CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- freerdp, fedoraproject fedora +1 moreRDP client: Read of uninitialized memory with parallel port redirection3.5 Low
- mockery project mockerymockery is vulnerable to prototype pollution9.8 Critical
- gh-pages project gh-pagestschaub gh-pages vulnerable to prototype pollution9.8 Critical
- webpack.js loader-utils, debian linux +1 morePrototype pollution in webpack loader-utils9.8 Critical
- itsourcecode human resource management systemSourceCodester Human Resource Management System getstatecity.php sql injection6.3 Medium
- itsourcecode human resource management systemSourceCodester Human Resource Management System city.php sql injection6.3 Medium
- itsourcecode human resource management systemSourceCodester Human Resource Management System city.php sql injection6.3 Medium
- itsourcecode human resource management systemSourceCodester Human Resource Management System getstatecity.php sql injection6.3 Medium
- jinher oaJiusi OA hntdCustomDesktopActionContent sql injection5.5 Medium
- mediabridge medialink, mediabridgeproducts mlwr-ac1200r firmware +1 moreMediabridge Medialink index.asp improper authentication7.3 High
- puppycmspuppyCMS settings.php cross site scripting4.3 Medium
- itsourcecode human resource management systemSourceCodester Human Resource Management System Image File employeeview.php unrestricted upload6.3 Medium
- wijungle u250 firmwareWiJungle NGFW Version U250 was discovered to be vulnerable to No Rate Limit attack, allowing the...9.8 Critical
- f-secure atlant, elements endpoint detection and response, elements endpoint protection +4 more +6 moreMultiple Denial of Service Vulnerability4.3 Medium
- octopus serverIn affected versions of Octopus Server it was identified that when a sensitive value is a...5.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +82 more +84 moreInformation disclosure due to buffer over read in kernel in Snapdragon Auto, Snapdragon Compute,...6.8 Medium
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, qualcomm aqt1000 firmware, qca1062 firmware +29 more +31 morePossible buffer overflow due to lack of buffer length check during management frame Rx handling...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8096au firmware, msm8996au firmware +76 more +78 moreInformation disclosure due to untrusted pointer dereference in kernel in Snapdragon Auto,...5.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +96 more +98 moreMemory corruption due to untrusted pointer dereference in kernel in Snapdragon Auto, Snapdragon...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +91 more +93 moreMemory corruption due to double free issue in kernel in Snapdragon Auto, Snapdragon Compute,...7.8 High
- avaya aura communication managerAvaya Aura Communication Manager Privilege Escalation Vulnerabilities7.7 High
- dropbear ssh project ssh, debian linux +1 moreAn issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the...7.5 High
- dotpdn paint.netdotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 2 of 2).9.8 Critical
- dotpdn paint.netdotPDN Paint.NET before 4.1.2 allows Deserialization of Untrusted Data (issue 1 of 2).9.8 Critical
- melisplatform melis-cms, melistechnology meliscms +1 moreDeserialization of untrusted data in MelisCms7.7 High
- melisplatform melis-front, melistechnology meliscms +1 moreDeserialization of untrusted data in MelisFront7.7 High
- johnson controls c•cure 9000, johnsoncontrols c-cure 9000 firmware +1 moreCCURE Observable Response Discrepancy4.3 Medium
- getshortcodes shortcodes ultimate, vladimir anokhin shortcodes ultimate (wordpress plugin) +1 moreWordPress Shortcodes Ultimate plugin <= 5.12.0 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- cozmoslabs profile builder, profile builder – user profile & user registration forms (wordpress plugin) +1 moreWordPress Profile Builder plugin <= 3.6.0 - Cross-Site Request Forgery (CSRF) vulnerability4.2 Medium
- golang text, golang.org/x/text golang.org/x/text/language +1 moreDenial of service via crafted Accept-Language header in golang.org/x/text/language7.5 High
- redirection-for-contact-form7 redirection for contact form 7, qube one redirection for contact form 7 (wordpress plugin) +1 moreRedirection for Contact Form 7 <= 2.4.0 - Unauthenticated Options Change and Content Injection vulnerability7.5 High
- asset cleanup\ page speed booster project, gabe livan asset cleanup: page speed booster (wordpress plugin) +1 moreWordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability4.8 Medium
- fontmeister project fontmeister, sayontan sinha fontmeister (wordpress plugin) +1 moreWordPress FontMeister plugin <= 1.08 - Reflected Cross-Site Scripting (XSS) vulnerability6.1 Medium
- dell cloud mobility for dell storage, cloud mobility for dell emc storage +1 moreCloud Mobility for Dell Storage versions 1.3.0 and earlier contains an Improper Access Control...6.7 Medium
- dell hybrid client, hybrid client (dhc) +1 moreDell Hybrid Client below 1.8 version contains a gedit vulnerability. A guest attacker could...7.3 High
- dell hybrid client, hybrid client (dhc) +1 moreDell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A...6.5 Medium
- dell hybrid client, hybrid client (dhc) +1 moreDell Hybrid Client below 1.8 version contains a Zip Bomb Vulnerability in UI. A guest privilege...7.1 High
- dell container storage modulesDell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick...8.8 High
- dell container storage modulesDell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted...8.8 High
- dell bios, cpg bios +1 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- dell bios, cpg bios +1 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- ibm navigator mobileIBM Navigator Mobile Android 3.4.1.1 and 3.4.1.2 app could allow a local user to obtain sensitive...4.0 Medium
- gogsGogs - XSS9.0 Critical
- adguard adguardhomeAdGuardHome - CSRF5.4 Medium
- opensslUsing a Custom Cipher with NID_undef may lead to NULL encryption7.5 High
fluent-bitOSS-FuzzHeap-buffer-overflow in onig_node_str_catNo score- django-mfa2 project django-mfa2django-mfa2 vulnerable to MFA Replay attack7.5 High
- hashicorp vagrantAn issue was discovered in Hashicorp Packer before 2.3.1. The recommended sudoers configuration...7.8 High
- merchandise online store project online storeA Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get...8.8 High
- merchandise online store project online storeA Stored XSS issue in Merchandise Online Store v.1.0 allows to injection of Arbitrary JavaScript...5.4 Medium
- Show moreLoading…