CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- fortinet fortitesterAn improper neutralization of special elements used in an OS Command ('OS Command Injection')...9.8 Critical
- unknown advanced comment formAdvanced Comment Form < 1.2.1 - Admin+ Authenticated Stored XSS4.8 Medium
- pencidesign soledadSoledad < 8.2.5 - Reflected Cross-site Scripting6.1 Medium
- mitchell bennis simple file list, simplefilelist simple-file-list +1 moreSimple File List < 4.4.13 - Page Creation via CSRF6.5 Medium
- mitchell bennis simple file list, simplefilelist simple-file-list +1 moreSimple File List < 4.4.12 - Admin+ Stored Cross-Site Scripting4.8 Medium
- todo integration for billingo & gravity forms, integration for szamlazz.hu & gravity forms, woo billingo plus +3 more +5 moreMultiple Plugins from Viszt Peter - Multiple CSRF7.1 High
- taskbuilder, taskbuilder – wordpress project & task management plugin, unknown taskbuilder – wordpress project & task management plugin +2 moreTaskBuilder < 1.0.8 - Subscriber+ Stored XSS via SVG file upload5.4 Medium
- wpsocialrocket social rocket, socialrocket social rocket – social sharing plugin +1 moreSocial Rocket < 1.3.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown download monitorDownload Monitor < 4.5.98 - Admin+ Arbitrary File Download4.9 Medium
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreA access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0...7.5 High
- unknown wp 2faWP 2FA < 2.3.0 - Time-Based Side-Channel Attack5.9 Medium
- metaslider slider\, gallery\, and carousel, unknown slider, gallery, and carousel by metaslider – responsive wordpress plugin +1 moreSlider, Gallery, and Carousel by MetaSlider < 3.27.9 - Admin+ Stored Cross Site Scripting4.8 Medium
- pluginops top barTop Bar < 3.0.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager...3.7 Low
- shortpixel enable media replaceEnable Media Replace < 4.0.0 - Admin+ Path Traversal4.9 Medium
- resmush.it image optimizer, unknown resmush.it : the only free image optimizer & compress plugin +1 morereSmush.it Image Optimizer < 0.4.6 - Admin+ Cross-Site Scripting4.8 Medium
- brainvire disable user loginDisable User Login <= 1.0.1 - Unauthenticated Settings Update5.3 Medium
- fortinet fortiosA improper neutralization of special elements used in an os command ('os command injection') in...9.0 Critical
- solarwinds network configuration managerHashed Credential Exposure Vulnerability6.5 Medium
- premium-themes cryptocurrency pricing list and tickerCryptocurrency Pricing list and Ticker <= 1.5 - Reflected Cross-Site Scripting6.1 Medium
KernelLinuxmm/slub: fix to return errno if kmalloc() failsNo scoreKernelLinuxipvlan: Fix out-of-bound bugs caused by unset skb->mac_headerNo scoreKernelLinuxs390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroupNo scoreKernelLinuxmm/slub: fix to return errno if kmalloc() failsNo scoreKernelLinuxipvlan: Fix out-of-bound bugs caused by unset skb->mac_headerNo scoreKernelLinuxnetfilter: ebtables: fix memory leak when blob is malformedNo scoreKernelLinuxs390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroupNo scoreKernelLinuxmm/slub: fix to return errno if kmalloc() failsNo scoreKernelLinuxipvlan: Fix out-of-bound bugs caused by unset skb->mac_headerNo scoreKernelLinuxnetfilter: ebtables: fix memory leak when blob is malformedNo scoreKernelLinuxs390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroupNo scoreKernelLinuxmm/slub: fix to return errno if kmalloc() failsNo scoreKernelLinuxnetfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()No scoreKernelLinuxipvlan: Fix out-of-bound bugs caused by unset skb->mac_headerNo scoreKernelLinuxnet/sched: taprio: avoid disabling offload when it was never enabledNo scoreKernelLinuxnetfilter: ebtables: fix memory leak when blob is malformedNo scoreKernelLinuxnet: sched: fix possible refcount leak in tc_new_tfilter()No scoreKernelLinuxs390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroupNo scoreKernelLinuxext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0No scoreKernelLinuxgpio: mockup: fix NULL pointer dereference when removing debugfsNo scoreKernelLinuxgpiolib: cdev: Set lineevent_state::irq after IRQ register successfullyNo scoreKernelLinuxmm/slub: fix to return errno if kmalloc() failsNo scoreKernelLinuxdmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()No scoreKernelLinuxnetfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()No scoreKernelLinuxipvlan: Fix out-of-bound bugs caused by unset skb->mac_headerNo scoreKernelLinuxsfc: fix TX channel offset when using legacy interruptsNo scoreKernelLinuxsfc: fix null pointer dereference in efx_hard_start_xmitNo scoreKernelLinuxwireguard: netlink: avoid variable-sized memcpy on sockaddrNo scoreKernelLinuxnet/sched: taprio: avoid disabling offload when it was never enabledNo scoreKernelLinuxnetfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()No score- Show moreLoading…