CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- hcl software launch, hcltech hcl launch container image +1 more HCL Launch container images may contain non-unique https certificates and database encryption key 5.9 Medium
- sauter controls moduweb, sauter-controls moduweb firmware +1 more SAUTER Controls moduWeb firmware version 2.7.1 is vulnerable to reflective cross-site scripting ... 8.8 High
- m-files hubshare Broken access controls on PDFtron data in M-Files Hubshare 8.2 High
- m-files hubshare Broken access controls on PDFtron WebviewerUI in M-Files Hubshare 6.3 Medium
- php point of sale point of sale, phppointofsale php point of sale +1 more CSV Injection in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC 8.8 High
- php point of sale point of sale, phppointofsale php point of sale +1 more Reflected cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. 6.1 Medium
- php point of sale point of sale, phppointofsale php point of sale +1 more Authenticated sensitive information disclosure in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. 4.9 Medium
- php point of sale point of sale, phppointofsale php point of sale +1 more Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via user profile data fields. 9.0 Critical
- php point of sale point of sale, phppointofsale php point of sale +1 more Server-side request forgery (SSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. 9.8 Critical
- php point of sale point of sale, phppointofsale php point of sale +1 more Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via file upload and download functionality. 9.0 Critical
- m-files hubshare XSS in all comments fields in M-Files Hubshare 8.2 High
- php point of sale point of sale, phppointofsale php point of sale +1 more Unauthenticated username enumeration in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. 5.3 Medium
- schoolbox SQL injection in Schoolbox version 21.0.2, by Schoolbox Pty Ltd 8.6 High
- php point of sale point of sale, phppointofsale php point of sale +1 more Cross-site request forgery (CSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC 8.8 High
- m-files hubshare Javascript injection in PDFtron in M-Files Hubshare 8.2 High
- schoolbox Cross-site scripting in Schoolbox version 21.0.2, by Schoolbox Pty Ltd 7.6 High
- php point of sale point of sale, phppointofsale php point of sale +1 more Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC. 9.8 Critical
- php point of sale point of sale, phppointofsale php point of sale +1 more Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via messaging functionality 9.0 Critical
- forma lms, formalms forma lms, formalms +2 more Cross-site scripting in Forma LMS version 4.7 Medium
- forma lms, formalms forma lms, formalms +2 more SQL injection in Forma LMS 7.6 High
- forma lms, formalms forma lms, formalms +2 more File Upload vulnerability in Forma LMS 9.9 Critical
- forma lms, formalms forma lms, formalms +2 more SQL Injection in Forma LMS 7.6 High
- forma lms, formalms forma lms, formalms +2 more Unrestricted Upload of File with Dangerous Type in Forma LMS 9.9 Critical
- forma lms, formalms forma lms, formalms +2 more SQL injection in Forma LMS 8.3 High
- delta electronics infrasuite device master Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated... 7.5 High
- zoom meetings, zoom video communications inc client for meetings (for android, ios, linux, macos, and windows), zoom rooms for conference rooms +3 more +5 more Improper URL parsing in Zoom Clients 8.8 High
- delta electronics infrasuite device master Delta Electronics InfraSuite Device Master versions 00.00.01a and prior allow unauthenticated... 7.5 High
- delta electronics infrasuite device master Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for... 8.8 High
- delta electronics infrasuite device master Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lack proper... 9.8 Critical
- delta electronics infrasuite device master The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and... 9.8 Critical
- delta electronics infrasuite device master Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives... 9.8 Critical
- delta electronics infrasuite device master Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided... 9.8 Critical
- delta electronics infrasuite device master Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network... 8.8 High
- delta electronics infrasuite device master Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied... 9.8 Critical
- zephyrproject zephyr can: denial-of-service can be triggered by a crafted CAN frame 8.2 High
-
elf_rscrates.io ELF header parsing library doesn't check for valid offset No score - softnext mail sqr expert SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Local File Inclusion 6.5 Medium
- softnext mail sqr expert SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Command Injection 9.8 Critical
- ragic Ragic, Inc. Ragic - Reflected XSS 5.4 Medium
- e-excellence u-office force e-Excellence Inc. U-Office Force - Stored XSS 5.4 Medium
- e-excellence u-office force e-Excellence Inc. U-Office Force - Stored XSS 5.4 Medium
- e-excellence u-office force e-Excellence Inc. U-Office Force - Reflected XSS 6.1 Medium
- e-excellence u-office force e-Excellence Inc. U-Office Force - Reflected XSS 6.1 Medium
- e-excellence u-office force e-Excellence Inc. U-Office Force - Path Traversal 6.5 Medium
- e-excellence u-office force e-Excellence Inc. U-Office Force - Path Traversal 6.5 Medium
- e-excellence u-office force e-Excellence Inc. U-Office Force - Open Redirect 6.1 Medium
-
kimageformatsOSS-Fuzz Heap-buffer-overflow in LibRaw::phase_one_correct No score -
ghostscriptOSS-Fuzz Global-buffer-overflow in get_unpack_proc No score -
libxml2OSS-Fuzz Heap-use-after-free in xmlXIncludeDoProcess No score -
spirv-toolsOSS-Fuzz Container-overflow in spvtools::opt::blockmergeutil::CanMergeWithSuccessor No score - Show olderLoading…