# CVEs published 2022-09-02

76 CVEs were published on September 2, 2022: 2 critical, 35 high. Days are UTC.

- [CVE-2022-36754](https://cve.now/CVE-2022-36754.md): Expense Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Home/debit\_credit\_p. (no CVSS)
- [CVE-2020-29260](https://cve.now/CVE-2020-29260.md): libvncclient v0.9.13 was discovered to contain a memory leak via the function rfbClientCleanup(). (no CVSS)
- [CVE-2022-36647](https://cve.now/CVE-2022-36647.md): PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse\_sequence\_header() at source/common/header.cc (no CVSS)
- [CVE-2022-36642](https://cve.now/CVE-2022-36642.md): A local file disclosure vulnerability in /appConfig/userDB.json of Telos Alliance Omnia MPX Node through 1.0.0-1.4.9 allows attackers to acc (no CVSS)
- [CVE-2022-36640](https://cve.now/CVE-2022-36640.md): influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary (no CVSS)
- [CVE-2022-36639](https://cve.now/CVE-2022-36639.md): A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attackers to execute arbitrary web (no CVSS)
- [CVE-2022-36638](https://cve.now/CVE-2022-36638.md): An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all (no CVSS)
- [CVE-2022-31152](https://cve.now/CVE-2022-31152.md): Synapse vulnerable to denial of service (DoS) due to incorrect application of event authorization rules (CVSS 6.4, matrix-org synapse · matrix-synapse)
- [CVE-2022-31196](https://cve.now/CVE-2022-31196.md): Server-Side Request Forgery (SSRF) vulnerability in Databasir (CVSS 7.6, vran-dev databasir)
- [CVE-2022-35933](https://cve.now/CVE-2022-35933.md): PrestaShop module Product Comments vulnerable to cross-site scripting (XSS) (CVSS 4.3, PrestaShop productcomments · prestashop/productcomments)
- [CVE-2022-3065](https://cve.now/CVE-2022-3065.md): Improper Access Control in jgraph/drawio (CVSS 5.3, jgraph/drawio)
- [CVE-2021-27693](https://cve.now/CVE-2021-27693.md): Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage (no CVSS)
- [CVE-2022-34382](https://cve.now/CVE-2022-34382.md): Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the cus (CVSS 7.8, Dell Command Update)
- [CVE-2022-34378](https://cve.now/CVE-2022-34378.md): Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3, contain a relative path traversal vulner (CVSS 5.5, Dell PowerScale OneFS)
- [CVE-2022-34371](https://cve.now/CVE-2022-34371.md): Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.3, contain an unprotected transport of cred (CVSS 8.1, Dell PowerScale OneFS)
- [CVE-2022-34369](https://cve.now/CVE-2022-34369.md): Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.20, 9.2.1.13, 9.3.0.6, and 9.4.0.3 , contain an insertion of sensitive infor (CVSS 8.1, Dell PowerScale OneFS)
- [CVE-2022-36071](https://cve.now/CVE-2022-36071.md): Recovery codes abuse in SFTPGo (CVSS 8.3, drakkan sftpgo · github.com/drakkan/sftpgo/v2 +1)
- [CVE-2022-36076](https://cve.now/CVE-2022-36076.md): Account takeover via SSO plugins in NodeBB (CVSS 8.8, NodeBB)
- [CVE-2022-36078](https://cve.now/CVE-2022-36078.md): Slice Memory Allocation with Excessive Size Value in binary (CVSS 8.8, gagliardetto binary · github.com/gagliardetto/binary)
- [CVE-2022-25668](https://cve.now/CVE-2022-25668.md): Memory corruption in video driver due to double free while parsing ASF clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25680](https://cve.now/CVE-2022-25680.md): Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto (CVSS 8.4, Qualcomm Snapdragon Auto)
- [CVE-2022-25659](https://cve.now/CVE-2022-25659.md): Memory corruption due to buffer overflow while parsing MKV clips with invalid bitmap size in Snapdragon Auto, Snapdragon Compute, Snapdragon (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25658](https://cve.now/CVE-2022-25658.md): Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-25657](https://cve.now/CVE-2022-25657.md): Memory corruption due to buffer overflow occurs while processing invalid MKV clip which has invalid seek header in Snapdragon Auto, Snapdrag (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22106](https://cve.now/CVE-2022-22106.md): Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto (CVSS 8.4, Qualcomm Snapdragon Auto)
- [CVE-2022-22102](https://cve.now/CVE-2022-22102.md): Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto (CVSS 8.4, Qualcomm Snapdragon Auto)
- [CVE-2022-22104](https://cve.now/CVE-2022-22104.md): Memory corruption in multimedia due to improper check on the messages received. (CVSS 8.4, Qualcomm Snapdragon Auto)
- [CVE-2022-22101](https://cve.now/CVE-2022-22101.md): Denial of service in multimedia due to uncontrolled resource consumption while parsing an incoming HAB message in Snapdragon Auto (CVSS 6.2, Qualcomm Snapdragon Auto)
- [CVE-2022-22100](https://cve.now/CVE-2022-22100.md): Memory corruption in multimedia due to improper check on received export descriptors in Snapdragon Auto (CVSS 8.4, Qualcomm Snapdragon Auto)
- [CVE-2022-22099](https://cve.now/CVE-2022-22099.md): Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto (CVSS 8.4, Qualcomm Snapdragon Auto)
- [CVE-2022-22098](https://cve.now/CVE-2022-22098.md): Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto (CVSS 8.4, Qualcomm Snapdragon Auto)
- [CVE-2022-22097](https://cve.now/CVE-2022-22097.md): Memory corruption in graphic driver due to use after free while calling multiple threads application to driver. (CVSS 8.4, Qualcomm Snapdragon Consumer IOT)
- [CVE-2022-22080](https://cve.now/CVE-2022-22080.md): Improper validation of backend id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Co (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22096](https://cve.now/CVE-2022-22096.md): Memory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data using command length parameter in Snapdrago (CVSS 9.8, Qualcomm Snapdragon Connectivity, Snapdragon Mobile)
- [CVE-2022-22070](https://cve.now/CVE-2022-22070.md): Memory corruption in audio due to lack of check of invalid routing address into APR Routing table in Snapdragon Auto, Snapdragon Compute, Sn (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22069](https://cve.now/CVE-2022-22069.md): Devices with keyprotect off may store unencrypted keybox in RPMB and cause cryptographic issue in Snapdragon Auto, Snapdragon Compute, Snapd (CVSS 7.7, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22067](https://cve.now/CVE-2022-22067.md): Potential memory leak in modem during the processing of NSA RRC Reconfiguration with invalid Radio Bearer Config in Snapdragon Auto, Snapdra (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22062](https://cve.now/CVE-2022-22062.md): An out-of-bounds read can occur while parsing a server certificate due to improper length check in Snapdragon Auto, Snapdragon Compute, Snap (CVSS 8.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22059](https://cve.now/CVE-2022-22059.md): Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22061](https://cve.now/CVE-2022-22061.md): Out of bounds writing is possible while verifying device IDs due to improper length check before copying the data in Snapdragon Compute, Sna (CVSS 7.8, Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapd…)
- [CVE-2021-35135](https://cve.now/CVE-2021-35135.md): A null pointer dereference may potentially occur during RSA key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap (CVSS 6.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-35134](https://cve.now/CVE-2021-35134.md): Due to insufficient validation of ELF headers, an Incorrect Calculation of Buffer Size can occur in Boot leading to memory corruption in Sna (CVSS 8.4, Qualcomm Snapdragon Connectivity, Snapdragon Industrial IOT…)
- [CVE-2021-35132](https://cve.now/CVE-2021-35132.md): Out of bound write in DSP service due to improper bound check for response buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Co (CVSS 8.4, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-35133](https://cve.now/CVE-2021-35133.md): Use after free in the synx driver issue while performing other functions during multiple invocation of synx release calls in Snapdragon Conn (CVSS 6.7, Qualcomm Snapdragon Connectivity, Snapdragon Industrial IOT…)
- [CVE-2021-35122](https://cve.now/CVE-2021-35122.md): Non-secure region can try modifying RG permissions of IO space xPUs due to improper input validation in Snapdragon Auto, Snapdragon Compute, (CVSS 9.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-35113](https://cve.now/CVE-2021-35113.md): Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-35109](https://cve.now/CVE-2021-35109.md): Possible address manipulation from APP-NS while APP-S is configuring an RG where it tries to merge the address ranges in Snapdragon Connecti (CVSS 6.8, Qualcomm Snapdragon Connectivity, Snapdragon Mobile)
- [CVE-2021-35108](https://cve.now/CVE-2021-35108.md): Improper checking of AP-S lock bit while verifying the secure resource group permissions can lead to non secure read and write access in Sna (CVSS 6.8, Qualcomm Snapdragon Connectivity, Snapdragon Mobile)
- [CVE-2021-35097](https://cve.now/CVE-2021-35097.md): Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon (CVSS 7.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-37458](https://cve.now/CVE-2022-37458.md): Discourse through 2.8.7 allows admins to send invitations to arbitrary email addresses at an unlimited rate. (no CVSS)
- [CVE-2021-44718](https://cve.now/CVE-2021-44718.md): wolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the client component by sending crafted traffic f (no CVSS)
- [CVE-2022-38054](https://cve.now/CVE-2022-38054.md): Session Fixation (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2022-38170](https://cve.now/CVE-2022-38170.md): Overly permissive umask for daemons (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2022-29158](https://cve.now/CVE-2022-29158.md): Regular Expression Denial of Service (ReDoS) vulnerability in Apache OFBiz (no CVSS, Apache Software Foundation Apache OFBiz)
- [CVE-2022-29063](https://cve.now/CVE-2022-29063.md): Java Deserialization via RMI Connection from the Solr plugin of Apache OFBiz (no CVSS, Apache Software Foundation Apache OFBiz)
- [CVE-2022-25813](https://cve.now/CVE-2022-25813.md): Server-Side Template Injection affecting the ecommerce plugin of Apache OFBiz (no CVSS, Apache Software Foundation Apache OFBiz)
- [CVE-2022-25371](https://cve.now/CVE-2022-25371.md): Unauth Path Traversal with file corruption affecting the Birt plugin of Apache OFBiz (no CVSS, Apache Software Foundation Apache OFBiz)
- [CVE-2022-25370](https://cve.now/CVE-2022-25370.md): Unauth Stored XSS vulnerability in the Birt plugin of Apache OFBiz (no CVSS, Apache Software Foundation Apache OFBiz)
- [CVE-2022-39194](https://cve.now/CVE-2022-39194.md): An issue was discovered in the MediaWiki through 1.38.2. (no CVSS)
- [CVE-2022-36637](https://cve.now/CVE-2022-36637.md): Garage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the brand\_name parameter a (no CVSS)
- [CVE-2022-36636](https://cve.now/CVE-2022-36636.md): Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php. (no CVSS)
- [CVE-2022-36609](https://cve.now/CVE-2022-36609.md): Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/update\_patient. (no CVSS)
- [CVE-2022-37679](https://cve.now/CVE-2022-37679.md): Miniblog.Core v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blog/edit. (no CVSS)
- [CVE-2022-36600](https://cve.now/CVE-2022-36600.md): BlogEngine v3.3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blogengine/api/posts. (no CVSS)
- [CVE-2022-36594](https://cve.now/CVE-2022-36594.md): Mapper v4.0.0 to v4.2.0 was discovered to contain a SQL injection vulnerability via the ids parameter at the selectByIds function. (no CVSS)
- [CVE-2022-36593](https://cve.now/CVE-2022-36593.md): kkFileView v4.0.0 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter at /controller/FileControlle (no CVSS)
- [CVE-2022-36759](https://cve.now/CVE-2022-36759.md): Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /dishes.php?res\_id=. (no CVSS)
- [CVE-2022-39170](https://cve.now/CVE-2022-39170.md): libdwarf 0.4.1 has a double free in \_dwarf\_exec\_frame\_instr in dwarf\_frame.c. (no CVSS)
- [CVE-2021-25657](https://cve.now/CVE-2021-25657.md): Avaya IP Office Privilege Escalation Vulnerability (CVSS 7.8, Avaya IP Office)
- [CVE-2020-22669](https://cve.now/CVE-2020-22669.md): Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. (no CVSS)
- [CVE-2022-31176](https://cve.now/CVE-2022-31176.md): Grafana Image Renderer leaking files (CVSS 8.3, grafana-image-renderer)
- [CVE-2022-39176](https://cve.now/CVE-2022-39176.md): BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate par (CVSS 8.8)
- [CVE-2022-39177](https://cve.now/CVE-2022-39177.md): BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be proce (CVSS 8.8)
- [CVE-2022-39188](https://cve.now/CVE-2022-39188.md): An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. (no CVSS)
- [CVE-2022-39189](https://cve.now/CVE-2022-39189.md): An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. (CVSS 7.8)
- [CVE-2022-39190](https://cve.now/CVE-2022-39190.md): An issue was discovered in net/netfilter/nf\_tables\_api.c in the Linux kernel before 5.19.6. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.