CVEs published September 15, 2022
85 CVEs were published on September 15, 2022: 2 critical, 37 high.
- Published
- 85
- Critical
- 2
- High
- 37
- Medium
- 3
- Low
- 1
- Unrated
- 42
- Now in CISA KEV
- 0
- Fix available
- 14
Most affected products
- Ansys SpaceClaim
- 19
- NIKON NIS-Elements Viewer
- 9
- steal
- 5
- nextcloud security-advisories
- 2
- EZVIZ CS-C6N-A0-1C2WFR
- 1
- EZVIZ CS-CV248 · EZVIZ CS-C6N-A0-1C2WFR +3
- 1
- github cmark-gfm
- 1
- Google Kubevirt · kubevirt.io/kubevirt
- 1
- gpac/gpac
- 1
- HCL Software HCL Traveler
- 1
Critical 2
High 37
- CVE-2022-27561HCL Traveler is susceptible to a Reflected Cross-Site Scripting vulnerability in the web admin (LotusTraveler.nsf)HCL Software HCL Traveler
- CVE-2022-39213Out-of-bounds Read in go-cvsspandatix go-cvss · github.com/pandatix/go-cvss
- CVE-2022-39215The readDir Endpoint Scope can be Bypassed With Symbolic Links in Tauritauri-apps tauri · tauri
- CVE-2022-29240Uninitialized memory read in LZ4 decompression leads to authentication bypass in Scyllascylladb scylla
- CVE-2022-1798Path Traversal vulnerability in KubevirtGoogle Kubevirt · kubevirt.io/kubevirt
- CVE-2022-40663This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0.NIKON NIS-Elements Viewer
- CVE-2022-40662This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0.NIKON NIS-Elements Viewer
- CVE-2022-40661This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0.NIKON NIS-Elements Viewer
- CVE-2022-40660This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0.NIKON NIS-Elements Viewer
- CVE-2022-40659This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0.NIKON NIS-Elements Viewer
- CVE-2022-40658This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0.NIKON NIS-Elements Viewer
- CVE-2022-40657This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0.NIKON NIS-Elements Viewer
- CVE-2022-40655This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 1.2100.1483.0.NIKON NIS-Elements Viewer
- CVE-2022-40656This vulnerability allows remote attackers to execute arbitrary code on affected installations of NIKON NIS-Elements Viewer 13.2.0.21165.NIKON NIS-Elements Viewer
- CVE-2022-40654This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40653This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40652This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40651This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40650This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40649This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40648This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40646This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40647This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40645This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40644This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40643This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40642This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40641This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40640This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40639This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40638This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40636This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-40637This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1.Ansys SpaceClaim
- CVE-2022-3001Vulnerability in Milesight Video Management Systems (VMS)Milesight Video Management Systems
- CVE-2022-2472Improper Initialization vulnerability in local server authentication logicEZVIZ CS-C6N-A0-1C2WFR
- CVE-2022-3221Cross-Site Request Forgery (CSRF) in ikus060/rdiffwebikus060/rdiffweb · rdiffweb
- CVE-2022-39209Uncontrolled Resource Consumption in cmark-gfmgithub cmark-gfm
Medium, low and unrated 46
- CVE-2022-36074Authentication headers exposed on by Nextcloud Servernextcloud security-advisories
- CVE-2022-36075File list exposure in Nextcloud Files Access Controlnextcloud security-advisories
- CVE-2022-38814A stored cross-site scripting (XSS) vulnerability in the auth_settings component of FiberHome AN5506-02-B vRP2521 allows attackers to execut
- CVE-2022-38326Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the page
- CVE-2022-38325Tenda AC15 WiFi Router V15.03.05.19_multi and AC18 WiFi Router V15.03.05.19_multi were discovered to contain a buffer overflow via the fileP
- CVE-2022-37260A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the input variable in main.js.steal
- CVE-2022-38535TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg function.
- CVE-2022-38534TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution (RCE) vulnerability via the setdiagnosicfg function.
- CVE-2022-37861There is a remote code execution (RCE) vulnerability in Tenhot TWS-100 V4.0-201809201424 router device.
- CVE-2022-37264Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js.steal
- CVE-2022-37262A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.steal
- CVE-2022-38890Nginx NJS v0.7.7 was discovered to contain a segmentation violation via njs_utf8_next at src/njs_utf8.h
- CVE-2022-38600Mplayer SVN-r38374-13.0.1 is vulnerable to Memory Leak via vf.c and vf_vo.c.
- CVE-2022-37201JFinal CMS 5.1.0 is vulnerable to SQL Injection.
- CVE-2022-38853Certain The MPlayer Project products are vulnerable to Buffer Overflow via function asf_init_audio_stream() of libmpdemux/asfheader.c.
- CVE-2022-38856Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c.
- CVE-2022-38862Certain The MPlayer Project products are vulnerable to Buffer Overflow via function play() of libaf/af.c:639.
- CVE-2022-37207JFinal CMS 5.1.0 is affected by: SQL Injection.
- CVE-2022-29649Qsmart Next v4.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability.
- CVE-2022-40306The login form /Login in ECi Printanista Hub (formerly FMAudit Printscout) before 5.5.2 (July 2023) performs expensive RSA key-generation op
- CVE-2022-3211Cross-site Scripting (XSS) - Stored in pimcore/pimcorepimcore/pimcore
- CVE-2021-44076An issue was discovered in CrushFTP 9.
- CVE-2022-37257Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npmsteal
- CVE-2022-37266Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.steal
- CVE-2022-38788An issue was discovered in Nokia FastMile 5G Receiver 5G14-B 1.2104.00.0281.
- CVE-2022-38789An issue was discovered in Airties Smart Wi-Fi before 2020-08-04.
- CVE-2022-31735OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601).OpenAM
- CVE-2022-40738An issue was discovered in Bento4 through 1.6.0-639.
- CVE-2022-40736An issue was discovered in Bento4 1.6.0-639.
- CVE-2022-40737An issue was discovered in Bento4 through 1.6.0-639.
- CVE-2022-38595Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_user.php.
- CVE-2022-38594Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/edit_visitor.php.
- CVE-2022-38352ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache.topthink/framework
- CVE-2022-38323Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.ph
- CVE-2022-3222Uncontrolled Recursion in gpac/gpacgpac/gpac
- CVE-2022-38334XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree() at Catalog.cc.
- CVE-2022-38850The MPlayer Project mencoder SVN-r38374-13.0.1 is vulnerable to Divide By Zero via the function config () of llibmpcodecs/vf_scale.c.
- CVE-2022-38851Certain The MPlayer Project products are vulnerable to Out-of-bounds Read via function read_meta_record() of mplayer/libmpdemux/asfheader.c.
- CVE-2022-38855Certain The MPlayer Project products are vulnerable to Buffer Overflow via function gen_sh_video () of mplayer/libmpdemux/demux_mov.c.
- CVE-2022-38858Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mov_build_index() of libmpdemux/demux_mov.c.
- CVE-2022-38860Certain The MPlayer Project products are vulnerable to Divide By Zero via function demux_open_avi() of libmpdemux/demux_avi.c which affects
- CVE-2022-38861The MPlayer Project mplayer SVN-r38374-13.0.1 is vulnerable to memory corruption via function free_mp_image() of libmpcodecs/mp_image.c.
- CVE-2022-38863Certain The MPlayer Project products are vulnerable to Buffer Overflow via function mp_getbits() of libmpdemux/mpeg_hdr.c which affects menc
- CVE-2022-38864Certain The MPlayer Project products are vulnerable to Buffer Overflow via the function mp_unescape03() of libmpdemux/mpeg_hdr.c.
- CVE-2022-38865Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demux_avi_read_packet of libmpdemux/demux_avi.c.
- CVE-2022-38866Certain The MPlayer Project products are vulnerable to Buffer Overflow via read_avi_header() of libmpdemux/aviheader.c .