Skip to content
OpenAdvisories

Archive

22 September 2022

Vulnerabilities first published on this day (UTC), newest first.

← August 2022 2022 / September /22 October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

58 results · Feed

  • High 8.8
    CVE-2022-40298

    Crestron AirMedia for Windows before 5.5.1.84 has insecure inherited permissions, which leads to a privilege escalation…

  • Critical 9.8
    CVE-2022-38573

    10-Strike Network Inventory Explorer v9.3 was discovered to contain a buffer overflow via the Add Computers function.

  • High 7.8
    CVE-2022-30426

    There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some…

  • Medium 6.1
    CVE-2022-23458

    Toast UI Grid vulnerable to Cross-site scripting

    Toast UI Grid is a component to display and edit data. Versions prior to 4.21.3 are vulnerable to cross-site scripting attacks when pasting specially crafted content into editable cells. This issue was fixed in version 4.21.3. There are no known workarounds.

    NHN tui.grid tui-grid npm
  • Critical 9.8
    CVE-2022-36934 Public exploit

    An integer overflow in WhatsApp could result in remote code execution in an established video call.

    Meta WhatsApp for iOS WhatsApp Business for Android WhatsApp Business for iOS Android iOS
  • Critical 9.8
    CVE-2022-40089

    A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code v…

  • Medium 6.1
    CVE-2022-40088

    Simple College Website v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the comp…

  • Critical 9.8
    CVE-2022-40087

    Simple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via the function file_put_c…

  • Critical 9.8
    CVE-2022-31937

    Netgear N300 wireless router wnr2000v4-V1.0.0.70 was discovered to contain a stack overflow via strcpy in uhttpd.

  • Low 3.1
    CVE-2021-27774

    An injection vulnerability affects HCL Digital Experience

    User input included in error response, which could be used in a phishing attack.

    HCL Software HCL Digital Experience
  • High 7.8
    CVE-2022-37234

    Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134_10.2.119 is vulnerable to Buffer Overflo…

  • High 7.0
    CVE-2022-3274

    Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb

    Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • Medium 6.0
    CVE-2022-35894

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driv…

  • High 7.5
    CVE-2022-34026

    ICEcoder vulnerable to Path Traversal

    ICEcoder v8.1 allows attackers to execute a directory traversal.

    icecoder/icecoder Packagist
  • Medium 6.5
    CVE-2022-35039

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e20a0.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35038

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b064d.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35037

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6adb1e.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35036

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e1fc8.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35035

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b559f.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35034

    OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6e7e3d.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35032

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35031

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35030

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35029

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35028

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbbb6.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35027

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe9a7.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35026

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fbc0b.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35025

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35024

    OTFCC commit 617837b was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35023

    OTFCC commit 617837b was discovered to contain a segmentation violation via /lib/x86_64-linux-gnu/libc.so.6+0xbb384.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35022

    OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae.

    texlive-bin Debian
  • Medium 6.5
    CVE-2022-35021

    OTFCC commit 617837b was discovered to contain a global buffer overflow via /release-x64/otfccdump+0x718693.

    texlive-bin Debian
  • Medium 5.3
    CVE-2021-39190

    SCCM plugin for GLPI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

    The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM (version 1802) to GLPI. In versions prior to 2.3.0, the Configuration page is publicly accessible in read-only mode. This issue is patched in version 2.3.0. No known workarounds exist.

    pluginsGLPI sccm
  • High 7.2
    CVE-2022-40935

    Online Pet Shop We App v1.0 is vulnerable to SQL Injection via /pet_shop/classes/Master.php?f=delete_category,id.

  • High 7.2
    CVE-2022-40934

    Online Pet Shop We App v1.0 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_sub_category,id

  • High 7.2
    CVE-2022-40933

    Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_order…

  • High 7.2
    CVE-2022-40932

    In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gall…

  • High 8.2
    CVE-2022-35408

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver…

  • High 7.2
    CVE-2022-40447

    ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojia_list.php.

  • High 7.2
    CVE-2022-40446

    ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&grou…