Skip to content
OpenAdvisories

Archive

13 October 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.8
    CVE-2022-42899 Public exploit

    Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issue…

  • Critical 9.8
    CVE-2022-42889 Public exploit EPSS 100%

    Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

    Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.String…

  • High 8.8
    CVE-2022-37208 Public exploit

    JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filte…