Security Vulnerabilities - CVEs Published In November 2022
In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings
CVSS Score
2.2
EPSS Score
0.0
Published
2022-11-03
In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters
CVSS Score
6.5
EPSS Score
0.0
Published
2022-11-03
In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive
CVSS Score
2.7
EPSS Score
0.0
Published
2022-11-03
In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settings
CVSS Score
6.5
EPSS Score
0.0
Published
2022-11-03
D-Link DIR-823G v1.0.2 was found to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via a crafted packet.
CVSS Score
9.8
EPSS Score
0.009
Published
2022-11-03
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-11-03
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-11-03
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the schedStartTime parameter in the setSchedWifi function.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-11-03
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the wpapsk_crypto parameter in the fromSetWirelessRepeat function.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-11-03
Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-11-03