Skip to content
OpenAdvisories

Archive

10 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /10 November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

51 results · Feed

  • Unscored —
    CVE-2022-41749

    An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privil…

    Trend Micro Trend Micro Apex One
  • Unscored —
    CVE-2022-41745

    An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafte…

    Trend Micro Trend Micro Apex One
  • Unscored —
    CVE-2022-41747

    An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load …

    Trend Micro Trend Micro Apex One
  • Unscored —
    CVE-2022-41744

    A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component cou…

    Trend Micro Trend Micro Apex One
  • Unscored —
    CVE-2022-41746

    A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on …

    Trend Micro Trend Micro Apex One
  • Unscored —
    CVE-2022-42725

    Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.

  • Unscored —
    CVE-2022-42724

    app/Controller/UsersController.php in MISP before 2.4.164 allows attackers to discover role names (this is information …

  • Low 3.7
    CVE-2022-26121

    An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0…

  • Medium 6.5
    CVE-2021-35226

    Hashed Credential Exposure Vulnerability

    An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and require authenticated access with an NCM role.

    SolarWinds Network Configuration Manager
  • Critical 9.0
    CVE-2021-44171

    A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiOS versio…

    Fortinet Fortinet FortiOS Network devices
  • Unscored —
    CVE-2021-25044

    Cryptocurrency Pricing list and Ticker <= 1.5 - Reflected Cross-Site Scripting

    The Cryptocurrency Pricing list and Ticker WordPress plugin through 1.5 does not sanitise and escape the ccpw_setpage parameter before outputting it back in pages where its shortcode is embed, leading to a Reflected Cross-Site Scripting issue

    Web / CMS