CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- kadencewp kadence woocommerce email designerKadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection7.2 High
- brocade fabric os, broadcom fabric operating system +1 moreSeveral commands in Brocade Fabric OS before Brocade Fabric OS v.9.0.1e, and v9.1.0 use unsafe...7.8 High
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in fab_seg.c.h libraries of all Brocade Fabric OS versions before Brocade Fabric...7.8 High
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2...8.8 High
- brocade fabric os, broadcom fabric operating system +1 moreA privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9...7.8 High
- brocade fabric os, broadcom fabric operating system +1 moreAn information disclosure vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0,...5.5 Medium
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2...5.5 Medium
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, and 7.4...8.8 High
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric OS...7.2 High
- unknown spam protection, antispam, firewall by cleantalk, cleantalk spam protection\, antispam\, firewall +1 moreAnti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi7.2 High
- 10web form maker, form maker by 10web – mobile-friendly drag & drop contact form builder +1 moreForm Maker by 10Web < 1.15.6 - Admin+ SQLI7.2 High
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social < 6.9.10 - Subscriber+ SSRF6.5 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social < 6.9.10 - Subscriber+ SQLi8.8 High
- laubrotel lbstopattack, unknown plugin lbstopattack +1 moreLBStopAttack < 1.1.3 - Arbitrary Settings Update via CSRF6.5 Medium
- feather js feathers-sequalize, feathersjs feathers-sequelize +1 moreFeathers - Query “__proto__” is converted to real prototype10.0 Critical
- feather js feathers-sequalize, feathersjs feathers-sequelize +1 moreFeathers - Improper parameter filtering in the Feathers js library, which may ultimately lead to SQL injection10.0 Critical
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS Web Application services before Brocade Fabric v9.1.0, v9.0.1e, v8.2.3c, v7.4...6.5 Medium
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Webtools in Brocade Fabric OS versions before Brocade Fabric OS versions v9.1.1, v9.0.1e,...8.8 High
- adminpad project adminpadAdminPad < 2.2 - Note Update via CSRF6.5 Medium
- feathersjs feathers-sequelize, feather js feathers-sequalize +1 moreFeathers - SQL injection via attribute aliases10.0 Critical
- socket socket.io-parserSocket.io - Improper type validation in attachment parsing10.0 Critical
- tenable nessus, tenable, inc. tenable nessus +1 moreAn authenticated attacker could read Nessus Debug Log file attachments from the web UI without...6.5 Medium
- open-xchange ox app suitedocumentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript...9.8 Critical
- open-xchange ox app suiteOX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the...6.1 Medium
- opensvc multipath-tools, debian linux, fedoraproject fedora +2 moremultipath-tools 0.7.0 through 0.9.x before 0.9.2 allows local users to obtain root access, as...7.8 High
- opensvc multipath-tools, debian linux, fedoraproject fedora +2 moremultipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as...7.8 High
- juiker, juiker app +1 moreJuiker app - Hard-coded Credentials5.5 Medium
matrix-sdkcrates.iomatrix-sdk 0.6.0 logs access tokensNo scoreradare2OSS-FuzzHeap-buffer-overflow in parse_classes_64No scoreghostscriptOSS-FuzzHeap-buffer-overflow in Ins_ALIGNRPNo scoreopenscOSS-FuzzStack-buffer-overflow in authentic_parse_sizeNo score- libexpat project libexpat, debian linux, fedoraproject fedora +12 more +14 moreIn libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared...7.5 High
- free5gcfree5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders5.5 Medium
- iij smartkey, internet initiative japan inc. iij smartkey +1 moreInformation disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows...7.5 High
- weseek growi, weseek, inc. growi v5 series and v4 series +1 moreImproper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to...6.5 Medium
- lemon8 project lemon8, bytedance k.k. lemon8 app for android and lemon8 app for ios +1 moreImproper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android...6.5 Medium
- sony content transfer, sony corporation content transfer (for windows) +1 moreUntrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3...7.8 High
- yokogawa wtviewere 761941, wtviewerefree, yokogawa test & measurement corporation wtviewere series +2 moreStack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and...9.8 Critical
- bookstackCross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote...5.4 Medium
- genivi diagnostic log and traceAn issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8....5.5 Medium
- genivi diagnostic log and traceAn issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8....5.5 Medium
- flipped-aurora gin-vue-adminGin-vue-admin vulnerable to Unrestricted Upload of File with Dangerous Type9.8 Critical
- zalando skipperSkipper vulnerable to SSRF via X-Skipper-Proxy9.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9 +1 moreIn Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type...6.5 Medium
- ipfireMultiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions...4.8 Medium
- linux kernelA flaw was found in the KVM's AMD nested virtualization (SVM). A malicious L1 guest could...5.5 Medium
- vestacp control panel, vesta control panel +1 moremyVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable...7.2 High
- gnu libtasn1, debian linux, fedoraproject fedora +3 more +5 moreGNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects...9.1 Critical
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 moreSession Fixation and Insufficient Session Expiration5.8 Medium
- lanner inc iac-ast2500a, lannerinc iac-ast2500a firmware +1 moreUsername Enumeration5.3 Medium
- Show moreLoading…