CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 moreSQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy2.7 Low
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 morePath traversal in Carlo Gavazzi UWP 3.0 could lead to full device access9.8 Critical
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 moreUse of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server.9.8 Critical
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 morePossible command injection in Car Park Server in Carlo Gavazzi UWP3.09.8 Critical
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 moreMissing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server9.8 Critical
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 moreCommand injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection7.2 High
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 moreSQL-injection in Carlo Gavazzi UWP 3.0 allows for full database access9.4 Critical
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 moreCarlo Gavazzi UWP 3.0 WebApp allows for authentication bypass7.5 High
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 moreHard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device9.8 Critical
- labstack echoLabstack Echo Open Redirect vulnerability9.6 Critical
- cloudwego hertzHertz contains path traversal via normalizePath function7.5 High
- tp-link archer ax10 v1 firmwareTP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. 57450(5553) was discovered to...8.8 High
- sony ps4, ps5, playstation 4 firmware +1 more +3 moreSony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow6.8 Medium
inconceivablecrates.ioLibrary exclusively intended to inject UB into safe Rust.No score- b2evolutionAn authorization bypass in b2evolution allows remote, unauthenticated attackers to predict...9.1 Critical
- bytebasebytebase - Improper Authorization4.3 Medium
- bytebasebytebase - Improper Authorization4.3 Medium
- ovs, cloudbase open vswitch, debian linux +2 moreovs - buffer over-read6.1 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 morenotepad-plus-plus - DLL Hijacking7.8 High
- tooljet, tooljet tooljet/tooljet +1 moreExposure of Sensitive Information to an Unauthorized Actor in tooljet/tooljet6.5 Medium
- zephyr project manager, zephyr-one zephyr project manager +1 moreZephyr Project Manager REST Call cross site scripting3.5 Low
- food ordering management system project ordering management system, sourcecodester food ordering management system +1 moreSourceCodester Food Ordering Management System POST Parameter router.php sql injection6.3 Medium
- cowell information system co., ltd. enterprise travel management systemCOWELL INFORMATION SYSTEM CO., LTD. enterprise travel management system - Reflected XSS6.1 Medium
- heimavista inc. rpage, heimavista dark horse rpage +1 moreHEIMAVISTA INC. Rpage - Reflected XSS6.1 Medium
- lcnet smart evision, smart evision information technology inc. evision +1 moreSmart eVision - Stored XSS6.1 Medium
- lcnet smart evision, smart evision information technology inc. evision +1 moreSmart eVision - Path Traversal -26.5 Medium
- lcnet smart evision, smart evision information technology inc. evision +1 moreSmart eVision - Path Traversal -19.8 Critical
- lcnet smart evision, smart evision information technology inc. evision +1 moreSmart eVision - Improper Privilege Management8.8 High
- lcnet smart evision, smart evision information technology inc. evision +1 moreSmart eVision - Exposure of Sensitive Information to an Unauthorized Actor -35.3 Medium
- lcnet smart evision, smart evision information technology inc. evision +1 moreSmart eVision - Exposure of Sensitive Information to an Unauthorized Actor -27.5 High
- lcnet smart evision, smart evision information technology inc. evision +1 moreSmart eVision - Exposure of Sensitive Information to an Unauthorized Actor -16.5 Medium
- asus armoury crate serviceASUS Armoury Crate Service - Arbitrary File Creation via Elevation of Privilege Flaw5.9 Medium
skiaOSS-FuzzUse-of-uninitialized-value in SkFindQuadMaxCurvatureNo scoreskiaOSS-FuzzHeap-buffer-overflow in SkPath::reverseAddPathNo scoreskiaOSS-FuzzHeap-buffer-overflow in SkPath::Iter::nextNo scoreskiaOSS-FuzzHeap-buffer-overflow in SkMatrix::Persp_ptsNo score- apple ipados, macos, safari +2 more +4 moreA correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14,...8.8 High
- webkitgtkA use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in...8.8 High
- webkitgtkA use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK...8.8 High
- webkitgtkA use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8...8.8 High
- webkitgtkA use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8...8.8 High
- webkitgtk, fedoraproject fedora +1 moreA use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8...8.8 High
- google chromeInsufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote...6.5 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8...8.8 High
- apple ipados, macos, safari +3 more +5 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- lighttpd, fedoraproject fedora +1 moreA resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of...7.5 High
- xuxueli xxl-jobXXL-JOB contains a Command execution vulnerability in background tasks9.8 Critical
- nheko-reborn nheko, fedoraproject fedora +1 morenheko vulnerable to secret poisoning using MITM on secret requests by the homeserver8.6 High
- symfony twig, debian linux, drupal +1 more +3 moreTwig may load a template outside a configured directory when using the filesystem loader7.5 High
- matrix javascript sdk, matrix-org matrix-js-sdk +1 moreMatrix Javascript SDK vulnerable to Olm/Megolm protocol confusion8.6 High
- Show moreLoading…