CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- samsung mobile devices, google android +1 moreImproper access control vulnerability in FACM application prior to SMR Oct-2022 Release 1 allows...5.1 Medium
- google android, samsung mobile devices +1 moreImproper protection in IOMMU prior to SMR Oct-2022 Release 1 allows unauthorized access to secure...6.4 Medium
- google android, samsung mobile devices +1 moreA use after free vulnerability in perf-mgr driver prior to SMR Oct-2022 Release 1 allows attacker...4.4 Medium
- google android, samsung mobile devices +1 moreA heap-based overflow vulnerability in makeContactAGIF in libagifencoder.quram.so library prior...8.0 High
- google android, samsung mobile devices +1 moreImproper access control vulnerability in CocktailBarService prior to SMR Oct-2022 Release 1...4.0 Medium
- google android, samsung mobile devices +1 moreImproper access control in mum_container_policy service prior to SMR Oct-2022 Release 1 allows...3.3 Low
- google android, samsung mobile devices +1 moreImproper access control in knox_vpn_policy service prior to SMR Oct-2022 Release 1 allows allows...3.3 Low
- google android, samsung mobile devices +1 moreExposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local...4.0 Medium
- google android, samsung mobile devices +1 moreUse after free vulnerability in set_nft_pid and signal_handler function of NFC driver prior to...4.9 Medium
- zoneminderDenial of service through logs in zoneminder5.4 Medium
- zoneminderCSRF key bypass using HTTP methods in zoneminder8.0 High
- zoneminderDatabase log access in ZoneMinder9.1 Critical
- tiny-csrf project tiny-csrfPlaintext transmission of CSRF tokens in tiny-csrf8.1 High
- zoneminderStored Cross-Site Scripting Vulnerability In File Parameter in zoneminder7.6 High
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreA vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow a...6.1 Medium
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreAn unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID...4.9 Medium
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreAn unauthenticated Denial of Service (DoS) vulnerability exists in the handling of certain SSID...6.5 Medium
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreAn authenticated command injection vulnerability exists in the Aruba InstantOS and ArubaOS 10...7.8 High
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreA vulnerability in the Aruba InstantOS and ArubaOS 10 web management interface could allow an...5.4 Medium
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreUnauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10...9.8 Critical
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreUnauthenticated buffer overflow vulnerabilities exist within the Aruba InstantOS and ArubaOS 10...9.8 Critical
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreThere are buffer overflow vulnerabilities in multiple underlying services that could lead to...9.8 Critical
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreThere are buffer overflow vulnerabilities in multiple underlying services that could lead to...9.8 Critical
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreThere are buffer overflow vulnerabilities in multiple underlying services that could lead to...9.8 Critical
- arubanetworks arubaos, instant, siemens scalance w1750d firmware +2 moreThere are buffer overflow vulnerabilities in multiple underlying services that could lead to...9.8 Critical
- google android, samsung mobile devices +1 moreImproper restriction of broadcasting Intent in MouseNKeyHidDevice prior to SMR Oct-2022 Release 1...5.9 Medium
- zkteco zkbiosecurity v5000ZKteco ZKBioSecurity V5000 4.1.3 was discovered to contain a SQL injection vulnerability via the...8.8 High
- zkteco zkbiosecurity v5000An access control issue in ZKTeco ZKBioSecurity V5000 3.0.5_r allows attackers to arbitrarily...8.8 High
- nocodb, nocodb nocodb/nocodb +1 moreAllocation of Resources Without Limits or Throttling in nocodb/nocodb7.3 High
- tooljet, tooljet tooljet/tooljet +1 moreImproper Privilege Management in tooljet/tooljet9.8 Critical
- sourcecodester web-based student clearance system, web-based student clearance system project student clearance system +1 moreSourceCodester Web-Based Student Clearance System POST Parameter login.php sql injection5.0 Medium
- puppet puppetlabs-mysqlPuppetlabs-mysql Command Injection8.4 High
- puppet puppetlabs-apt, fedoraproject fedora, puppet puppetlabs-mysql +2 morePuppetlabs-apt Command Injection8.4 High
- google android, mediatek, inc. mt6983 +1 moreIn vowe, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6855, mt6879, mt6895, mt6983, mt8185, mt8321, mt8385, mt8518, mt8666, mt8675, mt8765, mt8768, mt8786, mt8788, mt8789 +2 moreIn cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could...6.7 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6753, mt6757, mt6761, mt6762, mt6763, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6885, mt6893, mt6895, mt6983, mt8321, mt8385, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ril, there is a possible system crash due to an incorrect bounds check. This could lead to...7.5 High
- google android, linuxfoundation yocto, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt7663, mt7668, mt7902, mt7921, mt8167s, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8512a, mt8518, mt8532, mt8667, mt8695, mt8696, mt8766, mt8768, mt8786, mt8788, mt8789 +2 moreIn wlan, there is a possible use after free due to an incorrect status check. This could lead to...6.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt7663, mt7668, mt7902, mt7921, mt8167s, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8512a, mt8518, mt8532, mt8667, mt8766, mt8768, mt8786, mt8788, mt8789 +2 moreIn Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release....7.5 High
- vmware esxi, cloud foundation +1 moreVMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges...6.5 Medium
- vmware vcenter serverThe vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services...9.1 Critical
- heimdal project heimdalThe Heimdal Software Kerberos 5 implementation is vulnerable to a null pointer dereferance. An...7.5 High
- google android, linuxfoundation yocto, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6853, mt6855, mt6873, mt6875, mt6879, mt6883, mt6885, mt6889, mt6895, mt6983, mt7663, mt7902, mt7921, mt8167s, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8512a, mt8518, mt8532, mt8667, mt8695, mt8696, mt8766, mt8768, mt8786, mt8788, mt8789 +2 moreIn wlan, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, mediatek, inc. mt6789, mt6855, mt6879, mt6895, mt6983 +1 moreIn sensorhub, there is a possible out of bounds write due to an incorrect calculation of buffer...6.7 Medium
- google android, mediatek, inc. mt6789, mt6855, mt6879, mt6895, mt6983, mt8168, mt8365, mt8695, mt8696, mt8798 +1 moreIn vdec fmt, there is a possible use after free due to improper locking. This could lead to local...6.7 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983 +1 moreIn isp, there is a possible use after free due to improper locking. This could lead to local...6.7 Medium
- autodesk autocad, autocad advance steel, autocad architecture +16 more +18 moreA maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +16 more +18 moreA maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +16 more +18 moreA heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +16 more +18 moreA Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +16 more +18 moreA maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be...7.8 High
- Show moreLoading…