CVEs published September 13, 2022
201 CVEs were published on September 13, 2022: 7 critical, 68 high. 1 is now in CISA KEV.
- Published
- 201
- Critical
- 7
- High
- 68
- Medium
- 35
- Low
- 2
- Unrated
- 89
- Now in CISA KEV
- 1
- Fix available
- 93
Most affected products
- Microsoft Windows
- 39
- Siemens Parasolid · Siemens Simcenter Femap
- 20
- Android
- 17
- Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- 5
- lief
- 5
- Microsoft Windows Server
- 5
- typo3 · typo3/cms-core +1
- 5
- Microsoft SharePoint Enterprise Server · Microsoft Share… +1
- 4
- theonedev onedev
- 4
- ikus060/rdiffweb · rdiffweb
- 3
Critical 7
- CVE-2022-20389Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257004Android
- CVE-2022-20388Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227323Android
- CVE-2022-39206CI/CD Docker Escape in OneDevtheonedev onedev
- CVE-2022-34722Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34721Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34718Windows TCP/IP Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-39205Access Control Bypass in Onedevtheonedev onedev
High 68
- CVE-2022-36768IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain rooIBM AIX · IBM VIOS
- CVE-2022-34356IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privIBM VIOS · IBM AIX
- CVE-2022-32555Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST reques
- CVE-2022-2962A DMA reentrancy issue was found in the Tulip device emulation in QEMU.QEMU
- CVE-2022-20392In declareDuplicatePermission of ParsedPermissionUtils.java, there is a possible way to obtain a dangerous permission without user consent dAndroid
- CVE-2022-39208Git Repository Disclosure in Onedevtheonedev onedev
- CVE-2022-38020Visual Studio Code Elevation of Privilege VulnerabilityMicrosoft Visual Studio Code
- CVE-2022-38019AV1 Video Extension Remote Code Execution VulnerabilityMicrosoft AV1 Video Extension
- CVE-2022-38012Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge
- CVE-2022-38010Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +2
- CVE-2022-38011Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2022-38009Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2022-38008Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2022-38007Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege VulnerabilityMicrosoft Azure Guest Configuration · Microsoft Azure ARC
- CVE-2022-38005Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-38004Windows Fax Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-37969Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-37963Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-37964Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-37962Microsoft PowerPoint Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-37961Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2022-37958SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-37957Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-37955Windows Group Policy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-37954DirectX Graphics Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-35841Windows Enterprise App Management Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35838HTTP V3 Denial of Service VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2022-35840Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35836Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35835Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35834Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-35833Windows Secure Channel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-35828Microsoft Defender for Endpoint for Mac Elevation of Privilege VulnerabilityMicrosoft Defender for Endpoint for Mac
- CVE-2022-35830Remote Procedure Call Runtime Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-35805Microsoft Dynamics CRM (on-premises) Remote Code Execution VulnerabilityMicrosoft Dynamics CRM (on-premises)
- CVE-2022-35803Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34734Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34733Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34732Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34731Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34730Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34729Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34726Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34727Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-34725Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34724Windows DNS Server Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2022-34720Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-34719Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-34700Microsoft Dynamics CRM (on-premises) Remote Code Execution VulnerabilityMicrosoft Dynamics CRM (on-premises)
- CVE-2022-33679Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-33647Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-30200Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-30196Windows Secure Channel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-30170Windows Credential Roaming Service Elevation of Privilege VulnerabilityMicrosoft Windows Server 2022, 23H2 Edition · Microsoft Win…
- CVE-2022-26929.NET Framework Remote Code Execution VulnerabilityMicrosoft .NET Framework 3.5 AND · Microsoft .NET Framework
- CVE-2022-26928Windows Photo Import API Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-39203Parsing issue in matrix-org/node-irc leading to room takeoversmatrix-org matrix-appservice-irc · matrix-appservice-irc
- CVE-2022-36103Talos worker join token can be used to get elevated access level to the Talos APIsiderolabs talos · github.com/talos-systems/talos
- CVE-2022-3179Weak Password Requirements in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-39801SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed SAP SE SAP GRC Access Control Emergency Access Management
- CVE-2022-38100Contec Health CMS8000Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- CVE-2022-2989An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possipodman · github.com/containers/podman/v4 +1
- CVE-2022-39151A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-3174Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-35823Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2022-37956Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-38013.NET Core and Visual Studio Denial of Service VulnerabilityMicrosoft Visual Studio 2022 for Mac · Microsoft Visual… +14
- CVE-2022-38342Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a XML External Entity (XXE) vulnerability which allows a
Medium, low and unrated 126
- CVE-2022-38305AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php.
- CVE-2022-38771The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to send SCRIPT tags as injected input
- CVE-2022-38770The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch other users' data upon a succ
- CVE-2022-38769The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to fetch cleartext passwords upon a su
- CVE-2022-38768The mobile application in Transtek Mojodat FAM (Fixed Asset Management) 2.4.6 allows remote attackers to bypass authorization.
- CVE-2022-37191The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI.
- CVE-2022-37190CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE).
- CVE-2022-31322Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged exe
- CVE-2022-31324An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows
- CVE-2022-35413WAPPLES through 6.0 has a hardcoded systemi account.
- CVE-2022-35582Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control.
- CVE-2022-31861Cross site Scripting (XSS) in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being sent to the audit logs.
- CVE-2022-34101A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can place a malicious DLL in
- CVE-2022-34102Insufficient access control vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can
- CVE-2022-38633Genymotion Desktop v3.2.1 was discovered to contain a DLL hijacking vulnerability which allows attackers to escalate privileges and execute
- CVE-2021-36568In certain Moodle products after creating a course, it is possible to add in a arbitrary "Topic" a resource, in this case a "Database" with moodle/moodle
- CVE-2022-35637IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL statIBM DB2 for Linux, UNIX and Windows
- CVE-2022-34336IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.IBM WebSphere Application Server
- CVE-2022-22483IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauIBM DB2 for Linux, UNIX and Windows
- CVE-2022-22330IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag.IBM Control Desk
- CVE-2022-22329IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies.IBM Control Desk
- CVE-2022-39814In NOKIA 1350 OMS R14.2, an Open Redirect vulnerability occurs is the login page via next HTTP GET parameter.
- CVE-2022-39815In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs.
- CVE-2022-39816In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials (cleartext administrator password) occur in the edit configuration page.
- CVE-2022-39817In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs.
- CVE-2022-39819In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs.
- CVE-2022-38637Hospital Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the Username and Password parameters on
- CVE-2022-39821In NOKIA 1350 OMS R14.2, an Insertion of Sensitive Information into an Application Log File vulnerability occurs.
- CVE-2022-40623WAVLINK Quantum D4G (WN531G3) CSRFWAVLINK WN531G3
- CVE-2022-40622WAVLINK Quantum D4G (WN531G3) Session Management by IP AddressWAVLINK WN531G3
- CVE-2022-40621WAVLINK Quantum D4G (WN531G3) Pass-The-HashWAVLINK WN531G3
- CVE-2022-38497LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.lief
- CVE-2022-38496LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.lief
- CVE-2022-38495LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.lief
- CVE-2022-38307LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachOlief
- CVE-2022-38306LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.lief
- CVE-2022-3182Improper Access Control vulnerability in the Duo SMS two-factor of Devolutions Remote Desktop Manager 2022.2.14 and earlier allows attackersDevolutions Remote Desktop Manager
- CVE-2022-32244Under certain conditions an attacker authenticated as a CMS administrator access the BOE Commentary database and retrieve (non-personal) sysSAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-3205Controller: cross site scripting in automation controller uiRed Hat Ansible Automation Platform
- CVE-2022-20399In the SEPolicy configuration of system apps, there is a possible access to the 'ip' utility due to an insecure default value.Android
- CVE-2022-20398In addOrUpdateNetwork of WifiServiceImpl.java, there is a possible way for a guest user to configure Wi-Fi due to a permissions bypass.Android
- CVE-2022-20396In SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth, without permission or user interaction, due Android
- CVE-2022-20395In checkAccess of MediaProvider.java, there is a possible file deletion due to a path traversal error.Android
- CVE-2022-20393In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow.Android
- CVE-2022-20391Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257000Android
- CVE-2022-20390Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238257002Android
- CVE-2022-20387Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227324Android
- CVE-2022-20386Summary:Product: AndroidVersions: Android SoCAndroid ID: A-238227328Android
- CVE-2022-20385a function called 'nla_parse', do not check the len of para, it will check nla_type (which can be controlled by userspace) with 'maxtype' (iAndroid
- CVE-2021-0943In MMU_MapPages of TBD, there is a possible out of bounds write due to improper input validation.Android
- CVE-2021-0942The path in this case is a little bit convoluted.Android
- CVE-2021-0871In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that couldAndroid
- CVE-2021-0697In PVRSRVRGXSubmitTransferKM of rgxtransfer.c, there is a possible user after free due to a race condition.Android
- CVE-2022-39207Persistent XSS in OneDevtheonedev onedev
- CVE-2022-38006Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-37959Network Device Enrollment Service (NDES) Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2022-35832Windows Event Tracing Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-35831Windows Remote Access Connection Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-34728Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-34723Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-40635Improper Control of Dynamically-Managed Code Resources in Crafter StudioCrafter Software Crafter CMS · org.craftercms:craftercms
- CVE-2022-40634Improper Control of Dynamically-Managed Code Resources in Crafter StudioCrafter Software Crafter CMS · org.craftercms:crafter-studio
- CVE-2022-34100A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYS
- CVE-2022-39202IRC mode parameter confusion in matrix-appservice-ircmatrix-org matrix-appservice-irc · matrix-appservice-irc
- CVE-2022-36105User Enumeration via Response Timing in TYPO3typo3 · typo3/cms-core +1
- CVE-2022-36106Missing check for expiration time of password reset token in TYPO3typo3 · typo3/cms-core +1
- CVE-2022-36107Stored Cross-Site Scripting via FileDumpControllertypo3 · typo3/cms-core +1
- CVE-2022-36104Denial of Service via Page Error Handling in TYPO3/cmstypo3 · typo3/cms-core +1
- CVE-2022-36108Cross-Site Scripting in typo3/cms-coretypo3 · typo3/cms-core +1
- CVE-2022-32190Failure to strip relative path components in net/urlGo standard library net/url · stdlib
- CVE-2022-36020Bypass of Cross-Site Scripting Protection in typo3/html-sanitizerTYPO3 html-sanitizer · typo3/html-sanitizer +2
- CVE-2022-39014Under certain conditions SAP BusinessObjects Business Intelligence Platform Central Management Console (CMC) - version 430, allows an attackSAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-39799An attacker with no prior authentication could craft and send malicious script to SAP GUI for HTML within Fiori Launchpad, resulting in reflSAP SE SAP NetWeaver AS ABAP
- CVE-2022-35298SAP NetWeaver Enterprise Portal (KMC) - version 7.50, does not sufficiently encode user-controlled inputs, resulting in Cross-Site ScriptingSAP SE SAP NetWeaver Enterprise Portal
- CVE-2022-35294An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Server ABAP, which is tSAP SE SAP NetWeaver AS ABAP
- CVE-2022-35292In SAP Business One application when a service is created, the executable path contains spaces and isn’t enclosed within quotes, leading to SAP SE SAP Business One
- CVE-2022-3170An out-of-bounds access issue was found in the Linux kernel sound subsystem.kernel
- CVE-2022-3029Fatal error on incorrect base64 data in RRDPNLnet Labs Routinator · routinator
- CVE-2022-36782Pal Electronics Systems - Pal Gate Authorization ErrorsPal Electronics Systems Pal Gate
- CVE-2022-36778Synel - eHarmony Stored XSSSynel eHarmony
- CVE-2022-36780Avdor CIS - crystal quality Credentials Management ErrorsAvdor CIS crystal quality
- CVE-2022-36779PROSCEND - PROSCEND / ADVICE .Ltd - G/5G Industrial Cellular Router (with GPS)4 Unauthenticated OS Command InjectionPROSCEND M330-w / M330-W5 · PROSCEND M350-5G / M350-W5G… +2
- CVE-2022-38453Contec Health CMS8000Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- CVE-2022-3027Contec Health CMS8000Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- CVE-2022-38069Contec Health CMS8000Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- CVE-2022-36385Contec Health CMS8000Contec Health CMS8000 CONTEC ICU CCU Vital Signs Patient Mo…
- CVE-2022-1602A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8).HP ThinPro OS
- CVE-2022-38542Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the kill_session interface.
- CVE-2022-38539Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply.
- CVE-2022-38139WordPress RD Station plugin <= 5.2.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesRD Station
- CVE-2022-2990An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possbuildah · github.com/containers/buildah
- CVE-2022-1278A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.WildFly · org.wildfly.bom:wildfly
- CVE-2022-38616SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j_id90 parameter at /feegroups/tgrt_group.
- CVE-2022-39156A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39154A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39155A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39153A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39152A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39150A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39148A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39149A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39147A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39146A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39145A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39144A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39143A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39142A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V33.1 (All versions >= V33.1.262 < V33.1.263), Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39141A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39139A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39140A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39138A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-39137A vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.262), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34Siemens Parasolid · Siemens Simcenter Femap
- CVE-2022-38466A vulnerability has been identified in CoreShield One-Way Gateway (OWG) Software (All versions < V2.2).Siemens CoreShield One-Way Gateway (OWG) Software
- CVE-2022-37302A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a crash of the ContSchneider Electric EcoStruxure Control Expert
- CVE-2022-3175Missing Custom Error Page in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-3190Infinite loop in the F5 Ethernet Trailer protocol dissector in Wireshark 3.6.0 to 3.6.7 and 3.4.0 to 3.4.15 allows denial of service via pacSharkFest Foundation Wireshark
- CVE-2022-35295In SAP Host Agent (SAPOSCOL) - version 7.22, an attacker may use files created by saposcol to escalate privileges for themselves.SAP SE SAP Host Agent
- CVE-2022-35837Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-37011A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All veSiemens Mendix SAML
- CVE-2022-37703In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary.
- CVE-2022-38329A CSRF vulnerability in Shopxian CMS 3.0.0 could allow an unauthenticated, remote attacker to craft a malicious link, potentially causing th
- CVE-2022-38537Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_file, end_file, start_time, and stop
- CVE-2022-38538Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module.
- CVE-2022-38540Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the create_kill_session inte
- CVE-2022-38541Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the start_time and stop_time parameters in the
- CVE-2022-39158A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC,Siemens RUGGEDCOM i800 · Siemens RUGGEDCOM i800NC +140