CVEs published September 9, 2022
130 CVEs were published on September 9, 2022: 1 critical, 8 high.
- Published
- 130
- Critical
- 1
- High
- 8
- Medium
- 68
- Low
- 9
- Unrated
- 44
- Now in CISA KEV
- 0
- Fix available
- 46
Most affected products
- Samsung Mobile Devices
- 21
- OpenHarmony
- 5
- Baxter Spectrum Wireless Battery Module
- 4
- Linux kernel
- 4
- kernel
- 3
- Samsung Mobile Samsung Pay
- 3
- Samsung Mobile com.samsung.android.waterplugin
- 2
- Samsung Mobile Group Sharing
- 2
- Samsung Mobile Smart Switch PC
- 2
- Alexey Trofimov Access Code Feeder
- 1
Critical 1
High 8
- CVE-2022-36110Netmaker vulnerable to Insufficient Granularity of Access Controlgravitl netmaker · github.com/gravitl/netmaker
- CVE-2022-31006Hyperledger Indy DOS vulnerabilityhyperledger indy-node · indy-node
- CVE-2022-3133OS Command Injection in jgraph/drawiojgraph/drawio
- CVE-2022-38700multimedia subsystem has a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.OpenHarmony
- CVE-2022-36423Incorrect configuration of the cJSON library lead a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.OpenHarmony
- CVE-2022-38144WordPress wpForo Forum plugin <= 2.0.5 - Cross-Site Request Forgery (CSRF) vulnerabilitygVectors Team wpForo Forum
- CVE-2022-29061An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSOAR bFortinet FortiSOAR
- CVE-2022-25765Command Injectionpdfkit
Medium, low and unrated 121
- CVE-2021-37819PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java.
- CVE-2022-40320cfg_tilde_expand in confuse.c in libConfuse 3.3 has a heap-based buffer over-read.
- CVE-2022-38638Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource.casdoor · github.com/casdoor/casdoor
- CVE-2022-38639A cross-site scripting (XSS) vulnerability in Markdown-Nice v1.8.22 allows attackers to execute arbitrary web scripts or HTML via a crafted markdown-nice
- CVE-2021-44835An issue was discovered in Active Intelligent Visualization 5.
- CVE-2021-40648In man2html 1.6g, a filename can be created to overwrite the previous size parameter of the next chunk and the fd, bk, fd_nextsize, bk_nexts
- CVE-2021-40647In man2html 1.6g, a specific string being read in from a file will overwrite the size parameter in the top chunk of the heap.
- CVE-2022-36109Moby vulnerability relating to supplementary group permissionsmoby · github.com/docker/docker
- CVE-2022-40317OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.
- CVE-2022-39810An issue was discovered in WSO2 Enterprise Integrator 6.4.0.
- CVE-2022-39809An issue was discovered in WSO2 Enterprise Integrator 6.4.0.
- CVE-2022-38614An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files vi
- CVE-2022-38615SmartVista SVFE2 v2.2.22 was discovered to contain multiple SQL injection vulnerabilities via the UserForm:j_id88, UserForm:j_id90, and User
- CVE-2022-34165IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerablIBM WebSphere Application Server
- CVE-2022-28740aEnrich eHRD Learning Management Key Performance Indicator System 5+ exposes Sensitive Information to an Unauthorized Actor.
- CVE-2022-28742aEnrich eHRD Learning Management Key Performance Indicator System 5+ has Improper Access Control.
- CVE-2022-28741aEnrich a+HRD 5.x Learning Management Key Performance Indicator System has a local file inclusion (LFI) vulnerability that occurs due to mis
- CVE-2022-38613A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system.
- CVE-2022-36617Arq Backup 7.19.5.0 and below stores backup encryption passwords using reversible encryption.
- CVE-2022-37335WordPress Word Search Puzzles game plugin <= 2.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityWHA Word Search Puzzles game
- CVE-2022-37407WordPress Gallery PhotoBlocks plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesWPChill Gallery PhotoBlocks
- CVE-2022-26393Format String vulnerabilityBaxter Spectrum Wireless Battery Module
- CVE-2022-26390Unencrypted internal storage of security credentialsBaxter Spectrum Wireless Battery Module
- CVE-2022-26392Format String vulnerabilityBaxter Spectrum Wireless Battery Module
- CVE-2022-26394Unauthenticated network reconfiguration via TCP/UDPBaxter Spectrum Wireless Battery Module
- CVE-2022-36851Improper access control vulnerability in Samsung pass prior to version 4.0.03.1 allow physical attackers to access data of Samsung pass on aSamsung Mobile Samsung pass
- CVE-2022-36855A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.Samsung Mobile Devices
- CVE-2022-36864Improper access control and intent redirection in Samsung Email prior to 6.1.70.20 allows attacker to access specific formatted file and exeSamsung Mobile Samsung Email
- CVE-2022-36869Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the fiSamsung Mobile com.android.providers.contacts
- CVE-2022-36850Path traversal vulnerability in CallBGProvider prior to SMR Sep-2022 Release 1 allows attacker to overwrite arbitrary file with phone uid.Samsung Mobile Devices
- CVE-2022-36857Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application Samsung Mobile Devices
- CVE-2022-36865Improper access control in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackersSamsung Mobile Group Sharing
- CVE-2022-36866Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(1Samsung Mobile Group Sharing
- CVE-2022-36867Improper access control vulnerability in Editor Lite prior to version 4.0.40.14 allows attackers to access sensitive information.Samsung Mobile Editor Lite
- CVE-2022-36852Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application daSamsung Mobile Devices
- CVE-2022-36853Intent redirection in Photo Editor prior to SMR Sep-2022 Release 1 allows attacker to get sensitive information.Samsung Mobile Devices
- CVE-2022-36856Improper access control vulnerability in Telecom application prior to SMR Sep-2022 Release 1 allows attacker to start emergency calls via unSamsung Mobile Devices
- CVE-2022-36861Custom permission misuse vulnerability in SystemUI prior to SMR Sep-2022 Release 1 allows attacker to use some protected functions with SystSamsung Mobile Devices
- CVE-2022-36848Improper Authorization vulnerability in setDualDARPolicyCmd prior to SMR Sep-2022 Release 1 allows local attackers to cause local permanent Samsung Mobile Devices
- CVE-2022-36872Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackSamsung Mobile Samsung Pay
- CVE-2022-36870Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global aSamsung Mobile Samsung Pay
- CVE-2022-36871Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackeSamsung Mobile Samsung Pay
- CVE-2022-36873Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC addressSamsung Mobile com.samsung.android.waterplugin
- CVE-2022-36854Out of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker access unauthorized information.Samsung Mobile Devices
- CVE-2022-36858A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior toSamsung Mobile Devices
- CVE-2022-36874Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access Samsung Mobile Waterplugin
- CVE-2022-36875Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to accSamsung Mobile com.samsung.android.waterplugin
- CVE-2022-36842A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-202Samsung Mobile Devices
- CVE-2022-36843A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022Samsung Mobile Devices
- CVE-2022-36844A heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-Samsung Mobile Devices
- CVE-2022-36846A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-202Samsung Mobile Devices
- CVE-2022-36860A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 ReSamsung Mobile Devices
- CVE-2022-36862A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR SeSamsung Mobile Devices
- CVE-2022-36863A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SSamsung Mobile Devices
- CVE-2022-36841A heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR SeSamsung Mobile Devices
- CVE-2022-36845A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022Samsung Mobile Devices
- CVE-2022-36847Use after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022 Release 1 allows attackers to perform maliciousSamsung Mobile Devices
- CVE-2022-36849Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to peSamsung Mobile Devices
- CVE-2022-36859Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.21-6 allows privileged attackers to trigger a XSS on a victimSamsung Mobile SmartTagPlugin
- CVE-2022-36876Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without auSamsung Mobile Samsung Pass
- CVE-2022-38701IPC in communication subsystem has a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.OpenHarmony
- CVE-2022-36877Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in ChinaSamsung Mobile Samsung Members
- CVE-2022-36878Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log.Samsung Mobile Find My Mobile
- CVE-2022-39844Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attackers to delete arbitrarSamsung Mobile Smart Switch PC
- CVE-2022-39845Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrarySamsung Mobile Samsung Kies
- CVE-2022-39846DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.22083_3 allows attacker to execute arbitrary code.Samsung Mobile Smart Switch PC
- CVE-2022-38081Tokensync in security subsystem has a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system.OpenHarmony
- CVE-2022-38064windowmanager in window subsystem has a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.OpenHarmony
- CVE-2022-35275WordPress Advanced Order Export For WooCommerce plugin <= 3.3.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilityAlgolPlus Advanced Order Export For WooCommerce
- CVE-2022-37411WordPress Captcha Code plugin <= 2.7 - Cross-Site Request Forgery (CSRF) vulnerabilityVinoj Cardoza Captcha Code
- CVE-2022-35277WordPress GetResponse plugin <= 5.5.20 - Cross-Site Request Forgery (CSRF) vulnerabilityGetResponse for WordPress
- CVE-2022-38067WordPress Event Calendar – Calendar plugin <= 1.4.6 - Unauthenticated Event Deletion vulnerabilityTotalsoft Event Calendar – Calendar
- CVE-2022-37412WordPress Better Delete Revision plugin <= 1.6.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilityGalerio & Urda Better Delete Revision
- CVE-2022-36793WordPress WP Shop plugin <= 3.9.6 - Unauthenticated Plugin Settings Change & Data Deletion vulnerabilitieswp-shop.ru WP Shop
- CVE-2022-37404WordPress add2fav plugin <= 1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityChristian Salazar add2fav
- CVE-2022-37403WordPress Add User Role plugin <= 0.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityNikhil Vaghela Add User Role
- CVE-2022-37405WordPress Better Font Awesome plugin <= 2.0.1 - Cross-Site Request Forgery (CSRF) vulnerabilityMickey Kay Better Font Awesome
- CVE-2022-3077A buffer overflow vulnerability was found in the Linux kernel Intel’s iSMT SMBus host controller driver in the way it handled the I2C_SMBUS_kernel
- CVE-2022-38058WordPress WP Shamsi plugin <= 4.1.1 - Authenticated Plugin Setting change vulnerabilitywpvar.com WP Shamsi
- CVE-2022-38093WordPress All in One SEO plugin <= 4.2.3.1 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesAll in One SEO Team All in One SEO
- CVE-2022-40191WordPress Contact Form By Mega Forms plugin <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityAli Khallad Contact Form By Mega Forms
- CVE-2022-36356WordPress Culture Object plugin <= 4.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityLiam Gladdy / Thirty8 Digital Culture Object
- CVE-2022-36376WordPress Rank Math SEO plugin <= 1.0.95 - Server-Side Request Forgery (SSRF) vulnerabilityRank Math SEO · rankmath/seo-by-rank-math
- CVE-2022-36422WP-PostRatings plugin <= 1.89 - Rating increase/decrease via race conditionLester 'GaMerZ' Chan WP-PostRatings
- CVE-2022-35725WordPress wp-forecast plugin <= 7.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityHans Matzen wp-forecast
- CVE-2022-38070WordPress Pop-up plugin <= 1.1.5 - Privilege Escalation vulnerabilityPop-ups Pop-up
- CVE-2022-38068WordPress Export Post Info plugin <= 1.1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityApasionados Export Post Info
- CVE-2022-40133There is an UAF vulnerability in vmwgfx driverLinux kernel
- CVE-2022-38457There is an UAF vulnerability in vmwgfx driverLinux kernel
- CVE-2022-38096There is a NULL pointer vulnerability in vmwgfx driverLinux kernel
- CVE-2022-3147Server-side Denial of Service while processing a specifically crafted JPEG fileMattermost
- CVE-2022-36280There is an out-of-bounds write vulnerability in vmwgfx driverLinux kernel
- CVE-2022-38059WordPress Access Code Feeder plugin <= 1.0.3 - Cross-Site Request Forgery (CSRF) vulnerabilityAlexey Trofimov Access Code Feeder
- CVE-2022-39119In network service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-37299An issue was discovered in Shirne CMS 1.2.0.
- CVE-2022-38274JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/comment/list.
- CVE-2022-38273JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list_approve.
- CVE-2022-38272JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/article/list.
- CVE-2022-38275JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/contact/list.
- CVE-2022-38276JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/foldernotice/list.
- CVE-2022-38277JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.
- CVE-2022-38278JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.
- CVE-2022-38279JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.
- CVE-2022-38280JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.
- CVE-2022-38281JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.
- CVE-2022-38282JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.
- CVE-2022-38283JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list.
- CVE-2022-38284JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list.
- CVE-2022-38285JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list.
- CVE-2022-38286JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/role/list.
- CVE-2022-2528In affected versions of Octopus Deploy it is possible to upload a package to built-in feed with insufficient permissions after re-indexing pOctopus Deploy Octopus Server
- CVE-2022-40305A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network res
- CVE-2022-40299In Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows local users to gain the privileges of other us
- CVE-2020-10735A flaw was found in python.python · libpython +1
- CVE-2022-2526A use-after-free vulnerability was found in systemd.systemd-resolved
- CVE-2022-2905An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key lakernel
- CVE-2022-2964A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices.kernel
- CVE-2022-3169A flaw was found in the Linux kernel.Kernel
- CVE-2022-36087OAuthLib vulnerable DoS when attacker provides malicious IPV6 URIoauthlib
- CVE-2022-38266An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) vi
- CVE-2022-40307An issue was discovered in the Linux kernel through 5.19.8.