CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredrivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1...6.7 Medium
- baramundi management suitebaramundi Management Agent (bMA) in baramundi Management Suite (bMS) 2021 R1 and R2 and 2022 R1...7.5 High
- dlink dir-816 firmwareD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter...9.8 Critical
- dlink dir-816 firmwareD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep54_pskpwd...9.8 Critical
- dlink dir-816 firmwareD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter...9.8 Critical
- dlink dir-816 firmwareD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the wizardstep4_pskpwd...9.8 Critical
- dlink dir-816 firmwareD-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities...7.5 High
- dlink dir-816 firmwareD-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the srcip parameter at ...9.8 Critical
- apache flumeApache Flume prior to 1.11.0 has an Improper Input Validation (JNDI Injection) in JMSSource9.8 Critical
- apache linkisThe Apache Linkis JDBC EngineConn module has a RCE Vulnerability8.8 High
- metabaseMetabase vulnerable to arbitrary SQL execution from queryhash8.8 High
- metabaseMetabase vulnerable to Remote Code Execution via H28.8 High
- metabaseMetabase SSO users able to circumvent IdP login by doing password reset6.5 Medium
- metabaseMetabase's GeoJSON validation doesn't prevent redirects to blocked URLs6.5 Medium
- metabaseMetabase vulnerable to circumvention of Locked parameter in Signed Embedding6.5 Medium
- wintercms winterWinter vulnerable to Prototype Pollution in Snowboard framework8.1 High
- discourse discourse-patreon, patreon +1 moreDiscourse Patreon vulnerable to improper validation of email during Patreon authentication9.1 Critical
- twisted, debian linux +1 moreTwisted vulnerable to NameVirtualHost Host header injection5.4 Medium
- jupyter core, debian linux, fedoraproject fedora +2 moreExecution with Unnecessary Privileges in JupyterApp8.8 High
- jflyfox jfinal cmsJFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list8.8 High
- unspecified vim, debian linux, fedoraproject fedora +1 more +3 morevim autocmd quickfix.c qf_update_buffer use after free5.0 Medium
- rubyonrails rails, unspecified ruby on rails +1 moreRuby on Rails _table.html.erb cross site scripting3.5 Low
- sanitization management system project management system, sourcecodester sanitization management system +1 moreSourceCodester Sanitization Management System missing authentication7.3 High
- sanitization management system project management system, sourcecodester sanitization management system +1 moreSourceCodester Sanitization Management System Master.php cross site scripting3.5 Low
- sanitization management system project management system, sourcecodester sanitization management system +1 moreSourceCodester Sanitization Management System SystemSettings.php cross site scripting3.5 Low
- elearning system project system, phpgurukul elearning system +1 moreSourceCodester eLearning System manage.php sql injection6.3 Medium
- axiomatic bento4Axiomatic Bento4 mp42hevc WriteSample heap-based overflow7.3 High
- axiomatic bento4Axiomatic Bento4 mp4edit Create memory leak5.3 Medium
- axiomatic bento4Axiomatic Bento4 mp4edit CreateAtomFromStream memory leak5.3 Medium
- axiomatic bento4Axiomatic Bento4 mp42aac Ap4ByteStream.cpp WritePartial heap-based overflow7.3 High
- axiomatic bento4Axiomatic Bento4 mp42ts Ap4LinearReader.cpp Advance use after free7.3 High
- axiomatic bento4Axiomatic Bento4 avcinfo AvcInfo.cpp heap-based overflow7.3 High
- axiomatic bento4Axiomatic Bento4 avcinfo Ap4BitStream.cpp WriteBytes heap-based overflow7.3 High
- axiomatic bento4Axiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereference5.3 Medium
- axiomatic bento4Axiomatic Bento4 mp42hls Ap4Sample.h GetOffset use after free7.3 High
- google chromeInsufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a...4.3 Medium
- google chromeInappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304...4.3 Medium
- google chromeUse after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a...8.8 High
- google chromeUse after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304...8.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an attacker who...8.8 High
- google chromeInsufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a...8.8 High
- google chromeHeap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an...8.8 High
- google chromeUse after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to...8.8 High
- google bazelBazel leaks user credentials through the remote assets API5.1 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreBusiness Logic Errors in ikus060/rdiffweb2.8 Low
- octopus serverIn affected versions of Octopus Server it is possible for a session token to be valid...9.1 Critical
- ericcornelissen shescapeRegular Expression Denial of Service (ReDoS)5.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20221002] - Core - RXSS through reflection of user input in headings6.1 Medium
- Show moreLoading…