Skip to content
OpenAdvisories

Archive

10 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /10 November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.5
    CVE-2022-34425

    Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote att…

    Dell Enterprise SONiC OS
  • High 8.6
    CVE-2022-20837

    Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability

    A vulnerability in the DNS application layer gateway (ALG) functionality that is used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is du…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 7.7
    CVE-2022-20920

    Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability

    A vulnerability in the SSH implementation of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to improper handling of resources during an exceptional si…

    Cisco Cisco IOS iOS Network devices
  • High 7.4
    CVE-2022-20915

    Cisco IOS XE Software IPv6 VPN over MPLS Denial of Service Vulnerability

    A vulnerability in the implementation of IPv6 VPN over MPLS (6VPE) with Zone-Based Firewall (ZBFW) of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerabilit…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 8.6
    CVE-2022-20870

    Cisco IOS XE Software for Catalyst Switches MPLS Denial of Service Vulnerability

    A vulnerability in the egress MPLS packet processing function of Cisco IOS XE Software for Cisco Catalyst 3650, Catalyst 3850, and Catalyst 9000 Family Switches could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly…

    Cisco Cisco IOS XE Software iOS Network devices
  • High 8.1
    CVE-2022-35846

    An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiTester Telnet port 2.3.0 t…

    Fortinet Fortinet FortiTester Network devices
  • High 7.5
    CVE-2022-39288 EPSS 59%

    Denial of service in Fastify via Content-Type header

    fastify is a fast and low overhead web framework, for Node.js. Affected versions of fastify are subject to a denial of service via malicious use of the Content-Type header. An attacker can send an invalid Content-Type header that can cause the application to …

    fastify fastify fastify npm
  • High 7.5
    CVE-2022-39292

    Exposure of sensitive Slack webhook URLs in debug logs and traces

    Slack Morphism is a modern client library for Slack Web/Events API/Socket Mode and Block Kit. Debug logs expose sensitive URLs for Slack webhooks that contain private information. The problem is fixed in version 1.3.2 which redacts sensitive URLs for webhooks…

    abdolence slack-morphism-rust slack-morphism crates.io
  • High 7.5
    CVE-2022-29055

    A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 th…

    Fortinet Fortinet FortiOS, FortiProxy Network devices
  • High 7.6
    CVE-2022-36063

    USBX Host CDC ECM integer underflow with buffer overflow

    Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–supported processors. Azure RTOS USBX implementation of host support for USB CDC ECM includes an integ…

    azure-rtos usbx