Skip to content
OpenAdvisories

Archive

1 November 2022

Vulnerabilities first published on this day (UTC), newest first.

← October 2022 2022 / November /1 December 2022 →
  1. 1211
  2. 273
  3. 3120
  4. 437
  5. 52
  6. 66
  7. 763
  8. 8120
  9. 9179
  10. 1092
  11. 1191
  12. 1211
  13. 1315
  14. 1497
  15. 15108
  16. 1644
  17. 1788
  18. 18105
  19. 195
  20. 208
  21. 2190
  22. 2284
  23. 2398
  24. 2421
  25. 2559
  26. 264
  27. 278
  28. 2867
  29. 2986
  30. 3057
All Critical High Medium Low Exploited only Public exploit

81 results · Clear filters · Feed

  • High 7.5
    CVE-2022-3780

    Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and be…

    Devolutions Remote Desktop Manager
  • High 7.5
    CVE-2022-3509 Public exploit

    Parsing issue in protobuf textformat

    A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages wit…

    Google Protocolbuffers trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  • High 8.6
    CVE-2022-3369

    Improper handling of registry symbolic links in Bitdefender Engines

    An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete privileged registry keys by pointing a Registry symlink to a privileged key. This issue affects: Bitdefender …

    Bitdefender Engines
  • High 7.5
    CVE-2022-25885

    Denial of Service (DoS)

    The package muhammara before 2.6.0; all versions of package hummus are vulnerable to Denial of Service (DoS) when PDFStreamForResponse() is used with invalid data.

    muhammara hummus npm
  • High 8.0
    CVE-2022-39369

    Service Hostname Discovery Exploitation in phpCAS

    phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) server. The phpCAS library uses HTTP headers to determine the service URL used to validate tickets. This allows an attacke…

    Apereo phpCAS moodle ocsinventory-server Debian Ubuntu Packagist
  • High 7.8
    CVE-2022-32865

    The issue was addressed with improved memory handling. This issue is fixed in iOS 16, macOS Ventura 13. An app may be a…

    Apple macOS macOS
  • High 7.8
    CVE-2022-32899

    The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS V…

    Apple macOS watchOS macOS
  • High 7.8
    CVE-2022-32866

    The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, wat…

    Apple macOS watchOS macOS
  • High 7.5
    CVE-2022-32910

    A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5, Sec…

    Apple macOS macOS
  • High 8.8
    CVE-2022-32934

    The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, mac…

    Apple macOS macOS
  • High 7.8
    CVE-2022-32905

    This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13. Processing a ma…

    Apple macOS macOS
  • High 7.8
    CVE-2022-32944

    A memory corruption issue was addressed with improved state management. This issue is fixed in tvOS 16.1, iOS 15.7.1 an…

    Apple macOS watchOS tvOS macOS
  • High 7.8
    CVE-2022-32898 Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS V…

    Apple macOS watchOS macOS
  • High 8.6
    CVE-2022-32890

    A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. A sandboxed process may be a…

    Apple macOS macOS
  • High 8.8
    CVE-2022-32888

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, ma…

    Apple macOS watchOS qtwebkit-source macOS Debian Ubuntu
  • High 7.8
    CVE-2022-32915

    A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able …

    Apple macOS macOS
  • High 7.8
    CVE-2022-32914

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.7, macOS …

    Apple macOS watchOS macOS
  • High 7.8
    CVE-2022-32794

    A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-004 Catalina, m…

    Apple macOS macOS
  • High 7.8
    CVE-2022-32887

    The issue was addressed with improved memory handling. This issue is fixed in iOS 16. An app may be able to execute arb…

    Apple iOS iOS
  • High 7.8
    CVE-2022-32940

    The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ve…

    Apple macOS watchOS tvOS macOS
  • High 7.1
    CVE-2022-32925

    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 16, iOS 16, watch…

    Apple watchOS iOS iOS
  • High 7.8
    CVE-2022-32889

    The issue was addressed with improved memory handling. This issue is fixed in iOS 16, watchOS 9. An app may be able to …

    Apple watchOS iOS iOS
  • High 7.8
    CVE-2022-32947 Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13,…

    Apple macOS watchOS macOS
  • High 7.8
    CVE-2022-32939

    The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and …

    Apple iOS and iPadOS iOS
  • High 7.8
    CVE-2022-32932 Public exploit

    The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 an…

    Apple iOS and iPadOS watchOS iOS
  • High 8.8
    CVE-2022-32922

    A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.1, iOS 16.1 and …

    Apple macOS macOS
  • High 7.8
    CVE-2022-32903

    A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 16, iOS 16, watchOS 9…

    Apple watchOS iOS iOS
  • High 7.8
    CVE-2022-32924

    The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Big Sur 11.7, macOS Vent…

    Apple macOS watchOS tvOS macOS
  • High 7.8
    CVE-2022-32907

    This issue was addressed with improved checks. This issue is fixed in tvOS 16, iOS 16, watchOS 9. An app may be able to…

    Apple watchOS iOS iOS
  • High 7.5
    CVE-2022-32927

    The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 an…

    Apple iOS and iPadOS iOS
  • High 7.4
    CVE-2022-3308

    Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  • High 8.8
    CVE-2022-3306

    Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially e…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  • High 8.8
    CVE-2022-3307

    Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap c…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  • High 8.8
    CVE-2022-3304

    Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap cor…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  • High 8.8
    CVE-2022-3305

    Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially e…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
  • High 7.5
    CVE-2022-3602 Public exploit EPSS 91%

    X.509 Email Address 4-byte Buffer Overflow

    A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed the malicious certificate or for the ap…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine Wolfi crates.io
  • High 7.5
    CVE-2022-3786 Public exploit EPSS 92%

    X.509 Email Address Variable Length Buffer Overflow

    A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an appli…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine Wolfi crates.io
  • High 8.8
    CVE-2022-3373

    Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  • High 8.8
    CVE-2022-3723 Exploited

    Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corr…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu
    KEV Oct 28, 2022
  • High 7.5
    CVE-2022-40839

    A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthe…