CVEs published October 21, 2022
59 CVEs were published on October 21, 2022: 3 critical, 25 high.
- Published
- 59
- Critical
- 3
- High
- 25
- Medium
- 22
- Low
- 9
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 20
Most affected products
- Autodesk Design Review
- 14
- Linux Kernel
- 11
- libtiff
- 6
- Aethon TUG Home Base Server
- 5
- Dell PowerScale OneFS
- 4
- Biplob Adhikari Accordions – Multiple Accordions or FAQs Bu…
- 1
- Chop-Chop Pop-Up Chop Chop
- 1
- Dell Isilon OneFS
- 1
- Dell PowerStore
- 1
- Fatcat Apps Analytics Cat – Google Analytics Made Easy
- 1
Critical 3
- CVE-2022-3203ORing net IAP-420(+) Hidden FunctionalityORing IAP-420
- CVE-2022-37454The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers tolibphp · libpython +6
- CVE-2022-43400A vulnerability has been identified in Siveillance Video Mobile Server V2022 R2 (All versions < V22.2a (80)).Siemens Siveillance Video Mobile Server V2022 R2
High 25
- CVE-2022-26870Dell PowerStore versions 2.1.0.x contain an Authentication bypass vulnerability.Dell PowerStore
- CVE-2022-27494CROSS-SITE SCRIPTING CWE-79Aethon TUG Home Base Server
- CVE-2022-1070CHANNEL ACCESSIBLE BY NON-ENDPOINT CWE-300Aethon TUG Home Base Server
- CVE-2022-1059CROSS-SITE SCRIPTING CWE-79Aethon TUG Home Base Server
- CVE-2022-26423MISSING AUTHORIZATION CWE-862Aethon TUG Home Base Server
- CVE-2022-1066MISSING AUTHORIZATION CWE-862Aethon TUG Home Base Server
- CVE-2022-38104WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerabilityBiplob Adhikari Accordions – Multiple Accordions or FAQs Bu…
- CVE-2022-3570Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memlibtiff
- CVE-2022-36122The Automox Agent before 40 on Windows incorrectly sets permissions on key files.
- CVE-2022-41309A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by wrAutodesk Design Review
- CVE-2022-41310A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by wrAutodesk Design Review
- CVE-2022-41575A credential-exposure vulnerability in the support-bundle mechanism in Gradle Enterprise 2022.3 through 2022.3.3 allows remote attackers to
- CVE-2022-42189Emlog Pro 1.6.0 plugins upload suffers from a remote code execution (RCE) vulnerability.
- CVE-2022-42933A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by wrAutodesk Design Review
- CVE-2022-42934A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by wrAutodesk Design Review
- CVE-2022-42935A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by wrAutodesk Design Review
- CVE-2022-42936A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by wrAutodesk Design Review
- CVE-2022-42937A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by wrAutodesk Design Review
- CVE-2022-42938A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability.Autodesk Design Review
- CVE-2022-42939A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability.Autodesk Design Review
- CVE-2022-42940A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability.Autodesk Design Review
- CVE-2022-42941A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by reaAutodesk Design Review
- CVE-2022-42942A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by reaAutodesk Design Review
- CVE-2022-42943A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by reaAutodesk Design Review
- CVE-2022-42944A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by reaAutodesk Design Review
Medium, low and unrated 31
- CVE-2022-34439Dell PowerScale OneFS, versions 8.2.0.x-9.4.0.x contain allocation of Resources Without Limits or Throttling vulnerability.Dell PowerScale OneFS
- CVE-2022-34438Dell PowerScale OneFS, versions 8.2.x-9.4.0.x, contain a privilege context switching error.Dell PowerScale OneFS
- CVE-2022-34437Dell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability.Dell PowerScale OneFS
- CVE-2022-31239Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6, contain sensitive data in log files vulnerabilityDell PowerScale OneFS
- CVE-2020-5355The Dell Isilon OneFS versions 8.2.2 and earlier SSHD process improperly allows Transmission Control Protocol (TCP) and stream forwarding.Dell Isilon OneFS
- CVE-2022-40311WordPress Analytics Cat plugin <= 1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityFatcat Apps Analytics Cat – Google Analytics Made Easy
- CVE-2022-41638WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityChop-Chop Pop-Up Chop Chop
- CVE-2021-42553STM32 USB Host Library Buffer OverflowSTMicroelectronics STM32Cube STM32 USB Host Library
- CVE-2022-23462Stack Buffer Overflow in iowowSoftmotions iowow
- CVE-2022-3597LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:682libtiff
- CVE-2022-3598LibTIFF 4.4.0 has an out-of-bounds write in extractContigSamplesShifted24bits in tools/tiffcrop.c:3604, allowing attackers to cause a deniallibtiff
- CVE-2022-3599LibTIFF 4.4.0 has an out-of-bounds read in writeSingleSection in tools/tiffcrop.c:7345, allowing attackers to cause a denial-of-service via libtiff
- CVE-2022-3624Linux Kernel IPsec bond_alb.c rlb_arp_xmit memory leakLinux Kernel
- CVE-2022-3625Linux Kernel IPsec devlink.c devlink_param_get use after freeLinux Kernel
- CVE-2022-3626LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemset in libtiff/tif_unix.c:340 when called from processCropSelections, tools/tiffcrop.c:7libtiff
- CVE-2022-3627LibTIFF 4.4.0 has an out-of-bounds write in _TIFFmemcpy in libtiff/tif_unix.c:346 when called from extractImageSection, tools/tiffcrop.c:686libtiff
- CVE-2022-3629Linux Kernel af_vsock.c vsock_connect memory leakLinux Kernel
- CVE-2022-3630Linux Kernel IPsec cookie.c memory leakLinux Kernel
- CVE-2022-3633Linux Kernel transport.c j1939_session_destroy memory leakLinux Kernel
- CVE-2022-3635Linux Kernel IPsec idt77252.c tst_timer use after freeLinux Kernel
- CVE-2022-3636Linux Kernel Ethernet mtk_ppe.c __mtk_ppe_check_skb use after freeLinux Kernel
- CVE-2022-3637Linux Kernel BlueZ jlink.c jlink_init denial of serviceLinux Kernel
- CVE-2022-3639A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 10.8 before 15.1.6, all versions starting from 15.2GitLab
- CVE-2022-3640Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after freeLinux Kernel
- CVE-2022-3646Linux Kernel BPF segment.c nilfs_attach_log_writer memory leakLinux Kernel
- CVE-2022-3647Redis Crash Report debug.c sigsegvHandler denial of serviceRedis
- CVE-2022-3649Linux Kernel BPF inode.c nilfs_new_inode use after freeLinux Kernel
- CVE-2022-39259Jadx-gui subject to Denial of Service via Swing HTML renderingskylot jadx · io.github.skylot:jadx-plugins-api
- CVE-2022-39272Flux2 vulnerable to Denial of Service due to Improper use of metav1.Durationfluxcd flux2 · github.com/fluxcd/helm-controller/api +12
- CVE-2022-42205PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via add-patient.php.
- CVE-2022-42206PHPGurukul Hospital Management System In PHP V 4.0 is vulnerable to Cross Site Scripting (XSS) via doctor/view-patient.php, admin/view-patie