Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

october vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-22611
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when specific messages are sent to the server over the database server TCP port. Affected Products: EcoStruxure Geo SCADA Expert 2019 - 2021 (formerl...
Schneider-electric Ecostruxure Geo Scada Expert 2019 -Schneider-electric Ecostruxure Geo Scada Expert 2020 -Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8108.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8120.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8158.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8182.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8197.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8218.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8269.1Schneider-electric Ecostruxure Geo Scada Expert 2021 84.8027.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7268.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7322.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7429.2Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7457.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7488.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7522.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7545.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7578.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7613.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7641.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7690.1Schneider-electric Ecostruxure Geo Scada Expert 2019 81.7714.1
NA
CVE-2022-23551
aad-pod-identity assigns Azure Active Directory identities to Kubernetes applications and has now been deprecated as of 24 October 2022. The NMI component in AAD Pod Identity intercepts and validates token requests based on regex. In this case, a token request made with backslash...
Microsoft Azure Ad Pod Identity
NA
CVE-2022-46157
Akeneo PIM is an open source Product Information Management (PIM). Akeneo PIM Community Edition versions before v5.0.119 and v6.0.53 allows remote authenticated users to execute arbitrary PHP code on the server by uploading a crafted image. Akeneo PIM Community Edition after the ...
Akeneo Product Information Management
NA
CVE-2022-35944
October is a self-hosted Content Management System (CMS) platform based on the Laravel PHP Framework. This vulnerability only affects installations that rely on the safe mode restriction, commonly used when providing public access to the admin panel. Assuming an attacker has acce...
Octobercms October
NA
CVE-2022-29089
Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. A remote, unauthenticated attacker could potentially exploit this vulnerability by reverse engineering to retrieve sensitive information and ...
Dell Smartfabric Os10
6.8
CVSSv2
CVE-2022-24800
October/System is the system module for October CMS, a self-hosted CMS platform based on the Laravel PHP Framework. Prior to versions 1.0.476, 1.1.12, and 2.2.15, when the developer allows the user to specify their own filename in the `fromData` method, an unauthenticated user ca...
Octobercms October
5
CVSSv2
CVE-2021-42859
A memory leak issue exists in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some testers seeing the issue in both the 3.2 release and in the October 2021 development code, but others not seeing the issue in the 3.2 release
Mini-xml Project Mini-xml 3.2
6.5
CVSSv2
CVE-2021-42950
Remote Code Execution (RCE) vulnerability exists in Zepl Notebooks all previous versions before October 25 2021. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new organization ...
Zepl Zepl
6.5
CVSSv2
CVE-2021-42951
A Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before October 10 2021 of SaaS. Users can register for an account and are allocated a set number of credits to try the product. Once users authenticate, they can proceed to create a new, specially...
Algorithmia Msol
2.6
CVSSv2
CVE-2022-23655
Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. Affected versions of OctoberCMS did not validate gateway server signatures. As a result non-authoritative gateway servers may be used to exfiltrate user private keys. Users are advised to upgrade their i...
Octobercms October
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook