Skip to content
OpenAdvisories

Archive

October 2022

Vulnerabilities first published in this month (UTC), newest first.

← September 2022 2022 / October November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

1,865 results · Feed

  • Critical 9.8
    CVE-2022-43168

    Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id parameter.

  • High 7.2
    CVE-2022-43228

    Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at …

  • High 7.2
    CVE-2022-43232

    Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php…

  • High 7.2
    CVE-2022-43275

    Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/php_act…

  • Medium 5.4
    CVE-2022-43169 Scanner template

    A stored cross-site scripting (XSS) vulnerability in the Users Access Groups feature (/index.php?module=users_groups/us…

  • High 7.2
    CVE-2022-43233

    Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php…

  • Medium 5.4
    CVE-2022-43170 Scanner template

    A stored cross-site scripting (XSS) vulnerability in the Dashboard Configuration feature (index.php?module=dashboard_co…

  • High 7.5
    CVE-2022-43285

    Nginx NJS v0.7.4 was discovered to contain a segmentation violation in njs_promise_reaction_job. NOTE: the vendor dispu…

  • Medium 5.4
    CVE-2022-43165 Scanner template

    A stored cross-site scripting (XSS) vulnerability in the Global Variables feature (/index.php?module=global_vars/vars) …

  • High 7.8
    CVE-2022-43281

    wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<…

    wabt wabt wabt Debian Ubuntu PyPI
  • High 7.1
    CVE-2022-43282

    wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetRetu…

    wabt wabt Debian Ubuntu
  • Critical 9.8
    CVE-2022-43286

    Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_…

  • Medium 5.5
    CVE-2022-43283

    wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.

    wabt wabt Debian Ubuntu
  • High 8.8
    CVE-2021-35387

    Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php.

  • Medium 5.4
    CVE-2021-35388

    Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php.

  • Critical 9.8
    CVE-2021-38217

    SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php.

  • Critical 9.8
    CVE-2021-38737

    SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php.

  • Critical 9.8
    CVE-2021-38730

    SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php.

  • Critical 9.8
    CVE-2021-38734

    SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php.

  • Critical 9.8
    CVE-2021-38729

    SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php.

  • Critical 9.8
    CVE-2021-38736

    SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php.

  • Critical 9.8
    CVE-2021-38733

    SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php.

  • Medium 6.1
    CVE-2021-38728

    SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php.

  • Critical 9.8
    CVE-2021-38732

    SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php.

  • Critical 9.8
    CVE-2021-38731

    SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php.

  • Critical 9.8
    CVE-2021-37782

    Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php.

  • Medium 5.4
    CVE-2021-37781

    Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php.

  • High 7.8
    CVE-2022-3377

    Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a…

    Horner Automation Cscape
  • High 7.8
    CVE-2022-3378

    Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a…

    Horner Automation Cscape
  • High 7.8
    CVE-2022-3379

    Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a …

    Horner Automation Cscape
  • Medium 6.5
    CVE-2022-3387 EPSS 14%

    Advantech R-SeeNet Versions 2.4.19 and prior are vulnerable to path traversal attacks. An unauthorized attacker could r…

    Advantech R-SeeNet
  • Critical 9.8
    CVE-2022-3386

    Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker …

    Advantech R-SeeNet
  • Critical 9.8
    CVE-2022-3385

    Advantech R-SeeNet Versions 2.4.17 and prior are vulnerable to a stack-based buffer overflow. An unauthorized attacker …

    Advantech R-SeeNet
  • High 8.7
    CVE-2022-41651 EPSS 11%

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the SetPF API.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.7
    CVE-2022-41702 EPSS 11%

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-40967

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckIoTHubNameExisted. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.7
    CVE-2022-41701 EPSS 11%

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PutShift API.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-41133 EPSS 27%

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.8
    CVE-2022-41773

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckDIACloud. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

    Delta Electronics DIAEnergie ICS / OT
  • High 8.7
    CVE-2022-40965 EPSS 11%

    Delta Electronics DIAEnergie

    The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the PostEnergyType API.

    Delta Electronics DIAEnergie ICS / OT