Archive

13 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /13 October 2022 →

All Critical High Medium Low Exploited only Public exploit

201 results · Feed

High 7.5

CVE-2022-1278

WildFly vulnerable to Insecure Default Initialization of Resource

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.

org.wildfly.bom:wildfly Maven

Sep 13, 2022
Unscored —

CVE-2022-38616

SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /…

Sep 13, 2022
Unscored —

CVE-2022-39156

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39155

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39154

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39153

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39152

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
High 7.8

CVE-2022-39151

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39150

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39149

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39148

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39147

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39146

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39145

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39144

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39143

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39142

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39141

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39139

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39140

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39138

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-39137

A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.…

Siemens Parasolid V35.0 Parasolid V34.1 Parasolid V34.0 ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-38466

A vulnerability has been identified in CoreShield One-Way Gateway (OWG) Software (All versions < V2.2). The default ins…

Siemens CoreShield One-Way Gateway (OWG) Software ICS / OT

Sep 13, 2022
Medium 5.5

CVE-2022-37302

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could caus…

Schneider Electric EcoStruxure Control Expert ICS / OT

Sep 13, 2022
High 7.5

CVE-2022-3174

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.

ikus060 ikus060/rdiffweb rdiffweb PyPI

Sep 13, 2022
Medium 5.3

CVE-2022-3175

Missing Custom Error Page in ikus060/rdiffweb

Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.

ikus060 ikus060/rdiffweb rdiffweb PyPI

Sep 13, 2022
Unscored —

CVE-2022-35295

In SAP Host Agent (SAPOSCOL) - version 7.22, an attacker may use files created by saposcol to escalate privileges for t…

SAP SAP Host Agent (SAPOSCOL)

Sep 13, 2022
High 8.8

CVE-2022-35823 EPSS 55%

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft SharePoint Remote Code Execution Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Sep 13, 2022
Medium 6.5

CVE-2022-35837

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 13, 2022
Medium 5.3

CVE-2022-39158

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i8…

Siemens RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RS416v2 V5.X RUGGEDCOM RMC8388 V5.X ICS / OT

Sep 13, 2022
Unscored —

CVE-2022-38329

A CSRF vulnerability in Shopxian CMS 3.0.0 could allow an unauthenticated, remote attacker to craft a malicious link, p…

Sep 13, 2022
High 7.5

CVE-2022-38013

.NET Core and Visual Studio Denial of Service Vulnerability

.NET Core and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.2 .NET 6.0 Ubuntu Alpine NuGet

Sep 13, 2022
High 8.5

CVE-2022-38342

Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnera…

Sep 13, 2022
Unscored —

CVE-2022-38538

Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the repo…

Sep 13, 2022
Unscored —

CVE-2022-38540

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the cre…

Sep 13, 2022
Unscored —

CVE-2022-38541

Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_t…

Sep 13, 2022
Unscored —

CVE-2022-38537

Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file,…

Sep 13, 2022
Medium 6.3

CVE-2022-3190

Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows deni…

SharkFest Foundation Wireshark wireshark wireshark Debian Ubuntu Azure Linux Alpine

Sep 13, 2022
Unscored —

CVE-2022-37011

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix …

Siemens Mendix SAML (Mendix 8 compatible) Mendix SAML (Mendix 7 compatible) Mendix SAML (Mendix 9 compatible, New Track) ICS / OT

Sep 13, 2022
High 7.8

CVE-2022-37956

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 13, 2022