CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
hunspellOSS-FuzzHeap-buffer-overflow in AffixMgr::compound_checkNo scorelibrawOSS-FuzzUNKNOWN READ in LibRaw::sget4No score- tenda ac18 firmwareTenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter...9.8 Critical
- tenda ac15 firmwareTenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in...7.5 High
- open source sacco management system project source sacco management systemOpen Source SACCO Management System v1.0 vulnerable to SQL Injection via /sacco_shield...7.2 High
- tp-link tl-wr841n firmwareTP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS).6.1 Medium
- lavaliteLavalite vulnerable to Arbitrary File Read via Directory Traversal7.5 High
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module6.1 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module6.1 Medium
- liferay portalLiferay Portal Vulnerable to XSS in the Object Module5.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Role Module5.4 Medium
- liferay dxp, portal +1 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module6.1 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module5.4 Medium
- opensecurity mobile security frameworkMobSF allows attackers to read arbitrary files via a crafted HTTP request7.5 High
- get-simple getsimple cmsGetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via...9.8 Critical
- tp-link ax10 firmwareTP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously...8.1 High
- tp-link ax10 firmwareThe web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when...5.9 Medium
- online tours \& travels management system project tours \& travels management systemOnline Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload...7.2 High
- billing system project systemAn arbitrary file upload vulnerability in the component /php_action/editProductImage.php of...7.2 High
- eyoucmsEyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery (CSRF)...8.8 High
- devexpress asp.net web forms controlsThe DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19...7.5 High
- phpokPhpok 6.1 has a deserialization vulnerability via framework/phpok_call.php.9.8 Critical
- fortinet fortios, fortiproxy, fortiswitchmanager +2 more +4 moreAn authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version...9.8 Critical
- oracle web applications desktop integratorVulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business...9.8 Critical
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....8.8 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....8.1 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....8.1 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....8.1 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....6.0 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....7.5 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....7.3 High
- oracle transportation managementVulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component:...5.4 Medium
- oracle java virtual machine, oracle corporation database - enterprise edition +1 moreVulnerability in the Java VM component of Oracle Database Server. Supported versions that are...4.3 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The...5.5 Medium
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin...7.5 High
- oracle transportation managementVulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component:...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....6.5 Medium
- oracle transportation managementVulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component:...2.7 Low
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....6.5 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.5 Medium
- oracle peoplesoft enterprise common components, oracle corporation peoplesoft enterprise cc common application objects +1 moreVulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft ...8.1 High
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...5.3 Medium
- oracle mysql, oracle corporation mysql installer +1 moreVulnerability in the MySQL Installer product of Oracle MySQL (component: Installer: General)....4.2 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client)....3.9 Low
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client)....4.3 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported...5.5 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +1 more +3 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....4.9 Medium
- oracle graalvm, azul zulu, fedoraproject fedora +13 more +15 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...3.7 Low
- apache dubboApache Dubbo Hession Deserialization Vulnerability Gadgets Bypass9.8 Critical
- asus asusliveupdate, asussoftwaremanger, system control interface +2 moreAsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running...6.0 Medium
- Show moreLoading…