CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- tenda i9 firmwareTenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterSet...7.5 High
- tenda i9 firmwareTenda i9 v1.0.0.8(3828) was discovered to contain a command injection vulnerability via the...9.8 Critical
- kraken kraken.io image optimizer, karim salman kraken.io image optimizer (wordpress plugin) +1 moreWordPress Kraken.io Image Optimizer plugin <= 2.6.5 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- backup scheduler project scheduler, sedlex backup scheduler (wordpress plugin) +1 moreWordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- castos seriously simple podcasting, seriously simple podcasting (wordpress plugin) +1 moreWordPress Seriously Simple Podcasting plugin <= 2.16.0 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- clogica seo redirection, wp-buy seo redirection plugin – 301 redirect manager (wordpress plugin) +1 moreWordPress SEO Redirection plugin <= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- mailoptin, mailoptin popup builder team (wordpress plugin) +1 moreWordPress MailOptin plugin <= 1.2.49.0 - Unauthenticated Optin Campaign Cache Deletion vulnerability6.5 Medium
- measuresoft scadapro serverMeasuresoft ScadaPro Server Improper Access Control7.8 High
- rocket.chatAn information disclosure vulnerability exists in Rocket.Chat <v5 due to the...6.5 Medium
- rocket.chatAn information disclosure vulnerability exists in Rocket.Chat <v4.7.5 which allowed the "users...4.3 Medium
- rocket.chatA cleartext storage of sensitive information exists in Rocket.Chat <v4.6.4 due to Oauth token...5.3 Medium
- rocket.chatA SQL injection vulnerability exists in Rocket.Chat <v3.18.6, <v4.4.4 and <v4.7.3 which can allow...8.8 High
- rocket.chatAn improper authentication vulnerability exists in Rocket.Chat Mobile App <4.14.1.22788 that...6.8 Medium
- rocket.chatA information disclosure vulnerability exists in Rocket.chat <v5, <v4.8.2 and <v4.7.5 where the...4.3 Medium
- rocket.chatA information disclosure vulnerability exists in Rockert.Chat <v5 due to /api/v1/chat...4.3 Medium
- rocket.chatAn information disclosure vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 since the...4.3 Medium
- rocket.chatA cleartext transmission of sensitive information exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5...6.5 Medium
- rocket.chatAn improper access control vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 due to...4.3 Medium
- rocket.chatAn information disclosure vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 due to the...4.3 Medium
- rocket.chatA cross-site scripting vulnerability exists in Rocket.chat <v5 due to style injection in the...5.4 Medium
- rocket.chatA privilege escalation vulnerability exists in Rocket.chat <v5 which made it possible to elevate...4.3 Medium
- rocket.chatA information disclosure vulnerability exists in Rocket.Chat <v5 where the...4.3 Medium
- rocket.chatA improper authentication vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 that...8.8 High
- rocket.chatA NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat <v5, ...4.3 Medium
- f-secure cloud protection for salesforce, collaboration protection, elements endpoint protection +3 more +5 moreDenial-of-Service (DoS) Vulnerability4.3 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- adobe experience manager, experience manager cloud service +1 moreAEM Reflected XSS Arbitrary code execution5.4 Medium
- comodo firewall, tacitine en6200-prime quad-100 firmware, en6200-prime quad-35 firmware +2 moreImproper Session Management Vulnerability in Tacitine Firewall6.5 Medium
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption...8.2 High
- comodo firewall, tacitine en6200-prime quad-100 firmware, en6200-prime quad-35 firmware +2 moreSensitive Information Disclosure Vulnerability in Tacitine Firewall7.5 High
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm jazz for service managementIBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This...6.4 Medium
- ibm partner engagement manager, sterling partner engagement manager +1 moreIBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection ...7.1 High
- ibm common cryptographic architecture, cca for mtm 4767 +1 moreIBM Common Cryptographic Architecture (CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769) could allow...6.5 Medium
- kfm project kfmCross site scripting (XSS) vulnerability in kfm through 1.4.7 via crafted GET request to /kfm...6.1 Medium
- ajaxplorerAn issue was discovered in AjaXplorer 4.2.3, allows attackers to cause cross site scripting...5.4 Medium
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout...8.2 High
- swftoolsSWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixel...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType:...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw_stroke at ...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a segmentation violation via InfoOutputDev:...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream:...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a global buffer overflow via DCTStream:...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a segmentation violation via convert_gfxline...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream...5.5 Medium
- comodo firewall, tacitine en6200-prime quad-100 firmware, en6200-prime quad-35 firmware +2 moreRemote Code Execution Vulnerability in Tacitine Firewall9.8 Critical
- mz automation libiec61850MZ Automation libIEC61850 Stack-Based Buffer Overflow10.0 Critical
- mz automation libiec61850MZ Automation libIEC61850 Stack-Based Buffer Overflow10.0 Critical
- mz automation libiec61850MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion')8.6 High
- Show moreLoading…