>> ARCHIVE: 2022-10

Online Shopping System Advanced version 1.0 suffers from multiple remote SQL injection vulnerabilities.

Linux has an issue with munmap() racing with pagemap_read() that leads to a page use-after-free vulnerability.

WordPress Zephyr Project Manager plugin version 3.2.42 suffers from a remote SQL injection vulnerability.

Joomla Vik Booking extension version 1.15.0 suffers from a cross site scripting vulnerability.

Joomla JoomBri Freelance extension version 4.5.0 suffers from a cross site scripting vulnerability.

Joomla JoomBri Careers extension version 3.3.0 suffers from a cross site scripting vulnerability.

Linux suffers from an anon_vma use-after-free vulnerability through the bogus merge of VMAs caused by double-reuse of leaf anon_vma because of ->degree misinterpretation.

Joomla KSAdvertiser extension version 2.5.37 suffers from a cross site scripting vulnerability.