Skip to content
OpenAdvisories

Archive

September 2022

Vulnerabilities first published in this month (UTC), newest first.

← August 2022 2022 / September October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.8
    CVE-2022-20775 Exploited EPSS 12%

    Cisco SD-WAN Software Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerab…

    Cisco Cisco Catalyst SD-WAN Manager Cisco SD-WAN vEdge Router Cisco SD-WAN vEdge Cloud Network devices
    KEV Feb 25, 2026
  • Critical 9.6
    CVE-2022-3075 Exploited

    Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had comprom…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Sep 8, 2022
  • High 8.8
    CVE-2022-3038 Exploited EPSS 25%

    Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially expl…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Mar 30, 2023
  • Medium 6.5
    CVE-2022-2856 Exploited

    Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a rem…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
    KEV Aug 18, 2022
  • Critical 9.8
    CVE-2022-41352 Exploited · Ransomware Public exploit Scanner template EPSS 95%

    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through am…

    KEV Oct 20, 2022
  • Critical 9.8
    CVE-2022-3236 Exploited Scanner template EPSS 99%

    A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firew…

    Sophos Sophos Firewall Network devices
    KEV Sep 23, 2022
  • Medium 6.1
    CVE-2022-39197 Exploited Public exploit EPSS 44%

    An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote at…

    KEV Mar 30, 2023
  • High 7.8
    CVE-2022-32917 Exploited

    The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15…

    Apple macOS iOS macOS iOS
    KEV Sep 14, 2022
  • High 7.2
    CVE-2022-40139 Exploited

    Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One …

    Trend Micro Trend Micro Apex One
    KEV Sep 15, 2022
  • Critical 9.8
    CVE-2022-35914 Exploited Public exploit Scanner template EPSS 100%

    /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

    KEV Mar 7, 2023
  • High 7.8
    CVE-2022-37969 Exploited · Ransomware Public exploit EPSS 28%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Sep 14, 2022
  • Critical 10.0
    CVE-2022-27593 Exploited · Ransomware Scanner template EPSS 88%

    DeadBolt Ransomware

    An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QT…

    QNAP Systems Photo Station
    KEV Sep 8, 2022