CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 morespx_restservice SubNet_handler_func Broken Access Control6.5 Medium
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 moreTLS Certificate Generation Function Improper Input Validation4.9 Medium
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 morespx_restservice KillDupUsr_func Broken Access Control5.3 Medium
- lanner inc iac-ast2500a, lannerinc iac-ast2500 firmware +1 moreHard-coded TLS Certificate5.8 Medium
- apache heron, apache software foundation heron (incubating) +1 moreCRLF log injection9.8 Critical
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 morespx_restservice FirstReset_handler_func Broken Access Control5.3 Medium
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 morespx_restservice First_network_func Broken Access Control6.5 Medium
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 morespx_restservice modifyUserb_func Command Injection and Multiple Stack-Based Buffer Overflows9.1 Critical
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 morespx_restservice Login_handler_func Subfunction Stack-Based Buffer Overflow10.0 Critical
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 morespx_restservice Login_handler_func Command Injection and Multiple Stack-Based Buffer Overflows10.0 Critical
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 morespx_restservice KillDupUsr_func Command Injection and Stack-Based Buffer Overflow10.0 Critical
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 morespx_restservice SubNet_handler_func Multiple Command Injections and Stack-Based Buffer Overflows10.0 Critical
wiresharkOSS-FuzzStack-buffer-overflow in add_ff_actionNo scorelinuxDebianlinux - regression updateNo scorelzfcrates.ioInvalid use of `mem::uninitialized` causes `use-of-uninitialized-value`No scorelibrawOSS-FuzzHeap-buffer-overflow in LibRaw_buffer_datastream::readNo scorepillowPyPIInvalid-free in _deallocNo score- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.0.x-9.4.0.x contain allocation of Resources Without Limits or...5.3 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.x-9.4.0.x, contain a privilege context switching error. A...6.7 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability. A...6.7 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6,...6.7 Medium
- dell powerstore, powerstoreos +1 moreDell PowerStore versions 2.1.0.x contain an Authentication bypass vulnerability. A remote...7.0 High
- dell isilon onefs, emc isilon onefs +1 moreThe Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission...4.3 Medium
- aethon tug home base serverCROSS-SITE SCRIPTING CWE-798.2 High
- aethon tug home base serverCHANNEL ACCESSIBLE BY NON-ENDPOINT CWE-3008.2 High
- aethon tug home base serverCROSS-SITE SCRIPTING CWE-798.2 High
- aethon tug home base serverMISSING AUTHORIZATION CWE-8628.2 High
- aethon tug home base serverMISSING AUTHORIZATION CWE-8628.2 High
- oxilab accordions, biplob adhikari accordions – multiple accordions or faqs builder (wordpress plugin) +1 moreWordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerability7.2 High
- fatcatapps analytics cat, fatcat apps analytics cat – google analytics made easy (wordpress plugin) +1 moreWordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- chop-chop pop-up chop chop, pop-up chop chop (wordpress plugin) +1 moreWordPress Pop-Up Chop Chop plugin <= 2.1.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- xmlsoft libxml2, apple ipados, iphone os +17 more +19 moreAn issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can...7.8 High
- xmlsoft libxml2, apple ipados, iphone os +17 more +19 moreAn issue was discovered in libxml2 before 2.10.3. When parsing a multi-gigabyte XML document with...7.5 High
- oring iap-420(+), oringnet iap-420\+ firmware, iap-420 firmware +2 moreORing net IAP-420(+) Hidden Functionality9.8 Critical
- gnu mailmanMailman Core vulnerable to timing attacks6.3 Medium
libxml2OSS-FuzzHeap-use-after-free in xmlXIncludeCopyXPointerNo scoreclamavOSS-FuzzUNKNOWN READ in fp_cmp_magNo scorejackson-databindOSS-FuzzSecurity exception in jaz.Zer.<clinit>No score- siemens siveillance video mobile server v2022 r2, siveillance video mobile server +1 moreA vulnerability has been identified in Siveillance Video Mobile Server V2022 R2 (All versions <...9.8 Critical
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted dwf or .pct file when consumed through DesignReview.exe application could...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted dwf or .pct file when consumed through DesignReview.exe application could...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted dwf or .pct file when consumed through DesignReview.exe application could...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted dwf or .pct file when consumed through DesignReview.exe application could...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted TGA file when consumed through DesignReview.exe application could lead to...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted TGA file when consumed through DesignReview.exe application could lead to...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted TGA file when consumed through DesignReview.exe application could lead to...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +8 more +10 moreA malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could...7.8 High
- Show moreLoading…