CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- fedora project infrastructure bodhiTwo cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1.6.1 Medium
go.etcd.io/etcd/client/v3Goetcd having a negative value for cluster node size results in an index out-of-bound panic during service discoveryNo scorego.etcd.io/etcd/client/v3Goetcd user credentials are stored in WAL logs in plaintextNo scorego.etcd.io/etcd/v3Goetcd vulnerable to TOCTOU of gateway endpoint authenticationNo scoregenerator-jhipsternpmgenerator-jhipster vulnerable to login check Regular Expression Denial of ServiceNo score- ibm robotic process automationIBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross...6.5 Medium
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross...6.1 Medium
- ibm robotic process automation, robotic process automation as a service, robotic process automation for cloud pak +2 moreIBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle...6.5 Medium
- ibm robotic process automation, robotic process automation as a service +1 moreIBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action...6.1 Medium
- hsqldb hypersql database, hypersql database hsqldb, debian linux +2 moreRemote code execution in HyperSQL DataBase8.0 High
- zincZinc - Stored XSS5.4 Medium
- zincZinc - Cross-Site Scripting5.4 Medium
- go standard library net/http/httputil, golang go +1 moreIncorrect sanitization of forwarded query parameters in net/http/httputil7.5 High
- go standard library regexp/syntax, golang go +1 moreMemory exhaustion when compiling regular expressions in regexp/syntax7.5 High
- go standard library archive/tar, golang go +1 moreUnbounded memory consumption when reading headers in archive/tar7.5 High
- omron cx-programmerOMRON CX-Programmer Out-of-bounds Write7.8 High
- omron cx-programmerOMRON CX-Programmer Out-of-bounds Write7.8 High
- omron cx-programmerOMRON CX-Programmer Out-of-bounds Write7.8 High
kimageformatsOSS-FuzzIndex-out-of-bounds in LibRaw::kodak_radc_load_rawNo scoresuricataOSS-FuzzNull-dereference READ in AlertJsonNo score- generex cs141 firmwareGenerex CS141 before 2.08 allows remote command execution by administrators via a web interface...9.1 Critical
- oretnom23 simple cold storage management systemSimple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin...7.2 High
- oretnom23 simple cold storage management systemSimple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin...7.2 High
- oretnom23 simple cold storage management systemSimple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin...7.2 High
- oretnom23 simple cold storage management systemSimple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes...7.2 High
- oretnom23 simple cold storage management systemSimple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes...7.2 High
- freedesktop dbus, fedoraproject fedora +1 moreAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x...6.5 Medium
- freedesktop dbus, fedoraproject fedora +1 moreAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x...6.5 Medium
- freedesktop dbus, fedoraproject fedora +1 moreAn issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x...6.5 Medium
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection...9.8 Critical
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack...9.8 Critical
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow...8.8 High
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection...9.8 Critical
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang...8.8 High
- online leave management system project leave management systemOnline Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via...7.2 High
- nediIn certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could...9.1 Critical
- ehang-io npsNPS before v0.26.10 was discovered to contain an authentication bypass vulnerability via...9.8 Critical
- jxpath, apache commons jxpath +1 moreStack Overflow in JXPath6.5 Medium
- jxpath, apache commons jxpath +1 moreStack Overflow in JXPath6.5 Medium
- centreonA cross-site scripting (XSS) vulnerability in Centreon 22.04.0 allows attackers to execute...5.4 Medium
- codeigniter, codeigniter4 +1 moreSecure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter42.6 Low
- discourse discourse-chatDiscourse-chat plugin susceptible to XSS in channel name and description4.3 Medium
- saleorImproper object type validation in saleor5.3 Medium
- lora-net loramac-nodeBuffer Overflow in `ProcessRadioRxDone` in LoRaMac-node7.5 High
- Show moreLoading…