Archive

13 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /13 October 2022 →

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

High 7.8

CVE-2022-37969 Exploited · Ransomware Public exploit EPSS 28%

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 13, 2022
KEV Sep 14, 2022
High 8.8

CVE-2022-35841 Public exploit

Windows Enterprise App Management Service Remote Code Execution Vulnerability

Windows Enterprise App Management Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 13, 2022
Critical 9.8

CVE-2022-34718 Public exploit EPSS 57%

Windows TCP/IP Remote Code Execution Vulnerability

Windows TCP/IP Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 13, 2022
High 8.1

CVE-2022-33679 Public exploit EPSS 12%

Windows Kerberos Elevation of Privilege Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Sep 13, 2022
Medium 6.4

CVE-2022-40635 Public exploit

Improper Control of Dynamically-Managed Code Resources in Crafter Studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.

Crafter Software Crafter CMS org.craftercms:craftercms Maven

Sep 13, 2022
Medium 6.4

CVE-2022-40634 Public exploit

Improper Control of Dynamically-Managed Code Resources in Crafter Studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI.

Crafter Software Crafter CMS org.craftercms:crafter-studio Maven

Sep 13, 2022
Medium 6.5

CVE-2022-36779 Public exploit

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection

PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command Injection Proscend M330-w / M33-W5 / M350-5G / M350-W5G / M350-6 / M350-W6 / M301-G / M301-GW ADVICE ICR 111WG / https://www.proscend.com/en/category/in…

PROSCEND PROSCEND M350-5G / M350-W5G / M350-6 / M350-W6 ADVICE ICR 111WG PROSCEND M330-w / M330-W5

Sep 13, 2022
Unscored —

CVE-2022-37703 Public exploit

In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vu…

amanda amanda Debian Ubuntu

Sep 13, 2022