CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- mz automation libiec61850MZ Automation libIEC61850 NULL Pointer Dereference8.6 High
- rockwell automation thinmanager thinserver, rockwellautomation thinmanager +1 moreRockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service Attack8.1 High
- tabs project tabs, biplob adhikari tabs (wordpress plugin) +1 moreWordPress Tabs plugin <= 3.7.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities3.4 Low
- 3d tag cloud project tag cloud, vinoj cardoza 3d tag cloud (wordpress plugin) +1 moreWordPress 3D Tag Cloud plugin <= 3.8 - Multiple Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability6.1 Medium
- cusrev customer reviews for woocommerce, customer reviews for woocommerce (wordpress plugin) +1 moreWordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Authenticated Broken Access Control vulnerability4.3 Medium
github.com/treeverse/lakefsGolakeFS vulnerable to authenticated users deleting files they are not authorized to deleteNo score- cusrev customer reviews for woocommerce, customer reviews for woocommerce (wordpress plugin) +1 moreWordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- grandstream gsd3710, gds3710 firmware +1 moreGrandstream GSD3710 Stack-based Buffer Overflow9.8 Critical
- grandstream gsd3710, gds3710 firmware +1 moreGrandstream GSD3710 Stack-based Buffer Overflow9.8 Critical
- cusrev customer reviews for woocommerce, customer reviews for woocommerce (wordpress plugin) +1 moreWordPress Customer Reviews for WooCommerce plugin <= 5.3.5 - Sensitive Information Disclosure vulnerability5.3 Medium
- velneo vclientVelneo vClient Improper authentication6.3 Medium
- apasionados export post info, export post info (wordpress plugin) +1 moreWordPress Export Post Info plugin <= 1.2.0 - Authenticated CSV Injection vulnerability6.2 Medium
- wpchill cpo shortcodes, cpo shortcodes (wordpress plugin) +1 moreWordPress CPO Shortcodes plugin <= 1.5.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- tenda ac18 firmwareTenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand-...7.2 High
- loqate, pca predict (wordpress plugin) +1 moreWordPress PCA Predict plugin <= 1.0.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- read more by adam project more by adam, adam skaat read more by adam (wordpress plugin) +1 moreWordPress Read more By Adam plugin <= 1.1.8 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- add shortcodes actions and filters project shortcodes actions and filters, michael simpson add shortcodes actions and filters (wordpress plugin) +1 moreWordPress Add Shortcodes Actions And Filters plugin <= 2.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- ydesignservices yds support ticket system, yds support ticket system (wordpress plugin) +1 moreWordPress YDS Support Ticket System plugin <= 1.0 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- brinidesigner awesome filterable portfolio, brinia awesome filterable portfolio (wordpress plugin) +1 moreWordPress Awesome Filterable Portfolio plugin <= 1.9.7 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability6.1 Medium
- tenda w20e firmwareTenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with...9.8 Critical
- brinidesigner awesome filterable portfolio, brinia awesome filterable portfolio (wordpress plugin) +1 moreWordPress Awesome Filterable Portfolio plugin <= 1.9.7 - Unauthenticated Plugin Settings Change vulnerability6.5 Medium
- notice board project board, jitendriya tripathy notice board (wordpress plugin) +1 moreWordPress NOTICE BOARD plugin <= 1.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- tenda w20e firmwareTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack...9.8 Critical
- tenda w20e firmwareTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack...9.8 Critical
- themes awesome history timeline (wordpress plugin), themesawesome timeline awesome +1 moreWordPress History Timeline plugin <= 1.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability3.4 Low
- tenda w20e firmwareTenda W20E router V15.11.0.6 (US_W20EV4.0br_V15.11.0.6(1068_1546_841)_CN_TDC) contains a stack...9.8 Critical
- awesome torro forms, awesome ug torro forms (wordpress plugin) +1 moreWordPress Torro Forms plugin <= 1.0.16 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- blaz k. rate my post – wp rating system (wordpress plugin), blazzdev rate my post - wp rating system +1 moreWordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Race Condition vulnerability4.3 Medium
- blaz k. rate my post – wp rating system (wordpress plugin), blazzdev rate my post - wp rating system +1 moreWordPress Rate my Post – WP Rating System plugin <= 3.3.4 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- tenda ac18 firmwareTenda AC18 router contained a stack overflow vulnerability in /goform/fast_setting_wifi_set9.8 Critical
- mattermost, mattermost server +1 moreServer-side Denial of Service while processing a specifically crafted GIF file3.1 Low
- zte zxa10 b700v7 firmware, zxa10 b710c-a12 firmware, zxa10 b710s2-a19 firmware +12 more +14 moreThere is a broken access control vulnerability in ZTE ZXvSTB product. Due to improper permission...9.1 Critical
- tenda ac15 firmwareTenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat.9.8 Critical
- whatsapp, facebook whatsapp business for android, whatsapp business for ios +2 more +4 moreAn integer underflow in WhatsApp could have caused remote code execution when receiving a crafted...7.8 High
- tendacn ac15 firmwareTenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform...9.8 Critical
- wordfence security, mmaunder wordfence security – firewall, malware scan, and login security +1 moreWordfence Security – Firewall & Malware Scan <= 7.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- biplob018 image hover effects ultimateImage Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & Description6.4 Medium
- maxfoundry maxbuttons, max foundry wordpress button plugin maxbuttons (wordpress plugin) +1 moreWordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability3.4 Low
- gsplugins gs testimonial slider, gs plugins testimonial slider (wordpress plugin) +1 moreWordPress GS Testimonial Slider plugin <= 1.9.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities4.1 Medium
- tendacn ac15 firmwareTenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function...9.8 Critical
- online tours and travels management system project tours and travels management systemOnline Tours & Travels Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online tours and travels management system project tours and travels management systemOnline Tours & Travels Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online tours and travels management system project tours and travels management systemOnline Tours & Travels Management System v1.0 was discovered to contain a SQL injection...7.2 High
- tendacn ac15 firmware, ac18 firmware +1 moreTenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function...9.8 Critical
- algolplus advanced dynamic pricing for woocommerce, advanced dynamic pricing for woocommerce (wordpress plugin) +1 moreWordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- topdigitaltrends mega addons for wpbakery page builder, mega addons for wpbakery page builder (wordpress plugin) +1 moreWordPress Mega Addons For WPBakery Page Builder plugin <= 4.2.7 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- fullworksplugins meet my team, fullworks meet my team (wordpress plugin) +1 moreWordPress Meet My Team plugin <= 2.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.1 Medium
- tendacn ac15 firmware, ac18 firmware +1 moreTenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function...9.8 Critical
- ivanti endpoint managerThe “LANDesk(R) Management Agent” service exposes a socket and once connected, it is possible to...6.7 Medium
- ui desktopA local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and...7.8 High
- Show moreLoading…