CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- qemu, fedoraproject fedora +1 moreAn integer underflow issue was found in the QEMU VNC server while processing ClientCutText...6.5 Medium
- rockwellautomation factorytalk vantagepointRockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable...8.8 High
- unknown wp custom cursors, wp custom cursors project custom cursors +1 moreWP Custom Cursors < 3.0.1 - Arbitrary Cursor Deletion via CSRF4.3 Medium
- wp custom cursors project custom cursors, unknown wp custom cursors | wordpress cursor plugin +1 moreWP Custom Cursors < 3.2 - Admin+ SQLi7.2 High
- unknown wp custom cursors, wp custom cursors project custom cursors +1 moreWP Custom Cursors < 3.0.1 - Stored Cross-Site Scripting via CSRF6.1 Medium
- noah hearle, design extreme we’re open!, designextreme we\'re open +1 moreWe’re Open! < 1.42 - Admin+ Stored Cross-Site Scripting4.8 Medium
- codexpert search logger, unknown search logger – know what your visitors search +1 moreSearch Logger <= 0.9 - Admin+ SQLi7.2 High
- najeebmedia frontend file manager pluginFrontend File Manager < 21.4 - File Upload via CSRF4.3 Medium
- miniorange discord integration, unknown miniorange discord integration +1 moreminiOrange Discord Integration < 2.1.6 - Subscriber+ App Disabling6.5 Medium
- gitlabAn issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions...6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 10.0 before 15.2.5,...5.4 Medium
- gitlabImproper control of a resource identifier in Error Tracking in GitLab CE/EE affecting all...7.3 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.1.6, all versions...3.7 Low
- gitlabAn improper access control issue in GitLab CE/EE affecting all versions starting before 15.1.6,...4.3 Medium
- gitlabA vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4...9.9 Critical
- gitlabA potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before 15.1.6...7.5 High
- gitlabA potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before...4.3 Medium
- gitlabA vulnerability in GitLab CE/EE affecting all versions from 11.3.4 prior to 15.1.5, 15.2 to 15.2...9.9 Critical
- gitlabA cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15...7.3 High
- helpful project helpfulHelpful < 4.5.26 - Information Disclosure5.3 Medium
- tenable nessusInsufficiently Protected Credentials: An authenticated user with debug privileges can retrieve...6.5 Medium
- gitlabAn improper access control issue in GitLab CE/EE affecting all versions starting from 15.2 before...4.3 Medium
- gitlabA lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior...6.5 Medium
- qualcomm, inc. snapdragon mobile, qualcomm kailua firmware, sg8275 firmware +13 more +15 moreMemory corruption in BTHOST due to double free while music playback and calls over bluetooth...8.4 High
- mekshq meks easy social shareMeks Easy Social Share < 1.2.8 - Admin+ Stored Cross-Site Scripting4.8 Medium
- themeum tutor lms, tutor lms – elearning and online course solution +1 moreTutor LMS < 2.0.10 - Admin+ Stored Cross-Site Scripting4.8 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.10 before 15.1.6,...6.5 Medium
- gitlabAn issue in Incident Timelines has been discovered in GitLab CE/EE affecting all versions...7.3 High
- gitlabA business logic issue in the handling of large repositories in all versions of GitLab CE/EE from...6.5 Medium
- gitlabA crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6...6.4 Medium
- efm networks co., ltd nas1dual, nas2dual, nas4dual, iptime nas1dual firmware, nas2dual firmware +1 more +3 moreIPTIME NAS1DUAL CSRF Vulnerability8.0 High
- wisa smart wing cmsWISA Smart Wing CMS Remote Command Execution Vulnerability8.8 High
- megazone reversewall-mdsSecuever reverseWall-MDS Remote Code Execution Vulnerability7.5 High
- salesforce tableau server, tableau server +1 moreTableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s...9.8 Critical
- red hat business-central, redhat decision manager, process automation +2 moreA flaw was found in the RHDM, where an authenticated attacker can change their assigned role in...8.8 High
- red hat business-central, redhat decision manager +1 moreA flaw was found in the RHDM, where sensitive HTML form fields like Password has auto-complete...7.5 High
- redhat openshiftAn input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants...3.5 Low
seamonkeyopenSUSESecurity update for seamonkeyNo scorendpiOSS-FuzzUNKNOWN READ in ndpi_search_irc_tcpNo scorehunspellOSS-FuzzHeap-buffer-overflow in AffixMgr::cpdpat_checkNo scorefluent-bitOSS-FuzzHeap-buffer-overflow in flb_parser_createNo scoremapserverOSS-FuzzUNKNOWN READ in loadSymbolNo score- pytest pyWithdrawn Advisory: ReDoS in py library when used with subversion5.3 Medium
- giteaGitea vulnerable to Argument Injection9.8 Critical
- linux kernelLinux Kernel skb macvlan.c macvlan_handle_frame memory leak5.3 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel IPv6 ipv6_renew_options memory leak4.3 Medium
- linux kernelLinux Kernel Driver memory.c use after free5.3 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel kcm kcmsock.c kcm_tx_work race condition2.6 Low
hunspellOSS-FuzzStack-buffer-overflow in AffixMgr::suffix_checkNo score- wolfsslAn issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer...5.3 Medium
- Show moreLoading…