CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- sanitization management system project management system, sourcecodester sanitization management system +1 moreSourceCodester Sanitization Management System Quote Requests Tab cross site scripting2.4 Low
- sanitization management system project management system, sourcecodester sanitization management system +1 moreSourceCodester Sanitization Management System User Creation cross site scripting2.4 Low
- mikrotik routerosThe Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and...9.8 Critical
- adobe dimensionAdobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe dimensionAdobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe dimensionAdobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe dimensionAdobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe dimensionAdobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe dimensionAdobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionAdobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe dimensionAdobe Dimension GLB File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe dimensionAdobe Dimension SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Improper Access Control Security feature bypass5.3 Medium
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Stored XSS Arbitrary code execution10.0 Critical
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code Execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader Use After Free Memory leak5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader NULL Pointer Dereference Application denial-of-service5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code Execution Vulnerability7.8 High
- adobe coldfusionAdobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system read7.5 High
- adobe coldfusionAdobe ColdFusion Improper Input Validation Arbitrary file system read7.5 High
- adobe coldfusionAdobe ColdFusion Application Server Directory Traversal Arbitrary file system write7.2 High
- adobe coldfusionAdobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability4.9 Medium
- adobe coldfusionAdobe ColdFusion Application Server Directory Traversal Information Disclosure Vulnerability7.5 High
- adobe coldfusionAdobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability7.2 High
- adobe coldfusionAdobe ColdFusion Use of Hard-coded Credentials Application denial-of-service7.5 High
- adobe coldfusionAdobe ColdFusion Solr Service XML External Entity Processing Arbitrary file system read7.5 High
- adobe coldfusionAdobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- adobe coldfusionAdobe ColdFusion Application Server Directory Traversal Remote Code Execution Vulnerability9.8 Critical
- adobe coldfusionAdobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- adobe coldfusionAdobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- adobe coldfusionAdobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution Vulnerability9.8 Critical
- villatheme ald - aliexpress dropshipping and fulfillment for woocommerce (wordpress plugin), dropshipping and fulfillment for aliexpress and woocommerce +1 moreWordPress ALD - AliExpress Dropshipping and Fulfillment for WooCommerce premium plugin <= 1.1.0 - Sensitive Data Exposure vulnerability7.5 High
- zoom on-premise meeting connector mmrZoom On-Premise Deployments: Improper Access Control6.5 Medium
- zoom on-premise meeting connector mmrZoom On-Premise Deployments: Improper Access Control8.2 High
- zoom on-premise meeting connector mmrZoom On-Premise Deployments: Improper Access Control6.5 Medium
- zoom meetings, zoom video communications inc client for meetings for macos +1 moreDebugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOS7.3 High
- openharmonyKernel memory pool override in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could disclose sensitive information inc…6.7 Medium
- openharmonySoftbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm pack…8.3 High
- openatom openharmonyOut-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory le…5.1 Medium
- openharmonyStartup subsystem missed permission validation in param service. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS…8.4 High
- kubernetes apiserver, kube-apiserver +1 moreKubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)5.1 Medium
- flipped-aurora gin-vue-adminGin-vue-admin - Unrestricted File Upload9.0 Critical
- atlassian jira alignThe MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2 allows An...8.8 High
- atlassian jira alignThe ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote...4.9 Medium
curlOSS-FuzzStack-buffer-overflow in Curl_output_aws_sigv4No score- ucms project ucmsThere is a file inclusion vulnerability in the template management module in UCMS 1.68.8 High
- oretnom23 simple cold storage management systemSimple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes...7.2 High
- oretnom23 online birth certificate management systemOnline Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting (XSS)...6.1 Medium
- Show moreLoading…