Archive

11 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /11 November 2022 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

High 7.5

CVE-2022-3358 Public exploit

Using a Custom Cipher with NID_undef may lead to NULL encryption

OpenSSL supports creating a custom cipher via the legacy EVP_CIPHER_meth_new() function and associated function calls. This function was deprecated in OpenSSL 3.0 and application authors are instead encouraged to use the new provider mechanism in order to imp…

OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine Wolfi crates.io

Oct 11, 2022
High 7.0

CVE-2022-38029 Public exploit

Windows ALPC Elevation of Privilege Vulnerability

Windows ALPC Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Oct 11, 2022
High 7.5

CVE-2022-41404 Public exploit

org.ini4j allows attackers to cause a Denial of Service (DoS)

An issue in the fetch() method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

druid ini4j ini4j org.ini4j:ini4j Debian Ubuntu Wolfi Maven

Oct 11, 2022
High 7.8

CVE-2022-41032 Public exploit

NuGet Client Elevation of Privilege Vulnerability

NuGet Client Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.2 .NET 6.0 Ubuntu Alpine NuGet

Oct 11, 2022
High 7.8

CVE-2022-41034 Public exploit EPSS 67%

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Oct 11, 2022