Archive

18 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /18 October 2022 →

All Critical High Medium Low Exploited only Public exploit

7 results · Feed

Unscored —

CVE-2022-40774

An issue was discovered in Bento4 through 1.6.0-639. There is a NULL pointer dereference in AP4_StszAtom::GetSampleSize.

kodi-inputstream-adaptive Ubuntu

Sep 18, 2022
Unscored —

CVE-2022-40775

An issue was discovered in Bento4 through 1.6.0-639. A NULL pointer dereference occurs in AP4_StszAtom::WriteFields.

kodi-inputstream-adaptive Ubuntu

Sep 18, 2022
Unscored —

CVE-2022-40769 Public exploit

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys fro…

Sep 18, 2022
Medium 4.6

CVE-2022-25873

Cross-site Scripting (XSS)

The package vuetify from 2.0.0-beta.4 and before 2.6.10 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization in the 'eventName' function within the VCalendar component.

vuetify org.webjars.npm:vuetify npm Maven

Sep 18, 2022
Unscored —

CVE-2022-40766

Modern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '" OR 1 = 1 -- - , <?php' subs…

Sep 18, 2022
High 7.8

CVE-2022-3235

Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to 9.0.0490.

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Sep 18, 2022
Unscored —

CVE-2022-40768

drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel m…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Sep 18, 2022