CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- garage management system project management systemA stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows...5.4 Medium
- opencrxOpenCRX vulnerable to password enumeration via error messages in password reset5.3 Medium
- softing opc, opc ua c\+\+ software development kit +1 moreAn issue was discovered in Softing OPC UA C++ SDK 5.66 through 6.x before 6.10. An OPC/UA browse...7.5 High
- uglifyjs project uglifyjsPrototype pollution vulnerability in function DEFNODE in ast.js in mishoo UglifyJS 3.13.2 via the...9.8 Critical
- softing opc, edgeaggregator, edgeconnector +3 more +5 moreAn issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess...7.5 High
- shinken-monitoring shinken monitoringShinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control9.8 Critical
- debian linux, linux kernel +1 moreLinux Kernel BPF gup.c follow_page_pte race condition5.0 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel nilfs2 inode.c nilfs_bmap_lookup_at_level null pointer dereference4.3 Medium
- exim, fedoraproject fedora +1 moreExim DMARC dmarc.c dmarc_dns_lookup use after free5.6 Medium
- linux kernelLinux Kernel Bluetooth l2cap_core.c l2cap_recv_acldata memory leak3.5 Low
- linux kernelAn out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller...7.8 High
- eve-ngAn arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2...7.2 High
- nopcommerceMultiple open redirect vulnerabilities in NopCommerce 4.10 through 4.50.1 allow remote attackers...6.1 Medium
- siemens jt2go, teamcenter visualization, teamcenter visualization v13.3 +1 more +3 moreDatalogics APDFL library Heap-based Buffer Overflow7.8 High
- easyvista service managerCross Site Scripting (XSS) vulnerability in New equipment page in EasyVista Service Manager 2018...5.4 Medium
- sonos one firmwareSome versions of Sonos One (1st and 2nd generation) allow partial or full memory access via...6.8 Medium
- verint desktop and process analyticsThe MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate...7.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +17 more +19 moreBIG-IP TMM Vulnerability CVE-2022-419833.7 Low
- f5 big-ip advanced waf & asm, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-418367.5 High
- f5 f5os-a, f5os-c +1 moreF5OS vulnerability CVE-2022-418357.3 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP iRule vulnerability CVE-2022-418337.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP SIP vulnerability CVE-2022-418327.5 High
- f5 big-ip afm & pem, big-ip advanced firewall manager, big-ip policy enforcement manager +2 moreBIG-IP PEM and AFM TMUI, TMSH and iControl vulnerability CVE-2022-418136.5 Medium
- f5 big-ip afm, big-ip advanced firewall manager +1 moreBIG-IP AFM NAT64 Policy Vulnerability CVE-2022-418067.5 High
- f5 big-ip dns, big-ip ltm, big-ip domain name system +1 more +3 moreBIG-IP DNS Express vulnerability CVE-2022-417877.5 High
- f5 f5os-a, f5os-c +1 moreF5OS CLI vulnerability CVE-2022-417805.5 Medium
- f5 big-ip, big-iq, big-ip access policy manager +11 more +13 moreBIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-417706.5 Medium
- f5 nginx plus, nginx ingress controller +1 moreNGINX ngx_http_hls_module vulnerability CVE-2022-417437.0 High
- f5 nginx, nginx open source subscription, nginx plus +3 more +5 moreNGINX ngx_http_mp4_module vulnerability CVE-2022-417427.1 High
- f5 nginx, nginx open source subscription, nginx plus +3 more +5 moreNGINX ngx_http_mp4_module vulnerability CVE-2022-417417.0 High
- f5 big-ip, big-iq, big-ip access policy manager +10 more +12 moreBIG-IP and BIG-IQ mcpd vulnerability CVE-2022-416944.9 Medium
- f5 big-ip advanced waf & asm, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-416917.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP iRules vulnerability CVE-2022-416247.5 High
- f5 big-ip advanced waf & asm, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP Advanced WAF and ASM iControl REST vulnerability CVE-2022-416177.2 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP software SYN cookies vulnerability CVE-2022-367955.3 Medium
- solarwinds sql sentrySensitive Data Disclosure Vulnerability5.3 Medium
drupal/search_apiPackagistThis module enables you to build searches using a wide range of features, data sources and backends. The module doesn't in all cases correctly detect whether a given search is active on the current pa…No score- pivotal software concourseTeam scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution5.4 Medium
- kartverket github-workflowskartverket/github-workflows's run-terraform allows for RCE via terraform plan8.8 High
- fluxcd flux2, helm-controller, image-automation-controller +4 more +6 moreFlux2 vulnerable to Denial of Service due to Improper use of metav1.Duration5.0 Medium
- fuji electric d300winFuji Electric D300win Write-what-where condition6.1 Medium
- fuji electric d300winFuji Electric D300win Out-of-bounds Read8.7 High
tclSUSESecurity update for tclNo scorepngcheckopenSUSESecurity update for pngcheckNo scorejaninoOSS-FuzzSecurity exception in org.codehaus.janino.Parser.parseAssignmentExpressionNo scoreghostscriptOSS-FuzzHeap-use-after-free in xps_image_enum_finalizeNo score- jenkins 360 fireline, jenkins project 360 fireline plugin +1 moreContent-Security-Policy protection for user content can be disabled in Jenkins 360 FireLine Plugin5.3 Medium
- jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin +1 moreContent-Security-Policy protection for user content disabled by Jenkins NeuVector Vulnerability Scanner Plugin5.3 Medium
- jenkins screenrecorder, jenkins project screenrecorder plugin +1 moreContent-Security-Policy protection for user content disabled by Jenkins ScreenRecorder Plugin4.3 Medium
- jenkins xframium builder, jenkins project xframium builder plugin +1 moreContent-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin4.3 Medium
- Show moreLoading…