Skip to content
OpenAdvisories

Archive

10 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /10 November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.8
    CVE-2022-34402

    Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI. An admin privilege attacker …

    Dell Wyse Proprietary OS (Modern ThinOS)
  • Medium 6.3
    CVE-2022-34334

    IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated…

    IBM Sterling Partner Engagement Manager
  • Medium 4.6
    CVE-2022-20864

    Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability

    A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches could allow an unauthenticated, local attacker to recover the configuration or reset the enable password. This vulnerability is …

    Cisco Cisco IOS XE Software iOS Network devices
  • Medium 6.1
    CVE-2022-20944

    Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability

    A vulnerability in the software image verification functionality of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, physical attacker to execute unsigned code at system boot time. This vulnerability is due to an i…

    Cisco Cisco IOS XE Software iOS Network devices
  • Medium 5.3
    CVE-2022-20830

    Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability

    A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC without authentication. This vulnerability exi…

    Cisco Cisco SD-WAN vManage Network devices
  • Medium 6.8
    CVE-2022-33873

    An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] …

    Fortinet Fortinet FortiTester Network devices
  • Medium 6.7
    CVE-2022-35844

    An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface…

    Fortinet Fortinet FortiTester Network devices
  • Medium 5.7
    CVE-2022-3438

    Open Redirect in ikus060/rdiffweb

    Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • Medium 6.5
    CVE-2021-35226

    Hashed Credential Exposure Vulnerability

    An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and require authenticated access with an NCM role.

    SolarWinds Network Configuration Manager