CVEs published in September 2022
8 tracked CVEs from 5 vendors had their first vendor advisory published in September 2022: 4 critical, 3 high, 3 in CISA KEV. Newest first.
2 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2022-20818High
Cisco SD-WAN Software Privilege Escalation Vulnerabilities
Cisco · 1 advisory - Added
CVE-2022-3236CriticalCISA KEV
Sophos Firewall Code Injection Vulnerability
Sophos · 1 advisory - Added
CVE-2022-37969HighCISA KEV
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
MS Server · 1 advisory - Added
CVE-2022-37959Medium
Network Device Enrollment Service (NDES) Security Feature Bypass Vulnerability
MS Server · 1 advisory - Added
CVE-2022-34718Critical
Windows TCP/IP Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-27593CriticalCISA KEV
QNAP Photo Station Externally Controlled Reference Vulnerability
QNAP · 1 advisory - Added
CVE-2022-1807High
Sophos Firewall: Multiple SQLi vulnerabilities in Webadmin
Sophos · 1 advisory - Added
CVE-2022-31814Critical
pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root
pfSense · 1 advisory