Skip to content
OpenAdvisories

Archive

6 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /6 November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

69 results · Feed

  • Unscored —
    CVE-2022-40159

    Stack Overflow in JXPath

    ** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then…

    jxpath jxpath
  • Unscored —
    CVE-2022-40895

    In certain Nedi products, a vulnerability in the web UI of NeDi login & Community login could allow an unauthenticated,…

  • Unscored —
    CVE-2022-41521

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the sPort/ePort p…

  • Unscored —
    CVE-2022-41523

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the command param…

  • Unscored —
    CVE-2022-41520

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the File paramete…

  • Unscored —
    CVE-2022-41528

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the text paramete…

  • Unscored —
    CVE-2022-41355

    Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /le…

  • Unscored —
    CVE-2022-41527

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the pppoeUser par…

  • Unscored —
    CVE-2022-41517

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang parameter in the setLang…

  • Unscored —
    CVE-2022-41525

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the OpModeCfg f…

  • Unscored —
    CVE-2022-41556

    A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot ex…

    lighttpd lighttpd lighttpd Debian Ubuntu Alpine
  • Unscored —
    CVE-2022-41524

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the week, sTime, …

  • Unscored —
    CVE-2022-41518

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a command injection vulnerability via the UploadFirmw…

  • Unscored —
    CVE-2022-41526

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an authenticated stack overflow via the ip parameter …

  • Unscored —
    CVE-2022-41522

    TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the "main" func…

  • Unscored —
    CVE-2022-42243

    Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/manage_storage.php?i…

  • High 7.2
    CVE-2022-42249

    Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=.

  • Unscored —
    CVE-2022-42242

    Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking.

  • Critical 9.1
    CVE-2022-42457

    Generex CS141 through 2.10 allows remote command execution by administrators via a web interface that reaches run_updat…

  • Unscored —
    CVE-2022-42241

    Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message.

  • Unscored —
    CVE-2022-42250

    Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/view_details.php?id…

  • Unscored —
    CVE-2022-37888

    There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote cod…

  • Unscored —
    CVE-2022-26240

    The default privileges for the running service Normand Message Buffer in Beckman Coulter Remisol Advance v2.0.12.1 and …

    buffer Ubuntu
  • Unscored —
    CVE-2022-26239

    The default privileges for the running service Normand License Manager in Beckman Coulter Remisol Advance v2.0.12.1 and…

  • Unscored —
    CVE-2022-26236

    The default privileges for the running service Normand Remisol Advance Launcher in Beckman Coulter Remisol Advance v2.0…

  • Unscored —
    CVE-2022-26238

    The default privileges for the running service Normand Service Manager in Beckman Coulter Remisol Advance v2.0.12.1 and…

  • Unscored —
    CVE-2022-26235

    A vulnerability was discovered in the Remisol Advance v2.0.12.1 and below for the Normand Message Server. On installati…

  • Unscored —
    CVE-2022-26237

    The default privileges for the running service Normand Viewer Service in Beckman Coulter Remisol Advance v2.0.12.1 and …

  • Unscored —
    CVE-2021-40556

    A stack overflow vulnerability exists in the httpd service in ASUS RT-AX56U Router Version 3.0.0.4.386.44266. This vuln…