CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- tenda tx3 firmwareTenda TX3 US_TX3V1.0br_V16.03.13.11_multi_TDE01 was discovered to contain a stack overflow via...9.8 Critical
- opencatsOpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the importID...6.5 Medium
- opencatsOpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable...6.5 Medium
- opencatsOpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the entriesPerPage...6.5 Medium
- opencatsOpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tag_id variable...6.5 Medium
- opencatsOpenCATS v0.9.6 was discovered to contain a remote code execution (RCE) vulnerability via the...9.8 Critical
- opencatsOpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability...6.1 Medium
- opencatsOpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability...6.1 Medium
- opencatsOpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability...6.1 Medium
- opencatsOpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability...6.1 Medium
- opencatsOpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability...6.1 Medium
- apache isish2 webconsole (available only in prototype mode) should nevertheless be disabled by default.5.3 Medium
- apache isisXSS vulnerability, eg for String properties.6.1 Medium
- jsonlint project c\+\+jsonlint 1.0 is vulnerable to heap-buffer-overflow via /home/hjsz/jsonlint/src/lexer.7.5 High
- amitmerchant1990 markdownifyMarkdownify subject to Remote Code Execution via malicious markdown file7.8 High
- relatedcode messengerRelatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access...4.3 Medium
- relatedcode messengerRelatedcode's Messenger version 7bcd20b allows an authenticated external attacker to access...6.5 Medium
- acer altos w2000h-w570h f4 firmwareAcer Altos W2000h-W570h F4 R01.03.0018 was discovered to contain a stack overflow in the...9.8 Critical
- axiosys bento4Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service.5.5 Medium
- axiosys bento4Bento4 1.6.0 has memory leaks via the mp4fragment.5.5 Medium
- ocomon project ocomonOcoMon 4.0RC1 is vulnerable to Incorrect Access Control. Through a request the user can obtain...7.5 High
- momofoolish sra-adminsra-admin is vulnerable to storage cross-site scripting (XSS) via unrestricted file upload8.2 High
- enalean tuleapTuleap subject to Missing Authorization allowing for branch prefix modification4.3 Medium
- liferay dxp, portal +1 moreA Cross-site scripting (XSS) vulnerability in the Document and Media module - file upload...5.4 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq7.2 High
- octoprint, octoprint octoprint/octoprint +1 moreFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprint6.0 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreLinux Kernel BPF libbpf.c find_prog_by_sec_insn null pointer dereference3.5 Low
- corsair k63 firmwareMissing AES encryption in Corsair K63 Wireless 3.1.3 allows physically proximate attackers to...6.8 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the...5.5 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreMissing Authentication for Critical Function in ikus060/rdiffweb4.5 Medium
- nopcommerceAn access control issue in nopcommerce v4.50.2 allows attackers to arbitrarily modify any...7.5 High
- broadcom reactor nettyInvalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens4.3 Medium
- redhat virtualizationA flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +274 more +276 moreTransient Denial-of-Service in WLAN due to buffer over-read while parsing MDNS frames. in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +271 more +273 moreMemory corruption in WLAN due to integer overflow to buffer overflow while parsing GTK frames. in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar8031 firmware +241 more +243 moreDenial of service in WLAN due to out-of-bound read happens while processing VHT action frame in...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +116 more +118 moreInformation disclosure in WLAN due to improper length check while processing authentication...8.2 High
- qualcomm, inc. snapdragon auto, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8009w firmware +140 more +142 moreCryptographic issue in WLAN due to improper check on return value while authentication handshake...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +179 more +181 morememory corruption in video due to buffer overflow while parsing asf clips in Snapdragon Auto,...7.3 High
- github enterprise serverDeserialization of Untrusted Data vulnerability in GitHub Enterprise Server leading to Remote Code Execution8.8 High
- netapp clustered data ontapClustered Data ONTAP versions 9.11.1 through 9.11.1P2 with SnapLock configured FlexGroups are...8.1 High
- redhat 3scale api management3scale API Management 2 does not perform adequate sanitation for user input in multiple fields....8.8 High
- asus rt-n12e firmwareAsus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability. Through system...7.5 High
- d-link dsl-2750b devices, dlink dsl-2750b firmware +1 moreD-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login...9.8 Critical
- mvpower tv-7104he firmware, tv7108he firmware +1 moreMVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell...9.8 Critical
- red hat openshiftIn Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv...5.5 Medium
- red hat openshiftThe deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreIf a website called <code>window.print()</code> in a particular way, it could cause a denial of...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreCertain types of allocations were missing annotations that, if the Garbage Collector was in a...8.8 High
- Show moreLoading…