Skip to content
OpenAdvisories

Archive

19 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /19 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Unscored —
    CVE-2022-38532 Public exploit

    Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability in the component C_Feat…

  • Unscored —
    CVE-2022-40140 Public exploit

    An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker…

    Trend Micro Trend Micro Apex One
  • Unscored —
    CVE-2022-3218 Public exploit EPSS 74%

    Necta WiFi Mouse (Mouse Server) client-side authentication bypass

    Due to a reliance on client-side authentication, the WiFi Mouse (Mouse Server) from Necta LLC's authentication mechanism is trivially bypassed, which can result in remote code execution.

    Necta WiFi Mouse (Mouse Server)
  • High 8.8
    CVE-2022-38577 Public exploit

    ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability …

  • Unscored —
    CVE-2022-37203 Public exploit

    JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filte…

  • Critical 9.8
    CVE-2022-35914 Exploited Public exploit Scanner template EPSS 100%

    /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

    KEV Mar 7, 2023
  • Unscored —
    CVE-2022-3142 Public exploit Scanner template EPSS 15%

    NEX-Forms < 7.9.7 - Authenticated SQLi

    The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escape user input before using it in SQL statements, leading to SQL injections. The attack can be executed by anyone who is permitted to view the forms statistics chart, by default adm…

    Web / CMS
  • Unscored —
    CVE-2022-3141 Public exploit

    Translatepress Multilinugal < 2.3.3 - Admin+ SQLi

    The Translate Multilingual sites WordPress plugin before 2.3.3 is vulnerable to an authenticated SQL injection. By adding a new language (via the settings page) containing specific special characters, the backticks in the SQL query can be surpassed and a time…

    Web / CMS
  • Unscored —
    CVE-2022-2840 Public exploit EPSS 13%

    Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi

    The Zephyr Project Manager WordPress plugin before 3.2.5 does not sanitise and escape various parameters before using them in SQL statements via various AJAX actions available to both unauthenticated and authenticated users, leading to SQL injections

    Web / CMS
  • Unscored —
    CVE-2022-37032 Public exploit

    An out-of-bounds read in the BGP daemon of FRRouting FRR before 8.4 may lead to a segmentation fault and denial of serv…

    frr frr quagga Debian Ubuntu