CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- jhead project jhead, debian linux, fedoraproject fedora +2 moreJhead 3.06.0.1 allows attackers to execute arbitrary OS commands by placing them in a JPEG...7.8 High
- devhubapp devhubdevhub 0.102.0 was discovered to contain a broken session control.5.4 Medium
- billing system project systemBilling System Project v1.0 was discovered to contain a SQL injection vulnerability via the id...7.2 High
- 74cms 74cmsse74cmsSE v3.12.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the...5.4 Medium
- 74cms 74cmsse74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change...6.5 Medium
- mindskip xzsxzs v3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component ...5.4 Medium
- mitre calderaMITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execution of arbitrary commands on agents.5.4 Medium
- mitre calderaMITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40605.6.1 Medium
- mitre calderaMITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a different vulnerability than CVE-2022-40606.6.1 Medium
- gxgroup gpon ont titanium 2122a firmwareAn issue in GX Group GPON ONT Titanium 2122A T2122-V1.26EXL allows attackers to escalate...9.8 Critical
- rockwellautomation factorytalk vantagepointRockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable...8.8 High
- linux kernelLinux Kernel IPv6 inet6_dgram_ops race condition4.6 Medium
- linux kernelLinux Kernel TCP tcp_setsockopt race condition2.1 Low
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreLinux Kernel Bluetooth l1oip_core.c del_timer use after free4.6 Medium
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreLinux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after free5.5 Medium
- bluez, linux kernel +1 moreLinux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference3.5 Low
- exim, fedoraproject fedora +1 moreExim Regex use after free4.6 Medium
- devolutions server, x.org x server +1 moreX.org Server xquartz X11Controller.m denial of service3.5 Low
- boxbilling, boxbilling boxbilling/boxbilling +1 moreUnrestricted Upload of File with Dangerous Type in boxbilling/boxbilling7.2 High
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c ProcXkbGetKbdByName memory leak3.5 Low
- devolutions server, debian linux, fedoraproject fedora +1 more +3 moreX.org Server xkb.c _GetCountedString buffer overflow5.5 Medium
- oretnom23 simple cold storage management systemSourceCodester Simple Cold Storage Management System Avatar unrestricted upload4.7 Medium
- oretnom23 simple cold storage management systemSourceCodester Simple Cold Storage Management System Add New Storage cross site scripting2.4 Low
- simple cold storage management system project cold storage management system, sourcecodester simple cold storage management system +1 moreSourceCodester Simple Cold Storage Management System Setting cross site scripting2.4 Low
- oretnom23 simple cold storage management systemSourceCodester Simple Cold Storage Management System Create User cross site scripting2.4 Low
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreLinux Kernel IPsec nfp_cppcore.c area_cache_get use after free5.5 Medium
- linux kernelLinux Kernel Netfilter sysfs.c damon_sysfs_add_target memory leak3.5 Low
- linux kernelLinux Kernel BPF af_unix.c unix_release_sock memory leak3.5 Low
- linux kernelLinux Kernel BPF spl2sw_driver.c spl2sw_nvmem_get_mac_address use after free5.5 Medium
- hunter2 project hunter2An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of...6.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel libbpf btf_dump.c btf_dump_name_dups use after free5.1 Medium
- linux kernelLinux Kernel BPF usdt.c parse_usdt_arg memory leak3.5 Low
- isaacs minimatch, debian linux, fedoraproject fedora +2 moreminimatch ReDoS vulnerability7.5 High
- gnupg libksba, gnupg, gnupg vs-desktop +1 more +3 moreA vulnerability was found in the Libksba library due to an integer overflow within the CRL parser...9.8 Critical
- google drive, google llc drive for desktop macos +1 morePrivilege escalation in Google Drive for Desktop on MacOS5.6 Medium
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 13.7 before 15.2.5...4.3 Medium
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6...3.5 Low
- gitlabIt was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE...4.3 Medium
- gitlabImproper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before...2.7 Low
- qualcomm, inc. snapdragon auto, qualcomm apq8064au firmware, apq8096au firmware +21 more +23 moreMemory corruption in automotive multimedia due to use of out-of-range pointer offset while...8.4 High
- gitlabEmail addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to...3.5 Low
- gitlabSerialization of sensitive data in GitLab EE affecting all versions from 14.9 prior to 15.2.5, 15...6.5 Medium
- gitlabA branch/tag name confusion in GitLab CE/EE affecting all versions prior to 15.2.5, 15.3 prior to...3.5 Low
- gitlabLack of IP address checking in GitLab EE affecting all versions from 14.2 prior to 15.2.5, 15.3...5.3 Medium
- gitlabA potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before...7.5 High
- codedropz drag and drop multiple file upload - contact form 7, unknown drag and drop multiple file upload – contact form 7 +1 moreDrag and Drop Multiple File Upload < 1.3.6.5 - File Upload Size Limit Bypass4.3 Medium
- gitlabAn unhandled exception in job log parsing in GitLab CE/EE affecting all versions prior to 15.2.5,...2.7 Low
- unknown import all xml, csv & txt into wordpress, smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csv +1 moreImport all XML, CSV & TXT into WordPress < 6.5.8 - Missing Authorisation4.2 Medium
- unknown import all xml, csv & txt into wordpress, smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csv +1 moreImport all XML, CSV & TXT into WordPress < 6.5.8 - Admin+ SQLi7.2 High
- passster project passsterPassster < 3.5.5.5.2 - Insecure Storage of Password5.9 Medium
- Show moreLoading…