CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- discourse discotocArbitrary HTML injection in table-of-contents theme component in DiscoTOC5.4 Medium
- teluu pjsip, pjsip pjproject +1 moreMedia transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip9.1 Critical
- mybbMail settings' command parameter injection in mybb7.2 High
- pjsip, pjsip pjproject +1 moreBuffer overflow in pjlib scanner and pjmedia7.5 High
- sylabs sif, singularity image format +1 moreDigital Signature Hash Algorithms Not Validated in sylabs/sif6.3 Medium
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreThere are buffer overflow vulnerabilities in multiple underlying services that could lead to...9.8 Critical
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 morePath Traversal in ikus060/rdiffweb8.2 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreWeak Password Requirements in ikus060/rdiffweb3.5 Low
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb3.6 Low
- rabbitmq rabbitmq-server, vmware rabbitmq, broadcom rabbitmq server +2 morePredictable credential obfuscation seed value used in rabbitmq-server5.5 Medium
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm5.4 Medium
- moodleMoodle Cross-Site Request Forgery (CSRF)8.8 High
- avaya aura application enablement servicesAvaya Aura Application Enablement Services weak permissions in web application7.7 High
- octopus serverIn affected versions of Octopus Server it was identified that a session cookie could be used as...5.3 Medium
- facebook hermesIt was possible to trigger an infinite recursion condition in the error handler when Hermes...7.5 High
- octopus serverIn affected versions of Octopus Server it was identified that the same encryption process was...5.3 Medium
- hitachi storage plug-in for vmware vcenter, storage plug-in +1 morePrivilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter5.4 Medium
- beckmancoulter remisol advanceThe default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol...6.5 Medium
- beckmancoulter remisol advanceThe default privileges for the running service Normand License Manager in Beckman Coulter Remisol...5.5 Medium
- beckmancoulter remisol advanceThe default privileges for the running service Normand Service Manager in Beckman Coulter Remisol...5.5 Medium
- beckmancoulter remisol advanceThe default privileges for the running service Normand Viewer Service in Beckman Coulter Remisol...5.5 Medium
- beckmancoulter remisol advanceThe default privileges for the running service Normand Remisol Advance Launcher in Beckman...5.5 Medium
- beckmancoulter remisol advanceA vulnerability was discovered in the Remisol Advance v2.0.12.1 and below for the Normand Message...7.8 High
- asus rt-ax56u firmwareA stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0...8.8 High
- flyte flyteadminDefault OAuth Authorization Server secret in FlyteAdmin4.8 Medium
sendmailSUSESecurity update for sendmailNo score- nodejs node, node.js, debian linux +1 more +3 moreA weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with...9.1 Critical
bashMageiaUpdated bash packages fix security vulnerabilityNo scoremapserverOSS-FuzzHeap-use-after-free in msFreeMapNo score- isc dhcp, debian linux, fedoraproject fedora +2 moreDHCP memory leak6.5 Medium
- isc dhcp, debian linux, fedoraproject fedora +2 moreAn option refcount overflow exists in dhcpd6.5 Medium
- google protobuf-java, protocolbuffers, fedoraproject fedora +4 more +6 moreMemory handling vulnerability in ProtocolBuffers Java core and lite4.3 Medium
- djangoproject djangoDjango denial-of-service vulnerability in internationalized URLs7.5 High
mapserverOSS-FuzzHeap-buffer-overflow in msyylexNo score- mediawikiAn issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x...5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.8, 1.36.x and 1.37.x before 1.37.5, and 1.38.x...5.3 Medium
sqlite3RubyGemsSQLite3 addresses vulnerability in packaged version of libsqliteNo score- dexidp dexOAuth authorization code exposure in Dex9.3 Critical
- pfsensepfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the...6.1 Medium
- phpipamphpipam v1.5.0 was discovered to contain a header injection vulnerability via the component ...9.8 Critical
- autodesk desktopUnder certain conditions, an attacker could create an unintended sphere of control through a...9.8 Critical
- creativedream file uploader project file uploaderArbitrary file upload vulnerability in php uploader9.8 Critical
- veritas netbackupAn issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The...5.3 Medium
- veritas netbackupAn issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The...4.3 Medium
- veritas netbackupAn issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The...5.4 Medium
- veritas netbackupAn issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The...9.0 Critical
- veritas netbackupAn issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The...8.0 High
- veritas netbackupAn issue was discovered in Veritas NetBackup through 10.0 and related Veritas products. The...8.0 High
- veritas netbackupAn issue was discovered in Veritas NetBackup through 10.0.0.1 and related Veritas products. The...5.3 Medium
- veritas netbackupAn issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An...6.5 Medium
- Show moreLoading…