2.13. Attackers on the LAN may...6.5 Medium
- huawei 576up005 hota-cm-h-shark-bd firmware, 577hota-cm-h-shark-bd firmware, 581up-hota-cm-h-shark-bd firmware +5 more +7 moreThere is an out-of-bounds read and write vulnerability in some headset products. An...6.1 Medium
- swftoolsSWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function...9.8 Critical
- swftoolsSWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8...9.8 Critical
- tibco spotfire analytics platform, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +2 moreTIBCO Spotfire Server Blind SSRF vulnerability7.1 High
- netgear wpn824ext firmwareAn exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi...7.5 High
- netgear wpn824ext firmwareAn exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi...5.3 Medium
- jflyfox jfinal cmsJFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component,...8.8 High
- stealjs stealsteal vulnerable to Prototype Pollution via alias variable9.8 Critical
- ami aptio, aptio v, intel server board m10jnp2sb firmware +2 moreThe arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.8.2 High
- ami aptio, aptio v, intel nuc m15 laptop kit lapbc510 firmware +1 more +3 moreSMM memory corruption vulnerability in OverClockSmiHandler SMM driver8.2 High
- Show moreLoading…