CVEs published September 24, 2022
7 CVEs were published on September 24, 2022: 2 critical, 1 high.
- Published
- 7
- Critical
- 2
- High
- 1
- Medium
- 4
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- @lionello/secp256k1-js
- 1
- hyperledger besu · org.hyperledger.besu:evm
- 1
- Nepxion Discover · com.nepxion:discovery
- 1
- Nepxion Discovery · com.nepxion:discovery
- 1
- paritytech frontier · pallet-ethereum
- 1
- renlm MyGraph
- 1
- xdan Jodit Editor · jodit
- 1
Critical 2
High 1
Medium, low and unrated 4
- CVE-2022-23464Potential Server Side Request Forgery (SSRF) in Nepxion DiscoveryNepxion Discovery · com.nepxion:discovery
- CVE-2022-23461Cross-Site Scripting (XSS) in Jodit Editorxdan Jodit Editor · jodit
- CVE-2022-39240Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in MyGraphrenlm MyGraph
- CVE-2022-39242Incorrect Calculation in Frontier leads to inflated Ethereum chain gas pricesparitytech frontier · pallet-ethereum