Skip to content
OpenAdvisories

Archive

20 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /20 November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-36966

    Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6

    Users with Node Management rights were able to view and edit all nodes due to Insufficient control on URL parameter causing insecure direct object reference (IDOR) vulnerability in SolarWinds Platform 2022.3 and previous.

    SolarWinds SolarWinds Platform
  • Medium 5.3
    CVE-2022-3576

    A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Mana…

    Synology DiskStation Manager (DSM)
  • Medium 6.8
    CVE-2020-9285

    Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardwar…

  • Medium 4.3
    CVE-2022-3621

    Linux Kernel nilfs2 inode.c nilfs_bmap_lookup_at_level null pointer dereference

    A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file fs/nilfs2/inode.c of the component nilfs2. The manipulation leads to null pointer dereference. It is possible to …

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.6
    CVE-2022-3620

    Exim DMARC dmarc.c dmarc_dns_lookup use after free

    A vulnerability was found in Exim and classified as problematic. This issue affects the function dmarc_dns_lookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of t…

    exim4 Debian
  • Medium 5.0
    CVE-2022-3623

    Linux Kernel BPF gup.c follow_page_pte race condition

    A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function follow_page_pte of the file mm/gup.c of the component BPF. The manipulation leads to race condition. The attack can be launched remo…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 5.3
    CVE-2022-40084

    OpenCRX vulnerable to password enumeration via error messages in password reset

    OpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages received during a password reset which could enable an attacker to determine if a username, email or ID is valid.

    org.opencrx:opencrx-client Maven
  • Medium 5.4
    CVE-2022-41358 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrar…

  • Medium 6.5
    CVE-2022-42197

    In Simple Exam Reviewer Management System v1.0 the User List function has improper access control that allows low privi…

  • Medium 5.4
    CVE-2022-42200

    Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting (XSS) via the Exam List.

  • Medium 6.1
    CVE-2022-26954

    Multiple open redirect vulnerabilities in NopCommerce 4.10 through 4.50.1 allow remote attackers to conduct phishing at…

  • Medium 5.4
    CVE-2021-33231

    Cross Site Scripting (XSS) vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote …