Skip to content

CyberSecBulletin

CVEs published on October 25, 2022

85 vulnerabilities, ordered with the most urgent first.

8.8 High severity
Arm Mali GPU Kernel Driver Use-After-Free Exploited
CVE-2022-38181Oct 25, 2022ArmEPSS 18.5%
9.8 Critical severity
Micollab: Unrestricted Upload of File with Dangerous Type
CVE-2022-36452Oct 25, 2022MitelEPSS 1.11%
8.8 High severity
Micollab: Server-Side Request Forgery
CVE-2022-36451Oct 25, 2022Mitel
9.1 Critical severity
DiskStation Manager (DSM): Missing Authentication for Critical Functionality
CVE-2022-27623Oct 25, 2022SynologyEPSS 1.04%
8.8 High severity
Micollab: Improper Authorization
CVE-2022-36453Oct 25, 2022Mitel
7.8 High severity
Illustrator: Out-of-bounds Read
CVE-2022-38436Oct 25, 2022Adobe
7.8 High severity
Adobe Illustrator versions 26.4 (and earlier) and 25.4.7 (and earlier) are affected by an…
CVE-2022-38435Oct 25, 2022Adobe
9.8 Critical severity
azure-cli: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-39327Oct 25, 2022AzureEPSS 4.24%
9.9 Critical severity
runner: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-39321Oct 25, 2022ActionsEPSS 2.01%
9.8 Critical severity
dataease: Deserialization of Untrusted Data
CVE-2022-39312Oct 25, 2022DataEaseEPSS 1.97%
9.8 Critical severity
keystone: Incorrect Authorization
CVE-2022-39322Oct 25, 2022KeystonejsEPSS 1.49%
9.8 Critical severity
openfga: Improper Authorization
CVE-2022-39342Oct 25, 2022OpenfgaEPSS 1.17%
7.5 High severity
Apache XML Graphics: Server-Side Request Forgery
CVE-2022-42890Oct 25, 2022ApacheEPSS 3.38%
7.5 High severity
Apache XML Graphics: Server-Side Request Forgery
CVE-2022-41704Oct 25, 2022ApacheEPSS 3.12%
10.0 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33192Oct 25, 2022Abode SystemsEPSS 3.5%
10.0 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33193Oct 25, 2022Abode SystemsEPSS 3.4%
10.0 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33194Oct 25, 2022Abode SystemsEPSS 3.4%
10.0 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33195Oct 25, 2022Abode SystemsEPSS 3.5%
9.9 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33204Oct 25, 2022Abode SystemsEPSS 4.63%
9.9 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33205Oct 25, 2022Abode SystemsEPSS 4.63%
9.9 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33206Oct 25, 2022Abode SystemsEPSS 4.63%
9.9 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33207Oct 25, 2022Abode SystemsEPSS 4.63%
9.8 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-29472Oct 25, 2022Abode SystemsEPSS 4.78%
9.8 Critical severity
openfga: Improper Authorization
CVE-2022-39341Oct 25, 2022OpenfgaEPSS 1.17%
9.8 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-27804Oct 25, 2022Abode SystemsEPSS 3.92%
9.8 Critical severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35244Oct 25, 2022Abode SystemsEPSS 1.44%
9.8 Critical severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-33938Oct 25, 2022Abode SystemsEPSS 1.14%
9.8 Critical severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35874Oct 25, 2022Abode SystemsEPSS 1.03%
9.8 Critical severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35875Oct 25, 2022Abode SystemsEPSS 1.03%
9.8 Critical severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35876Oct 25, 2022Abode SystemsEPSS 1.03%
9.8 Critical severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35877Oct 25, 2022Abode SystemsEPSS 1.03%
8.8 High severity
github-workflows: Improper Control of Generation of Code
CVE-2022-39326Oct 25, 2022KartverketEPSS 1.69%
8.8 High severity
Brocade Fabric OS: Improper Privilege Management
CVE-2022-28169Oct 25, 2022Brocade Fabric OS
9.8 Critical severity
Ox App Suite: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-29851Oct 25, 2022Open-XchangeEPSS 3.9%
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33150Oct 25, 2022RobustelEPSS 3.87%
9.8 Critical severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-32765Oct 25, 2022RobustelEPSS 3.73%
9.8 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-33189Oct 25, 2022Abode SystemsEPSS 3.73%
9.8 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-30541Oct 25, 2022Abode SystemsEPSS 3.42%
9.8 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-32773Oct 25, 2022Abode SystemsEPSS 3.5%
9.8 Critical severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-29520Oct 25, 2022Abode SystemsEPSS 3.08%
9.8 Critical severity
iota All-In-One Security Kit: Stack-based Buffer Overflow
CVE-2022-32454Oct 25, 2022Abode SystemsEPSS 2.08%
9.8 Critical severity
Badaso: Unrestricted Upload of File with Dangerous Type
CVE-2022-41711Oct 25, 2022BadasoEPSS 2.13%
9.8 Critical severity
iota All-In-One Security Kit: Improper Access Control
CVE-2022-27805Oct 25, 2022Abode SystemsEPSS 1.57%
9.8 Critical severity
iota All-In-One Security Kit: Use of Hard-coded Credentials
CVE-2022-29477Oct 25, 2022Abode SystemsEPSS 1.39%
9.8 Critical severity
iota All-In-One Security Kit: Use of Hard-coded Credentials
CVE-2022-29889Oct 25, 2022Abode SystemsEPSS 1.49%
8.8 High severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-30603Oct 25, 2022Abode SystemsEPSS 5.61%
8.8 High severity
Brocade Fabric OS: Out-of-bounds Write
CVE-2022-33183Oct 25, 2022Brocade Fabric OSEPSS 1.75%
8.8 High severity
iota All-In-One Security Kit: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-32586Oct 25, 2022Abode SystemsEPSS 4.08%
8.8 High severity
iota All-In-One Security Kit: Integer Overflow or Wraparound
CVE-2022-32775Oct 25, 2022Abode SystemsEPSS 1.65%
8.8 High severity
WP All Export Pro: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-3395Oct 25, 2022WP All Export ProEPSS 1.27%
8.8 High severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35884Oct 25, 2022Abode SystemsEPSS 1.48%
8.8 High severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35885Oct 25, 2022Abode SystemsEPSS 1.48%
8.8 High severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35886Oct 25, 2022Abode SystemsEPSS 1.48%
8.8 High severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35887Oct 25, 2022Abode SystemsEPSS 1.48%
8.8 High severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35878Oct 25, 2022Abode Systems
8.8 High severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35879Oct 25, 2022Abode Systems
8.8 High severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35880Oct 25, 2022Abode Systems
8.8 High severity
iota All-In-One Security Kit: Use of Externally-Controlled Format String
CVE-2022-35881Oct 25, 2022Abode Systems
9.1 Critical severity
R1510: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-33897Oct 25, 2022RobustelEPSS 1.63%
8.1 High severity
ArcGIS Server: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-38196Oct 25, 2022EsriEPSS 1.22%
8.8 High severity
Blog2Social: Social Media Auto Post & Scheduler: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-3246Oct 25, 2022Blog2Social: Social Media Auto Post & SchedulerEPSS 1.51%
7.5 High severity
gin-vue-admin: Improper Limitation of a Pathname to a Restricted Directory
CVE-2022-39345Oct 25, 2022Flipped-auroraEPSS 1.77%
7.5 High severity
evm: Always-Incorrect Control Flow Implementation
CVE-2022-39354Oct 25, 2022Rust-blockchain
8.1 High severity
iota All-In-One Security Kit: Authentication Bypass by Capture-replay
CVE-2022-29475Oct 25, 2022Abode Systems
7.8 High severity
Brocade Fabric OS: Incorrect Default Permissions
CVE-2022-33182Oct 25, 2022Brocade Fabric OS
7.8 High severity
Brocade Fabric OS: Out-of-bounds Write
CVE-2022-33184Oct 25, 2022Brocade Fabric OS
7.8 High severity
Brocade Fabric OS: Out-of-bounds Write
CVE-2022-33185Oct 25, 2022Brocade Fabric OS
7.5 High severity
R1510: Out-of-bounds Read
CVE-2022-35261Oct 25, 2022RobustelEPSS 1.19%
7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35265Oct 25, 2022RobustelEPSS 1.18%
7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35266Oct 25, 2022RobustelEPSS 1.18%
7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35267Oct 25, 2022RobustelEPSS 1.18%
7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35269Oct 25, 2022RobustelEPSS 1.18%
7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35270Oct 25, 2022RobustelEPSS 1.18%
7.2 High severity
A vulnerability in the radius authentication system of Brocade Fabric OS before Brocade Fabric…
CVE-2022-33178Oct 25, 2022Brocade Fabric OSEPSS 1.71%
7.5 High severity
R1510: Out-of-bounds Read
CVE-2022-35262Oct 25, 2022RobustelEPSS 1.02%
7.5 High severity
R1510: Out-of-bounds Read
CVE-2022-35263Oct 25, 2022RobustelEPSS 1.02%
7.5 High severity
R1510: Out-of-bounds Read
CVE-2022-35264Oct 25, 2022RobustelEPSS 1.06%
7.5 High severity
R1510: Improper Handling of Exceptional Conditions
CVE-2022-35268Oct 25, 2022RobustelEPSS 1.06%
7.5 High severity
R1510: Improper Neutralization of Special Elements used in a Command
CVE-2022-35271Oct 25, 2022RobustelEPSS 1.15%
7.2 High severity
WP All Export Pro: Improper Control of Generation of Code
CVE-2022-3394Oct 25, 2022WP All Export ProEPSS 2.07%
7.5 High severity
iota All-In-One Security Kit: Active Debug Code
CVE-2022-32760Oct 25, 2022Abode SystemsEPSS 1.05%
7.2 High severity
R1510: Improper Neutralization of Special Elements used in an OS Command
CVE-2022-34850Oct 25, 2022RobustelEPSS 3.65%
7.2 High severity
Kadence WooCommerce Email Designer: Deserialization of Untrusted Data
CVE-2022-3335Oct 25, 2022Kadence WooCommerce Email DesignerEPSS 1.55%
7.2 High severity
Form Maker by 10Web – Mobile-Friendly Drag &…: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-3300Oct 25, 2022Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form BuilderEPSS 1.41%
7.2 High severity
Spam protection, AntiSpam, FireWall by CleanTalk: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-3302Oct 25, 2022Spam protection, AntiSpam, FireWall by CleanTalkEPSS 1.37%