Skip to content
OpenAdvisories

Archive

16 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /16 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

266 results · Feed

  • High 8.4
    CVE-2022-22081

    Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobil…

    Qualcomm Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables
  • High 8.4
    CVE-2022-22074

    Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon C…

    Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  • High 8.4
    CVE-2022-22066

    Memory corruption occurs while processing command received from HLOS due to improper length check in Snapdragon Auto, S…

    Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  • Unscored —
    CVE-2020-23560

    IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000001bcab.

  • Unscored —
    CVE-2020-23559

    IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007d7f.

  • Unscored —
    CVE-2020-23558

    IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x0000000000007f4b.

  • Unscored —
    CVE-2020-23557

    IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!ShowPlugInSaveOptions_W+0x000000000000755d.

  • Unscored —
    CVE-2020-23556

    IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e28.

  • Unscored —
    CVE-2020-23555

    IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e6e.

  • Unscored —
    CVE-2020-23554

    IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e20.

  • Unscored —
    CVE-2020-23553

    IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007d33.

  • Unscored —
    CVE-2020-23552

    IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e62.

  • Unscored —
    CVE-2020-23551

    IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e30.

  • Unscored —
    CVE-2020-23550

    IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000007e82.

  • Unscored —
    CVE-2022-36536 Public exploit

    An issue in the component post_applogin.php of Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and b…

  • Unscored —
    CVE-2022-36533 EPSS 44%

    Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain a cross-site scr…

  • Unscored —
    CVE-2022-36532 Public exploit EPSS 26%

    Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR pr…

  • Unscored —
    CVE-2022-35415

    An improper input validation in NI System Configuration Manager before 22.5 may allow a privileged user to potentially …

  • Unscored —
    CVE-2022-34002

    The ‘document’ parameter of PDS Vista 7’s /application/documents/display.aspx page is vulnerable to a Local File Inclus…

  • Critical 10.0
    CVE-2022-26959

    There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Management version…

  • Unscored —
    CVE-2022-39002

    Double free vulnerability in the storage module. Successful exploitation of this vulnerability will cause the memory to…

  • Unscored —
    CVE-2022-36534 Public exploit EPSS 50%

    Super Flexible Software GmbH & Co. KG Syncovery 9 for Linux v9.47x and below was discovered to contain multiple remote …

  • Unscored —
    CVE-2022-2863 Scanner template EPSS 27%

    WPvivid Backup < 0.9.76 - Admin+ Arbitrary File Read

    The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack

    Web / CMS
  • Medium 6.5
    CVE-2022-40149

    Stack Buffer Overflow in Jettison

    Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may su…

    Jettison Jettison druid libjettison-java Debian Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2022-40150

    Stack Buffer Overflow in Jettison

    Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may su…

    Jettison Jettison druid libjettison-java Debian Ubuntu Wolfi Maven
  • Unscored —
    CVE-2021-40017

    The HW_KEYMASTER module lacks the validity check of the key format. Successful exploitation of this vulnerability may r…