# CVEs published 2022-09-18

7 CVEs were published on September 18, 2022: 0 critical, 1 high. Days are UTC.

- [CVE-2022-40774](https://cve.now/CVE-2022-40774.md): An issue was discovered in Bento4 through 1.6.0-639. (no CVSS)
- [CVE-2022-40775](https://cve.now/CVE-2022-40775.md): An issue was discovered in Bento4 through 1.6.0-639. (no CVSS)
- [CVE-2022-40769](https://cve.now/CVE-2022-40769.md): profanity through 1.60 has only four billion possible RNG initializations. (no CVSS)
- [CVE-2022-25873](https://cve.now/CVE-2022-25873.md): Cross-site Scripting (XSS) (CVSS 4.6, vuetify · org.webjars.npm:vuetify)
- [CVE-2022-40766](https://cve.now/CVE-2022-40766.md): Modern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '" OR 1 = 1 -- - , \<?php' substring. (no CVSS)
- [CVE-2022-3235](https://cve.now/CVE-2022-3235.md): Use After Free in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2022-40768](https://cve.now/CVE-2022-40768.md): drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex\_qu (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.