# CVEs published 2022-09-21

92 CVEs were published on September 21, 2022: 11 critical, 30 high. Days are UTC.

- [CVE-2022-28982](https://cve.now/CVE-2022-28982.md): A cross-site scripting (XSS) vulnerability in Liferay Portal v7.3.3 through v7.4.2 and Liferay DXP v7.3 before service pack 3 allows… (CVSS 6.1, com.liferay:com.liferay.asset.taglib)
- [CVE-2022-28978](https://cve.now/CVE-2022-28978.md): Stored cross-site scripting (XSS) vulnerability in the Site module's user membership administration page in Liferay Portal 7.0.1 through… (CVSS 5.4, com.liferay:com.liferay.site.memberships.web · com.liferay.…)
- [CVE-2022-39975](https://cve.now/CVE-2022-39975.md): The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not… (CVSS 4.3, com.liferay.portal:release.portal.bom)
- [CVE-2022-35896](https://cve.now/CVE-2022-35896.md): An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. (CVSS 6.0)
- [CVE-2022-28979](https://cve.now/CVE-2022-28979.md): Liferay Portal v7.1.0 through v7.4.2 and Liferay DXP 7.1 before fix pack 26, 7.2 before fix pack 15, and 7.3 before service pack 3 was… (CVSS 6.1, com.liferay:com.liferay.portal.search.web · com.liferay.por…)
- [CVE-2022-39224](https://cve.now/CVE-2022-39224.md): Arbitrary shell execution when extracting or listing files contained in a malicious rpm. (CVSS 7.0, jordansissel ruby-arr-pm · arr-pm)
- [CVE-2022-35895](https://cve.now/CVE-2022-35895.md): An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. (CVSS 8.2)
- [CVE-2022-28802](https://cve.now/CVE-2022-28802.md): Code by Zapier before 2022-08-17 allowed intra-account privilege escalation that included execution of Python or JavaScript code. (CVSS 8.8)
- [CVE-2022-3233](https://cve.now/CVE-2022-3233.md): Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb (CVSS 4.3, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-40217](https://cve.now/CVE-2022-40217.md): WordPress WPide plugin \<= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerability (CVSS 6.5, XplodedThemes WPIDE – File Manager & Code Editor)
- [CVE-2022-38073](https://cve.now/CVE-2022-38073.md): WordPress Awesome Support plugin \<= 6.0.7 - Multiple Authenticated Persistent XSS (Additional Interested Parties) (CVSS 5.4, Awesome Support Team Awesome Support · awesome-support/awes…)
- [CVE-2022-36365](https://cve.now/CVE-2022-36365.md): WordPress WHA Crossword plugin \<= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 5.4, WHA Crossword)
- [CVE-2022-36383](https://cve.now/CVE-2022-36383.md): WordPress Word Search Puzzles game plugin \<= 2.0.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 5.4, WHA Word Search Puzzles game)
- [CVE-2022-36390](https://cve.now/CVE-2022-36390.md): WordPress Event Calendar – Calendar plugin \<= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability (CVSS 4.1, Totalsoft Event Calendar – Calendar)
- [CVE-2022-36386](https://cve.now/CVE-2022-36386.md): WordPress Import any XML or CSV File to WordPress plugin \<= 3.6.7 - Authenticated Arbitrary Code Execution vulnerability (CVSS 9.1, Soflyy Import any XML or CSV File to WordPress)
- [CVE-2022-40219](https://cve.now/CVE-2022-40219.md): WordPress FavIcon Switcher plugin \<= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, SedLex FavIcon Switcher)
- [CVE-2022-3252](https://cve.now/CVE-2022-3252.md): Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received… (no CVSS, Swift Project SwiftNIO Extras)
- [CVE-2022-23952](https://cve.now/CVE-2022-23952.md): In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable. (CVSS 7.5, keylime)
- [CVE-2022-23951](https://cve.now/CVE-2022-23951.md): In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs. (CVSS 5.5, keylime)
- [CVE-2022-23950](https://cve.now/CVE-2022-23950.md): In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a method to… (CVSS 7.5, keylime)
- [CVE-2022-23949](https://cve.now/CVE-2022-23949.md): In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar. (CVSS 7.5, keylime)
- [CVE-2021-43310](https://cve.now/CVE-2021-43310.md): A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys as if the agent… (CVSS 9.8, keylime)
- [CVE-2022-23948](https://cve.now/CVE-2022-23948.md): A flaw was found in Keylime before 6.3.0. (CVSS 7.5, keylime)
- [CVE-2022-29800](https://cve.now/CVE-2022-29800.md): A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. (CVSS 4.7, networkd-dispatcher)
- [CVE-2022-29799](https://cve.now/CVE-2022-29799.md): A vulnerability was found in networkd-dispatcher. (CVSS 5.5, networkd-dispatcher)
- [CVE-2022-35621](https://cve.now/CVE-2022-35621.md): Access control vulnerability in Evoh NFT EvohClaimable contract with sha256 hash code… (CVSS 5.3)
- [CVE-2022-30578](https://cve.now/CVE-2022-30578.md): TIBCO EBX Add-ons Stored XSS vulnerability (CVSS 8.0, TIBCO Software TIBCO EBX Add-ons)
- [CVE-2022-30577](https://cve.now/CVE-2022-30577.md): TIBCO EBX Stored XSS vulnerability (CVSS 8.0, TIBCO Software TIBCO EBX)
- [CVE-2022-31679](https://cve.now/CVE-2022-31679.md): Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older… (CVSS 3.7, Spring Data REST · org.springframework.data:spring-data-res…)
- [CVE-2022-40030](https://cve.now/CVE-2022-40030.md): SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at… (CVSS 9.8)
- [CVE-2022-40029](https://cve.now/CVE-2022-40029.md): SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component… (CVSS 4.8)
- [CVE-2022-40028](https://cve.now/CVE-2022-40028.md): SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component… (CVSS 4.8)
- [CVE-2022-40027](https://cve.now/CVE-2022-40027.md): SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component… (CVSS 6.1)
- [CVE-2022-40026](https://cve.now/CVE-2022-40026.md): SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at… (CVSS 7.2)
- [CVE-2022-3250](https://cve.now/CVE-2022-3250.md): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb (CVSS 4.9, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-3251](https://cve.now/CVE-2022-3251.md): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/minarca (CVSS 7.5, ikus060/minarca)
- [CVE-2022-37027](https://cve.now/CVE-2022-37027.md): Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. (CVSS 7.2)
- [CVE-2022-40616](https://cve.now/CVE-2022-40616.md): IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain sensitive information or… (CVSS 6.5, IBM Maximo Asset Management)
- [CVE-2022-41255](https://cve.now/CVE-2022-41255.md): Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it… (CVSS 6.5, Jenkins project Jenkins CONS3RT Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41254](https://cve.now/CVE-2022-41254.md): Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allow attackers with Overall/Read permission to connect to an… (CVSS 6.5, Jenkins project Jenkins CONS3RT Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41253](https://cve.now/CVE-2022-41253.md): A cross-site request forgery (CSRF) vulnerability in Jenkins CONS3RT Plugin 1.0.0 and earlier allows attackers to connect to an… (CVSS 8.8, Jenkins project Jenkins CONS3RT Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41252](https://cve.now/CVE-2022-41252.md): Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials… (CVSS 4.3, Jenkins project Jenkins CONS3RT Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41250](https://cve.now/CVE-2022-41250.md): A missing permission check in Jenkins SCM HttpClient Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an… (CVSS 6.5, Jenkins project Jenkins SCM HttpClient Plugin · com.meowlom…)
- [CVE-2022-41251](https://cve.now/CVE-2022-41251.md): A missing permission check in Jenkins Apprenda Plugin 2.2.0 and earlier allows users with Overall/Read permission to enumerate credentials… (CVSS 4.3, Jenkins project Jenkins Apprenda Plugin · org.jenkins-ci.pl…)
- [CVE-2022-41249](https://cve.now/CVE-2022-41249.md): A cross-site request forgery (CSRF) vulnerability in Jenkins SCM HttpClient Plugin 1.5 and earlier allows attackers to connect to an… (CVSS 8.8, Jenkins project Jenkins SCM HttpClient Plugin · com.meowlom…)
- [CVE-2022-41248](https://cve.now/CVE-2022-41248.md): Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, increasing the… (CVSS 5.3, Jenkins project Jenkins BigPanda Notifier Plugin · org.jenk…)
- [CVE-2022-41247](https://cve.now/CVE-2022-41247.md): Jenkins BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration file on the Jenkins… (CVSS 4.3, Jenkins project Jenkins BigPanda Notifier Plugin · org.jenk…)
- [CVE-2022-41246](https://cve.now/CVE-2022-41246.md): A missing permission check in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers with Overall/Read… (CVSS 6.5, Jenkins project Jenkins Worksoft Execution Manager Plugin ·…)
- [CVE-2022-41244](https://cve.now/CVE-2022-41244.md): Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26… (CVSS 8.1, Jenkins project Jenkins View26 Test-Reporting Plugin · org.…)
- [CVE-2022-41245](https://cve.now/CVE-2022-41245.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers to… (CVSS 8.8, Jenkins project Jenkins Worksoft Execution Manager Plugin ·…)
- [CVE-2022-41242](https://cve.now/CVE-2022-41242.md): A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover… (CVSS 5.4, Jenkins project Jenkins extreme-feedback Plugin · org.jenki…)
- [CVE-2022-41243](https://cve.now/CVE-2022-41243.md): Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could… (CVSS 8.1, Jenkins project Jenkins SmallTest Plugin · com.smalltest:sm…)
- [CVE-2022-41241](https://cve.now/CVE-2022-41241.md): Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. (CVSS 9.8, Jenkins project Jenkins RQM Plugin · net.praqma:rqm-plugin)
- [CVE-2022-41240](https://cve.now/CVE-2022-41240.md): Jenkins Walti Plugin 1.0.1 and earlier does not escape the information provided by the Walti API, resulting in a stored cross-site… (CVSS 5.4, Jenkins project Jenkins Walti Plugin · org.jenkins-ci.plugi…)
- [CVE-2022-41239](https://cve.now/CVE-2022-41239.md): Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying… (CVSS 5.4, Jenkins project Jenkins DotCi Plugin · com.groupon.jenkins-…)
- [CVE-2022-41238](https://cve.now/CVE-2022-41238.md): A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs… (CVSS 9.8, Jenkins project Jenkins DotCi Plugin · com.groupon.jenkins-…)
- [CVE-2022-41236](https://cve.now/CVE-2022-41236.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Security Inspector Plugin 117.v6eecc36919c2 and earlier allows attackers to… (CVSS 8.8, Jenkins project Jenkins Security Inspector Plugin · org.jen…)
- [CVE-2022-41237](https://cve.now/CVE-2022-41237.md): Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in… (CVSS 9.8, Jenkins project Jenkins DotCi Plugin · com.groupon.jenkins-…)
- [CVE-2022-41235](https://cve.now/CVE-2022-41235.md): Jenkins WildFly Deployer Plugin 1.0.2 and earlier implements functionality that allows agent processes to read arbitrary files on the… (CVSS 5.3, Jenkins project Jenkins WildFly Deployer Plugin · org.jenki…)
- [CVE-2022-41234](https://cve.now/CVE-2022-41234.md): Jenkins Rundeck Plugin 3.6.11 and earlier does not protect access to the /plugin/rundeck/webhook/ endpoint, allowing users with… (CVSS 8.8, Jenkins project Jenkins Rundeck Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41233](https://cve.now/CVE-2022-41233.md): Jenkins Rundeck Plugin 3.6.11 and earlier does not perform Run/Artifacts permission checks in multiple HTTP endpoints, allowing attackers… (CVSS 4.3, Jenkins project Jenkins Rundeck Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41232](https://cve.now/CVE-2022-41232.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to replace any… (CVSS 8.0, Jenkins project Jenkins Build-Publisher Plugin · org.jenkin…)
- [CVE-2022-41230](https://cve.now/CVE-2022-41230.md): Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with… (CVSS 4.3, Jenkins project Jenkins Build-Publisher Plugin · org.jenkin…)
- [CVE-2022-41231](https://cve.now/CVE-2022-41231.md): Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file… (CVSS 5.7, Jenkins project Jenkins Build-Publisher Plugin · org.jenkin…)
- [CVE-2022-41229](https://cve.now/CVE-2022-41229.md): Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute… (CVSS 5.4, Jenkins project Jenkins NS-ND Integration Performance Publi…)
- [CVE-2022-41228](https://cve.now/CVE-2022-41228.md): A missing permission check in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers with… (CVSS 8.8, Jenkins project Jenkins NS-ND Integration Performance Publi…)
- [CVE-2022-41227](https://cve.now/CVE-2022-41227.md): A cross-site request forgery (CSRF) vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows… (CVSS 8.8, Jenkins project Jenkins NS-ND Integration Performance Publi…)
- [CVE-2022-41225](https://cve.now/CVE-2022-41225.md): Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine API, resulting in… (CVSS 5.4, Jenkins project Jenkins Anchore Container Image Scanner Plu…)
- [CVE-2022-41226](https://cve.now/CVE-2022-41226.md): Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE)… (CVSS 9.8, Jenkins project Jenkins Compuware Common Configuration Plug…)
- [CVE-2022-41224](https://cve.now/CVE-2022-41224.md): Jenkins 2.367 through 2.369 (both inclusive) does not escape tooltips of the l:helpIcon UI component used for some help icons on the… (CVSS 5.4, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2019-5641](https://cve.now/CVE-2019-5641.md): Rapid7 InsightVM Information Disclosure after Logout (CVSS 3.3, Rapid7 InsightVM)
- [CVE-2022-37246](https://cve.now/CVE-2022-37246.md): Craft CMS 4.2.0.1 is affected by Cross Site Scripting (XSS) in the file src/web/assets/cp/src/js/BaseElementSelectInput.js and in specific… (CVSS 5.4, craftcms/cms)
- [CVE-2022-2265](https://cve.now/CVE-2022-2265.md): Path traversal in Identity and Directory Management System (CVSS 7.5, Çekino Bilgi Teknolojileri)
- [CVE-2022-38928](https://cve.now/CVE-2022-38928.md): XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393. (CVSS 7.8)
- [CVE-2022-3255](https://cve.now/CVE-2022-3255.md): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore (CVSS 6.8, pimcore/pimcore)
- [CVE-2022-3068](https://cve.now/CVE-2022-3068.md): Improper Privilege Management in octoprint/octoprint (CVSS 5.3, octoprint/octoprint · octoprint)
- [CVE-2022-2888](https://cve.now/CVE-2022-2888.md): Insufficient Session Expiration in octoprint/octoprint (CVSS 4.4, octoprint/octoprint · octoprint)
- [CVE-2022-3080](https://cve.now/CVE-2022-3080.md): BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly (CVSS 7.5, ISC BIND9)
- [CVE-2022-38178](https://cve.now/CVE-2022-38178.md): Memory leaks in EdDSA DNSSEC verification code (CVSS 7.5, ISC BIND9)
- [CVE-2022-38177](https://cve.now/CVE-2022-38177.md): Memory leak in ECDSA DNSSEC verification code (CVSS 7.5, ISC BIND9)
- [CVE-2022-2906](https://cve.now/CVE-2022-2906.md): Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only) (CVSS 7.5, ISC BIND9)
- [CVE-2022-2881](https://cve.now/CVE-2022-2881.md): Buffer overread in statistics channel code (CVSS 5.5, ISC BIND9)
- [CVE-2022-2795](https://cve.now/CVE-2022-2795.md): Processing large delegations may severely degrade resolver performance (CVSS 5.3, ISC BIND9)
- [CVE-2022-2872](https://cve.now/CVE-2022-2872.md): Unrestricted Upload of File with Dangerous Type in octoprint/octoprint (CVSS 3.7, octoprint/octoprint · octoprint)
- [CVE-2022-0495](https://cve.now/CVE-2022-0495.md): SQL Injection in KOHA (CVSS 9.4, Parantez Teknoloji)
- [CVE-2022-2315](https://cve.now/CVE-2022-2315.md): SQL Injection in Database Accreditation System (CVSS 9.4, Database Software)
- [CVE-2022-40754](https://cve.now/CVE-2022-40754.md): Open Redirect (CVSS 6.1, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2022-40604](https://cve.now/CVE-2022-40604.md): Format String Vulnerability (CVSS 7.5, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2022-41220](https://cve.now/CVE-2022-41220.md): md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. (CVSS 9.8)
- [CVE-2022-37026](https://cve.now/CVE-2022-37026.md): In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain… (CVSS 9.8)
- [CVE-2022-41218](https://cve.now/CVE-2022-41218.md): In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb\_de (CVSS 5.5)
- [CVE-2022-41222](https://cve.now/CVE-2022-41222.md): mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move. (CVSS 7.0, :linux\_kernel:)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2022-09-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.