# CVEs published 2022-09-06

157 CVEs were published on September 6, 2022: 6 critical, 38 high. Days are UTC.

- [CVE-2022-36427](https://cve.now/CVE-2022-36427.md): WordPress About Rentals plugin \<= 1.5 - Missing Access Control vulnerability (CVSS 7.3, About Rentals. About Rentals)
- [CVE-2022-37344](https://cve.now/CVE-2022-37344.md): WordPress Accommodation System plugin \<= 1.0.1 - Missing Access Control vulnerability (CVSS 7.6, PHP Crafts Accommodation System)
- [CVE-2022-36387](https://cve.now/CVE-2022-36387.md): WordPress About Me plugin \<= 1.0.12 - Broken Access Control vulnerability (CVSS 7.6, Alessio Caiazza About Me)
- [CVE-2022-1368](https://cve.now/CVE-2022-1368.md): Cognex 3D-A1000 Dimensioning System Missing Authentication for Critical Function (CVSS 9.8, Cognex 3D-A1000 Dimensioning System)
- [CVE-2022-1522](https://cve.now/CVE-2022-1522.md): Cognex 3D-A1000 Dimensioning System Improper Output Neutralization for Logs (CVSS 5.3, Cognex 3D-A1000 Dimensioning System)
- [CVE-2022-1525](https://cve.now/CVE-2022-1525.md): Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security (CVSS 9.1, Cognex 3D-A1000 Dimensioning System)
- [CVE-2022-38529](https://cve.now/CVE-2022-38529.md): tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress. (no CVSS)
- [CVE-2022-38528](https://cve.now/CVE-2022-38528.md): Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter (no CVSS)
- [CVE-2022-36065](https://cve.now/CVE-2022-36065.md): GrowthBook account creation and file upload vulnerability in self-hosted configurations (CVSS 7.5, growthbook)
- [CVE-2022-35913](https://cve.now/CVE-2022-35913.md): Samourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin. (no CVSS)
- [CVE-2022-36064](https://cve.now/CVE-2022-36064.md): Shescape Inefficient Regular Expression Complexity vulnerability (CVSS 5.9, ericcornelissen shescape)
- [CVE-2022-36072](https://cve.now/CVE-2022-36072.md): SilverwareGames.io used == for hashing instead of === (CVSS 5.9, mesosoi silverwaregames-io-issue-tracker)
- [CVE-2022-36663](https://cve.now/CVE-2022-36663.md): Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request\_uri parameter. (no CVSS, org.gluu:oxauth-common)
- [CVE-2022-36061](https://cve.now/CVE-2022-36061.md): Elrond go can execute on same context checks in VM (CVSS 6.5, ElrondNetwork elrond-go · github.com/ElrondNetwork/elrond-go)
- [CVE-2022-38176](https://cve.now/CVE-2022-38176.md): An issue was discovered in YSoft SAFEQ 6 before 6.0.72. (no CVSS)
- [CVE-2022-26861](https://cve.now/CVE-2022-26861.md): Dell BIOS versions contain an Insecure Automated Optimization vulnerability. (CVSS 7.9, Dell CPG BIOS)
- [CVE-2022-26860](https://cve.now/CVE-2022-26860.md): Dell BIOS versions contain a stack-based buffer overflow vulnerability. (CVSS 7.5, Dell CPG BIOS)
- [CVE-2022-26859](https://cve.now/CVE-2022-26859.md): Dell BIOS contains a race condition vulnerability. (CVSS 6.1, Dell CPG BIOS)
- [CVE-2022-26858](https://cve.now/CVE-2022-26858.md): Dell BIOS versions contain an Improper Authentication vulnerability. (CVSS 6.1, Dell CPG BIOS)
- [CVE-2022-36058](https://cve.now/CVE-2022-36058.md): elrond-go MultiESDTNFTTransfer call on a SC address with missing function name (CVSS 7.5, ElrondNetwork elrond-go · github.com/ElrondNetwork/elrond-go)
- [CVE-2022-37253](https://cve.now/CVE-2022-37253.md): Persistent cross-site scripting (XSS) in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulati (no CVSS)
- [CVE-2022-36057](https://cve.now/CVE-2022-36057.md): Discourse-Chat Cross-Site Scripting issue for channel names and descriptions (CVSS 5.4, discourse-chat)
- [CVE-2022-37185](https://cve.now/CVE-2022-37185.md): SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the (no CVSS)
- [CVE-2022-36039](https://cve.now/CVE-2022-36039.md): Out-of-bounds write when parsing DEX files in Rizin (CVSS 7.8, rizinorg rizin)
- [CVE-2022-36038](https://cve.now/CVE-2022-36038.md): CircuitVerse potential RCE vulnerability via Oj.load (CVSS 8.8, CircuitVerse)
- [CVE-2022-31791](https://cve.now/CVE-2022-31791.md): WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execut (no CVSS)
- [CVE-2022-31792](https://cve.now/CVE-2022-31792.md): A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. (no CVSS)
- [CVE-2022-36032](https://cve.now/CVE-2022-36032.md): ReactPHP's HTTP server parses encoded cookie names so malicious \`\_\_Host-\` and \`\_\_Secure-\` cookies can be sent (CVSS 5.3, reactphp http · react/http)
- [CVE-2022-31789](https://cve.now/CVE-2022-31789.md): An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and pote (no CVSS)
- [CVE-2022-35931](https://cve.now/CVE-2022-35931.md): Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator (CVSS 2.7, nextcloud security-advisories)
- [CVE-2020-21516](https://cve.now/CVE-2020-21516.md): There is an arbitrary file upload vulnerability in FeehiCMS 2.0.8 at the head image upload, that allows attackers to execute relevant PHP co (no CVSS, feehi/cms)
- [CVE-2022-36670](https://cve.now/CVE-2022-36670.md): PCProtect Endpoint prior to v5.17.470 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator pri (no CVSS)
- [CVE-2022-37771](https://cve.now/CVE-2022-37771.md): IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to (no CVSS)
- [CVE-2022-31790](https://cve.now/CVE-2022-31790.md): WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sendi (no CVSS)
- [CVE-2022-31860](https://cve.now/CVE-2022-31860.md): An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule. (CVSS 9.8)
- [CVE-2022-32264](https://cve.now/CVE-2022-32264.md): sys/netinet/tcp\_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability due to improper handling of TSopt on TCP conn (CVSS 7.5)
- [CVE-2022-27664](https://cve.now/CVE-2022-27664.md): In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang duri (no CVSS, golang.org/x/net · golang.org/x/net/http2 +1)
- [CVE-2022-26468](https://cve.now/CVE-2022-26468.md): In preloader (usb), there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6735, MT6739, MT6761, MT6763, MT6765, MT6768, MT…)
- [CVE-2022-26469](https://cve.now/CVE-2022-26469.md): In MtkEmail, there is a possible escalation of privilege due to fragment injection. (no CVSS, MediaTek MT6580, MT6735, MT6737, MT6739, MT6761, MT6765, MT…)
- [CVE-2022-26470](https://cve.now/CVE-2022-26470.md): In aie, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, MediaTek MT6879, MT6895, MT6983, MT8321, MT8385, MT8765, MT…)
- [CVE-2022-26462](https://cve.now/CVE-2022-26462.md): In vow, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, MediaTek MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT…)
- [CVE-2022-26463](https://cve.now/CVE-2022-26463.md): In vow, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, MediaTek MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT…)
- [CVE-2022-26464](https://cve.now/CVE-2022-26464.md): In vow, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, MediaTek MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT…)
- [CVE-2022-26465](https://cve.now/CVE-2022-26465.md): In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, MediaTek MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, M…)
- [CVE-2022-26466](https://cve.now/CVE-2022-26466.md): In audio ipi, there is a possible out of bounds write due to an integer overflow. (no CVSS, MediaTek MT6779, MT6781, MT6785, MT6853, MT6853T, MT6873, M…)
- [CVE-2022-26467](https://cve.now/CVE-2022-26467.md): In rpmb, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…)
- [CVE-2022-26457](https://cve.now/CVE-2022-26457.md): In vow, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6769, MT6781, MT6785, MT6833, MT6855, MT6877, MT…)
- [CVE-2022-26458](https://cve.now/CVE-2022-26458.md): In vow, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6853, MT6855, MT6873, MT6877, MT6883, MT6885, MT…)
- [CVE-2022-26459](https://cve.now/CVE-2022-26459.md): In vow, there is a possible out of bounds read due to an integer overflow. (no CVSS, MediaTek MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT…)
- [CVE-2022-26460](https://cve.now/CVE-2022-26460.md): In vow, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, MediaTek MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT…)
- [CVE-2022-26461](https://cve.now/CVE-2022-26461.md): In vow, there is a possible undefined behavior due to an API misuse. (CVSS 6.7, MediaTek MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT…)
- [CVE-2022-26451](https://cve.now/CVE-2022-26451.md): In ged, there is a possible use after free due to improper locking. (no CVSS, MediaTek MT6789, MT6855, MT6879, MT6895, MT6983, MT8168, MT…)
- [CVE-2022-26453](https://cve.now/CVE-2022-26453.md): In teei, there is a possible memory corruption due to a use after free. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT…)
- [CVE-2022-26454](https://cve.now/CVE-2022-26454.md): In teei, there is a possible memory corruption due to an integer overflow. (no CVSS, MediaTek MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT…)
- [CVE-2022-26455](https://cve.now/CVE-2022-26455.md): In gz, there is a possible memory corruption due to incorrect error handling. (no CVSS, MediaTek MT6789, MT6855, MT6879, MT6895, MT6983)
- [CVE-2022-26456](https://cve.now/CVE-2022-26456.md): In vow, there is a possible information disclosure due to a symbolic link following. (no CVSS, MediaTek MT6769, MT6781, MT6785, MT6789, MT6833, MT6853, MT…)
- [CVE-2022-26447](https://cve.now/CVE-2022-26447.md): In BT firmware, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, M…)
- [CVE-2022-26448](https://cve.now/CVE-2022-26448.md): In apusys, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, M…)
- [CVE-2022-26449](https://cve.now/CVE-2022-26449.md): In apusys, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6879, MT6895, MT6983)
- [CVE-2022-26450](https://cve.now/CVE-2022-26450.md): In apusys, there is a possible use after free due to a race condition. (no CVSS, MediaTek MT6879, MT6895, MT6983)
- [CVE-2022-28884](https://cve.now/CVE-2022-28884.md): Denial-of-Service (DoS) Vulnerability (CVSS 4.3, All F-Secure and WithSecure Endpoint Protection products fo…)
- [CVE-2022-2943](https://cve.now/CVE-2022-2943.md): WordPress Infinite Scroll – Ajax Load More \<= 5.5.3 - Authenticated (Admin+) Arbitrary File Read (CVSS 4.9, dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy…)
- [CVE-2022-3026](https://cve.now/CVE-2022-3026.md): WP Users Exporter \<= 1.4.2 - CSV Injection (CVSS 6.5, leogermani WP Users Exporter)
- [CVE-2022-2935](https://cve.now/CVE-2022-2935.md): Image Hover Effects Ultimate \<= 9.7.3 - Authenticated Stored Cross-Site Scripting via Media URL (CVSS 6.4, biplob018 Image Hover Effects Ultimate)
- [CVE-2022-2939](https://cve.now/CVE-2022-2939.md): WP Cerber Security \<= 9.0 - User Enumeration Bypass (CVSS 5.3, gioni WP Cerber Security, Anti-spam & Malware Scan)
- [CVE-2022-2945](https://cve.now/CVE-2022-2945.md): WordPress Infinite Scroll – Ajax Load More \<= 5.5.3 - Directory Traversal (CVSS 4.9, dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy…)
- [CVE-2022-2716](https://cve.now/CVE-2022-2716.md): Beaver Builder – WordPress Page Builder \<= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Text Editor (CVSS 6.4, justinbusa Beaver Builder – WordPress Page Builder)
- [CVE-2022-2718](https://cve.now/CVE-2022-2718.md): JoomSport – for Sports: Team & League, Football, Hockey & more \<= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby (CVSS 7.2, beardev JoomSport – for Sports: Team & League, Football, Ho…)
- [CVE-2022-2934](https://cve.now/CVE-2022-2934.md): Beaver Builder – WordPress Page Builder \<= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Image URL (CVSS 6.4, justinbusa Beaver Builder – WordPress Page Builder)
- [CVE-2022-2936](https://cve.now/CVE-2022-2936.md): Image Hover Effects Ultimate \<= 9.7.3 - Authenticated Stored Cross-Site Scripting via Video Link (CVSS 6.4, biplob018 Image Hover Effects Ultimate)
- [CVE-2022-2941](https://cve.now/CVE-2022-2941.md): WP-UserOnline \<= 2.88.0 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 5.5, gamerz WP-UserOnline)
- [CVE-2022-2540](https://cve.now/CVE-2022-2540.md): Link Optimizer Lite \<= 1.4.5 - Cross-Site Request Forgery to Cross-Site Scripting (CVSS 8.8, adambard Link Optimizer Lite)
- [CVE-2022-2541](https://cve.now/CVE-2022-2541.md): uContext for Amazon \<= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting (CVSS 8.8, gcornelisse uContext for Amazon)
- [CVE-2022-2542](https://cve.now/CVE-2022-2542.md): uContext for Clickbank \<= 3.9.1 - Cross-Site Request Forgery to Cross-Site Scripting (CVSS 8.8, gcornelisse uContext for Clickbank)
- [CVE-2022-2633](https://cve.now/CVE-2022-2633.md): The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'd (CVSS 7.5, plugins360 All-in-One Video Gallery)
- [CVE-2022-2695](https://cve.now/CVE-2022-2695.md): Beaver Builder – WordPress Page Builder \<= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via 'caption' (CVSS 6.4, justinbusa Beaver Builder – WordPress Page Builder)
- [CVE-2022-2717](https://cve.now/CVE-2022-2717.md): JoomSport – for Sports: Team & League, Football, Hockey & more \<= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby (CVSS 7.2, beardev JoomSport – for Sports: Team & League, Football, Ho…)
- [CVE-2022-2461](https://cve.now/CVE-2022-2461.md): Transposh WordPress Translation \<= 1.0.9.6 - Unauthorized Settings Change (CVSS 5.3, oferwald Transposh WordPress Translation)
- [CVE-2022-2473](https://cve.now/CVE-2022-2473.md): WP-UserOnline \<= 2.87.6 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 5.5, gamerz WP-UserOnline)
- [CVE-2022-2515](https://cve.now/CVE-2022-2515.md): Simple Banner \<= 2.11.0 - Authenticated Stored Cross-Site Scripting (CVSS 6.4, rpetersen29 Simple Banner – Easily add multiple Banners/Bar…)
- [CVE-2022-2516](https://cve.now/CVE-2022-2516.md): Visual Composer Website Builder \<= 45.0 - Authenticated Stored Cross-Site Scripting via 'Title' (CVSS 6.4, visualcomposer Visual Composer Website Builder, Landing Pag…)
- [CVE-2022-2517](https://cve.now/CVE-2022-2517.md): Beaver Builder – WordPress Page Builder \<= 2.5.5.2 - Authenticated Stored Cross-Site Scripting via Caption - On Hover (CVSS 6.4, justinbusa Beaver Builder – WordPress Page Builder)
- [CVE-2022-2518](https://cve.now/CVE-2022-2518.md): Stockists Manager for Woocommerce \<= 1.0.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 8.8, dholovnia Stockists Manager for Woocommerce)
- [CVE-2022-2434](https://cve.now/CVE-2022-2434.md): String Locator \<= 2.5.0 - Cross-Site Request Forgery to PHAR Deserialization (CVSS 8.8, instawp String locator)
- [CVE-2022-2436](https://cve.now/CVE-2022-2436.md): Download Manager \<= 3.2.49 - Authenticated (Contributor+) PHAR Deserialization (CVSS 8.8, codename065 Download Manager)
- [CVE-2022-2438](https://cve.now/CVE-2022-2438.md): Broken Link Checker \<= 1.11.16 - Authenticated (Admin+) PHAR Deserialization (CVSS 7.2, wpmudev Broken Link Checker)
- [CVE-2022-2442](https://cve.now/CVE-2022-2442.md): Migration, Backup, Staging – WPvivid \<= 0.9.74 - Authenticated (Admin+) PHAR Deserialization (CVSS 7.2, wpvividplugins WPvivid — Backup, Migration & Staging)
- [CVE-2022-2462](https://cve.now/CVE-2022-2462.md): Transposh WordPress Translation \<= 1.0.9.6 - Sensitive Information Disclosure (CVSS 5.3, oferwald Transposh WordPress Translation)
- [CVE-2022-2429](https://cve.now/CVE-2022-2429.md): Ultimate SMS Notifications for WooCommerce \<= 1.4.1 - CSV Injection (CVSS 6.5, homescript Ultimate SMS Notifications for WooCommerce)
- [CVE-2022-2430](https://cve.now/CVE-2022-2430.md): Visual Composer Website Builder \<= 45.0 - Authenticated Stored Cross-Site Scripting via 'Text Block' (CVSS 6.4, visualcomposer Visual Composer Website Builder, Landing Pag…)
- [CVE-2022-2431](https://cve.now/CVE-2022-2431.md): Download Manager \<= 3.2.50 - Authenticated (Contributor+) Arbitrary File Deletion (CVSS 8.1, download-manager Download Manager)
- [CVE-2022-2432](https://cve.now/CVE-2022-2432.md): Ecwid Ecommerce Shopping Cart \<= 6.10.23 - Cross-Site Request Forgery to Settings/Options Update (CVSS 8.8, Ecwid Ecommerce Shopping Cart)
- [CVE-2022-2433](https://cve.now/CVE-2022-2433.md): WordPress Infinite Scroll – Ajax Load More \<= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization (CVSS 7.5, dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy…)
- [CVE-2022-1628](https://cve.now/CVE-2022-1628.md): Simple SEO \<= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, coleds Simple SEO)
- [CVE-2022-2233](https://cve.now/CVE-2022-2233.md): Banner Cycler \<= 1.4 - Cross-Site Request Forgery to Cross-Site Scripting (CVSS 8.8, jkriddle Banner Cycler)
- [CVE-2022-23688](https://cve.now/CVE-2022-23688.md): Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. (no CVSS, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-23689](https://cve.now/CVE-2022-23689.md): Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. (CVSS 4.3, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-23690](https://cve.now/CVE-2022-23690.md): A vulnerability in the web-based management interface of AOS-CX could allow a remote unauthenticated attacker to fingerprint the exact versi (no CVSS, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-23691](https://cve.now/CVE-2022-23691.md): A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal au (no CVSS, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-34656](https://cve.now/CVE-2022-34656.md): WordPress Poll, Survey, Questionnaire and Voting system plugin \<= 1.7.4 - Authenticated Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, wpdevart Poll, Survey, Questionnaire and Voting system)
- [CVE-2022-36425](https://cve.now/CVE-2022-36425.md): WordPress Beaver Builder plugin \<= 2.5.4.3 - Broken Access Control vulnerability (CVSS 5.4, The Beaver Builder Team Beaver Builder – WordPress Page Bui…)
- [CVE-2022-33177](https://cve.now/CVE-2022-33177.md): WordPress Booking Calendar plugin \<= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity (CVSS 5.4, WPdevelop/Oplugins Booking Calendar)
- [CVE-2022-23686](https://cve.now/CVE-2022-23686.md): Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. (no CVSS, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-23687](https://cve.now/CVE-2022-23687.md): Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. (no CVSS, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-23680](https://cve.now/CVE-2022-23680.md): AOS-CX lacks Anti-CSRF protections in place for state-changing operations. (no CVSS, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-23681](https://cve.now/CVE-2022-23681.md): Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. (no CVSS, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-23682](https://cve.now/CVE-2022-23682.md): Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. (no CVSS, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-23683](https://cve.now/CVE-2022-23683.md): Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. (no CVSS, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-23684](https://cve.now/CVE-2022-23684.md): A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalat (no CVSS, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-23451](https://cve.now/CVE-2022-23451.md): An authorization flaw was found in openstack-barbican. (no CVSS, openstack/barbican · barbican)
- [CVE-2022-23678](https://cve.now/CVE-2022-23678.md): A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communications that could al (no CVSS, Aruba Virtual Intranet Access)
- [CVE-2022-23679](https://cve.now/CVE-2022-23679.md): AOS-CX lacks Anti-CSRF protections in place for state-changing operations. (no CVSS, Aruba CX 6200F Switch Series; Aruba 6300 Switch Series; Aru…)
- [CVE-2022-25308](https://cve.now/CVE-2022-25308.md): A stack-based buffer overflow flaw was found in the Fribidi package. (no CVSS, fribidi)
- [CVE-2022-25309](https://cve.now/CVE-2022-25309.md): A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi\_cap\_rtl\_to\_unicode() function of the fribidi-char (no CVSS, fribidi)
- [CVE-2022-25310](https://cve.now/CVE-2022-25310.md): A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi\_remove\_bidi\_marks() function of the lib/fribidi.c (no CVSS, fribidi)
- [CVE-2022-34867](https://cve.now/CVE-2022-34867.md): WordPress WP Libre Form 2 plugin \<= 2.0.8 - Unauthenticated Sensitive Information Disclosure vulnerability (CVSS 7.3, Libreform WP Libre Form · libreform/libreform)
- [CVE-2021-36829](https://cve.now/CVE-2021-36829.md): WordPress Launcher: Coming Soon & Maintenance Mode plugin \<= 1.0.11 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, MyThemeShop Launcher: Coming Soon & Maintenance Mode)
- [CVE-2022-2402](https://cve.now/CVE-2022-2402.md): Stack Overflow in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows (CVSS 6.5, ESET, spol. s r.o. ESET Endpoint Encryption · ESET, spol. s…)
- [CVE-2022-2735](https://cve.now/CVE-2022-2735.md): A vulnerability was found in the PCS project. (no CVSS, ClusterLabs/pcs)
- [CVE-2022-28885](https://cve.now/CVE-2022-28885.md): Denial-of-Service (DoS) Vulnerability (CVSS 4.3, WithSecure F-Secure Linux Security 64 F-Secure Atlant)
- [CVE-2022-1697](https://cve.now/CVE-2022-1697.md): Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. (no CVSS, Okta Active Directory Agent)
- [CVE-2021-43565](https://cve.now/CVE-2021-43565.md): The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server. (no CVSS, golang.org/x/crypto)
- [CVE-2022-40112](https://cve.now/CVE-2022-40112.md): TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable Buffer Overflow via the hostname parameter in binary /bin/boa. (no CVSS)
- [CVE-2022-40111](https://cve.now/CVE-2022-40111.md): In TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is hardcoded in the firmware. (no CVSS)
- [CVE-2022-40110](https://cve.now/CVE-2022-40110.md): TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa. (no CVSS)
- [CVE-2022-36584](https://cve.now/CVE-2022-36584.md): In Tenda G3 US\_G3V3.0br\_V15.11.0.6(7663)\_EN\_TDE, the getsinglepppuser function has a buffer overflow caused by sscanf. (no CVSS)
- [CVE-2022-40109](https://cve.now/CVE-2022-40109.md): TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Insecure Permissions via binary /bin/boa. (no CVSS)
- [CVE-2022-37842](https://cve.now/CVE-2022-37842.md): In TOTOLINK A860R V4.1.2cu.5182\_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability. (no CVSS)
- [CVE-2022-37840](https://cve.now/CVE-2022-37840.md): In TOTOLINK A860R V4.1.2cu.5182\_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability. (no CVSS)
- [CVE-2022-37841](https://cve.now/CVE-2022-37841.md): In TOTOLINK A860R V4.1.2cu.5182\_B20201027 there is a hard coded password for root in /etc/shadow.sample. (no CVSS)
- [CVE-2022-37839](https://cve.now/CVE-2022-37839.md): TOTOLINK A860R V4.1.2cu.5182\_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi. (no CVSS)
- [CVE-2022-37843](https://cve.now/CVE-2022-37843.md): In TOTOLINK A860R V4.1.2cu.5182\_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the system for execution without fil (no CVSS)
- [CVE-2022-31020](https://cve.now/CVE-2022-31020.md): Remote code execution in Indy's NODE\_UPGRADE transaction (CVSS 8.8, hyperledger indy-node · indy-node)
- [CVE-2022-35847](https://cve.now/CVE-2022-35847.md): An improper neutralization of special elements used in a template engine vulnerability \[CWE-1336\] in FortiSOAR management interface 7.2.0, 7 (CVSS 6.3, Fortinet FortiSOAR)
- [CVE-2021-43080](https://cve.now/CVE-2021-43080.md): An improper neutralization of input during web page generation vulnerability \[CWE-79\] in FortiOS version 7.2.0, version 6.4.0 through 6.4.9, (CVSS 4.6, Fortinet FortiOS)
- [CVE-2021-43076](https://cve.now/CVE-2021-43076.md): An improper privilege management vulnerability \[CWE-269\] in FortiADC versions 6.2.1 and below, 6.1.5 and below, 6.0.4 and below, 5.4.5 and b (CVSS 6.3, Fortinet FortiADC)
- [CVE-2022-26114](https://cve.now/CVE-2022-26114.md): An improper neutralization of input during web page generation vulnerability \[CWE-79\] in the Webmail of FortiMail before 7.2.0 may allow an (CVSS 5.4, Fortinet FortiMail)
- [CVE-2022-30298](https://cve.now/CVE-2022-30298.md): An improper privilege management vulnerability \[CWE-269\] in Fortinet FortiSOAR before 7.2.1 allows a GUI user who has already found a way to (CVSS 7.0, Fortinet FortiSOAR)
- [CVE-2022-29062](https://cve.now/CVE-2022-29062.md): Multiple relative path traversal vulnerabilities \[CWE-23\] in Fortinet FortiSOAR before 7.2.1 allows an authenticated attacker to write to th (CVSS 6.3, Fortinet FortiSOAR)
- [CVE-2022-29053](https://cve.now/CVE-2022-29053.md): A missing cryptographic steps vulnerability \[CWE-325\] in the functions that encrypt the keytab files in FortiOS version 7.2.0, 7.0.0 through (CVSS 2.3, Fortinet FortiOS)
- [CVE-2022-29058](https://cve.now/CVE-2022-29058.md): An improper neutralization of special elements \[CWE-89\] used in an OS command vulnerability \[CWE-78\] in the command line interpreter of Fort (CVSS 7.8, Fortinet FortiAP, FortiAP-S, FortiAP-W2, FortiAP-U)
- [CVE-2022-27491](https://cve.now/CVE-2022-27491.md): A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through (CVSS 6.8, Fortinet FortiOS)
- [CVE-2022-2714](https://cve.now/CVE-2022-2714.md): Improper Handling of Length Parameter Inconsistency in francoisjacquet/rosariosis (CVSS 8.1, francoisjacquet/rosariosis)
- [CVE-2022-2901](https://cve.now/CVE-2022-2901.md): Improper Authorization in chatwoot/chatwoot (CVSS 7.6, chatwoot/chatwoot)
- [CVE-2022-34883](https://cve.now/CVE-2022-34883.md): OS Command Injection Vulnerability in RAID Manager Storage Replication Adapter (CVSS 7.2, Hitachi RAID Manager Storage Replication Adapter)
- [CVE-2022-34882](https://cve.now/CVE-2022-34882.md): Information Exposure Vulnerability in RAID Manager Storage Replication Adapter (CVSS 9.0, Hitachi RAID Manager Storage Replication Adapter)
- [CVE-2022-34747](https://cve.now/CVE-2022-34747.md): A format string vulnerability in Zyxel NAS326 firmware versions prior to V5.21(AAZF.12)C0 could allow an attacker to achieve unauthorized re (CVSS 9.8, Zyxel NAS326 firmware)
- [CVE-2022-3134](https://cve.now/CVE-2022-3134.md): Use After Free in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2022-32277](https://cve.now/CVE-2022-32277.md): Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submit (no CVSS)
- [CVE-2022-36040](https://cve.now/CVE-2022-36040.md): Rizin Out-of-bounds Write vulnerability in pyc/marshal.c (CVSS 7.8, rizinorg rizin)
- [CVE-2022-36041](https://cve.now/CVE-2022-36041.md): Rizin Out-of-bounds Write vulnerability in Mach-O binary plugin (CVSS 7.8, rizinorg rizin)
- [CVE-2022-36042](https://cve.now/CVE-2022-36042.md): Rizin Out-of-bounds Write vulnerability in dyld cache binary plugin (CVSS 7.8, rizinorg rizin)
- [CVE-2022-36043](https://cve.now/CVE-2022-36043.md): Rizin Double Free in bobj.c when using qnx binary plugin (CVSS 7.8, rizinorg rizin)
- [CVE-2022-36044](https://cve.now/CVE-2022-36044.md): Rizin Out-of-bounds Write vulnerability in Lua binary plugin (CVSS 7.8, rizinorg rizin)
- [CVE-2022-36067](https://cve.now/CVE-2022-36067.md): vm2 vulnerable to Sandbox Escape before v3.9.11 (CVSS 10.0, patriksimek vm2 · vm2)
- [CVE-2022-38131](https://cve.now/CVE-2022-38131.md): RStudio Connect prior to 2023.01.0 is affected by an Open Redirect issue. (no CVSS, RStudio Connect)
- [CVE-2022-38530](https://cve.now/CVE-2022-38530.md): GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOM\_IOD. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.