Skip to content
OpenAdvisories

Archive

October 2022

Vulnerabilities first published in this month (UTC), newest first.

← September 2022 2022 / October November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

86 results · Clear filters · Feed

  • Low —
    GHSA-528j-9r78-wffx

    etcd user credentials are stored in WAL logs in plaintext

    ### Vulnerability type Data Exposure ### Workarounds The etcd assumes that the on disk files are secure. The possible fixes have been provided, however, it is the responsibility of the etcd users to make sure that the etcd server WAL log files are secure. The…

    go.etcd.io/etcd/client/v3 Go
  • Low —
    GHSA-h8g9-6gvh-5mrc

    etcd vulnerable to TOCTOU of gateway endpoint authentication

    ### Vulnerability type Authentication ### Workarounds Refer to the [gateway documentation](https://github.com/etcd-io/etcd/blob/master/Documentation/op-guide/gateway.md). The vulnerability was spotted due to unclear documentation of how the gateway handles en…

    go.etcd.io/etcd/v3 Go
  • Low 2.6
    CVE-2022-39284

    Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in Codeigniter4

    CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting `$secure` or `$httponly` value to `true` in `Config\Cookie` is not reflected in `set_cookie()` or `Response::setCookie()`. As a result cookie values are erroneously exposed to s…

    codeigniter4 CodeIgniter4 codeigniter4/framework Packagist
  • Low 3.5
    CVE-2022-3376

    Weak Password Requirements in ikus060/rdiffweb

    Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • Low 3.6
    CVE-2022-3273

    Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

    Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • Low —
    GHSA-mgvv-5mxp-xq67

    SQLite3 addresses vulnerability in packaged version of libsqlite

    ### Summary The rubygem sqlite3 v1.5.1 upgrades the packaged version of libsqlite from v3.39.3 to [v3.39.4](https://sqlite.org/releaselog/3_39_4.html). libsqlite v3.39.4 addresses a vulnerability described as follows in the release notification: > Version 3.3…

    sqlite3 RubyGems