CVEs published September 5 to September 11, 2022
454 CVEs were published Sep 5 to Sep 11, 2022, 19 of them critical. CISA added 11 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 454
- Critical
- 19
- Added to CISA KEV
- 11
- Busiest day
- Tue, Sep 6 (157)
- Quietest day
- Sat, Sep 10 (0)
- September 5, 202239 CVEs · 1 critical
- September 6, 2022157 CVEs · 6 critical
- September 7, 202261 CVEs · 6 critical
- September 8, 202258 CVEs · 5 critical
- September 9, 2022130 CVEs · 1 critical
- September 10, 20220 CVEs
- September 11, 20229 CVEs
Added to CISA KEV 11
- CVE-2011-1823The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows
- CVE-2011-4723The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecifi
- CVE-2017-5521An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R80
- CVE-2018-13374A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtFortinet FortiOS, fortiADC
- CVE-2018-2628Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).Oracle WebLogic Server
- CVE-2018-6530OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous
- CVE-2018-7445A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages.
- CVE-2020-9934An issue existed in the handling of environment variables.Apple iOS · Apple macOS
- CVE-2022-26258D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.
- CVE-2022-27593DeadBolt RansomwareQNAP Systems Photo Station
- CVE-2022-3075Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer proGoogle Chrome