Skip to content
OpenAdvisories

Archive

20 October 2022

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.2
    CVE-2022-38108 Public exploit EPSS 67%

    SolarWinds Platform Deserialization of Untrusted Data

    SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

  • Medium 5.4
    CVE-2022-41358 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrar…

  • High 7.8
    CVE-2022-42176 Public exploit

    In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to admin panel access.

  • Critical 9.8
    CVE-2022-37298 Public exploit

    Shinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control

    Shinken Solutions Shinken Monitoring Version 2.4.3 affected is vulnerable to Incorrect Access Control. The SafeUnpickler class found in shinken/safepickle.py implements a weak authentication scheme when unserializing objects passed from monitoring nodes to th…