CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
KernelLinuxnetfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()No scoreKernelLinuxmm/slab_common: fix possible double free of kmem_cacheNo scoreKernelLinuxscsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()No scoreKernelLinuxipvlan: Fix out-of-bound bugs caused by unset skb->mac_headerNo scoreKernelLinuxsfc: fix TX channel offset when using legacy interruptsNo scoreKernelLinuxsfc: fix null pointer dereference in efx_hard_start_xmitNo scoreKernelLinuxsfc/siena: fix null pointer dereference in efx_hard_start_xmitNo scoreKernelLinuxwireguard: netlink: avoid variable-sized memcpy on sockaddrNo scoreKernelLinuxnet: enetc: deny offload of tc-based TSN features on VF interfacesNo scoreKernelLinuxnetfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()No scoreKernelLinuxnetfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()No scoreKernelLinuxnet/sched: taprio: avoid disabling offload when it was never enabledNo scoreKernelLinuxnetfilter: ebtables: fix memory leak when blob is malformedNo scoreKernelLinuxnet/smc: Stop the CLC flow if no link to map buffers onNo scoreKernelLinuxbonding: fix NULL deref in bond_rr_gen_slave_idNo scoreKernelLinuxnet: sched: fix possible refcount leak in tc_new_tfilter()No scoreKernelLinuxbnxt: prevent skb UAF after handing over to PTP workerNo scoreKernelLinuxcgroup: cgroup_get_from_id() must check the looked-up kn is a directoryNo scoreKernelLinuxblock: Do not call blk_put_queue() if gendisk allocation failsNo scoreKernelLinuxs390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroupNo scoreKernelLinuxdrm/gma500: Fix BUG: sleeping function called from invalid context errorsNo scoreKernelLinuxdrm/gma500: Fix WARN_ON(lock->magic != lock) errorNo scoreKernelLinuxfsdax: Fix infinite loop in dax_iomap_rw()No scoreKernelLinuxi2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()No scoreKernelLinuxi2c: mux: harden i2c_mux_alloc() against integer overflowsNo scoreKernelLinuxext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0No scorendpiOSS-FuzzStack-buffer-overflow in check_content_type_and_change_protocolNo scoreopensipsOSS-FuzzHeap-buffer-overflow in dprintNo score- sourcecodester web-based student clearance system, web-based student clearance system project student clearance system +1 moreSourceCodester Web-Based Student Clearance System Photo edit-photo.php unrestricted upload6.3 Medium
hunspellOSS-FuzzHeap-buffer-overflow in AffixMgr::compound_checkNo scoremapserverOSS-FuzzHeap-buffer-overflow in msSetErrorNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_search_irc_tcpNo score- debian linux, linux kernel, fedoraproject fedora +2 moreLinux Kernel IPv4 fib_semantics.c fib_nh_match out-of-bounds4.3 Medium
- sourcecodester web-based student clearance system, web-based student clearance system project student clearance system +1 moreSourceCodester Web-Based Student Clearance System add-student.php prepare cross site scripting3.5 Low
- fatfreecrm fat free crm, fatfreecrm +1 moreRemote Denial of Service via Tasks endpoint in fat_free_crm6.5 Medium
- johnsoncontrols metasys extended application and data serverMetasys MVE8.1 High
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow...6.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive...4.3 Medium
- ibm cics tx, cics tx advanced, cics tx standard +2 moreIBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load...6.2 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a...4.4 Medium
- ibm websphere automation for cloud pak for watson aiops, websphere automation for ibm cloud pak for watson aiops +1 moreIBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request...3.5 Low
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using...5.3 Medium
- hancom office 2020A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0...7.8 High
twistedPyPITwisted vulnerable to HTTP Request Smuggling AttacksNo scoregithub.com/supranational/blstGoBlst vulnerable to incorrect results for some inputs in blst_fp_eucl_inverse functionNo scorendpiOSS-FuzzStack-buffer-overflow in check_content_type_and_change_protocolNo scoreghostscriptOSS-FuzzStack-buffer-underflow in gs_type2_interpretNo score- backdropcms backdrop cmsBackdrop CMS Unrestricted File Upload vulnerability7.2 High
- wedding planner project plannerWedding Planner v1.0 is vulnerable to has arbitrary code execution.9.8 Critical
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic...7.2 High
- Show moreLoading…