Skip to content
OpenAdvisories

Archive

October 2022

Vulnerabilities first published in this month (UTC), newest first.

← September 2022 2022 / October November 2022 →
  1. 11
  2. 22
  3. 350
  4. 4 
  5. 5 
  6. 669
  7. 7117
  8. 83
  9. 95
  10. 1051
  11. 11269
  12. 1271
  13. 1364
  14. 14186
  15. 154
  16. 167
  17. 17123
  18. 18160
  19. 19128
  20. 2035
  21. 2159
  22. 221
  23. 23 
  24. 2437
  25. 25123
  26. 2656
  27. 2757
  28. 2884
  29. 2910
  30. 303
  31. 3190
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-26884 Public exploit

    Apache DolphinScheduler exposes files without authentication

    Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher.

    Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven
  • Medium 6.8
    CVE-2022-31898 Public exploit EPSS 16%

    gl-inet GL-MT300N-V2 Mango v3.212 and GL-AX1800 Flint v3.214 were discovered to contain multiple command injection vuln…

  • Medium 5.4
    CVE-2022-41358 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrar…

  • Medium 5.5
    CVE-2022-39253 Public exploit

    Git subject to exposure of sensitive information via local clone of symbolic links

    Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone (wh…

    git git git git Debian Ubuntu Alpine Wolfi
  • Medium 5.9
    CVE-2022-41540 Public exploit

    The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router. A…

  • Medium 5.5
    CVE-2022-3564 Public exploit

    Linux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use after free

    A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2cap_reassemble_sdu of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommende…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Medium 4.3
    CVE-2022-3464 Public exploit

    puppyCMS settings.php cross site scripting

    A vulnerability classified as problematic has been found in puppyCMS up to 5.1. This affects an unknown part of the file /admin/settings.php. The manipulation of the argument site_name leads to cross site scripting. It is possible to initiate the attack remot…

  • Medium 5.4
    CVE-2022-39291 Public exploit

    Denial of service through logs in zoneminder

    ZoneMinder is a free, open source Closed-circuit television software application. Affected versions of zoneminder are subject to a vulnerability which allows users with "View" system permissions to inject new data into the logs stored by Zoneminder. This was …

    ZoneMinder zoneminder zoneminder zoneminder Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2022-39275 Public exploit

    Improper object type validation in saleor

    Saleor is a headless, GraphQL commerce platform. In affected versions some GraphQL mutations were not properly checking the ID type input which allowed to access database objects that the authenticated user may not be allowed to access. This vulnerability can…

    saleor saleor
  • Medium 6.5
    CVE-2022-36551 Public exploit

    Heartex - Label Studio Community Edition vulnerable to SSRF in the Data Import module

    A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system. Furthermore, self-registration is enabled by default in…

    label-studio PyPI