CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- veritas netbackupAn issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The...5.3 Medium
- veritas netbackupAn issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An...9.0 Critical
- autodesk advanced material exchange, moldflow adviser, moldflow communicator +1 more +3 moreA malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreA malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreA maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreA maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreParsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond...7.5 High
- autodesk autocad, design review, autocad advance steel +8 more +10 moreA maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and...7.8 High
- snyk cli, golang cli +1 moreSnyk CLI affected by Command Injection vulnerability7.8 High
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBit...8.8 High
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_Atom::TypeFromString...8.8 High
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBits...8.8 High
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4_AvcFrameParser::Feed...6.5 Medium
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_AtomFactory:...6.5 Medium
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor:...6.5 Medium
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_SttsAtom::Create function...6.5 Medium
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component.6.5 Medium
- nasm netwide assemblernasm v2.16 was discovered to contain a stack overflow in the Ndisasm component5.5 Medium
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_Processor::Process function...6.5 Medium
- goolytics project goolytics, unknown goolytics – simple google analytics +1 moreGoolytics - Simple Google Analytics < 1.1.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- donation thermometer project thermometer, rhewlif donation thermometer +1 moreDonation Thermometer < 2.1.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- najeebmedia frontend file manager, unknown frontend file manager plugin +1 moreFrontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload8.8 High
- najeebmedia frontend file manager, unknown frontend file manager plugin +1 moreFrontend File Manager < 21.3 - Unauthenticated File Renaming5.3 Medium
- dylanjkotze zephyr project managerZephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSS5.4 Medium
- wp socializer project socializer, unknown wp socializer – simple & easy social media share icons +1 moreWP Socializer < 7.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- dsgvo-for-wp dsgvo all in one for wpDSGVO All in one for WP < 4.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- mojoportalmojoPortal v2.7 was discovered to contain a path traversal vulnerability via the "f" parameter at...6.5 Medium
- lief-project liefLIEF vulnerable to denial of service through segmentation fault6.5 Medium
- linuxfoundation dapr dashboardDapr Dashboard vulnerable to Incorrect Access Control7.5 High
- orchardcoreOrchardCore - HTML Injection5.4 Medium
ubuntu-advantage-proTuxCare,ubuntu-advantage-toolsTuxCare +1 moreFix CVE(s):No score- dedecmsDedeCMS 5.7.98 has a file upload vulnerability in the background.7.2 High
exiv2OSS-FuzzHeap-buffer-overflow in Exiv2::MemIo::readNo scorehaproxyOSS-FuzzHeap-buffer-overflow in parse_lineNo scorelibdatetime-timezone-perlDebianlibdatetime-timezone-perl - new timezone databaseNo scoretzdataDebiantzdata - new timezone databaseNo score- autodesk subassembly composerA maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could...7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 22 +3 more +5 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.0 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 22 +3 more +5 moreMicrosoft Exchange Server Elevation of Privilege Vulnerability8.8 High
- strongswan, canonical ubuntu linux, debian linux +2 more +4 morestrongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation...7.5 High
- heartex label studioHeartex - Label Studio Community Edition vulnerable to SSRF in the Data Import module6.5 Medium
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreA maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer...7.8 High
KernelLinuxdrm/radeon: add a force flush to delay work when radeonNo scoreKernelLinuxALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()No scoreKernelLinuxALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()No scoreKernelLinuxsch_sfb: Don't assume the skb is still around after enqueueing to childNo scoreKernelLinuxscsi: mpt3sas: Fix use-after-free warningNo scoreKernelLinuxieee802154: cc2520: add rc code in cc2520_tx()No scoreKernelLinuxwifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()No score- Show moreLoading…