CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- dlink covr 1200 firmware, covr 1202 firmware, covr 1203 firmware +2 moreD-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the...8.8 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreAn issue was discovered in the Linux kernel through 5.19.11. Attackers able to inject WLAN frames...8.1 High
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload...7.2 High
- online diagnostic lab management system project diagnostic lab management systemOnline Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload...7.2 High
- clippercmsClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url...9.8 Critical
- idreamsoft icmsiCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter...9.8 Critical
- clippercmsClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the...9.8 Critical
- wayos lq-04 firmware, lq-05 firmware, lq-06 firmware +3 more +5 moreWAYOS LQ_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows...8.1 High
- tenda ac6 firmware, ac6v2.0 firmware +1 moreTenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow...7.5 High
- tenda ap500v1 firmwareTenda AC1900 AP500(US)_V1_180320(Beta) was discovered to contain a buffer overflow in the 0x32384...7.5 High
- tenda ac6v2.0 firmwareTenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow...7.5 High
- tenda ac6v2.0 firmwareTenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow...7.5 High
- tenda ac6v2.0 firmwareTenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow...7.5 High
- tenda ac6v2.0 firmwareTenda AC1200 US_AC6V2.0RTL_V15.03.06.51_multi_TDE01 was discovered to contain a buffer overflow...7.5 High
- rpcmsRPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers...8.8 High
- rpcmsRPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers...6.5 Medium
- rpcmsRPCMS v3.0.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in...6.1 Medium
- ocomon project ocomonOcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at...9.8 Critical
- ocomon project ocomonOcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at...9.8 Critical
- bushnellgolf launch pro firmware, foresightsports gc3 launch monitor firmware +1 moreForesight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service...8.0 High
- ree6Ree6 vulnerable to SQL Injection8.1 High
- ree6Ree6 may bypass webhook protection5.5 Medium
- eng knowage, knowagelabs knowage-server +1 moreImproper Neutralization of Alternate XSS Syntax in Knowage-Server6.1 Medium
- azure-rtos usbx, eclipse threadx usbx +1 moreAzure RTOS USBX Host PIMA vulnerable to read integer underflow with buffer overflow8.6 High
- istioIstio vulnerable to denial of service attack due to Golang Regex Library7.5 High
- grafanaGrafana users with email as a username can block other users from signing in4.3 Medium
- grafanaData source and plugin proxy endpoints could leak the authentication cookie to some destination plugins6.8 Medium
- liferay dxp, portal +1 moreA Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in...5.4 Medium
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component,...8.8 High
- octobercms octoberOctober CMS Safe Mode bypass leads to authenticated RCE (Remote Code Execution)6.2 Medium
- bevywise mqttrouteA cross-site scripting (XSS) vulnerability in MQTTRoute v3.3 and below allows attackers to...5.4 Medium
- bevywise mqttrouteA Cross-Site Request Forgery (CSRF) in MQTTRoute v3.3 and below allows attackers to create and...4.3 Medium
- boodskap iot platformBoodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.6.5 Medium
- boodskap iot platformBoodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request...8.8 High
- boodskap iot platformBoodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability.5.4 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_read_header at ...5.5 Medium
- swftoolsSWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png_load at /lib...5.5 Medium
- itsourcecode human resource management systemSourceCodester Human Resource Management System Add Employee cross site scripting3.5 Low
- itsourcecode human resource management systemSourceCodester Human Resource Management System Profile Photo os command injection6.3 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreOrigin Validation Error in ikus060/rdiffweb3.7 Low
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb5.6 Medium
- google chromeUse after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote...8.8 High
- google chromeUse after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who...8.8 High
- google chromeUse after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote...8.8 High
- google chromeInappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119...4.3 Medium
- google chromeHeap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker...8.8 High
- google chromeUse after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to...8.8 High
- resiot iot platform and lorawan network serverSQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114...7.2 High
- resiot iot platform and lorawan network serverMultiple Cross Site Scripting (XSS) vulnerabilities in ResIOT IOT Platform + LoRaWAN Network...5.4 Medium
- resiot iot platform and lorawan network serverCross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network...8.8 High
- Show moreLoading…