CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- bitcoin\/altcoin faucet project faucet, unknown bitcoin / altcoin faucet +1 moreBitcoin / Altcoin Faucet <= 1.6.0 - Settings Update to Stored XSS via CSRF5.4 Medium
- unknown ldap wp login / active directory integration, ldap wp login \/ active directory integration project wp login \/ active directory integration +1 moreLdap WP Login / Active Directory Integration < 3.0.2 - Unauthenticated Settings Update to Auth Bypass7.5 High
- adobe download managerDownload Manager < 3.2.55 - Admin+ Arbitrary File/Folder Access via Path Traversal4.9 Medium
- ninjaforms ninja forms, unknown ninja forms contact form – the drag and drop form builder for wordpress +1 moreNinjaForms < 3.6.13 - Admin+ PHP Objection Injection7.2 High
- themehunk wp popup builder, unknown wp popup builder – popup forms , marketing popup & newsletter +1 moreWP Popup Builder < 1.3.0 - Subscriber+ Arbitrary Popup Deletion4.3 Medium
- themehunk wp popup builder, unknown wp popup builder – popup forms , marketing popup & newsletter +1 moreWP Popup Builder < 1.2.9 - Reflected Cross-Site Scripting6.1 Medium
- unknown post smtp mailer/email log, wpexperts post smtp +1 morePost SMTP < 2.1.7 - Admin+ Blind SSRF7.2 High
- benbodhi svg supportSVG Support < 2.5 - Author+ Stored Cross-Site Scripting5.4 Medium
- 10up restricted site accessRestricted Site Access < 7.3.2 - Access Bypass via IP Spoofing5.3 Medium
- dplugins scripts organizer, unknown scripts-organizer +1 moreScripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload8.8 High
- online leave management system project leave management systemOnline Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes...7.2 High
- online leave management system project leave management systemOnline Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes...7.2 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb5.3 Medium
- online leave management system project leave management systemOnline Leave Management System v1.0 is vulnerable to SQL Injection via /leave_system/classes...7.2 High
- phpgurukul zoo management systemZoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point...7.2 High
- phpgurukul zoo management systemZoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point...7.2 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreImproper Cleanup on Thrown Exception in ikus060/rdiffweb4.3 Medium
- hipcam realserver, iegeek ig20 firmware +1 moreieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used...6.5 Medium
- contec fxa2000 firmware, fxa3000 firmware, fxa3020 firmware +1 more +3 moreContec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for...8.8 High
- contec fxa2000 firmware, fxa3000 firmware, fxa3020 firmware +1 more +3 moreContec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN...8.0 High
- creativeitem academy learning management systemAcademy Learning Management System before v5.9.1 was discovered to contain a reflected cross-site...6.1 Medium
- joblib project joblib, debian linux, fedoraproject fedora +2 moreArbitrary Code Execution7.3 High
- ahmedadelfahim express-xss-sanitizer, express xss sanitizer project xss sanitizer +1 morePrototype Pollution7.3 High
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.x and 9.x (e.g., 8.8.15). The Sudo...7.8 High
lcmsOSS-FuzzUse-of-uninitialized-value in FileWriteNo score- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreAn issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload...9.8 Critical
- simple bitcoin faucets project bitcoin faucets, unknown bitcoin satoshi tools : faucets, visitor rewarder, satoshi games, referral program +1 moreSimple Bitcoin Faucets <= 1.7.0 - Unauthorised AJAX Call to Stored XSS5.4 Medium
mongooseOSS-FuzzDynamic-stack-buffer-overflow in rx_icmpNo scorefileOSS-FuzzUNKNOWN WRITE in regcompNo score- dompdf project dompdfDompdf allows remote file inclusion because URI validation failure does not halt font registration7.5 High
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreUse After Free in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreStack-based Buffer Overflow in vim/vim7.8 High
- secp256k1-js project secp256k1-jssecp256k1-js implements ECDSA without required r and s validation, leading to signature forgery7.5 High
- nepxion discover, discovery +1 moreSpEL Injection in Nepxion Discovery9.4 Critical
- nepxion discoveryPotential Server Side Request Forgery (SSRF) in Nepxion Discovery4.3 Medium
- xdan jodit editorCross-Site Scripting (XSS) in Jodit Editor5.4 Medium
- mygraph project mygraphImproper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraph5.4 Medium
ghostscriptOSS-FuzzHeap-use-after-free in s_file_write_flushNo scoreexiv2OSS-FuzzHeap-buffer-overflow in Exiv2::MemIo::readNo scoreperfettoOSS-FuzzUNKNOWN WRITE in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptorNo score- parity frontierIncorrect Calculation in Frontier leads to inflated Ethereum chain gas prices5.3 Medium
github.com/mohammed90/caddy-sshGoCaddy-SSH vulnerable to Authorization Bypass due to incorrect usage of PAM library7.7 High- online banking system project banking systemOnline Banking System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- online banking system project banking systemOnline Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search...9.8 Critical
- online banking system project banking systemOnline Banking System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- online banking system project banking systemOnline Banking System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- online banking system project banking systemOnline Banking System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- online banking system project banking systemOnline Banking System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- online banking system project banking systemOnline Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search...9.8 Critical
- online banking system project banking systemOnline Banking System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- Show moreLoading…