CVEs published October 24, 2022
37 CVEs were published on October 24, 2022: 11 critical, 5 high.
- Published
- 37
- Critical
- 11
- High
- 5
- Medium
- 20
- Low
- 0
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Lanner IAC-AST2500A
- 13
- Apache Software Foundation Apache Heron · org.apache.heron:…
- 1
- BookStack
- 1
- ByteDance K.K. Lemon8 App for Android and Lemon8 App for iOS
- 1
- flipped-aurora gin-vue-admin
- 1
- getkirby kirby · getkirby/cms
- 1
- github.com/free5gc/aper · github.com/free5gc/free5gc
- 1
- github.com/zalando/skipper
- 1
- Internet Initiative Japan IIJ SmartKey
- 1
- IPFire Project IPFire
- 1
Critical 11
- CVE-2022-29851documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file
- CVE-2021-26727spx_restservice SubNet_handler_func Multiple Command Injections and Stack-Based Buffer OverflowsLanner IAC-AST2500A
- CVE-2021-26728spx_restservice KillDupUsr_func Command Injection and Stack-Based Buffer OverflowLanner IAC-AST2500A
- CVE-2021-26729spx_restservice Login_handler_func Command Injection and Multiple Stack-Based Buffer OverflowsLanner IAC-AST2500A
- CVE-2021-26730spx_restservice Login_handler_func Subfunction Stack-Based Buffer OverflowLanner IAC-AST2500A
- CVE-2021-26731spx_restservice modifyUserb_func Command Injection and Multiple Stack-Based Buffer OverflowsLanner IAC-AST2500A
- CVE-2021-42010CRLF log injectionApache Software Foundation Apache Heron · org.apache.heron:…
- CVE-2021-46848GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.
- CVE-2022-38580Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).github.com/zalando/skipper
- CVE-2022-39305Gin-vue-admin vulnerable to Unrestricted Upload of File with Dangerous Typeflipped-aurora gin-vue-admin
- CVE-2022-40984Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 allows an attacker toYokogawa Test & Measurement WTViewerE series
High 5
- CVE-2021-46850myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection.
- CVE-2022-39313Parse Server crashes when receiving file download request with invalid byte rangeparse-community parse-server · parse-server
- CVE-2022-41796Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privilegSony Content Transfer
- CVE-2022-41986Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time password Internet Initiative Japan IIJ SmartKey
- CVE-2022-43680In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in ouplatform/external/expat
Medium, low and unrated 21
- CVE-2022-33757An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so.Tenable Nessus
- CVE-2022-31468OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter.
- CVE-2022-38117Juiker app - Hard-coded CredentialsJuiker app
- CVE-2021-26732spx_restservice First_network_func Broken Access ControlLanner IAC-AST2500A
- CVE-2021-26733spx_restservice FirstReset_handler_func Broken Access ControlLanner IAC-AST2500A
- CVE-2021-4228Hard-coded TLS CertificateLanner IAC-AST2500A
- CVE-2021-44467spx_restservice KillDupUsr_func Broken Access ControlLanner IAC-AST2500A
- CVE-2021-44769TLS Certificate Generation Function Improper Input ValidationLanner IAC-AST2500A
- CVE-2021-44776spx_restservice SubNet_handler_func Broken Access ControlLanner IAC-AST2500A
- CVE-2021-45925Username EnumerationLanner IAC-AST2500A
- CVE-2021-46279Session Fixation and Insufficient Session ExpirationLanner IAC-AST2500A
- CVE-2022-3344A flaw was found in the KVM's AMD nested virtualization (SVM).Linux kernel
- CVE-2022-36368Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticateIPFire Project IPFire
- CVE-2022-3676In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check.The Eclipse Foundation Eclipse OpenJ9
- CVE-2022-39314User enumeration in the code-based login and password reset formsgetkirby kirby · getkirby/cms
- CVE-2022-39836An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8.
- CVE-2022-39837An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8.
- CVE-2022-40690Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary scripBookStack
- CVE-2022-41797Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for iByteDance K.K. Lemon8 App for Android and Lemon8 App for iOS
- CVE-2022-41799Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authentWESEEK GROWI v5 series and v4 series
- CVE-2022-43677In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString.github.com/free5gc/aper · github.com/free5gc/free5gc