Skip to content
OpenAdvisories

Archive

September 2022

Vulnerabilities first published in this month (UTC), newest first.

← August 2022 2022 / September October 2022 →
  1. 170
  2. 277
  3. 31
  4. 42
  5. 539
  6. 6157
  7. 764
  8. 858
  9. 9130
  10. 10 
  11. 119
  12. 1249
  13. 13201
  14. 1449
  15. 1589
  16. 16266
  17. 175
  18. 187
  19. 19122
  20. 2096
  21. 2196
  22. 2258
  23. 23203
  24. 247
  25. 253
  26. 26105
  27. 2733
  28. 2874
  29. 2935
  30. 3069
All Critical High Medium Low Exploited only Public exploit

692 results · Clear filters · Feed

  • Medium 4.4
    CVE-2021-39009

    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which can be read by a loca…

    IBM Cognos Analytics
  • Medium 4.3
    CVE-2021-29823

    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attack…

    IBM Cognos Analytics
  • Medium 4.3
    CVE-2021-20468

    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attack…

    IBM Cognos Analytics
  • Medium 4.3
    CVE-2020-4301

    IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attack…

    IBM Cognos Analytics
  • Medium 6.1
    CVE-2022-36796

    WordPress CallRail Phone Call Tracking plugin <= 0.4.9 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)

    Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in CallRail, Inc. CallRail Phone Call Tracking plugin <= 0.4.9 at WordPress.

    CallRail CallRail Phone Call Tracking (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-36373

    WordPress MP3 jPlayer plugin <= 2.7.3 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

    Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Simon Ward MP3 jPlayer plugin <= 2.7.3 at WordPress.

    Simon Ward MP3-jPlayer (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-36355

    WordPress Easy Org Chart plugin <= 3.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Easy Org Chart plugin <= 3.1 at WordPress.

    PluginlySpeaking Easy Org Chart (WordPress plugin) Web / CMS
  • Medium 6.5
    CVE-2022-28199

    NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, wher…

    NVIDIA NVIDIA FLARE dpdk dpdk Debian Ubuntu
  • Medium 6.5
    CVE-2022-36055

    Denial of service in Helm

    Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Fuzz testing, provided by the CNCF, identified input to functions in the _strvals_ package that can cause an out of memory panic. The _strvals_ package contains a …

    helm helm helm.sh/helm/v3 helm Azure Linux Go
  • Medium 6.8
    CVE-2022-36054

    Out-of-bounds write when decompressing 6LoWPAN payload in Contiki-NG

    Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating system (file os/net/ipv6/sicslowpan.c) contains an input function that processes incoming packets and copies …

    Contiki-NG Contiki-NG
  • Medium 5.9
    CVE-2022-36052

    Out-of-bounds read when decompressing UDP header

    Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in Contiki-NG may cast a UDP header structure at a certain offset in a packet buffer. The code does not check whether the packet buffer i…

    Contiki-NG Contiki-NG
  • Medium 5.9
    CVE-2022-36053

    Out-of-bounds read in the uIP buffer module

    Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 network stack of Contiki-NG has a buffer module (os/net/ipv6/uipbuf.c) that processes IPv6 extension headers in incoming data packets. As part of…

    Contiki-NG Contiki-NG