CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- icecoderICEcoder vulnerable to Path Traversal7.5 High
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /multiarch/memmove...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /lib/x86_64-linux-gnu...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64...6.5 Medium
- otfcc project otfccOTFCC commit 617837b was discovered to contain a global buffer overflow via /release-x64...6.5 Medium
- pluginsglpi sccm, teclib-edition system center configuration manager +1 moreSCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium
- online pet shop web application project pet shop web applicationOnline Pet Shop We App v1.0 is vulnerable to SQL Injection via /pet_shop/classes/Master.php?f...7.2 High
- online pet shop web application project pet shop web applicationOnline Pet Shop We App v1.0 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f...7.2 High
- online pet shop web application project pet shop web applicationOnline Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /pet_shop/classes...7.2 High
- phpgurukul zoo management systemIn Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture...7.2 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout...8.2 High
- zzcmsZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at ...7.2 High
- zzcmsZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin...7.2 High
- zzcmsZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin...5.3 Medium
- zzcmsAn absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive...5.3 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreCross-Site Request Forgery (CSRF) in ikus060/rdiffweb6.8 Medium
- ikus-soft minarca, ikus060 ikus060/minarca +1 moreWeak Password Requirements in ikus060/minarca9.8 Critical
- yordam library automation system, yordam bilgi teknolojileri bilgi teknolojileri +1 moreReflected XSS University Library Automation System6.1 Medium
- apache soapApache SOAP: XML External Entity Injection (XXE) allows unauthenticated users to read arbitrary files via HTTP7.5 High
- fortra cobalt strikeAn XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7...6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Fails to Check Permissions in Translation Module6.5 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix6.1 Medium
- liferay portalLiferay Portal Path Traversal Vulnerability via the Hypermedia REST APIs Module7.5 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented6.1 Medium
ghostscriptOSS-FuzzHeap-buffer-overflow in Ins_PUSHWNo score- hashicorp vaultHashiCorp Vault vulnerable to incorrect metadata access9.1 Critical
- apache batik, apache software foundation xml graphics, debian linux +2 moreJar url should be blocked by DefaultScriptSecurity7.5 High
- apache batik, apache software foundation xml graphics, debian linux +2 morePDFTranscoder does not block external resources5.3 Medium
- apache batik, apache software foundation xml graphics, debian linux +2 moreServer-Side Request Forgery Information Disclosure Vulnerability5.3 Medium
- grafanaGrafana folders admin only permission privilege escalation7.6 High
- vim, vim vim/vim, debian linux +2 more +4 moreUse After Free in vim/vim7.8 High
- google protobuf-cpp, protobuf-python, debian linux +1 more +3 moreOut of Memory issue in ProtocolBuffers for cpp and python7.5 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via Tag Name6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Site Module5.4 Medium
- liferay dxp, portal +1 moreLiferay Portal Missing Authorization vulnerability4.3 Medium
- insyde insydeh2oAn issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O...6.0 Medium
- Show moreLoading…