CVEs published September 13, 2022
201 CVEs were published on September 13, 2022: 7 critical, 68 high. 1 is now in CISA KEV.
- Published
- 201
- Critical
- 7
- High
- 68
- Medium
- 35
- Low
- 2
- Unrated
- 89
- Now in CISA KEV
- 1
- Fix available
- 93
Most affected products
- Microsoft Windows
- 39
- Siemens Parasolid · Siemens Simcenter Femap
- 20
- Android
- 17
- Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- 5
- lief
- 5
- Microsoft Windows Server
- 5
- typo3 · typo3/cms-core +1
- 5
- Microsoft SharePoint Enterprise Server · Microsoft Share… +1
- 4
- theonedev onedev
- 4
- ikus060/rdiffweb · rdiffweb
- 3
Critical 7
- CVE-2022-20389Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004Android
- CVE-2022-20388Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323Android
- CVE-2022-39206CI/CD Docker Escape in OneDevtheonedev onedev
- CVE-2022-34722Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34721Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34718Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-39205Access Control Bypass in Onedevtheonedev onedev
High 68
- CVE-2022-36768IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain…IBM AIX · IBM VIOS
- CVE-2022-34356IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root…IBM VIOS · IBM AIX
- CVE-2022-32555Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST…
- CVE-2022-2962A DMA reentrancy issue was found in the Tulip device emulation in QEMU.QEMU
- CVE-2022-20392In declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a dangerous permission without user consent…Android
- CVE-2022-39208Git Repository Disclosure in Onedevtheonedev onedev
- CVE-2022-38020Visual Studio Code Elevation of Privilege VulnerabilityMicrosoft Visual Studio Code
- CVE-2022-38019AV1 Video Extension Remote Code Execution VulnerabilityMicrosoft AV1 Video Extension
- CVE-2022-38012Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2022-38010Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +2
- CVE-2022-38011Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2022-38009Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2022-38008Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2022-38007Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege VulnerabilityMicrosoft Azure Guest Configuration · Microsoft Azure ARC
- CVE-2022-38005Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-38004Windows Fax Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-37969Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-37963Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-37964Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-37962Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-37961Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2022-37958SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-37957Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-37955Windows Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-37954DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
Show all 68 entriesShow fewer entries
- CVE-2022-35841Windows Enterprise App Management Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35838HTTP V3 Denial of Service VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2022-35840Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35836Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35835Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35834Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35833Windows Secure Channel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-35828Microsoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityMicrosoft Defender for Endpoint for Mac
- CVE-2022-35830Remote Procedure Call Runtime Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-35805Microsoft Dynamics CRM (on-premises) Remote Code Execution VulnerabilityMicrosoft Dynamics CRM (on-premises)
- CVE-2022-35803Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34734Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34733Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34732Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34731Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34730Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34729Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34726Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34727Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34725Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34724Windows DNS Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2022-34720Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-34719Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34700Microsoft Dynamics CRM (on-premises) Remote Code Execution VulnerabilityMicrosoft Dynamics CRM (on-premises)
- CVE-2022-33679Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-33647Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-30200Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30196Windows Secure Channel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-30170Windows Credential Roaming Service Elevation of Privilege VulnerabilityMicrosoft Windows Server 2022, 23H2 Edition · Microsoft Win…
- CVE-2022-26929.NET Framework Remote Code Execution VulnerabilityMicrosoft .NET Framework 3.5 AND · Microsoft .NET Framework
- CVE-2022-26928Windows Photo Import API Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-39203Parsing issue in matrix-org/node-irc leading to room takeoversmatrix-org matrix-appservice-irc · matrix-appservice-irc
- CVE-2022-36103Talos worker join token can be used to get elevated access level to the Talos APIsiderolabs talos · github.com/talos-systems/talos
- CVE-2022-3179Weak Password Requirements in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-39801SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is…SAP SE SAP GRC Access Control Emergency Access Management
- CVE-2022-38100Contec Health CMS8000Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- CVE-2022-2989An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or…podman · github.com/containers/podman/v4 +1
- CVE-2022-39151A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-3174Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-35823Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2022-37956Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-38013.NET Core and Visual Studio Denial of Service VulnerabilityMicrosoft Visual Studio 2022 for Mac · Microsoft Visual… +14
- CVE-2022-38342Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows…
Medium, low and unrated 126
- CVE-2022-38305AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php.
- CVE-2022-38771The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected…
- CVE-2022-38770The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch other users' data upon a…
- CVE-2022-38769The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch cleartext passwords upon a…
- CVE-2022-38768The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to bypass authorization.
- CVE-2022-37191The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI.
- CVE-2022-37190CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE).
- CVE-2022-31322Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged…
- CVE-2022-31324An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1…
- CVE-2022-35413WAPPLES through 6.0 has a hardcoded systemi account.
- CVE-2022-35582Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12. are vulnerable to Incorrect Access Control.
- CVE-2022-31861Cross site Scripting (XSS) in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being sent to the audit logs.
- CVE-2022-34101A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can place a malicious DLL…
- CVE-2022-34102Insufficient access control vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user…
- CVE-2022-38633Genymotion Desktop v3.2.1 was discovered to contain a DLL hijacking vulnerability which allows attackers to escalate privileges and…
- CVE-2021-36568In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database"…moodle/moodle
- CVE-2022-35637IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL…IBM DB2 for Linux, UNIX and Windows
- CVE-2022-34336IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.IBM WebSphere Application Server
- CVE-2022-22483IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to…IBM DB2 for Linux, UNIX and Windows
- CVE-2022-22330IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag.IBM Control Desk
- CVE-2022-22329IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies.IBM Control Desk
- CVE-2022-39814In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter.
- CVE-2022-39815In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs.
- CVE-2022-39816In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit configuration page.
- CVE-2022-39817In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs.
Show all 126 entriesShow fewer entries
- CVE-2022-39819In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs.
- CVE-2022-38637Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters…
- CVE-2022-39821In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs.
- CVE-2022-40623WAVLINK Quantum D4G (WN531G3) CSRFWAVLINK WN531G3
- CVE-2022-40622WAVLINK Quantum D4G (WN531G3) Session Management by IP AddressWAVLINK WN531G3
- CVE-2022-40621WAVLINK Quantum D4G (WN531G3) Pass-The-HashWAVLINK WN531G3
- CVE-2022-38497LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.lief
- CVE-2022-38496LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.lief
- CVE-2022-38495LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.lief
- CVE-2022-38307LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at…lief
- CVE-2022-38306LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.lief
- CVE-2022-3182Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earlier allows…Devolutions Remote Desktop Manager
- CVE-2022-32244Under certain conditions an attacker authenticated as a CMS administrator access the BOE Commentary database and retrieve (non-personal)…SAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-3205Controller: cross site scripting in automation controller uiRed Hat Ansible Automation Platform
- CVE-2022-20399In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default value.Android
- CVE-2022-20398In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a permissions bypass.Android
- CVE-2022-20396In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or user interaction…Android
- CVE-2022-20395In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error.Android
- CVE-2022-20393In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow.Android
- CVE-2022-20391Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000Android
- CVE-2022-20390Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002Android
- CVE-2022-20387Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324Android
- CVE-2022-20386Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328Android
- CVE-2022-20385a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype'…Android
- CVE-2021-0943In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation.Android
- CVE-2021-0942The path in this case is a little bit convoluted.Android
- CVE-2021-0871In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that…Android
- CVE-2021-0697In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition.Android
- CVE-2022-39207Persistent XSS in OneDevtheonedev onedev
- CVE-2022-38006Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-37959Network Device Enrollment Service (NDES) Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2022-35832Windows Event Tracing Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-35831Windows Remote Access Connection Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-34728Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-34723Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-40635Improper Control of Dynamically-Managed Code Resources in Crafter StudioCrafter Software Crafter CMS · org.craftercms:craftercms
- CVE-2022-40634Improper Control of Dynamically-Managed Code Resources in Crafter StudioCrafter Software Crafter CMS · org.craftercms:crafter-studio
- CVE-2022-34100A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a…
- CVE-2022-39202IRC mode parameter confusion in matrix-appservice-ircmatrix-org matrix-appservice-irc · matrix-appservice-irc
- CVE-2022-36105User Enumeration via Response Timing in TYPO3typo3 · typo3/cms-core +1
- CVE-2022-36106Missing check for expiration time of password reset token in TYPO3typo3 · typo3/cms-core +1
- CVE-2022-36107Stored Cross-Site Scripting via FileDumpControllertypo3 · typo3/cms-core +1
- CVE-2022-36104Denial of Service via Page Error Handling in TYPO3/cmstypo3 · typo3/cms-core +1
- CVE-2022-36108Cross-Site Scripting in typo3/cms-coretypo3 · typo3/cms-core +1
- CVE-2022-32190Failure to strip relative path components in net/urlGo standard library net/url · stdlib
- CVE-2022-36020Bypass of Cross-Site Scripting Protection in typo3/html-sanitizerTYPO3 html-sanitizer · typo3/html-sanitizer +2
- CVE-2022-39014Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) - version 430, allows an…SAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-39799An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in…SAP SE SAP NetWeaver AS ABAP
- CVE-2022-35298SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site…SAP SE SAP NetWeaver Enterprise Portal
- CVE-2022-35294An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Server ABAP, which is…SAP SE SAP NetWeaver AS ABAP
- CVE-2022-35292In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within quotes, leading…SAP SE SAP Business One
- CVE-2022-3170An out-of-bounds access issue was found in the Linux kernel sound subsystem.kernel
- CVE-2022-3029Fatal error on incorrect base64 data in RRDPNLnet Labs Routinator · routinator
- CVE-2022-36782Pal Electronics Systems - Pal Gate Authorization ErrorsPal Electronics Systems Pal Gate
- CVE-2022-36778Synel - eHarmony Stored XSSSynel eHarmony
- CVE-2022-36780Avdor CIS - crystal quality Credentials Management ErrorsAvdor CIS crystal quality
- CVE-2022-36779PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command InjectionPROSCEND M330-w / M330-W5 · PROSCEND M350-5G / M350-W5G… +2
- CVE-2022-38453Contec Health CMS8000Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- CVE-2022-3027Contec Health CMS8000Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- CVE-2022-38069Contec Health CMS8000Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- CVE-2022-36385Contec Health CMS8000Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- CVE-2022-1602A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8).HP ThinPro OS
- CVE-2022-38542Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface.
- CVE-2022-38539Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply.
- CVE-2022-38139WordPress RD Station plugin <= 5.2.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesRD Station
- CVE-2022-2990An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or…buildah · github.com/containers/buildah
- CVE-2022-1278A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.WildFly · org.wildfly.bom:wildfly
- CVE-2022-38616SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at…
- CVE-2022-39156A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39154A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39155A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39153A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39152A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39150A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39148A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39149A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39147A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39146A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39145A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39144A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39143A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39142A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 <…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39141A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39139A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39140A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39138A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39137A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid…Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-38466A vulnerability has been identified in CoreShield One-Way Gateway (OWG) Software (All versions < V2.2).Siemens CoreShield One-Way Gateway (OWG) Software
- CVE-2022-37302A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a crash of the…Schneider Electric EcoStruxure Control Expert
- CVE-2022-3175Missing Custom Error Page in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-3190Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via…SharkFest Foundation Wireshark
- CVE-2022-35295In SAP Host Agent (SAPOSCOL) - version 7.22, an attacker may use files created by saposcol to escalate privileges for themselves.SAP SE SAP Host Agent
- CVE-2022-35837Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-37011A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All…Siemens Mendix SAML
- CVE-2022-37703In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary.
- CVE-2022-38329A CSRF vulnerability in Shopxian CMS 3.0.0 could allow an unauthenticated, remote attacker to craft a malicious link, potentially causing…
- CVE-2022-38537Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and…
- CVE-2022-38538Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module.
- CVE-2022-38540Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session…
- CVE-2022-38541Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in…
- CVE-2022-39158A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM…Siemens RUGGEDCOM i800 · Siemens RUGGEDCOM i800NC +140