Archive

12 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /12 October 2022 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2022-37300

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists that could cause unauthorized a…

Schneider Electric EcoStruxure Control Expert EcoStruxure™ Process Expert Modicon M580 CPU ICS / OT

Sep 12, 2022
Critical 9.8

CVE-2022-37767

Pebble Templates protection mechanism bypass can lead to arbitrary code execution

Pebble Templates 3.1.5 allows attackers to bypass a protection mechanism and implement arbitrary code execution with springbok. NOTE: the vendor disputes this because input to the Pebble templating engine is intended to include arbitrary Java code, and thus e…

io.pebbletemplates:pebble Maven

Sep 12, 2022