CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- grafanaGrafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins4.9 Medium
- grafana, netapp e-series performance analyzer +1 moreGrafana plugin signature bypass vulnerability6.1 Medium
- octopus serverIn affected versions of Octopus Server it is possible to reveal information about teams via the...6.5 Medium
- apache kylinApache Kylin prior to 4.0.2 allows command injection when the configuration overwrites function overwrites system parameters9.8 Critical
- sonicwall gms, global management system +1 moreSonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker...7.5 High
- node-saml, node saml project saml +1 moreSignature bypass via multiple root elements in node-SAML7.7 High
- enonic xpEnonic XP Session Fixation Vulnerability9.8 Critical
drupal/twig_field_valuePackagistThis module enables themers to get partial data from field render arrays. It gives them more control over the output without drilling deep into the render array or using preprocess functions. The modu…No score- dell alienware area-51 r4 firmware, alienware area-51 r5 firmware, cpg bios +2 moreDell Client BIOS Versions prior to the remediated version contain an improper input validation...7.5 High
- dell alienware area-51 r4 firmware, alienware area-51 r5 firmware, cpg bios +2 moreDell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious...7.5 High
- dell geodriveDell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting...7.1 High
- dell geodriveDell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions...7.0 High
- dell geodriveDell GeoDrive, versions prior to 2.2, contains Multiple DLL Hijacking Vulnerabilities. A low...7.0 High
- dell geodriveDell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low...7.8 High
- dell geodriveDell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI. An...7.8 High
- dell geodriveDell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An...5.5 Medium
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r10 firmware +288 more +290 moreDell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious...6.0 Medium
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r10 firmware +288 more +290 moreDell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user...4.1 Medium
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r10 firmware +288 more +290 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...8.2 High
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r10 firmware +288 more +290 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...8.2 High
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r10 firmware +288 more +290 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r10 firmware +288 more +290 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r10 firmware +288 more +290 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...5.6 Medium
- dell alienware area 51m r1 firmware, alienware area 51m r2 firmware, alienware aurora r10 firmware +288 more +290 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...5.6 Medium
- dell xtremio, xtremio management server +1 moreDell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote...8.1 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Authentication Bypass in Web Interface8.1 High
apollo-servernpmThe graphql-upload library included in Apollo Server 2 is vulnerable to CSRF mutationsNo scorehunspellOSS-FuzzHeap-buffer-overflow in AffixMgr::compound_checkNo scoremapserverOSS-FuzzHeap-buffer-overflow in msyylexNo score- arraynetworks arrayos agArray Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection...9.8 Critical
- vanderbilt redcapA reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications...6.1 Medium
- progress whatsup goldIn Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to...9.6 Critical
- tenda ax1803 firmwareTenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request...6.5 Medium
- tenda ax1803 firmwareTenda AX1803 US_AX1803v2.0br_v1.0.0.1_2994_CN_ZGYD01_4 is vulnerable to Cross Site Request...6.5 Medium
- tenda ac1206 firmwareTenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow...7.5 High
- tenda ac1206 firmwareTenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow...7.5 High
- tenda ac1206 firmwareTenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow...7.5 High
- tenda ac1206 firmwareTenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery...6.5 Medium
- tenda ac1206 firmwareTenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery...6.5 Medium
- newsletter subscribe \(popup \+ regular module\) project subscribe \(popup \+ regular module\)OpenCart 3.x Newsletter Custom Popup was discovered to contain a SQL injection vulnerability via...9.8 Critical
- zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, at the URL /h/calendar, one can trigger XSS by adding...6.1 Medium
- zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, /h/search?action=voicemail&action=listen accepts a...6.1 Medium
- zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/compose accepts an attachUrl parameter...6.1 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via the onerror...6.1 Medium
- hashicorp vaultHashiCorp Vault's revocation list not respected5.3 Medium
- dolibarr erp\/crmDolibarr vulnerable to Eval Injection9.8 Critical
- apache shiroAuthentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher9.8 Critical
- ikuai8 ikuaiosiKuai8 v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability.8.8 High
- node-saml passport-samlSignature bypass via multiple root elements in Passport-SAML7.4 High
- freerdp, fedoraproject fedora +1 moreFreeRDP may read and display out of bounds data5.9 Medium
- Show moreLoading…