Skip to content
OpenAdvisories

Archive

20 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /20 November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 7.2
    CVE-2022-38108 Public exploit EPSS 67%

    SolarWinds Platform Deserialization of Untrusted Data

    SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

    SolarWinds SolarWinds Platform Orion Platform
  • High 8.8
    CVE-2022-36958 EPSS 82%

    SolarWinds Platform Deserialization of Untrusted Data

    SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands.

    SolarWinds SolarWinds Platform Orion Platform
  • High 7.2
    CVE-2022-36957 EPSS 15%

    SolarWinds Platform Deserialization of Untrusted Data

    SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

    SolarWinds SolarWinds Platform Orion Platform
  • High 8.8
    CVE-2022-42344

    [CVE-2021-36032] Magento IDOR Leads to Account Takeover

    Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and privilege esc…

    Adobe Adobe Commerce magento/community-edition Packagist
  • High 7.8
    CVE-2020-12744

    The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during…

  • High 7.5
    CVE-2022-39823

    An issue was discovered in Softing OPC UA C++ SDK 5.66 through 6.x before 6.10. An OPC/UA browse request exceeding the …

  • High 7.2
    CVE-2022-31366

    An arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allo…

  • High 7.8
    CVE-2022-3577

    An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allo…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • High 7.8
    CVE-2022-2069

    Datalogics APDFL library Heap-based Buffer Overflow

    The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execut…

    Siemens JT2Go Teamcenter Visualization V13.3 Teamcenter Visualization V14.0 ICS / OT
  • High 7.8
    CVE-2022-42176 Public exploit

    In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to admin panel access.

  • High 7.2
    CVE-2022-42201

    Simple Exam Reviewer Management System v1.0 is vulnerable to Insecure file upload.

  • High 8.8
    CVE-2022-42198

    In Simple Exam Reviewer Management System v1.0 the User List function suffers from insecure file upload.

  • High 8.8
    CVE-2022-42199

    Simple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Exam List.

  • High 7.5
    CVE-2022-37453

    An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to…