CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- inventree inventree/inventree, inventree project inventree +1 moreCross-site Scripting (XSS) - Stored in inventree/inventree8.2 High
- flatpressFlatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the...7.2 High
- amperecomputing ampere altra firmware, ampere altra max firmware, ampereone firmware +2 moreAmpere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which...6.5 Medium
skiaOSS-FuzzUse-of-uninitialized-value in GrTriangulator::sanitizeContoursNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in onig_node_str_catNo scoreradare2OSS-FuzzStack-use-after-return in check_bufferNo scoreskiaOSS-FuzzUse-of-uninitialized-value in SkPathStroker::CheckCubicLinearNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in onig_vsnprintf_with_patternNo scoreskiaOSS-FuzzHeap-buffer-overflow in SkEdgeClipper::ClipPathNo scoreskiaOSS-FuzzHeap-buffer-overflow in SkPathPriv::IsRectContourNo scoreskiaOSS-FuzzHeap-buffer-overflow in SkPath::Iter::nextNo scoreskiaOSS-FuzzHeap-buffer-overflow in SkPath::Iter::nextNo scoreskiaOSS-FuzzHeap-buffer-overflow in SkPath::Iter::nextNo score- amazon web services redshift java database connectivity drivercom.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution8.1 High
- matrix javascript sdk, matrix-org matrix-js-sdk +1 moreMatrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification8.6 High
- wolfsslIn wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake...7.5 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vim7.8 High
- openstack barbican, redhat openstack, red hat openstack platform +1 more +3 moreA flaw was found in the openstack-barbican component. This issue allows an access policy bypass...5.9 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreWeak Password Requirements in ikus060/rdiffweb5.4 Medium
- php, debian linux, fedoraproject fedora +2 more$_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities6.5 Medium
- php, debian linux, fedoraproject fedora +2 morephar wrapper can occur dos when using quine gzip file2.3 Low
- trend micro deep security, trend micro, inc. micro deep security, trendmicro deep security agent +2 moreA link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security...7.8 High
- trend micro deep security, trend micro, inc. micro deep security, trendmicro deep security agent +2 moreAn Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload...3.3 Low
- trend micro deep security, trend micro, inc. micro deep security, trendmicro deep security agent +2 moreAn Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload...3.3 Low
- trend micro deep security, trend micro, inc. micro deep security, trendmicro deep security agent +2 moreAn Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload...3.3 Low
- nextauth.js next-authNextAuth.js Upstash Adapter missing token verification6.8 Medium
- matrix-org matrix-ios-sdk, matrix software development kit +1 moreMatrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions7.5 High
- matrix-org matrix-ios-sdk, matrix software development kit +1 moreMatrix iOS SDK vulnerable ton Olm/Megolm protocol confusion8.6 High
- dell networking os10, smartfabric os10 +1 moreNetworking OS10, versions 10.5.1.x, 10.5.2.x, and 10.5.3.x contain a vulnerability that could...7.5 High
- dell networking os10, smartfabric os10 +1 moreDell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support...3.7 Low
- dell networking os10, smartfabric os10 +1 moreDell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains...6.4 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreUse of Cache Containing Sensitive Information in ikus060/rdiffweb4.3 Medium
- matrix-org matrix-android-sdk2, matrix software development kit +1 morematrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion8.6 High
- matrix-org matrix-android-sdk2, matrix software development kit +1 morematrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions7.5 High
- elastic cloud enterpriseA flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing...5.3 Medium
- apple swiftnioSwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')7.5 High
- connectwise screenconnectConnectWise - ScreenConnect Session Code Bypass5.3 Medium
- fwupdWhen creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated...6.5 Medium
- ovirt ovirt-engineAn HTML injection/reflected Cross-site scripting (XSS) vulnerability was found in the ovirt...6.1 Medium
- oretnom23 expense management systemA stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management...5.4 Medium
- toaruosreadelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted...3.3 Low
- ibm qradar user behavior analyticsIBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive...4.3 Medium
- ibm jazz for service managementIBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability...6.4 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request...4.3 Medium
- ibm application gatewayIBM Application Gateway is vulnerable to cross-site scripting. This vulnerability allows users to...5.4 Medium
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. There is an SMM memory...8.2 High
- open5gsOpen5GS UDP Packet ogs-tlv-msg.c denial of service3.5 Low
- tenda tx3 firmwareTenda TX3 US_TX3V1.0br_V16.03.13.11 is vulnerable to stack overflow via compare_parentcontrol_time.9.8 Critical
- etaplighting etap safety managerETAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting...6.1 Medium
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 moreReflected XSS in Carlo Gavazzi UWP 3.06.1 Medium
- Show moreLoading…