Skip to content
OpenAdvisories

Archive

20 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /20 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

96 results · Feed

  • High 7.3
    CVE-2022-39956

    Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header

    The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass for HTTP multipart requests by submitting a payload that uses a character encoding scheme via the Content-Type or the deprecated Content-Transfer-Encoding multipart MIME header…

    OWASP ModSecurity Core Rule Set modsecurity-crs modsecurity-crs Debian Ubuntu
  • High 7.3
    CVE-2022-39955

    Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header

    The OWASP ModSecurity Core Rule Set (CRS) is affected by a partial rule set bypass by submitting a specially crafted HTTP Content-Type header field that indicates multiple character encoding schemes. A vulnerable back-end can potentially be exploited by decla…

    OWASP ModSecurity Core Rule Set modsecurity-crs modsecurity-crs Debian Ubuntu
  • Critical 9.1
    CVE-2022-38340

    Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via …

  • Unscored —
    CVE-2022-32863

    A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 15.6, macOS Monte…

    Apple macOS macOS
  • High 7.8
    CVE-2022-32917 Exploited

    The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15…

    Apple macOS iOS macOS iOS
    KEV Sep 14, 2022
  • Unscored —
    CVE-2022-32795

    This issue was addressed with improved checks. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. Visiting a mali…

    Apple iOS and iPadOS iOS iOS
  • High 8.8
    CVE-2022-32912

    An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 a…

    Apple iOS and iPadOS Safari iOS iOS Browsers
  • Unscored —
    CVE-2022-32868

    A logic issue was addressed with improved state management. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPad…

    Apple iOS and iPadOS Safari iOS iOS Browsers
  • High 8.8
    CVE-2022-32886

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7…

    Apple iOS and iPadOS Safari iOS iOS Browsers Debian Ubuntu
  • High 7.8
    CVE-2022-32911

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS …

    Apple macOS iOS macOS iOS
  • Medium 5.5
    CVE-2022-32883 Public exploit

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS…

    Apple macOS iOS macOS iOS
  • Unscored —
    CVE-2022-32864

    The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS …

    Apple macOS iOS macOS iOS
  • Low 2.4
    CVE-2022-32872

    A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16, iOS 15.7 and iPadOS 15.7. A pers…

    Apple iOS and iPadOS iOS iOS
  • High 7.8
    CVE-2022-32908

    A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS…

    Apple macOS iOS macOS iOS
  • Unscored —
    CVE-2022-32854

    This issue was addressed with improved checks. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 1…

    Apple macOS iOS macOS iOS
  • High 7.5
    CVE-2022-37972

    Microsoft Endpoint Configuration Manager Spoofing Vulnerability

    Microsoft Endpoint Configuration Manager Spoofing Vulnerability

    Microsoft Microsoft Endpoint Configuration Manager