CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- linux kernelAn issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/scr24x_cs.c has a...6.4 Medium
- linux kernelAn issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4040_cs.c has a...6.4 Medium
- linux kernelAn issue was discovered in the Linux kernel through 6.0.6. drivers/char/pcmcia/cm4000_cs.c has a...6.4 Medium
wiresharkOSS-FuzzHeap-buffer-overflow in g_strchugNo scorewolfsslOSS-FuzzHeap-buffer-overflow in ForceZeroNo scorewiresharkOSS-FuzzHeap-buffer-overflow in wmem_strbuf_append_vprintfNo scorewiresharkOSS-FuzzHeap-buffer-overflow in expert_set_info_vformatNo scoreradare2OSS-FuzzHeap-buffer-overflow in parse_classes_64No scoretomcatOSS-FuzzSecurity exception in java.base/jdk.internal.math.FloatingDecimal.readJavaFormatStringNo scorerubyOSS-FuzzUse-after-poison in /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_ruby_e5a0a396033f4deba21No scorelibrawOSS-FuzzHeap-buffer-overflow in LibRaw::kodak_rgb_load_rawNo score- pwndoc project pwndocPwnDoc through 0.5.3 might allow remote attackers to identify disabled user account names by...5.3 Medium
- pwndoc project pwndocPwnDoc through 0.5.3 might allow remote attackers to identify valid user account names by...5.3 Medium
- opendev sushy-tools, virtualbmc, fedoraproject fedora +2 moreOpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions5.5 Medium
- totaljs total.jsIn Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell...8.8 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreWeak Password Requirements in thorsten/phpmyfaq7.5 High
- google chrome, chromium v8 +1 moreType confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to...8.8 High
- stimulsoft reportsStimulsoft (aka Stimulsoft Reports) 2013.1.1600.0, when Compilation Mode is used, allows an...9.8 Critical
- keylime, fedoraproject fedora, redhat enterprise linux +2 moreKeylime: unhandled exceptions could lead to invalid attestation states5.1 Medium
- google web storiesWeb Stories <= 1.24.0 - Server Side Request Forgery9.6 Critical
- facetwp log http requestsLog HTTP Requests <= 1.3.1 - Stored Cross-Site Scripting6.1 Medium
- bricks builder bricksThe Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing...8.8 High
- host engineering h0-ecom100 communications module, hosteng h0-ecom100 firmware +1 moreUsing custom code, an attacker can write into name or description fields larger than the...6.5 Medium
- haascnc haas controller, haas cnc controller +1 moreCommunication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20...9.1 Critical
- haas cnc controller, haascnc haas controller firmware +1 moreHaas Controller version 100.20.000.1110 has insufficient granularity of access control when using...9.8 Critical
- haas cnc controller, haascnc haas controller firmware +1 moreAuthentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the...9.8 Critical
- heidenhain controller tnc 640 nc software, heros, tnc 640 programming station +2 moreThe HEIDENHAIN Controller TNC 640, version 340590 07 SP5, running HEROS 5.08.3 controlling the...9.2 Critical
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability7.5 High
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability3.4 Low
- bricks builder bricksThe Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability...6.5 Medium
- demonisblack demon image annotationThe demon image annotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in...8.8 High
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- themepoints super testimonials, testimonials (wordpress plugin) +1 moreWordPress Testimonials plugin <= 2.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- opennebulaUnrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on...4.3 Medium
- opennebulaThe FILES directive inside a VM template allows execution of uploaded files when the template is instantiated, resulting in a Remote Code Execution (RCE) attack.9.9 Critical
- opennebulaThe FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure.6.5 Medium
- cloudflare warpBypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command6.7 Medium
- cloudflare warp, warp mobile client +1 moreLock WARP switch bypass on WARP mobile client using iOS quick action6.7 Medium
- cloudflare warp, warp mobile client +1 moreLock WARP switch bypass by removing VPN profile on iOS mobile client6.7 Medium
- cloudflare warp, warp mobile client +1 moreLock WARP switch feature bypass on WARP mobile client for iOS6.7 Medium
- cloudflare warpLock WARP switch bypass using warp-cli 'add-trusted-ssid' command6.7 Medium
- cloudflare octorpkiOctoRPKI crash when maximum iterations number is reached5.4 Medium
- honeywell experion pks, application control environment firmware, c200 firmware +2 more +4 moreHoneywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type10.0 Critical
- honeywell experion pks, application control environment firmware, c200 firmware +2 more +4 moreHoneywell Experion PKS and ACE Controllers Injection9.1 Critical
- honeywell experion pks, application control environment firmware, c200 firmware +2 more +4 moreHoneywell Experion PKS and ACE Controllers Relative Path Traversal7.5 High
- johnson controls cevasCEVAS10.0 Critical
- eaton foreseer epms, foreseer electrical power monitoring system +1 moreUnrestricted file upload in Eaton Foreseer EPMS8.1 High
sleuthkitOSS-FuzzHeap-buffer-overflow in APFSJObject::add_entryNo scorekimageformatsOSS-FuzzStack-buffer-overflow in LibRaw::xtrans_interpolateNo scorejavaparserOSS-FuzzSecurity exception in com.github.javaparser.CommentsInserter.insertCommentsNo score- Show moreLoading…