Skip to content

CyberSecBulletin

CVEs published on October 6, 2022

25 vulnerabilities, ordered with the most urgent first.

9.8 Critical severity
Aruba Access Points: 100 Series; 103 Series…: Buffer Copy without Checking Size of Input
CVE-2022-37888Oct 6, 2022Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;EPSS 2.05%
9.8 Critical severity
LoRaMac-node: Off-by-one Error
CVE-2022-39274Oct 6, 2022Lora-netEPSS 2.05%
9.8 Critical severity
pjproject: Buffer Copy without Checking Size of Input
CVE-2022-39244Oct 6, 2022PjsipEPSS 1.5%
9.8 Critical severity
sif: Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-39237Oct 6, 2022Sylabs
9.8 Critical severity
hsqldb: Use of Externally-Controlled Input to Select Classes or Code
CVE-2022-41853Oct 6, 2022HyperSQL DataBaseEPSS 5.15%
9.1 Critical severity
Nedi: Observable Discrepancy
CVE-2022-40895Oct 6, 2022NediEPSS 2.07%
9.1 Critical severity
pjproject: Cleartext Transmission of Sensitive Information
CVE-2022-39269Oct 6, 2022Pjsip
9.8 Critical severity
Nps: Improper Authentication
CVE-2022-40494Oct 6, 2022Ehang-ioEPSS 2.1%
9.8 Critical severity
Nr1800x Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-41518Oct 6, 2022TOTOLINKEPSS 1.98%
9.8 Critical severity
Nr1800x Firmware: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-41525Oct 6, 2022TOTOLINKEPSS 1.95%
8.8 High severity
Hitachi Storage Plug-in for VMware vCenter: Improper Privilege Management
CVE-2022-2637Oct 6, 2022Hitachi
7.5 High severity
Lighttpd: Missing Release of Memory after Effective Lifetime
CVE-2022-41556Oct 6, 2022LighttpdEPSS 3.83%
8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
CVE-2022-41520Oct 6, 2022TOTOLINKEPSS 1.06%
8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
CVE-2022-41521Oct 6, 2022TOTOLINKEPSS 1.06%
8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
CVE-2022-41523Oct 6, 2022TOTOLINKEPSS 1.06%
8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
CVE-2022-41524Oct 6, 2022TOTOLINKEPSS 1.06%
8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
CVE-2022-41526Oct 6, 2022TOTOLINKEPSS 1.06%
8.8 High severity
Nr1800x Firmware: Out-of-bounds Write
CVE-2022-41527Oct 6, 2022TOTOLINKEPSS 1.06%
7.5 High severity
dparse: Inefficient Regular Expression Complexity
CVE-2022-39280Oct 6, 2022PyupioEPSS 1.34%
7.5 High severity
flyteadmin: Use of Hard-coded Credentials
CVE-2022-39273Oct 6, 2022Flyteorg
7.5 High severity
rabbitmq-server: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
CVE-2022-31008Oct 6, 2022Rabbitmq
7.2 High severity
mybb: Improper Neutralization of Special Elements used in a Command
CVE-2022-39265Oct 6, 2022MyBBEPSS 3.11%
7.8 High severity
Remisol Advance: Incorrect Default Permissions
CVE-2022-26235Oct 6, 2022Beckmancoulter
7.5 High severity
Hermes: Uncontrolled Recursion
CVE-2022-27810Oct 6, 2022Facebook
7.2 High severity
Online Leave Management System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-41355Oct 6, 2022Online Leave Management System ProjectEPSS 1.03%