CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic...7.2 High
- apache airflowSession still functional after user is deactivated8.1 High
- gradle enterpriseAn access-control vulnerability in Gradle Enterprise 2022.4 through 2022.3.1 allows remote...7.5 High
- open source sacco management system project source sacco management systemOpen Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- open source sacco management system project source sacco management systemOpen Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection...7.2 High
- online diagnostic lab management system project diagnostic lab management systemAn arbitrary file upload vulnerability in the component /php_action/editFile.php of Online...7.2 High
- picuploader project picuploaderPicUploader v2.6.3 was discovered to contain cross-site scripting (XSS) vulnerability via the...6.1 Medium
- liferay portalLiferay Portal Insecure Default Configuration in auth.login.prompt.enabled5.3 Medium
- totaljs total.jsA cross-site scripting (XSS) vulnerability in TotalJS commit 8c2c8909 allows attackers to execute...5.4 Medium
- online leave management system project leave management systemAn arbitrary file upload vulnerability in the component /leave_system/classes/Users.php?f=save of...7.2 High
- online pet shop we app project pet shop we appOnline Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- online pet shop we app project pet shop we appOnline Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- simple e-learning system project e-learning systemAn SQL injection vulnerability issue was discovered in Sourcecodester Simple E-Learning System 1...9.8 Critical
- codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- bcit-ci codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- bcit-ci codeigniterB.C. Institute of Technology CodeIgniter <=3.1.13 is vulnerable to SQL Injection via system...9.8 Critical
- panini everest enginePanini Everest Engine 2.0.4 allows unprivileged users to create a file named Everest.exe in the ...7.8 High
- samsung checkoutImproper access control vulnerability in Samsung Checkout prior to version 5.0.55.3 allows...4.0 Medium
- samsung group sharingImproper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions...4.0 Medium
- samsung reminderInsertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01...5.9 Medium
- samsung accountImproper component protection vulnerability in Samsung Account prior to version 13.5.0 allows...5.1 Medium
- samsung accountSensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows...4.0 Medium
- samsung internetImproper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows...4.3 Medium
- samsung shareliveImproper restriction of broadcasting Intent in ShareLive prior to version 13.2.03.5 leaks MAC...5.9 Medium
- samsung smartthingsImproper access control vulnerability cloudNotificationManager.java in SmartThings prior to...4.0 Medium
- samsung smartthingsImproper access control vulnerability in cloudNotificationManager.java SmartThings prior to...4.0 Medium
- samsung smartthingsImproper access control vulnerability in cloudNotificationManager.java SmartThings prior to...4.0 Medium
- samsung smartthingsImproper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89...4.0 Medium
- samsung smartthingsImproper access control vulnerability in cloudNotificationManager.java SmartThings prior to...4.0 Medium
- samsung smartthingsImproper access control vulnerability in RegisteredEventMediator.kt SmartThings prior to version...4.0 Medium
- samsung smartthingsImproper access control vulnerability in ContentsSharingActivity.java SmartThings prior to...4.0 Medium
- samsung smartthingsImproper access control vulnerability in WifiSetupLaunchHelper in SmartThings prior to version 1...3.3 Low
- samsung accountIntent redirection vulnerability in Samsung Account prior to version 13.5.01.3 allows attackers...3.6 Low
- samsung dynamic lockscreen, samsung mobile devices +1 moreImproper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and...5.3 Medium
- samsung factorycameraUnprotected Receiver in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows...5.9 Medium
- samsung mobile quickshare, samsung quick share +1 moreImproper access control vulnerability in QuickShare prior to version 13.2.3.5 allows attackers to...4.4 Medium
- samsung uphelper library, samsung mobile uphelper +1 moreImplicit intent hijacking vulnerability in UPHelper library prior to version 3.0.12 allows...4.0 Medium
- samsung factorycameraPath traversal vulnerability in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51...7.3 High
- samsung factorycamerafbImproper access control vulnerability in CameraTestActivity in FactoryCameraFB prior to version 3...7.3 High
- google android, samsung mobile devices +1 moreImproper access control vulnerability in imsservice application prior to SMR Oct-2022 Release 1...4.0 Medium
- Show moreLoading…