CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- student clearance system project clearance systemA Stored XSS issue in Student Clearance System v.1.0 allows the injection of arbitrary JavaScript...5.4 Medium
- simple cold storage management system project cold storage managment systemSimple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page...7.2 High
- wedding planner project plannerWedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.8.8 High
- democritus d8s-asnsThe d8s-asns package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-xmlThe d8s-xml package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-networkingThe d8s-networking package for Python, as distributed on PyPI, included a potential code...9.8 Critical
- democritus d8s-file-systemThe d8s-file-system package for Python, as distributed on PyPI, included a potential code...9.8 Critical
- democritus d8s-algorithmsThe d8s-algorithms package for Python, as distributed on PyPI, included a potential code...9.8 Critical
- democritus d8s-listsThe d8s-lists package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-ip-addressesThe d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code...9.8 Critical
- democritus d8s-asnsThe d8s-asns package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-urlsThe d8s-urls package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- wedding planner project plannerWedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.8.8 High
- siemens jttk, simcenter femap v2022.1, simcenter femap v2022.2 +2 more +4 moreA vulnerability has been identified in JTTK (All versions < V11.1.1.0), Simcenter Femap V2022.1 ...7.8 High
- siemens sicam p850, sicam p855, sicam t +36 more +38 moreA vulnerability has been identified in SICAM P850 (All versions < V3.10), SICAM P850 (All...9.8 Critical
- hashicorp nomadNomad Panics On Job Submission With Bad Artifact Stanza Source URL6.5 Medium
- gnu osipGNU oSIP v5.3.0 was discovered to contain an integer overflow via the component...6.5 Medium
- open source sacco management system project source sacco management systemOpen Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- open source sacco management system project source sacco management systemOpen Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- online pet shop we app project pet shop we appOnline Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- online pet shop we app project pet shop we appOnline Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- church management system project management systemAn arbitrary file upload vulnerability in the /admin/admin_pic.php component of Church Management...7.2 High
- ini4j project ini4j, debian linux +1 moreorg.ini4j allows attackers to cause a Denial of Service (DoS)7.5 High
- democritus d8s-pdfsThe d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-utilityThe d8s-utility package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-htmlThe d8s-html package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-domainsThe d8s-domains package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-archivesThe d8s-archives package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-jsonThe d8s-json package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-utilityThe d8s-utility package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- democritus d8s-yamlThe d8s-yaml package for Python, as distributed on PyPI, included a potential code-execution...9.8 Critical
- metroui metro uiCross site scripting in Metro UI6.1 Medium
- sap customer data cloud, sap se customer data cloud (gigya) +1 moreSAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number...5.2 Medium
- sap customer data cloud, sap se customer data cloud (gigya) +1 moreSAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses encryption method...5.2 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (analysis for olap) +1 moreSAP BusinessObjects Business Intelligence platform (Analysis for OLAP) - versions 420, 430,...5.4 Medium
- sap commerceAn attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205,...8.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Right Hemisphere...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Scalable Vector...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Open Inventor File (...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated SketchUp (.skp,...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl,...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl,...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Encapsulated...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Encapsulated Post...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens manipulated Jupiter Tesselation (.jt...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf,...7.8 High
- sap 3d visual enterprise viewerDue to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg,...7.8 High
- Show moreLoading…