CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could...7.8 High
- phpgurukul hospital management systemPHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS)...5.4 Medium
- phpgurukul hospital management systemPHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS)...5.4 Medium
- emlogEmlog Pro 1.6.0 plugins upload suffers from a remote code execution (RCE) vulnerability.7.2 High
- gradle enterpriseA credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3...7.5 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could...7.8 High
- debian linux, extended keccak code package project keccak code package, fedoraproject fedora +9 more +11 moreBuffer overflow in sponge queue functions9.8 Critical
- debian linux, linux kernel, netapp active iq unified manager +5 more +7 moreLinux Kernel BPF inode.c nilfs_new_inode use after free3.1 Low
- redisRedis Crash Report debug.c sigsegvHandler denial of service3.1 Low
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel BPF segment.c nilfs_attach_log_writer memory leak3.1 Low
- debian linux, linux kernel, fedoraproject fedora +2 moreLinux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free5.5 Medium
- gitlabA potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8...4.3 Medium
- bluez, linux kernel +1 moreLinux Kernel BlueZ jlink.c jlink_init denial of service2.6 Low
- debian linux, linux kernel +1 moreLinux Kernel Ethernet mtk_ppe.c __mtk_ppe_check_skb use after free5.1 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel IPsec idt77252.c tst_timer use after free5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel transport.c j1939_session_destroy memory leak3.5 Low
- linux kernelLinux Kernel IPsec cookie.c memory leak3.1 Low
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel af_vsock.c vsock_connect memory leak2.6 Low
- libtiff, debian linux, netapp active iq unified manager +2 moreLibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called...5.5 Medium
- libtiff, debian linux, netapp active iq unified manager +2 moreLibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called...5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreLinux Kernel IPsec devlink.c devlink_param_get use after free4.6 Medium
- linux kernelLinux Kernel IPsec bond_alb.c rlb_arp_xmit memory leak3.5 Low
- automoxThe Automox Agent before 40 on Windows incorrectly sets permissions on key files.7.8 High
- libtiff, debian linux, netapp active iq unified manager +2 moreLibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing...5.5 Medium
- libtiff, debian linux, netapp active iq unified manager +2 moreLibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c...5.5 Medium
- libtiff, debian linux, netapp active iq unified manager +2 moreLibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called...5.5 Medium
- libtiff, debian linux +1 moreMultiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows...7.7 High
- softmotions iowowStack Buffer Overflow in iowow6.2 Medium
- stmicroelectronics stm32cube stm32 usb host library, st stm32 mw usb host +1 moreSTM32 USB Host Library Buffer Overflow6.8 Medium
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted Data7.2 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted Data8.8 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted Data7.2 High
- solarwinds orion platform, platform +1 moreInsecure Direct Object Reference Vulnerability: Orion Platform 2020.2.65.4 Medium
sesnpmHardening of TypedArrays with non-canonical numeric property names in SESNo score- jadx project jadxJadx-gui subject to Denial of Service via Swing HTML rendering3.3 Low
- adobe commerce, magento +1 more[CVE-2021-36032] Magento IDOR Leads to Account Takeover8.8 High
- synology diskstation manager (dsm), diskstation manager +1 moreA vulnerability regarding out-of-bounds read is found in the session processing functionality of...5.3 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreA vulnerability regarding improper restriction of operations within the bounds of a memory buffer...10.0 Critical
- synology diskstation manager (dsm), diskstation manager +1 moreA vulnerability regarding improper restriction of operations within the bounds of a memory buffer...10.0 Critical
- synology diskstation manager (dsm), diskstation manager +1 moreA vulnerability regarding concurrent execution using shared resource with improper...10.0 Critical
curlOSS-FuzzStack-buffer-overflow in Curl_output_aws_sigv4No score- tenda 11n firmwareTenda 11N with firmware version V5.07.33_cn suffers from an Authentication Bypass vulnerability.9.8 Critical
- simple exam reviewer management system project exam reviewer management systemSimple Exam Reviewer Management System v1.0 is vulnerable to Insecure file upload.7.2 High
- simple exam reviewer management system project exam reviewer management systemSimple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting (XSS)...5.4 Medium
- simple exam reviewer management system project exam reviewer management systemSimple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery (CSRF)...8.8 High
- simple exam reviewer management system project exam reviewer management systemIn Simple Exam Reviewer Management System v1.0 the User List function suffers from insecure file...8.8 High
- simple exam reviewer management system project exam reviewer management systemIn Simple Exam Reviewer Management System v1.0 the User List function has improper access control...6.5 Medium
- pctechsoft pcsecureIn PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to...7.8 High
- best student result management system project student result management systemBest Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult...9.8 Critical
- Show moreLoading…