Security Vulnerabilities - CVEs Published In October 2022
Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that hosts the WiFi card on the device.
CVSS Score
6.8
EPSS Score
0.0
Published
2022-10-20
The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.
CVSS Score
7.8
EPSS Score
0.001
Published
2022-10-20
In PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to admin panel access.
CVSS Score
7.8
EPSS Score
0.001
Published
2022-10-20
OpenCRX before v5.2.2 was discovered to be vulnerable to password enumeration due to the difference in error messages received during a password reset which could enable an attacker to determine if a username, email or ID is valid.
CVSS Score
5.3
EPSS Score
0.001
Published
2022-10-20
Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-10-20
In Simple Exam Reviewer Management System v1.0 the User List function has improper access control that allows low privileged users to modify user permissions to higher privileges.
CVSS Score
6.5
EPSS Score
0.0
Published
2022-10-20
In Simple Exam Reviewer Management System v1.0 the User List function suffers from insecure file upload.
CVSS Score
8.8
EPSS Score
0.001
Published
2022-10-20
Simple Exam Reviewer Management System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Exam List.
CVSS Score
8.8
EPSS Score
0.001
Published
2022-10-20
Simple Exam Reviewer Management System v1.0 is vulnerable to Stored Cross Site Scripting (XSS) via the Exam List.
CVSS Score
5.4
EPSS Score
0.001
Published
2022-10-20
Simple Exam Reviewer Management System v1.0 is vulnerable to Insecure file upload.
CVSS Score
7.2
EPSS Score
0.001
Published
2022-10-20