CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- debian linux, fedoraproject fedora, xen +2 moreArm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing...3.8 Low
- debian linux, fedoraproject fedora, xen +2 moreP2M pool freeing may take excessively long The P2M pool backing second level address translation...6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows TCP/IP Driver Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows GDI+ Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- facebook hermesAn out of bounds write in hermes, while handling large arrays, prior to commit...9.8 Critical
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, scalance m804pb +50 more +52 moreA vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (All versions < V7.1.2),...8.6 High
- siemens 6ag1206-2bb00-7ac2 firmware, 6ag1206-2bs00-7ac2 firmware, 6ag1208-0ba00-7ac2 firmware +336 more +338 moreAffected devices do not properly authorize the change password function of the web interface....8.8 High
- vmware aria operations, vrealize operations +1 moreVMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with...4.9 Medium
- libreoffice, debian linux, fedoraproject fedora +2 moreMacro URL arbitrary script execution6.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- nokia airframe bmc web gui r18 firmwareMultiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI < R18 Firmware v4...8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- google androidIn CarSettings of app packages, there is a possible permission bypass due to a confused deputy....8.8 High
- mi xiaomiThe Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time,...9.8 Critical
- mi xiaomiA logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity...9.8 Critical
- traefikTraefik HTTP/2 connections management could cause a denial of service7.5 High
csrf-csrfnpmIncorrect default cookie name and recommendationNo score- dell enterprise sonic os, enterprise sonic distribution +1 moreDell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An...7.5 High
- dell wyse thinos, wyse proprietary os (modern thinos) +1 moreDell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An...6.8 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could...6.3 Medium
- cisco ios xe rom monitor, ios xe software +1 moreCisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability4.6 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability8.6 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability6.1 Medium
- cisco ios, ios xe +1 moreCisco IOS and IOS XE Software SSH Denial of Service Vulnerability7.7 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability7.4 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability8.6 High
- cisco catalyst sd-wan manager, sd-wan vmanage +1 moreCisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability5.3 Medium
- linuxmint warpinatorWarpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by...7.5 High
- misp-project mispapp/Controller/UsersController.php in MISP before 2.4.164 allows attackers to discover role names...4.3 Medium
- trend micro apex oneAn origin validation error vulnerability in Trend Micro Apex One agents could allow a local...7.8 High
- trend micro apex oneA registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention (DLP)...6.7 Medium
- trend micro apex oneAn improper certification validation vulnerability in Trend Micro Apex One agents could allow a...7.8 High
- trend micro apex oneA forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to...9.1 Critical
- trend micro apex oneAn Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to...7.0 High
- trend micro apex oneA Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection...7.0 High
- cert vince, cert/cc vince - the vulnerability information and coordination environment +1 moreAn HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.45.4 Medium
- cert vince, cert/cc vince - the vulnerability information and coordination environment +1 moreAn HTML injection vulnerability exists in CERT/CC VINCE software prior to version 1.50.45.4 Medium
- slack morphism project morphism, abdolence slack-morphism-rust +1 moreExposure of sensitive Slack webhook URLs in debug logs and traces7.5 High
- @clerk fastifyDenial of service in Fastify via Content-Type header7.5 High
- azure-rtos usbx, eclipse threadx usbx +1 moreUSBX Host CDC ECM integer underflow with buffer overflow7.6 High
- fortinet fortitesterAn improper restriction of excessive authentication attempts vulnerability [CWE-307] in...8.1 High
- fortinet fortitesterAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...6.7 Medium
- crealogix ebics, ebics server +1 moreCrealogix EBICS ebics.aspx cross site scripting3.5 Low
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreOpen Redirect in ikus060/rdiffweb5.7 Medium
- haskell aesonThe aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse...6.5 Medium
- linux kernel, redhat enterprise linux +1 moreA use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first...7.8 High
- fortinet fortitesterAn improper neutralization of special elements used in an OS Command ('OS Command Injection')...9.8 Critical
- fortinet fortitesterAn improper neutralization of special elements used in an OS Command ('OS Command Injection')...6.8 Medium
- Show moreLoading…