Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2022

75 records · 12 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2022-25813
    50Plan

    Server-Side Template Injection affecting the ecommerce plugin of Apache OFBiz

    HighCVSS 7.5Proof of conceptEPSS 67%

    apache · ofbizSep 2, 2022

  • CVE-2022-36642
    43Plan

    A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to acc

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    telosalliance · omnia mpx node firmwareSep 2, 2022

  • CVE-2022-31814
    67This week

    pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP H

    CriticalCVSS 9.8WeaponizedEPSS 91%

    netgate · pfblockerngSep 5, 2022

  • CVE-2022-2633
    42Plan

    The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'd

    HighCVSS 8.2Proof of conceptEPSS 33%

    plugins360 · all-in-one video gallerySep 6, 2022

  • CVE-2022-36067
    54Plan

    vm2 vulnerable to Sandbox Escape before v3.9.11

    CriticalCVSS 10.0Proof of conceptEPSS 47%

    vm2 project · vm2Sep 6, 2022

  • CVE-2021-36782
    40Plan

    Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object

    CriticalCVSS 9.9WeaponizedEPSS 4%

    suse · rancherSep 7, 2022

  • CVE-2022-27593
    92Now

    An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station.

    CriticalCVSS 9.1KEVWeaponizedEPSS 87%

    qnap · photo stationSep 8, 2022

  • CVE-2022-30079
    43Plan

    Command injection vulnerability was discovered in Netgear R6200 v2 firmware through R6200v2-V1.0.3.12 via binary /sbin/acos_service that cou

    HighCVSS 8.8No exploitEPSS 25%

    netgear · r6200Sep 8, 2022

  • CVE-2022-36094
    55Plan

    XWiki Platform Web Parent POM vulnerable to XSS in the attachment history

    CriticalCVSS 9.0No exploitEPSS 64%

    xwiki · xwikiSep 8, 2022

  • CVE-2022-36096
    54Plan

    XWiki Platform vulnerable to Cross-site Scripting in the deleted attachments list

    CriticalCVSS 9.0No exploitEPSS 60%

    xwiki · xwikiSep 8, 2022

  • CVE-2022-36097
    41Plan

    XWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form

    MediumCVSS 6.1No exploitEPSS 58%

    xwiki · xwikiSep 8, 2022

  • CVE-2022-36098
    57Plan

    XWiki Platform Mentions UI vulnerable to Cross-site Scripting

    CriticalCVSS 9.0No exploitEPSS 71%

    xwiki · xwikiSep 8, 2022

  • CVE-2022-36099
    58Plan

    XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability

    HighCVSS 8.8No exploitEPSS 76%

    xwiki · xwikiSep 8, 2022

  • CVE-2022-36100
    57Plan

    XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection

    HighCVSS 8.8No exploitEPSS 73%

    xwiki · xwikiSep 8, 2022

  • CVE-2022-25765
    51Plan

    The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized.

    CriticalCVSS 9.8Proof of conceptEPSS 41%

    pdfkit project · pdfkitSep 9, 2022

  • CVE-2022-39810
    41Plan

    An issue was discovered in WSO2 Enterprise Integrator 6.4.0.

    MediumCVSS 6.1No exploitEPSS 57%

    wso2 · enterprise integratorSep 9, 2022

  • CVE-2022-37860
    63This week

    The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection v

    CriticalCVSS 9.8No exploitEPSS 80%

    tp-link · m7350 firmwareSep 12, 2022

  • CVE-2022-33679
    35Monitor

    Windows Kerberos Elevation of Privilege Vulnerability

    HighCVSS 8.1Proof of conceptEPSS 11%

    microsoft · windows server 2008Sep 13, 2022

  • CVE-2022-34718
    55Plan

    Windows TCP/IP Remote Code Execution Vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 54%

    microsoft · windows 10Sep 13, 2022

  • CVE-2022-34721
    62This week

    Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 76%

    microsoft · windows 10Sep 13, 2022

  • CVE-2022-34729
    34Monitor

    Windows GDI Elevation of Privilege Vulnerability

    HighCVSS 7.8No exploitEPSS 10%

    microsoft · windows 10Sep 13, 2022

  • CVE-2022-35803
    38Monitor

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    HighCVSS 7.8No exploitEPSS 23%

    microsoft · windows 10Sep 13, 2022

  • CVE-2022-35823
    51Plan

    Microsoft SharePoint Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 53%

    microsoft · sharepoint enterprise serverSep 13, 2022

  • CVE-2022-37954
    44Plan

    DirectX Graphics Kernel Elevation of Privilege Vulnerability

    HighCVSS 7.8No exploitEPSS 44%

    microsoft · windows 10Sep 13, 2022

  • CVE-2022-37957
    35Monitor

    Windows Kernel Elevation of Privilege Vulnerability

    HighCVSS 7.8No exploitEPSS 13%

    microsoft · windows 10Sep 13, 2022

  • CVE-2022-37958
    58Plan

    SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

    HighCVSS 8.1No exploitEPSS 86%

    microsoft · windows 10Sep 13, 2022

  • CVE-2022-37961
    50Plan

    Microsoft SharePoint Server Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 50%

    microsoft · sharepoint enterprise serverSep 13, 2022

  • CVE-2022-37969
    69This week

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 28%

    microsoft · windows 10 1507Sep 13, 2022

  • CVE-2022-35413
    44Plan

    WAPPLES through 6.0 has a hardcoded systemi account.

    CriticalCVSS 9.8Proof of conceptEPSS 17%

    pentasecurity · wapplesSep 13, 2022

  • CVE-2022-37190
    49Plan

    CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE).

    HighCVSS 8.8Proof of conceptEPSS 45%

    cuppacms · cuppacmsSep 13, 2022

  • CVE-2022-36667
    42Plan

    Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function.

    HighCVSS 8.8No exploitEPSS 24%

    garage management system project · garage management systemSep 14, 2022

  • CVE-2022-37661
    49Plan

    SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature.

    CriticalCVSS 9.8Proof of conceptEPSS 34%

    adtran · sr510n firmwareSep 14, 2022

  • CVE-2022-38308
    45Plan

    TOTOLink A700RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cst

    CriticalCVSS 9.8No exploitEPSS 21%

    totolink · a7000ru firmwareSep 14, 2022

  • CVE-2022-38352
    45Plan

    ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache.

    CriticalCVSS 9.8No exploitEPSS 21%

    thinkphp · thinkphpSep 14, 2022

  • CVE-2022-36532
    42Plan

    Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload an

    HighCVSS 8.8Proof of conceptEPSS 24%

    bolt · bolt cmsSep 15, 2022

  • CVE-2022-36533
    34Monitor

    Super Flexible Software GmbH & Co.

    MediumCVSS 5.4No exploitEPSS 42%

    syncovery · syncoverySep 15, 2022

  • CVE-2022-36534
    51Plan

    Super Flexible Software GmbH & Co.

    HighCVSS 8.8WeaponizedEPSS 52%

    syncovery · syncoverySep 15, 2022

  • CVE-2022-36536
    60This week

    An issue in the component post_applogin.php of Super Flexible Software GmbH & Co.

    CriticalCVSS 9.8WeaponizedEPSS 4%

    syncovery · syncoverySep 15, 2022

  • CVE-2022-2863
    27Monitor

    WPvivid Backup < 0.9.76 - Admin+ Arbitrary File Read

    MediumCVSS 4.9Proof of conceptEPSS 25%

    wpvivid · migration\, backup\, stagingSep 16, 2022

  • CVE-2022-40152
    36Monitor

    Stack Buffer Overflow in Woodstox

    HighCVSS 7.5No exploitEPSS 18%

    xstream · xstreamSep 16, 2022

  • CVE-2022-38827
    43Plan

    TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi

    CriticalCVSS 9.8No exploitEPSS 12%

    totolink · t6 firmwareSep 16, 2022

  • CVE-2022-38828
    45Plan

    TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi

    CriticalCVSS 9.8No exploitEPSS 20%

    totolink · t6 firmwareSep 16, 2022

  • CVE-2022-38621
    47Plan

    Doufox v0.0.4 was discovered to contain a remote code execution (RCE) vulnerability via the edit file page.

    CriticalCVSS 9.8No exploitEPSS 25%

    doufox · doufoxSep 16, 2022

  • CVE-2022-40300
    69This week

    Zoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before 5600, and Access Manager Plus through 4304 bef

    CriticalCVSS 9.8No exploitEPSS 99%

    zohocorp · manageengine access manager plusSep 16, 2022

  • CVE-2022-39960
    29Monitor

    The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks.

    MediumCVSS 5.3Proof of conceptEPSS 25%

    netic · group exportSep 17, 2022

  • CVE-2022-2753
    49Plan

    Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Stored XSS

    MediumCVSS 6.1No exploitEPSS 83%

    ketchup restaurant reservations project · ketchup restaurant reservationsSep 19, 2022

  • CVE-2022-2754
    51Plan

    Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi

    CriticalCVSS 9.8No exploitEPSS 39%

    ketchup restaurant reservations project · ketchup restaurant reservationsSep 19, 2022

  • CVE-2022-2840
    43Plan

    Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    zephyr-one · zephyr project managerSep 19, 2022

  • CVE-2022-3142
    39Monitor

    NEX-Forms < 7.9.7 - Authenticated SQLi

    HighCVSS 8.8Proof of conceptEPSS 14%

    basixonline · nex-formsSep 19, 2022

  • CVE-2022-35914
    99Now

    /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    glpi-project · glpiSep 19, 2022

  • CVE-2022-3218
    61This week

    Necta WiFi Mouse (Mouse Server) client-side authentication bypass

    CriticalCVSS 9.8WeaponizedEPSS 74%

    necta · wifi mouse serverSep 19, 2022

  • CVE-2022-40139
    59Plan

    Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients

    HighCVSS 7.2KEVWeaponizedEPSS 3%

    trendmicro · apex oneSep 19, 2022

  • CVE-2022-38545
    48Plan

    Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a

    CriticalCVSS 9.6No exploitEPSS 34%

    valine.js · valineSep 19, 2022

  • CVE-2022-38916
    45Plan

    A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files

    CriticalCVSS 9.8No exploitEPSS 18%

    pagekit · pagekitSep 20, 2022

  • CVE-2022-32917
    63This week

    The issue was addressed with improved bounds checks.

    HighCVSS 7.8KEVWeaponizedEPSS 5%

    apple · ipadosSep 20, 2022

  • CVE-2022-37027
    35Monitor

    Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options.

    HighCVSS 7.2No exploitEPSS 22%

    ahsay · cloud backup suiteSep 21, 2022

  • CVE-2022-29799
    26Monitor

    A vulnerability was found in networkd-dispatcher.

    MediumCVSS 5.5Proof of conceptEPSS 11%

    microsoft · windows defender for endpointSep 21, 2022

  • CVE-2022-39197
    68This week

    An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTM

    MediumCVSS 6.1KEVWeaponizedEPSS 46%

    helpsystems · cobalt strikeSep 21, 2022

  • CVE-2022-3236
    99Now

    A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    sophos · firewallSep 23, 2022

  • CVE-2022-40855
    43Plan

    Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'.

    CriticalCVSS 9.8No exploitEPSS 14%

    tenda · w20e firmwareSep 23, 2022

  • CVE-2022-38742
    46Plan

    Rockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service Attack

    CriticalCVSS 9.8No exploitEPSS 22%

    rockwellautomation · thinmanagerSep 23, 2022

  • CVE-2022-36944
    42Plan

    Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file.

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    scala-lang · scalaSep 23, 2022

  • CVE-2022-41352
    98Now

    An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0.

    CriticalCVSS 9.8KEVWeaponizedEPSS 95%

    synacor · zimbra collaboration suiteSep 25, 2022

  • CVE-2022-3062
    37Monitor

    Simple File List < 4.4.12 - Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 44%

    simplefilelist · simple-file-listSep 26, 2022

  • CVE-2022-2856
    60This week

    Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbit

    MediumCVSS 6.5KEVWeaponizedEPSS 4%

    google · chromeSep 26, 2022

  • CVE-2022-2998
    44Plan

    Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in

    HighCVSS 8.8No exploitEPSS 30%

    google · chromeSep 26, 2022

  • CVE-2022-3038
    72This week

    Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption v

    HighCVSS 8.8KEVWeaponizedEPSS 24%

    google · chromeSep 26, 2022

  • CVE-2022-3075
    70This week

    Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer pro

    CriticalCVSS 9.6KEVWeaponizedEPSS 5%

    google · chromeSep 26, 2022

  • CVE-2022-3323
    39Monitor

    An SQL injection vulnerability in Advantech iView 5.7.04.6469.

    HighCVSS 7.5No exploitEPSS 29%

    advantech · iviewSep 27, 2022

  • CVE-2022-40878
    42Plan

    In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Exe

    HighCVSS 8.8No exploitEPSS 23%

    exam reviewer management system project · exam reviewer management systemSep 27, 2022

  • CVE-2022-31629
    41Plan

    $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities

    MediumCVSS 6.5Proof of conceptEPSS 49%

    php · phpSep 28, 2022

  • CVE-2022-21826
    35Monitor

    Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request,

    MediumCVSS 5.4No exploitEPSS 46%

    ivanti · connect secureSep 30, 2022

  • CVE-2022-28851
    32Monitor

    AEM Reflected XSS Arbitrary code execution

    MediumCVSS 5.4No exploitEPSS 36%

    adobe · experience managerSep 30, 2022

  • CVE-2022-36961
    57Plan

    Orion Platform SQL Injection Privilege Escalation Vulnerability

    HighCVSS 8.8No exploitEPSS 74%

    solarwinds · orion platformSep 30, 2022

  • CVE-2022-20775
    65This week

    Cisco SD-WAN Software Privilege Escalation Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 12%

    cisco · catalyst sd-wan managerSep 30, 2022