Archive

24 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /24 November 2022 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

High 7.5

CVE-2022-39313

Parse Server crashes when receiving file download request with invalid byte range

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Versions prior to 4.10.17, and prior to 5.2.8 on the 5.x branch, crash when a file download request is received with an invalid byte range, resulting in a …

parse-community parse-server parse-server npm

Oct 24, 2022
High 7.8

CVE-2022-41796

Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an atta…

Sony Content Transfer (for Windows) Windows

Oct 24, 2022
High 7.5

CVE-2022-41986

Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain…

Internet Initiative Japan IIJ SmartKey

Oct 24, 2022
High 7.5

CVE-2022-43680 Public exploit

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEnt…

thunderbird insighttoolkit4 expat swish-e Debian Ubuntu Azure Linux Alpine

Oct 24, 2022
High 7.2

CVE-2021-46850

myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. A…

Oct 24, 2022