CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- tendacn ac15 firmware, ac18 firmware +1 moreTenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function...9.8 Critical
- blossomthemes blossom recipe maker, blossom recipe maker (wordpress plugin) +1 moreWordPress Blossom Recipe Maker plugin <= 1.0.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities4.1 Medium
- webhelpagency wha crossword, wha crossword (wordpress plugin) +1 moreWordPress WHA Crossword plugin <= 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- tendacn ac15 firmware, ac18 firmware +1 moreTenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function...9.8 Critical
- sophos firewallA code injection vulnerability in the User Portal and Webadmin allows a remote attacker to...9.8 Critical
- denx u-boot, uboot, siemens ruggedcom rox mx5000 +10 more +12 moreUnchecked Download size in Uboot7.7 High
- ffmpegHeap-memory write in FFMPEG9.0 Critical
- linux kernelArbitrary Memory read in BPF Linux Kernel6.7 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged...4.4 Medium
- pbc project pbcAn issue has been found in PBC through 2022-8-27. A SEGV issue detected in the function...7.5 High
- apache pulsarDisabled Certificate Validation makes Broker, Proxy Admin Clients vulnerable to MITM attack5.9 Medium
- apache pulsarDisabled Hostname Verification makes Brokers, Proxies vulnerable to MITM attack5.9 Medium
- apache pulsarImproper Hostname Verification in Java Client and Proxy can expose authentication data via MITM5.9 Medium
- apache pulsarApache Pulsar Proxy target broker address isn't validated6.5 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreSession Fixation in ikus060/rdiffweb6.4 Medium
- apache pinotPinot query endpoint and the realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support9.8 Critical
- arvadosImproper Authentication in Arvados when using PAM as identity provider4.2 Medium
- hapijs hoekhoek subject to prototype pollution via the clone function.8.1 High
- kitty project kitty, fedoraproject fedora +1 moreIn Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can...7.8 High
- veritas system recoveryVeritas System Recovery (VSR) versions 18 and 21 store a network destination password in the...6.5 Medium
- netgear wnr2000v4 firmwareNetgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd....9.8 Critical
- netgear r7000 firmwareNetgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is...9.8 Critical
mongooseOSS-FuzzUse-after-poison in rx_ipNo scorekimageformatsOSS-FuzzIndex-out-of-bounds in LibRaw::parse_tiff_ifdNo score- veritas desktop and laptop optionA Reflected Cross-Site Scripting (XSS) vulnerability affects the Veritas Desktop Laptop Option ...6.1 Medium
- squid-cache squidImportant: squid:4 security update8.6 High
- squid-cache squidsquid: Fix of 2 CVEs6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreInconsistent data in instruction and data cache when creating wasm code could lead to a...6.5 Medium
- hashicorp consulHashiCorp Consul vulnerable to authorization bypass6.5 Medium
- nic knot resolver, debian linux, fedoraproject fedora +2 moreKnot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption)...7.5 High
- scala-lang scala, fedoraproject fedora, scala-lang scala-collection-compat +2 moreScala subject to file deletion, code execution due to Java deserialization chain with LazyList object deserialization9.8 Critical
- redis, fedoraproject fedora +1 moreRedis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow7.0 High
- apple ipados, macos, tvos +2 more +4 moreAn information disclosure issue was addressed by removing the vulnerable code. This issue is...5.5 Medium
- apple ipados, macos, tvos +2 more +4 moreA type confusion issue was addressed with improved state handling. This issue is fixed in watchOS...7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vim6.8 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreAn out-of-bounds read can occur when decoding H264 video. This results in a potentially...5.5 Medium
- hashicorp consulHashiCorp Consul does not properly validate node or segment names prior to usage in JWT claim assertions7.1 High
- crestron airmediaCrestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to...8.8 High
- 10-strike network inventory explorer10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add...9.8 Critical
- acer altos t110 f3 firmware, ap130 f2 firmware, aspire 1600x firmware +31 more +33 moreThere is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in...7.8 High
- nhn toast ui grid, tui.grid +1 moreToast UI Grid vulnerable to Cross-site scripting6.1 Medium
- whatsapp, facebook whatsapp business for android, whatsapp business for ios +3 more +5 moreAn integer overflow in WhatsApp could result in remote code execution in an established video call.9.8 Critical
- simple college website project college websiteA remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to...9.8 Critical
- simple college website project college websiteSimple College Website v1.0 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- simple college website project college websiteSimple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via...9.8 Critical
- netgear wnr2000v4 firmwareNetgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via...9.8 Critical
- hcl software digital experience, hcltech hcl digital experience +1 moreAn injection vulnerability affects HCL Digital Experience3.1 Low
- netgear r7000 firmwareNetgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is...7.8 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreCross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the...6.0 Medium
- Show moreLoading…