CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- oracle peoplesoft enterprise, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.3 Medium
- oracle communications billing and revenue managementVulnerability in the Oracle Communications Billing and Revenue Management product of Oracle...6.5 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....7.2 High
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure)....4.9 Medium
- oracle siebel core - db deployment and configuration accessible data, oracle corporation siebel core - db deployment and configuration +1 moreVulnerability in the Siebel Core - DB Deployment and Configuration product of Oracle Siebel CRM ...7.5 High
- oracle graalvm, oracle corporation graalvm enterprise edition +1 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:...5.3 Medium
- oracle database, oracle corporation database - enterprise edition +1 moreVulnerability in the Oracle Database - Advanced Queuing component of Oracle Database Server. The...7.2 High
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....4.9 Medium
- ibm http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OHS...7.1 High
- oracle transportation managementVulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component:...5.4 Medium
- oracle bi publisher, oracle corporation bi publisher (formerly xml publisher) +1 moreVulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Core...7.6 High
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...4.3 Medium
- oracle e-business suite, oracle corporation web applications desktop integrator +1 moreVulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business...9.8 Critical
- feishuBeijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search...7.8 High
- fedoraproject supybot-fedorasupybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS....5.3 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreDue to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a...7.8 High
- zgr tps200 ng, zigor zgr tps200 ng firmware +1 moreZGR TPS200 Cross-Site Request Forgery (CSRF)9.6 Critical
- zgr tps200 ng, zigor zgr tps200 ng firmware +1 moreZGR TPS200 NG Improper access control9.3 Critical
- zgr tps200 ng, zigor zgr tps200 ng firmware +1 moreZGR TPS200 NG Missing Reference to Active Allocated Resource10.0 Critical
- zgr tps200 ng, zigor zgr tps200 ng firmware +1 moreZGR TPS200 NG Information Exposure7.5 High
- avira security, nortonlifelock "avira security" – for windows +1 moreSoftware Updater of Avira Security for Windows vulnerable to Privilege Escalation7.3 High
- hiwin robot system softwareHIWIN Robot System Software version 3.3.21.9869 does not properly address the terminated command...7.5 High
- flipped-aurora gin-vue-adminGin-vue-admin - Unrestricted File Upload9.0 Critical
- abpressoptimizer ab press optimizer, mammothology ab press optimizer (wordpress plugin) +1 moreWordPress AB Press Optimizer plugin <= 1.1.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- accessing template content without permissions otrsInformation exposure of template content due to missing check of permissions3.5 Low
- otrs, otrs ag ((otrs)) community edition +1 moreDoS attack using email7.5 High
- wago compact controller cc100, 750-8100 firmware, 750-8101\/000-010 firmware +83 more +85 moreWAGO: multiple products - Loss of MAC-Address-Filtering after reboot7.5 High
- trumpf job order interface, oseon, trutops boost +4 more +6 moreTRUMPF TruTops default user accounts vulnerability9.8 Critical
net-snmpOSS-FuzzHeap-buffer-overflow in asn_build_unsigned_int64No scorehunspellOSS-FuzzHeap-buffer-overflow in AffixMgr::suffix_checkNo score- anji-plus aj-reportanji-plus AJ-Report 0.9.8.6 allows remote attackers to bypass login authentication by spoofing...8.8 High
- go-admingo-admin (aka GO Admin) 2.0.12 uses the string go-admin as a production JWT key.9.8 Critical
- phoenixframework phoenixPhoenix before 1.6.14 mishandles check_origin wildcarding7.5 High
- merchandise online store project online storeA SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin...9.8 Critical
- netgear r6220 firmwareNetgear R6220 v1.1.0.114_1.0.1 suffers from Incorrect Access Control, resulting in a command...8.8 High
- tenda ac10 firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo.9.8 Critical
- tenda ac10 firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart.9.8 Critical
- tenda ac10 firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.9.8 Critical
- tenda ac10 firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind.9.8 Critical
- tenda ac10 firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetFirewallCfg.9.8 Critical
- tenda ac10 firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetSpeedWan.9.8 Critical
- tenda ac10 firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetDeviceName.9.8 Critical
- tenda ac10 firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState.9.8 Critical
- tenda ac10 firmwareTenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromNatStaticSetting.9.8 Critical
- 74cms 74cmsseAn arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13...9.8 Critical
- keking kkfileviewkkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller...9.8 Critical
- keking kkfileviewkkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java.6.1 Medium
- open source sacco management system project source sacco management systemOpen Source SACCO Management System v1.0 is vulnerable to SQL Injection via /sacco_shield...7.2 High
- online tours and travels management system project tours and travels management systemOnline Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip...7.2 High
- chamiloChamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows...8.8 High
- Show moreLoading…