CVEs published September 11, 2022
9 CVEs were published on September 11, 2022: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Apache Software Foundation Apache Calcite · org.apache.calc…
- 1
- com.diffplug.gradle:goomph
- 1
- github.com/gophish/gophish
- 1
Medium, low and unrated 9
- CVE-2022-37796In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripti
- CVE-2022-37794In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.
- CVE-2022-40325SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.
- CVE-2022-40324SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.
- CVE-2022-40323SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.
- CVE-2022-40322SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.
- CVE-2022-25295Open Redirectgithub.com/gophish/gophish
- CVE-2022-26049Arbitrary File Write via Archive Extraction (Zip Slip)com.diffplug.gradle:goomph
- CVE-2022-39135Apache Calcite: potential XEE attacksApache Software Foundation Apache Calcite · org.apache.calc…