Skip to content
OpenAdvisories

Archive

27 October 2022

Vulnerabilities first published on this day (UTC), newest first.

← September 2022 2022 / October /27 November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • Critical 9.8
    CVE-2022-3095

    Incorrect parsing of the backslash characters in Dart library

    The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards. Dart uses the RFC 3986 syntax, which creates incompatibilities with the '\' characters in URIs, …

    Google Dart
  • Medium 5.3
    CVE-2022-2508

    In affected versions of Octopus Server it is possible to reveal the existence of resources in a space that the user doe…

    Octopus Deploy Octopus Server
  • Medium 5.1
    CVE-2022-40184

    Stored Cross Site Scripting (XSS) in VIDEOJET multi 4000

    Incomplete filtering of JavaScript code in different configuration fields of the web based interface of the VIDEOJET multi 4000 allows an attacker with administrative credentials to store JavaScript code which will be executed for all administrators accessing…

    Bosch VIDEOJET multi 4000
  • Critical 9.8
    CVE-2022-40876

    In Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions, wanSpeed, cloneType, mac, can…

  • High 7.5
    CVE-2022-40874

    Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow vulnerability in the GetParentControlInfo function, whi…

  • High 7.5
    CVE-2022-40875

    Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow in the function GetParentControlInfo.

  • Medium 5.8
    CVE-2022-40183

    Reflected Cross Site Scripting (XSS) in VIDEOJET multi 4000

    An error in the URL handler of the VIDEOJET multi 4000 may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the encoder address can send a crafted link to a user, which will execute JavaScript code in th…

    Bosch VIDEOJET multi 4000
  • Medium 5.4
    CVE-2022-42991

    A stored cross-site scripting (XSS) vulnerability in Simple Online Public Access Catalog v1.0 allows attackers to execu…

  • Medium 5.4
    CVE-2022-42054

    Multiple stored cross-site scripting (XSS) vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.…

  • Medium 5.4
    CVE-2022-42992

    Multiple stored cross-site scripting (XSS) vulnerabilities in Train Scheduler App v1.0 allow attackers to execute arbit…

  • Medium 5.4
    CVE-2022-42993

    Password Storage Application v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Setup pa…

  • Medium 6.5
    CVE-2022-42055

    Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via…

  • Critical 9.8
    CVE-2022-43367

    IP-COM EW9 V15.11.0.14(9732) was discovered to contain a command injection vulnerability in the formSetDebugCfg functio…

  • High 7.5
    CVE-2022-43366

    IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to access sensitive information via the checkLoginUser, a…

  • High 8.8
    CVE-2022-43340

    A Cross-Site Request Forgery (CSRF) in dzzoffice 2.02.1_SC_UTF8 allows attackers to arbitrarily create user accounts an…

  • High 7.5
    CVE-2022-43365

    IP-COM EW9 V15.11.0.14(9732) was discovered to contain a buffer overflow in the formSetDebugCfg function. This vulnerab…

  • High 7.5
    CVE-2022-43364

    An access control issue in the password reset page of IP-COM EW9 V15.11.0.14(9732) allows unauthenticated attackers to …