CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- checkpoint zonealarmCheck Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate...8.8 High
- ec-cube, ec-cube co.,ltd. 3 series and ec-cube 4 series +1 moreEC-CUBE Directory traversal vulnerability2.7 Low
- ec-cube, ec-cube co.,ltd. 4 series +1 moreEC-CUBE DOM-based cross-site scripting vulnerability5.4 Medium
- ec-cube product image bulk upload, ec-cube co.,ltd. product image bulk upload plugin +1 moreEC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient...9.8 Critical
- eyesofnetworkAn issue was discovered in EyesOfNetwork (EON) through 5.3.11. Local file inclusion can occur.9.8 Critical
- eyesofnetworkAn issue was discovered in EyesOfNetwork (EON) through 5.3.11. Unauthenticated SQL injection can...9.8 Critical
lcmsOSS-FuzzUse-of-uninitialized-value in cmsMLUgetASCIINo scorejaninoOSS-FuzzSecurity exception in org.codehaus.janino.Parser.parseConditionalExpressionNo scorexstreamOSS-FuzzSecurity exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpecNo scoreopenscOSS-FuzzHeap-double-free in sc_pkcs15_encode_dfNo score- realtek rtl8195am firmwareOn Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task can...7.5 High
- vim, vim vim/vim, debian linux +2 more +4 moreStack-based Buffer Overflow in vim/vim7.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA race condition flaw was found in the Linux kernel sound subsystem due to improper locking. It...4.7 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb5.3 Medium
- online tours \& travels management system project tours \& travels management systemOnline Tours & Travels Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online tours \& travels management system project tours \& travels management systemOnline Tours & Travels Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online tours and travels management system project tours and travels management systemOnline Tours & Travels Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online market place site project market place siteSourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection...9.8 Critical
- zfileZFile v4.1.1 was discovered to contain an arbitrary file upload vulnerability via the component ...9.8 Critical
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreImproper Handling of Length Parameter Inconsistency in ikus060/rdiffweb5.7 Medium
- online market place site project market place siteSourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting (XSS), allowing...5.4 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreImproper Handling of Length Parameter Inconsistency in ikus060/rdiffweb5.3 Medium
- centreonCentreon contains cross-site scripting vulnerability via esc_name parameter5.4 Medium
- centreonCentreon SQL Injection vulnerability via esc_name parameter8.8 High
- hitach vantara, hitachi vantara content platform +1 moreHitachi Content Platform Information Disclosure Vulnerability7.5 High
- mipcm mipc camera firmwareUnlimited strcpy on user input when setting a locale file leads to stack buffer overflow in mIPC...8.8 High
- mipcm mipc camera firmwareUnsanitized input when setting a locale file leads to shell injection in mIPC camera firmware 5.3...8.8 High
- hp a7w93a firmware, d3q15a firmware, d3q16a firmware +96 more +98 moreCertain HP Print Products are potentially vulnerable to Buffer Overflow.9.8 Critical
- hp 1g5m0a firmware, 1k7k6a firmware, 1k7k7a firmware +297 more +299 moreCertain HP Print Products are potentially vulnerable to Remote Code Execution.9.8 Critical
- linux, linux kernel +1 moreoff-by-one in io_uring module.7.8 High
- makedeb mistMist vulnerable to user providing a Sudo binary for authentication checks8.4 High
- nlnet labs unbound, fedoraproject fedora +1 moreNRDelegation Attack7.5 High
- brettwooldridge nuprocessNuProcess vulnerable to command-line injection through insertion of NUL character(s)8.4 High
- asus rt-ax88u firmwareAn HTTP response splitting attack in web application in ASUS RT-AX88U before v3.0.0.4.388.20558...6.5 Medium
- brokercap bifrostBifrost users using basic authntication can bypass write permission limit8.5 High
- wedding planner project plannerWedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...9.8 Critical
- wedding planner project plannerWedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking...9.8 Critical
- wedding planner project plannerWedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...9.8 Critical
- wedding planner project plannerWedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...8.8 High
- wedding planner project plannerWedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...7.2 High
- wedding planner project plannerWedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking...8.8 High
- open5gsOpen5GS AMF client.c denial of service4.3 Medium
- seo smart links project smart links, unknown seo smart links +1 moreSEO Smart Links <= 3.0.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- oauth client single sign on project client single sign on, unknown oauth client single sign on for wordpress ( oauth 2.0 sso ) +1 moreOAuth client Single Sign On for WordPress < 3.0.4 - Unauthenticated Settings Update to Authentication Bypass7.5 High
- gunkastudios login block ipsLogin Block IPs <= 1.0.0 - Arbitrary Setting Update via CSRF4.3 Medium
- cminds cm download managerCM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload7.2 High
- quantumcloud slider hero, unknown slider hero with animation, video background +1 moreSlider Hero < 8.4.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown generate pdf using contact form 7Generate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- wordlift, unknown wordlift – ai powered seo – schema +1 moreWordlift < 3.37.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- mitchell bennis simple file list, simplefilelist simple-file-list +1 moreSimple File List < 4.4.12 - Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…