Skip to content
OpenAdvisories

Archive

6 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /6 November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2022-39269

    Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip

    PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP media transport to using basic RTP upon SRTP restart, causing the media to be sent insecurely. The vul…

    pjsip pjproject asterisk asterisk Debian Ubuntu Alpine
  • Critical 9.3
    CVE-2022-39222

    OAuth authorization code exposure in Dex

    Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex instances with public clients (and by extension, clients accepting tokens issued by those Dex instances) are affected by this vulnerability if they are running a v…

    dexidp dex github.com/dexidp/dex Go
  • Critical 9.1
    CVE-2022-42457

    Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_updat…