CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- sem-cms semcmsSEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php.9.8 Critical
- sem-cms semcmsSEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php.6.1 Medium
- sem-cms semcmsSEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php.9.8 Critical
- phpgurukul employee record management systemEmployee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php.9.8 Critical
- phpgurukul employee record management systemEmployee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via...5.4 Medium
- phpgurukul hospital management systemHospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms...5.4 Medium
- phpgurukul hospital management systemHospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view...8.8 High
- horner automation cscapeHorner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied...7.8 High
- horner automation cscapeHorner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied...7.8 High
- horner automation cscapeHorner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied...7.8 High
- advantech r-seenetAdvantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An...6.5 Medium
- advantech r-seenetAdvantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An...9.8 Critical
- advantech r-seenetAdvantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An...9.8 Critical
- delta electronics diaenergieDelta Electronics DIAEnergie8.7 High
- delta electronics diaenergieDelta Electronics DIAEnergie8.7 High
- delta electronics diaenergieDelta Electronics DIAEnergie8.8 High
- delta electronics diaenergieDelta Electronics DIAEnergie8.7 High
- delta electronics diaenergieDelta Electronics DIAEnergie8.8 High
- delta electronics diaenergieDelta Electronics DIAEnergie8.8 High
- delta electronics diaenergieDelta Electronics DIAEnergie8.7 High
- delta electronics diaenergieDelta Electronics DIAEnergie8.7 High
- alivecor kardiamobile, kardiamobile 6l firmware, kardiamobile card firmware +1 more +3 moreThe physical IoT device of the AliveCor's KardiaMobile, a smartphone-based personal...4.8 Medium
- litespeed technologies web server, openlitespeed web server, litespeedtech openlitespeed +2 morePrivilege Escalation in OpenLiteSpeed Web Server8.8 High
- litespeed technologies web server, openlitespeed web server, litespeedtech openlitespeed +2 moreAuthenticated Remote Code Execution in OpenLiteSpeed Web Server8.8 High
- litespeed technologies web server, openlitespeed web server, litespeedtech openlitespeed +2 moreDirectory Traversal in OpenLiteSpeed Web Server5.8 Medium
- forgerock access managementAnonymous users can register / de-register for configuration change notifications6.5 Medium
- forgerock access managementAny user can run unrestricted LDAP queries against a configuration endpoint7.1 High
- theme-fusion avada, themefusion avada (premium wordpress theme) +1 moreWordPress Avada premium theme <= 7.8.1 - Cross-Site Request Forgery (CSRF) vulnerability8.8 High
- rockwell automation factorytalk alarm and events server, rockwellautomation factorytalk alarms and events +1 moreFactoryTalk Alarm and Events Server Vulnerable to Denial-Of-Service Attack7.5 High
- openbmc project openbmcUnauthenticated out of bounds stack write in bmcweb8.2 High
- openbmc project openbmcUnauthenticated out of bounds heap write in bmcweb8.2 High
- mozilla thunderbirdWhen saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple...7.8 High
- yordam informatics systems library information document automation program, yordam library automation system +1 moreInformation disclosure in Yordam Library Information Document Automation Program4.7 Medium
- yordam informatics systems library information document automation program, yordam library automation system +1 moreInformation disclosure in Yordam Library Information Document Automation Program5.3 Medium
openexrOSS-FuzzHeap-buffer-overflow in fasthuf_initializeNo score- ip-com ew9 firmwareIP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the...9.8 Critical
- ip-com ew9 firmwareIP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to access sensitive information via...7.5 High
- ip-com ew9 firmwareIP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg...7.5 High
- ip-com ew9 firmwareAn access control issue in the password reset page of IP-COM EW9 V15.11.0.14(9732) allows...7.5 High
- dzzofficeA Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily...8.8 High
- password storage application project storage applicationPassword Storage Application v1.0 was discovered to contain a cross-site scripting (XSS)...5.4 Medium
- train scheduler app project scheduler appMultiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow...5.4 Medium
- simple online public access catalog project online public access catalogA stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0...5.4 Medium
- mozilla firefoxLogins saved by Firefox should be managed by the Password Manager component which uses encryption...3.3 Low
- mozilla firefoxIf two Workers were simultaneously initializing their CacheStorage, a data race could have...7.1 High
- gl-inet goodcloudMultiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System...6.5 Medium
- gl-inet goodcloudMultiple stored cross-site scripting (XSS) vulnerabilities in GL.iNet GoodCloud IoT Device...5.4 Medium
- tenda ax1803 firmwareIn Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions,...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 was discovered to contain a heap overflow in the function...7.5 High
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 was discovered to contain a heap overflow vulnerability in the...7.5 High
- Show moreLoading…