CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
- billing system project project system projectBilling System Project v1.0 was discovered to contain a remote code execution (RCE) vulnerability...7.2 High
- canon medical vitrea viewMultiple cross-site scripting (XSS) vulnerabilities in Canon Medical Vitrea View 7.x before 7.7.6...6.1 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreNo limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb7.5 High
- cloudflare goflowMultiple DoS Attack Vectors in sflow packet handling7.5 High
- dnnsoftware dnnsoftware/dnn.platform, dotnetnuke +1 moreRelative Path Traversal in dnnsoftware/dnn.platform4.9 Medium
- linux kerneldrivers/char/pcmcia/synclink_cs.c in the Linux kernel through 5.19.12 has a race condition and...4.2 Medium
- css-what project css-whatRegular Expression Denial of Service (ReDoS)5.3 Medium
- swmansion react native reanimatedRegular Expression Denial of Service (ReDoS)5.3 Medium
com.wire.bots:lithiumMaven,com.wire:lithiumMaven +1 moreLithium vulnerable to Cross Site Scripting in provided Swagger-UI8.1 High- axiosys bento4An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the...5.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the...5.5 Medium
- axiosys bento4An issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream:...5.5 Medium
- axiosys bento4An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in...5.5 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.04. There is a crash in gfseek(_IO_FILE*, long, int) in goo...5.5 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a...5.5 Medium
- xpdfreader xpdfAn issue was discovered in Xpdf 4.04. There is a crash in XRef::fetch(int, int, Object*, int) in...5.5 Medium
kimageformatsOSS-FuzzIndex-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielabNo scoreupbOSS-FuzzSegv on unknown address in upb_MiniTable_SetSubEnumNo scoreskiaOSS-FuzzHeap-buffer-overflow in SkRect::setBoundsCheckNo scoreexiv2OSS-FuzzHeap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<chNo scoremariadb-10.3Debianmariadb-10.3 - regression updateNo score- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreroccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race...4.7 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and...4.2 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null...9.8 Critical
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreNo limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb5.3 Medium
- discourseDiscourse vulnerable to incomplete quote causing a topic to crash in the browser6.5 Medium
- discourseDiscourse user profile location and website fields were not sufficiently length-limited4.3 Medium
- discourseDiscourse moderators can edit themes via the API7.2 High
- discourseDiscourse vulnerable to RCE via admins uploading maliciously zipped file9.1 Critical
- zktec zkbio timeZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to...8.0 High
- hospital management system mini-project project management system mini-projecthms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows...9.8 Critical
- dgiotcloud dgiotDGIOT Lightweight industrial IoT v4.5.4 was discovered to contain multiple cross-site scripting ...5.4 Medium
- isolated-vm project isolated-vmisolated-vm has vulnerable CachedDataOptions in API9.7 Critical
- github.com/peterzen/goresolver, go-resolver project go-resolver +1 moreIncorrect validation of root DNSSEC public keys in github.com/peterzen/goresolver7.5 High
- github.com/peterzen/goresolver, go-resolver project go-resolver +1 moreIncorrect DNSSEC validation due to unchecked owner names in github.com/peterzen/goresolver6.5 Medium
- uclibc, uclibc-ng, anker eufy homebase 2 +1 more +3 moreA memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0...8.1 High
- keking kkfileviewkkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.'6.1 Medium
- best student result management system project student result management systemSourceCodester Best Student Result Management System 1.0 is vulnerable to SQL Injection.9.8 Critical
- ibm robotic process automation, robotic process automation for cloud pak, robotic process automation for services +2 moreIBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in...4.6 Medium
- dutchcoders transfer.shDutchoders transfer.sh contains an XSS vulnerability via malicious file upload6.1 Medium
- netapp snapcenterSnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which...7.5 High
- matrix-nio project matrix-nioWhen matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder8.6 High
d3-colornpm,@rootio/d3-colorRoot +1 mored3-color vulnerable to ReDoSNo score- feehi feehicmsFeehiCMS vulnerable to Cross-Site scripting via crafted payload5.4 Medium
- chamiloA zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute...8.8 High
- open5gsA vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of...7.5 High
- flipperzero flipper zero firmwareA buffer overflow in the component nfc_device_load_mifare_ul_data of Flipper Devices Inc.,...5.5 Medium
- matrix matrix-rust-sdkWhen matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder8.6 High
- clash project clashA misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows...7.8 High
- totolink a860r firmwareTOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the...9.8 Critical
- Show moreLoading…