CVEs published October 18, 2022
159 CVEs were published on October 18, 2022: 8 critical, 52 high. 2 are now in CISA KEV.
- Published
- 159
- Critical
- 8
- High
- 52
- Medium
- 89
- Low
- 10
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 55
Most affected products
- Juniper Networks Junos OS
- 29
- Oracle MySQL Server
- 25
- Oracle VM VirtualBox
- 10
- Juniper Networks Junos OS Evolved
- 6
- Oracle Java SE JDK and JRE
- 6
- Changing Information Technology RAVA certificate validation…
- 4
- Oracle Enterprise Data Quality
- 4
- Oracle Transportation Management
- 4
- Oracle Database - Enterprise Edition
- 3
- Oracle JD Edwards EnterpriseOne Tools
- 3
Critical 8
- CVE-2022-39056Changing Information Technology Inc. RAVA certificate validation system - SQL InjectionChanging Information Technology RAVA certificate validation…
- CVE-2022-21587Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).Oracle Web Applications Desktop Integrator
- CVE-2022-31122Wire-server vulnerable to Token Recipient Confusion resulting in account impersonation, deletion or malicious account creationwireapp wire-server
- CVE-2022-39198Apache Dubbo Hession Deserialization Vulnerability Gadgets BypassApache Software Foundation Apache Dubbo · com.alibaba:he… +1
- CVE-2022-39428Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload).Oracle Web Applications Desktop Integrator
- CVE-2022-40684An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.Fortinet FortiOS, FortiProxy, FortiSwitchManager
- CVE-2022-40889Phpok 6.1 has a deserialization vulnerability via framework/phpok_call.php.
- CVE-2022-43260Tenda AC18 V15.03.05.19(6318) was discovered to contain a stack overflow via the time parameter in the fromSetSysTime function.
High 52
- CVE-2022-39058Changing Information Technology Inc. RAVA certificate validation system - Path TraversalChanging Information Technology RAVA certificate validation…
- CVE-2022-39057Changing Information Technology Inc. RAVA certificate validation system - Command InjectionChanging Information Technology RAVA certificate validation…
- CVE-2022-22251cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privilegesJuniper Networks Junos OS
- CVE-2022-22248Junos OS Evolved: Incorrect file permissions can allow low-privileged user to cause another user to execute arbitrary commandsJuniper Networks Junos OS Evolved
- CVE-2022-22247Junos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a Denial of Service (DoS)Juniper Networks Junos OS Evolved
- CVE-2022-22246Junos OS: PHP file inclusion vulnerability in J-WebJuniper Networks Junos OS
- CVE-2022-22241Junos OS: Vulnerability in J-Web may allow deserialization without authenticationJuniper Networks Junos OS
- CVE-2022-22239Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalationJuniper Networks Junos OS Evolved
- CVE-2022-22236Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crashJuniper Networks Junos OS
- CVE-2022-22232SRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crashJuniper Networks Junos OS
- CVE-2022-22231SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crashJuniper Networks Junos OS
- CVE-2022-22229Paragon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administrationJuniper Networks Paragon Active Assurance
- CVE-2022-22228Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packetJuniper Networks Junos OS
- CVE-2022-22218Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollmentJuniper Networks Junos OS
- CVE-2022-22211Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OIDJuniper Networks Junos OS Evolved
- CVE-2022-22201SRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packetJuniper Networks Junos OS
- CVE-2022-22192Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the deviceJuniper Networks Junos OS Evolved
- CVE-2021-3305Beijing Feishu Technology Co., Ltd Feishu v3.40.3 was discovered to contain an untrusted search path vulnerability.
- CVE-2022-21590Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Core Formatting API).Oracle BI Publisher
- CVE-2022-21593Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OHS Config MBeans).Oracle HTTP Server
- CVE-2022-21596Vulnerability in the Oracle Database - Advanced Queuing component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2022-21598Vulnerability in the Siebel Core - DB Deployment and Configuration product of Oracle Siebel CRM (component: Repository Utilities).Oracle Siebel Core - DB Deployment and Configuration
- CVE-2022-21600Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21603Vulnerability in the Oracle Database - Sharding component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2022-21612Vulnerability in the Oracle Enterprise Data Quality product of Oracle Fusion Middleware (component: Dashboard).Oracle Enterprise Data Quality
- CVE-2022-21613Vulnerability in the Oracle Enterprise Data Quality product of Oracle Fusion Middleware (component: Dashboard).Oracle Enterprise Data Quality
- CVE-2022-21614Vulnerability in the Oracle Enterprise Data Quality product of Oracle Fusion Middleware (component: Dashboard).Oracle Enterprise Data Quality
- CVE-2022-21615Vulnerability in the Oracle Enterprise Data Quality product of Oracle Fusion Middleware (component: Dashboard).Oracle Enterprise Data Quality
- CVE-2022-21620Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-21622Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters).Oracle SOA Suite
- CVE-2022-21623Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Config Console).Oracle Enterprise Manager Base Platform
- CVE-2022-21634Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: LLVM Interpreter).Oracle GraalVM Enterprise Edition
- CVE-2022-3583SourceCodester Canteen Management System login.php sql injectionSourceCodester Canteen Management System
- CVE-2022-36438AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file permissions, leading to local privilege escalation (this also can
- CVE-2022-39406Vulnerability in the PeopleSoft Enterprise Common Components product of Oracle PeopleSoft (component: Approval Framework).Oracle PeopleSoft Enterprise CC Common Application Objects
- CVE-2022-39412Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console).Oracle Access Manager
- CVE-2022-39421Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-39422Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-39424Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-39425Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-39426Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-39427Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-41479The DevExpress Resource Handler (ASPxHttpHandlerModule) in DevExpress ASP.NET Web Forms Build v19.2.3 does not verify the referenced objects
- CVE-2022-41500EyouCMS V1.5.9 was discovered to contain multiple Cross-Site Request Forgery (CSRF) vulnerabilities via the Members Center, Editorial Member
- CVE-2022-41504An arbitrary file upload vulnerability in the component /php_action/editProductImage.php of Billing System Project v1.0 allows attackers to
- CVE-2022-41537Online Tours & Travels Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /user_opera
- CVE-2022-41541TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and
- CVE-2022-41544GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edi
- CVE-2022-41547Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability in the StaticAnalyzemobsf
- CVE-2022-42188In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server.lavalite/cms
- CVE-2022-42218Open Source SACCO Management System v1.0 vulnerable to SQL Injection via /sacco_shield/manage_loan.php.
- CVE-2022-43259Tenda AC15 V15.03.05.18 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function.
Medium, low and unrated 99
- CVE-2022-39055Changing Information Technology Inc. RAVA certificate validation system - Server-Side Request Forgery (SSRF)Changing Information Technology RAVA certificate validation…
- CVE-2022-22250Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remoteJuniper Networks Junos OS
- CVE-2022-22249Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domainJuniper Networks Junos OS
- CVE-2022-22245Junos OS: Path traversal vulnerability in J-WebJuniper Networks Junos OS
- CVE-2022-22244Junos OS: Unauthenticated XPath Injection vulnerability in J-WebJuniper Networks Junos OS
- CVE-2022-22243Junos OS: XPath Injection vulnerability in J-WebJuniper Networks Junos OS
- CVE-2022-22242Junos OS: Cross-site Scripting (XSS) vulnerability in J-WebJuniper Networks Junos OS
- CVE-2022-22240Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenarioJuniper Networks Junos OS
- CVE-2022-22238Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processedJuniper Networks Junos OS
- CVE-2022-22237Junos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locallyJuniper Networks Junos OS
- CVE-2022-22235Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processedJuniper Networks Junos OS
- CVE-2022-22234Junos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busyJuniper Networks Junos OS
- CVE-2022-22233Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crashJuniper Networks Junos OS
- CVE-2022-22230Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAsJuniper Networks Junos OS
- CVE-2022-22227Junos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilizationJuniper Networks Junos OS Evolved
- CVE-2022-22226Junos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crashJuniper Networks Junos OS
- CVE-2022-22225Junos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crashJuniper Networks Junos OS
- CVE-2022-22224Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLVJuniper Networks Junos OS
- CVE-2022-22223Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.Juniper Networks Junos OS
- CVE-2022-22220Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec routeJuniper Networks Junos OS
- CVE-2022-22219Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environmentJuniper Networks Junos OS
- CVE-2022-22208Junos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessionsJuniper Networks Junos OS
- CVE-2020-15853supybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS.supybot-fedora
- CVE-2022-21589Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2022-21591Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure).Oracle Transportation Management
- CVE-2022-21592Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2022-21594Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21595Vulnerability in the MySQL Server product of Oracle MySQL (component: C API).Oracle MySQL Server
- CVE-2022-21597Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaScript).Oracle GraalVM Enterprise Edition
- CVE-2022-21599Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2022-21601Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: ConnectiOracle Communications Billing and Revenue Management
- CVE-2022-21602Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2022-21604Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2022-21605Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary).Oracle MySQL Server
- CVE-2022-21606Vulnerability in the Oracle Services for Microsoft Transaction Server component of Oracle Database Server.Oracle Services for Microsoft Transaction Server
- CVE-2022-21607Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21608Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21609Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2022-21610Vulnerability in the Oracle Solaris product of Oracle Systems (component: LDoms).Oracle Solaris Operating System
- CVE-2022-21611Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2022-21616Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2022-21617Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling).Oracle MySQL Server
- CVE-2022-21618Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).Oracle Java SE JDK and JRE
- CVE-2022-21619Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).Oracle Java SE JDK and JRE
- CVE-2022-21621Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-21624Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI).Oracle Java SE JDK and JRE
- CVE-2022-21625Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21626Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).Oracle Java SE JDK and JRE
- CVE-2022-21627Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-21628Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).Oracle Java SE JDK and JRE
- CVE-2022-21629Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2022-21630Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2022-21631Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Design Tools SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2022-21632Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2022-21633Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2022-21635Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2022-21636Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management).Oracle Applications Framework
- CVE-2022-21637Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2022-21638Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21639Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search Integration).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2022-21640Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21641Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-31037OroCommerce vulnerable to Cross-site Scripting via Shipping rule editing pageoroinc orocommerce · oro/commerce
- CVE-2022-3338XXE in Trellix ePO serverTrellix ePolicy Orchestrator
- CVE-2022-3339Reflected XSS in Trellix ePO serverTrellix ePolicy Orchestrator
- CVE-2022-3579SourceCodester Cashier Queuing System Login Page login.php sql injectionSourceCodester Cashier Queuing System
- CVE-2022-3580SourceCodester Cashier Queuing System User Creation cross site scriptingSourceCodester Cashier Queuing System
- CVE-2022-3581SourceCodester Cashier Queuing System Cashiers Tab cross site scriptingSourceCodester Cashier Queuing System
- CVE-2022-3582SourceCodester Simple Cold Storage Management System cross-site request forgerySourceCodester Simple Cold Storage Management System
- CVE-2022-3584SourceCodester Canteen Management System edituser.php sql injectionSourceCodester Canteen Management System
- CVE-2022-3585SourceCodester Simple Cold Storage Management System Contact Us cross-site request forgerySourceCodester Simple Cold Storage Management System
- CVE-2022-3587SourceCodester Simple Cold Storage Management System My Account cross site scriptingSourceCodester Simple Cold Storage Management System
- CVE-2022-3594Linux Kernel BPF r8152.c intr_callback logging of excessive dataLinux Kernel
- CVE-2022-3595Linux Kernel CIFS sess.c sess_free_buffer double freeLinux Kernel
- CVE-2022-36439AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running Windows) allows a local user to write into the
- CVE-2022-39399Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).Oracle Java SE JDK and JRE
- CVE-2022-39400Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-39401Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris Operating System
- CVE-2022-39402Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).Oracle MySQL Server
- CVE-2022-39403Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).Oracle MySQL Server
- CVE-2022-39404Vulnerability in the MySQL Installer product of Oracle MySQL (component: Installer: General).Oracle MySQL Installer
- CVE-2022-39405Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2022-39407Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2022-39408Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-39409Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automation).Oracle Transportation Management
- CVE-2022-39410Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-39411Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Business Process Automation).Oracle Transportation Management
- CVE-2022-39417Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem).Oracle Solaris Operating System
- CVE-2022-39419Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2022-39420Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Functional Security).Oracle Transportation Management
- CVE-2022-39423Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-41540The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router.
- CVE-2022-42112A Cross-site scripting (XSS) vulnerability in the Portal Search module's Sort widget in Liferay Portal 7.2.0 through 7.4.3.24, and Liferay Dcom.liferay:com.liferay.portal.search.web · com.liferay.por…
- CVE-2022-42113A Cross-site scripting (XSS) vulnerability in Document Library module in Liferay Portal 7.4.3.30 through 7.4.3.36, and Liferay DXP 7.4 updatcom.liferay:com.liferay.document.library.web · com.liferay.…
- CVE-2022-42114A Cross-site scripting (XSS) vulnerability in the Role module's edit role assignees page in Liferay Portal 7.4.0 through 7.4.3.36, and Lifercom.liferay:com.liferay.roles.admin.web · com.liferay.porta…
- CVE-2022-42115Cross-site scripting (XSS) vulnerability in the Object module's edit object details page in Liferay Portal 7.4.3.4 through 7.4.3.36 allows rcom.liferay:com.liferay.object.web
- CVE-2022-42116A Cross-site scripting (XSS) vulnerability in the Frontend Editor module's integration with CKEditor in Liferay Portal 7.3.2 through 7.4.3.1com.liferay:com.liferay.frontend.editor.ckeditor.web · com.…
- CVE-2022-42117A Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.3.2 through 7.4.3.16, and Liferay DXP 7.3 beforcom.liferay:com.liferay.frontend.taglib.clay · com.liferay.…
- CVE-2022-42202TP-Link TL-WR841N 8.0 4.17.16 Build 120201 Rel.54750n is vulnerable to Cross Site Scripting (XSS).