Archive

18 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /18 November 2022 →

All Critical High Medium Low Exploited only Public exploit

89 results · Clear filters · Feed

Medium 4.3

CVE-2022-21592

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Oct 18, 2022
Medium 5.9

CVE-2022-41540 Public exploit

The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router. A…

Oct 18, 2022
Medium 6.1

CVE-2022-42117

Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module

A Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.3.2 through 7.4.3.16, and Liferay DXP 7.3 before update 6, and 7.4 before update 17 allows remote attackers to inject arbitrary web script or HTML.

com.liferay.portal:release.dxp.bom com.liferay:com.liferay.frontend.taglib.clay Maven

Oct 18, 2022
Medium 6.1

CVE-2022-42113

Liferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module

A Cross-site scripting (XSS) vulnerability in Document Library module in Liferay Portal 7.4.3.30 through 7.4.3.36, and Liferay DXP 7.4 update 30 through update 36 allows remote attackers to inject arbitrary web script or HTML via the `redirect` parameter.

com.liferay.portal:release.dxp.bom com.liferay:com.liferay.document.library.web Maven

Oct 18, 2022
Medium 6.1

CVE-2022-42202

TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS).

Oct 18, 2022
Medium 5.4

CVE-2022-42114

Liferay Portal and Liferay DXP Vulnerable to XSS via the Role Module

A Cross-site scripting (XSS) vulnerability in the Role module's edit role assignees page in Liferay Portal 7.4.0 through 7.4.3.36, and Liferay DXP 7.4 before update 37 allows remote attackers to inject arbitrary web script or HTML.

com.liferay.portal:release.dxp.bom com.liferay:com.liferay.roles.admin.web Maven

Oct 18, 2022
Medium 5.4

CVE-2022-42112

Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module

A Cross-site scripting (XSS) vulnerability in the Portal Search module's Sort widget in Liferay Portal 7.2.0 through 7.4.3.24, and Liferay DXP 7.2 before fix pack 19, 7.3 before update 5, and DXP 7.4 before update 25 allows remote attackers to inject arbitrar…

com.liferay.portal:release.dxp.bom com.liferay:com.liferay.portal.search.web Maven

Oct 18, 2022
Medium 6.1

CVE-2022-42116

Liferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module

A Cross-site scripting (XSS) vulnerability in the Frontend Editor module's integration with CKEditor in Liferay Portal 7.3.2 through 7.4.3.14, and Liferay DXP 7.3 before update 6, and 7.4 before update 15 allows remote attackers to inject arbitrary web script…

com.liferay.portal:release.dxp.bom com.liferay:com.liferay.frontend.editor.ckeditor.web Maven

Oct 18, 2022
Medium 5.4

CVE-2022-42115

Liferay Portal Vulnerable to XSS in the Object Module

Cross-site scripting (XSS) vulnerability in the Object module's edit object details page in Liferay Portal 7.4.3.4 through 7.4.3.36 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the object field's `Label` t…

com.liferay:com.liferay.object.web Maven

Oct 18, 2022