CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
sleuthkitOSS-FuzzUNKNOWN READ in APFSBtreeNodeIterator<APFSJObjBtreeNode> APFSJObjBtreeNode::find<unsigned long,No score- f5 njsNginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory...9.8 Critical
- f5 njsNginx NJS v0.7.4 was discovered to contain a segmentation violation in njs_promise_reaction_job.7.5 High
- f5 njsNginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via...7.5 High
- webassembly wabtwasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.5.5 Medium
- webassembly wabtwasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component...7.1 High
- webassembly wasmwasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt:...7.8 High
- webassembly wabtwasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component...7.1 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- canteen management system project management systemCanteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability...7.2 High
- simple cold storage management system project cold storage managment systemSimple Cold Storage Management System v1.0 was discovered to contain a SQL injection...7.2 High
- simple cold storage management system project cold storage managment systemSimple Cold Storage Management System v1.0 was discovered to contain a SQL injection...7.2 High
- barangay management system project management systemBarangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- rukovoditelA stored cross-site scripting (XSS) vulnerability in the Dashboard Configuration feature (index...5.4 Medium
- rukovoditelA stored cross-site scripting (XSS) vulnerability in the Users Access Groups feature (/index.php...5.4 Medium
- rukovoditelRukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id...9.8 Critical
- rukovoditelA stored cross-site scripting (XSS) vulnerability in the Users Alerts feature (/index.php?module...5.4 Medium
- rukovoditelA stored cross-site scripting (XSS) vulnerability in the Global Entities feature (/index.php...5.4 Medium
- rukovoditelA stored cross-site scripting (XSS) vulnerability in the Global Variables feature (/index.php...5.4 Medium
- rukovoditelA stored cross-site scripting (XSS) vulnerability in the Global Lists feature (/index.php?module...5.4 Medium
- davemckain qtiworksVulnerability in handling of uploaded QTI ZIP files8.6 High
- datahubDataHub missing JWT signature check9.9 Critical
- arubanetworks aruba edgeconnect enterprise orchestratorA vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise...9.8 Critical
- arubanetworks aruba edgeconnect enterprise orchestratorVulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise...9.8 Critical
- arubanetworks aruba edgeconnect enterprise orchestratorVulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise...9.8 Critical
- browserify-shim project browserify-shimthlorenz browserify-shim vulnerable to prototype pollution9.8 Critical
- chatwoot, chatwoot chatwoot/chatwoot +1 moreImproper Restriction of Excessive Authentication Attempts in chatwoot/chatwoot9.4 Critical
- ehoney project ehoneyseccome Ehoney signup access control6.3 Medium
- redisRedis on Windows dbghelp.dll uncontrolled search path6.3 Medium
- sourcecodester web-based student clearance system, web-based student clearance system project student clearance system +1 moreSourceCodester Web-Based Student Clearance System edit-admin.php sql injection5.0 Medium
- ehoney project ehoneyseccome Ehoney set sql injection6.3 Medium
- ehoney project ehoneyseccome Ehoney token sql injection6.3 Medium
- ehoney project ehoneyseccome Ehoney falco sql injection6.3 Medium
- ehoney project ehoneyseccome Ehoney attack sql injection6.3 Medium
- redhat ansible, ansible collection +1 moreAnsible leaks password to logs7.5 High
- vmware cloud foundation, nsx data center +1 moreVMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. On VCF 3.x...9.1 Critical
- gitlabAn information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3...6.8 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15...5.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8,...2.7 Low
- apache dolphinschedulerApache DolphinScheduler exposes files without authentication6.5 Medium
- sem-cms semcmsSEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php.9.8 Critical
- sem-cms semcmsSEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php.9.8 Critical
- sem-cms semcmsSEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php.9.8 Critical
- sem-cms semcmsSEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php.9.8 Critical
- sem-cms semcmsSEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php.9.8 Critical
- sem-cms semcmsSEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php.9.8 Critical
- sem-cms semcmsSEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php.9.8 Critical
- Show moreLoading…