Skip to content
OpenAdvisories

Archive

20 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /20 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-38619

    SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /…

  • Critical 9.8
    CVE-2022-32882

    This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An app…

    Apple macOS macOS
  • Critical 9.8
    CVE-2022-32788

    A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 …

    Apple macOS watchOS tvOS macOS
  • Critical 9.8
    CVE-2022-40357

    A security issue was discovered in Z-BlogPHP <= 1.7.2. A Server-Side Request Forgery (SSRF) vulnerability in the zb_use…

  • Critical 9.8
    CVE-2022-40009

    SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow_unicode at /lib/ttf.c.

    swftools Ubuntu
  • Critical 9.8
    CVE-2022-40008

    SWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8 at /lib/ttf.c.

    swftools Ubuntu
  • Critical 9.8
    CVE-2022-37265

    steal vulnerable to Prototype Pollution via alias variable

    Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.

    steal npm
  • Critical 9.8
    CVE-2017-20148

    In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege e…

    logcheck Ubuntu
  • Critical 9.8
    CVE-2022-41138

    In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.

    zutty zutty Debian Ubuntu
  • Critical 9.8
    CVE-2022-37204 Public exploit

    Final CMS 5.1.0 is vulnerable to SQL Injection.

  • Critical 9.8
    CVE-2022-38916 EPSS 19%

    Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type

    A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files

    pagekit/pagekit Packagist
  • Critical 9.4
    CVE-2022-2177

    SQL Injection in Kayrasoft

    Kayrasoft product before version 2 has an unauthenticated SQL Injection vulnerability. This is fixed in version 2.

    Kayrasoft Kayrasoft
  • Critical 9.1
    CVE-2022-38340

    Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via …