CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
- mozilla firefox, firefox esr, thunderbird +2 moreA same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking...8.1 High
- getkirby kirbyKirby CMS vulnerable to user enumeration in the brute force protection6.5 Medium
- getkirby kirbyUser enumeration in the code-based login and password reset forms4.8 Medium
- brokercap bifrostBrokercap Bifrost vulnerable to authentication bypass for admin and monitor user groups8.8 High
- dataeaseDataease Mysql Data Source JDBC Connection Parameters Not Verified Leads to Deserialization Vulnerability9.8 Critical
github.com/cheqd/cheqd-nodeGoPotential inter-blockchain communication (IBC) protocol compromise via "Dragonberry" vulnerability in cheqdNo score- keystonejs keystone@keystone-6/core vulnerable to field-level access-control bypass for multiselect field9.1 Critical
- git, apple xcode, debian linux +1 more +3 moreGit vulnerable to Remote Code Execution via Heap overflow in `git shell`8.5 High
- git, apple xcode, debian linux +1 more +3 moreGit subject to exposure of sensitive information via local clone of symbolic links5.5 Medium
- parse-community parse-serverParse Server crashes when receiving file download request with invalid byte range7.5 High
- changing information technology inc. rava certificate validation systemChanging Information Technology Inc. RAVA certificate validation system - Path Traversal7.5 High
- changing information technology inc. rava certificate validation systemChanging Information Technology Inc. RAVA certificate validation system - Command Injection7.2 High
- changing information technology inc. rava certificate validation systemChanging Information Technology Inc. RAVA certificate validation system - SQL Injection9.8 Critical
- changing information technology inc. rava certificate validation systemChanging Information Technology Inc. RAVA certificate validation system - Server-Side Request Forgery (SSRF)5.3 Medium
- juniper junos, juniper networks junos os +1 morecSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privileges7.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domain6.5 Medium
- juniper junos os evolvedJunos OS Evolved: Incorrect file permissions can allow low-privileged user to cause another user to execute arbitrary commands7.3 High
- juniper junos os evolvedJunos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a Denial of Service (DoS)7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PHP file inclusion vulnerability in J-Web7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Path traversal vulnerability in J-Web4.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Unauthenticated XPath Injection vulnerability in J-Web5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: XPath Injection vulnerability in J-Web4.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Cross-site Scripting (XSS) vulnerability in J-Web6.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Vulnerability in J-Web may allow deserialization without authentication8.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario5.5 Medium
- juniper junos os evolvedJunos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation8.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locally6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busy5.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash5.5 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crash7.5 High
- juniper junos, juniper networks junos os +1 moreSRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crash7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs6.5 Medium
- juniper networks paragon active assurance (formerly netrounds), juniper paragon active assurance control center +1 moreParagon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administration8.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet7.5 High
- juniper junos os evolvedJunos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilization5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash5.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route5.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment7.5 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions5.9 Medium
- juniper junos, juniper networks junos os +1 moreSRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packet7.5 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the device7.5 High
- Show moreLoading…