Security Vulnerabilities - CVEs Published In 2022
A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE affecting all versions before 15.1.6, 15.2 to 15.2.4, and 15.3 to 15.3.2 allows an attacker to issue arbitrary HTTP requests
CVSS Score
6.4
EPSS Score
0.01
Published
2022-10-17
A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header. This flaw allows an attacker to gain admin privileges in the Business Central Console.
CVSS Score
8.8
EPSS Score
0.007
Published
2022-10-17
An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProject", and then later deletes it another user can then create a project called "MyProject" and access the metrics stored from the original "MyProject" instance.
CVSS Score
3.5
EPSS Score
0.005
Published
2022-10-17
A flaw was found in the RHDM, where sensitive HTML form fields like Password has auto-complete enabled which may lead to leak of credentials.
CVSS Score
7.5
EPSS Score
0.008
Published
2022-10-17
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/fromSetIpMacBind.
CVSS Score
9.8
EPSS Score
0.011
Published
2022-10-17
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/addWifiMacFilter.
CVSS Score
9.8
EPSS Score
0.011
Published
2022-10-17
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formWifiWpsStart.
CVSS Score
9.8
EPSS Score
0.011
Published
2022-10-17
Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/saveParentControlInfo.
CVSS Score
9.8
EPSS Score
0.011
Published
2022-10-17
A SQL Injection issue in Merchandise Online Store v.1.0 allows an attacker to log in to the admin account.
CVSS Score
9.8
EPSS Score
0.01
Published
2022-10-17
74cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Administrator account.
CVSS Score
6.5
EPSS Score
0.006
Published
2022-10-17