Skip to content
OpenAdvisories

Archive

September 2022

Vulnerabilities first published in this month (UTC), newest first.

← August 2022 2022 / September October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

177 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-40943

    Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via bwdate-report-ds.php file.

  • Critical 9.8
    CVE-2022-35156

    Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at …

  • Critical 9.8
    CVE-2022-40944

    Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via sales-report-ds.php file.

  • Critical 9.8
    CVE-2022-40315

    Moodle Minor SQL injection risk in admin user browsing

    A limited SQL injection risk was identified in the "browse list of users" site administration page.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2022-40314

    Moodle remote code execution

    A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2022-2778

    In affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null bytes.

    Octopus Deploy Octopus Server
  • Critical 9.1
    CVE-2022-36066

    Discourse vulnerable to RCE via admins uploading maliciously zipped file

    Discourse is an open source discussion platform. In versions prior to 2.8.9 on the `stable` branch and prior to 2.9.0.beta10 on the `beta` and `tests-passed` branches, admins can upload a maliciously crafted Zip or Gzip Tar archive to write files at arbitrary…

    Discourse Discourse
  • Critical 9.8
    CVE-2022-33880

    hms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the …

  • Critical 9.7
    CVE-2022-39266

    isolated-vm has vulnerable CachedDataOptions in API

    isolated-vm is a library for nodejs which gives the user access to v8's Isolate interface. In versions 4.3.6 and prior, if the untrusted v8 cached data is passed to the API through CachedDataOptions, attackers can bypass the sandbox and run arbitrary code in …

    laverdet isolated-vm isolated-vm npm
  • Critical 9.8
    CVE-2022-40887

    SourceCodester Best Student Result Management System 1.0 is vulnerable to SQL Injection.

  • Critical 9.8
    CVE-2022-40475

    TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloa…

  • Critical 9.9
    CVE-2021-43362

    MedData HBYS 1.0 Remote SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData HBYS allows SQL Injection.This issue affects HBYS: from unspecified before 1.1.

    MedData HBYS
  • Critical 9.9
    CVE-2021-43361

    MedData HBYS 1.0 Remote SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData HBYS allows SQL Injection.This issue affects HBYS: from unspecified before 1.1.

    MedData HBYS
  • Critical 9.8
    CVE-2022-40942

    Tenda TX3 US_TX3V1.0br_V16.03.13.11 is vulnerable to stack overflow via compare_parentcontrol_time.

  • Critical 9.8
    CVE-2022-28814

    Path traversal in Carlo Gavazzi UWP 3.0 could lead to full device access

    Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 was discovered to be vulnerable to a relative path traversal vulnerability which enables remote attackers to read arbitrary files and gain full control of the device.

    Carlo Gavazzi Automation UWP 3.0 Monitoring Gateway and Controller – Security Enhanced CPY Car Park Server UWP 3.0 Monitoring Gateway and Controller
  • Critical 9.8
    CVE-2022-28812

    Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server.

    In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentials to gain SuperUser access to the device.

    Carlo Gavazzi Automation UWP 3.0 Monitoring Gateway and Controller – Security Enhanced CPY Car Park Server UWP 3.0 Monitoring Gateway and Controller
  • Critical 9.8
    CVE-2022-28811

    Possible command injection in Car Park Server in Carlo Gavazzi UWP3.0

    In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could utilize an improper input validation on an API-submitted parameter to execute arbitrary OS commands.

    Carlo Gavazzi Automation UWP 3.0 Monitoring Gateway and Controller – EDP version UWP 3.0 Monitoring Gateway and Controller – Security Enhanced CPY Car Park Server
  • Critical 9.8
    CVE-2022-22526

    Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server

    In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a missing authentication allows for full access via API.

    Carlo Gavazzi Automation UWP 3.0 Monitoring Gateway and Controller – EDP version UWP 3.0 Monitoring Gateway and Controller – Security Enhanced CPY Car Park Server
  • Critical 9.4
    CVE-2022-22524

    SQL-injection in Carlo Gavazzi UWP 3.0 allows for full database access

    In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 an unauthenticated remote attacker could utilize a SQL-Injection vulnerability to gain full database access, modify users and stop services .

    Carlo Gavazzi Automation UWP 3.0 Monitoring Gateway and Controller – Security Enhanced CPY Car Park Server UWP 3.0 Monitoring Gateway and Controller
  • Critical 9.8
    CVE-2022-22522

    Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device

    In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 a remote, unauthenticated attacker could make use of hard-coded credentials to gain full access to the device.

    Carlo Gavazzi Automation UWP 3.0 Monitoring Gateway and Controller – Security Enhanced CPY Car Park Server UWP 3.0 Monitoring Gateway and Controller
  • Critical 9.6
    CVE-2022-40083 Scanner template

    Labstack Echo Open Redirect vulnerability

    Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).

    golang-github-labstack-echo golang-github-labstack-echo.v2 golang-github-labstack-echo.v3 github.com/labstack/echo/v4 Debian Ubuntu Go
  • Critical 9.1
    CVE-2022-30935

    An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for an…

  • Critical 9.8
    CVE-2022-39033

    Smart eVision - Path Traversal -1

    Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication, access restrict…

    Smart eVision Information Technology Smart eVision
  • Critical 9.8
    CVE-2022-40929

    XXL-JOB contains a Command execution vulnerability in background tasks

    XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).

    com.xuxueli:xxl-job-core Maven
  • Critical 9.8
    CVE-2021-41433

    SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application log…

  • Critical 9.8
    CVE-2022-40877

    Exam Reviewer Management System 1.0 is vulnerable to SQL Injection via the ‘id’ parameter.

  • Critical 9.0
    CVE-2022-39256

    Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.

    Orckestra C1 CMS is a .NET based Web Content Management System. A vulnerability in versions prior to 6.13 allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS. Authentication is required to exploit this vulnerability…

    Orckestra C1-CMS-Foundation CompositeC1.Core NuGet
  • Critical 9.8
    CVE-2022-37346

    EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability w…

    EC-CUBE Product Image Bulk Upload Plugin
  • Critical 9.8
    CVE-2022-41571

    An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Local file inclusion can occur.

  • Critical 9.8
    CVE-2022-41570

    An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Unauthenticated SQL injection can occur.

  • Critical 9.8
    CVE-2022-30004

    Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing…

  • Critical 9.8
    CVE-2022-40050

    ZFile v4.1.1 was discovered to contain an arbitrary file upload vulnerability via the component /file/upload/1.

  • Critical 9.6
    CVE-2022-3075 Exploited

    Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had comprom…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Sep 8, 2022
  • Critical 9.8
    CVE-2022-28722

    Certain HP Print Products are potentially vulnerable to Buffer Overflow.

  • Critical 9.8
    CVE-2022-28721

    Certain HP Print Products are potentially vulnerable to Remote Code Execution.

  • Critical 9.8
    CVE-2022-40485

    Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.ph…

  • Critical 9.8
    CVE-2022-40484

    Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client…

  • Critical 9.8
    CVE-2022-40483

    Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.p…

  • Critical 9.8
    CVE-2022-41352 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through am…

    KEV Oct 20, 2022
  • Critical 9.4
    CVE-2022-23463

    SpEL Injection in Nepxion Discovery

    Nepxion Discovery is a solution for Spring Cloud. Discover is vulnerable to SpEL Injection in discovery-commons. DiscoveryExpressionResolver’s eval method is evaluating expression with a StandardEvaluationContext, allowing the expression to reach and interact…

    Nepxion Discover com.nepxion:discovery Maven