# CVEs published 2022-09-07

61 CVEs were published on September 7, 2022: 6 critical, 17 high. Days are UTC.

- [CVE-2021-34236](https://cve.now/CVE-2021-34236.md): Buffer Overflow in Netgear R8000 Router with firmware v1.0.4.56 allows remote attackers to execute arbitrary code or cause a denial-of-servi (no CVSS)
- [CVE-2022-36586](https://cve.now/CVE-2022-36586.md): In Tenda G3 US\_G3V3.0br\_V15.11.0.6(7663)\_EN\_TDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd (no CVSS)
- [CVE-2022-36588](https://cve.now/CVE-2022-36588.md): In D-Link DAP1650 v1.04 firmware, the fileaccess.cgi program in the firmware has a buffer overflow vulnerability caused by strncpy. (no CVSS)
- [CVE-2022-37779](https://cve.now/CVE-2022-37779.md): Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnera (no CVSS)
- [CVE-2022-38531](https://cve.now/CVE-2022-38531.md): FPT G-97RG6M R4.2.98.035 and G-97RG3 R4.2.43.078 are vulnerable to Remote Command Execution in the ping function. (no CVSS)
- [CVE-2022-37777](https://cve.now/CVE-2022-37777.md): Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote command execution (R (no CVSS)
- [CVE-2022-37778](https://cve.now/CVE-2022-37778.md): Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnera (no CVSS)
- [CVE-2022-36089](https://cve.now/CVE-2022-36089.md): VelaUX APIServer vulnerable to Authentication Bypass by Capture-replay (CVSS 8.2, kubevela)
- [CVE-2022-36585](https://cve.now/CVE-2022-36585.md): In Tenda G3 US\_G3V3.0br\_V15.11.0.6(7663)\_EN\_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf. (no CVSS)
- [CVE-2022-36088](https://cve.now/CVE-2022-36088.md): GoCD Windows installations outside default location inadequately restrict installation file permissions (CVSS 5.0, gocd)
- [CVE-2022-36086](https://cve.now/CVE-2022-36086.md): linked\_list\_allocator vulnerable to out-of-bound writes on \`Heap\` initialization and \`Heap::extend\` (CVSS 8.4, rust-osdev linked-list-allocator · linked\_list\_allocator)
- [CVE-2022-36083](https://cve.now/CVE-2022-36083.md): JOSE vulnerable to resource exhaustion via specifically crafted JWE (CVSS 5.3, panva jose · jose +3)
- [CVE-2022-36082](https://cve.now/CVE-2022-36082.md): mangadex-downloader vulnerable to unauthorized file reading (CVSS 5.3, mansuf mangadex-downloader · mangadex-downloader)
- [CVE-2020-19914](https://cve.now/CVE-2020-19914.md): Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload funct (no CVSS)
- [CVE-2022-38247](https://cve.now/CVE-2022-38247.md): Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Settings page under the Admin panel. (no CVSS)
- [CVE-2022-38248](https://cve.now/CVE-2022-38248.md): Nagios XI before v5.8.7 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities at auditlog.php. (no CVSS)
- [CVE-2022-38249](https://cve.now/CVE-2022-38249.md): Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the MTR component in version 1.0.4. (no CVSS)
- [CVE-2022-38250](https://cve.now/CVE-2022-38250.md): Nagios XI v5.8.6 was discovered to contain a SQL injection vulnerability via the mib\_name parameter at the Manage MIBs page. (no CVSS)
- [CVE-2022-38251](https://cve.now/CVE-2022-38251.md): Nagios XI v5.8.6 was discovered to contain a cross-site scripting (XSS) vulnerability via the System Performance Settings page under the Adm (no CVSS)
- [CVE-2022-38254](https://cve.now/CVE-2022-38254.md): Nagios XI before v5.8.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the ajax.php script in CCM 3.1.5. (no CVSS)
- [CVE-2022-36080](https://cve.now/CVE-2022-36080.md): Wikmd Cross-site Scripting vulnerability (CVSS 6.1, Linbreux wikmd)
- [CVE-2022-36081](https://cve.now/CVE-2022-36081.md): Wikmd vulnerable to Local File Enumeration when accessing /list (CVSS 7.5, Linbreux wikmd)
- [CVE-2022-36079](https://cve.now/CVE-2022-36079.md): Parse Server vulnerable to brute force guessing of user sensitive data via search patterns (CVSS 8.6, parse-community parse-server · parse-server)
- [CVE-2022-36049](https://cve.now/CVE-2022-36049.md): Flux2 Helm Controller denial of service (CVSS 7.7, fluxcd flux2 · github.com/fluxcd/helm-controller +1)
- [CVE-2022-3130](https://cve.now/CVE-2022-3130.md): codeprojects Online Driving School login.php sql injection (CVSS 7.3, codeprojects Online Driving School)
- [CVE-2022-3129](https://cve.now/CVE-2022-3129.md): codeprojects Online Driving School registration.php unrestricted upload (CVSS 6.3, codeprojects Online Driving School)
- [CVE-2022-36073](https://cve.now/CVE-2022-36073.md): RubyGems allows creation of users with arbitrary unverified emails (CVSS 8.3, rubygems.org)
- [CVE-2022-38313](https://cve.now/CVE-2022-38313.md): Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/saveParentContr (no CVSS)
- [CVE-2022-38312](https://cve.now/CVE-2022-38312.md): Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind. (no CVSS)
- [CVE-2022-38311](https://cve.now/CVE-2022-38311.md): Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet. (no CVSS)
- [CVE-2022-38310](https://cve.now/CVE-2022-38310.md): Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteC (no CVSS)
- [CVE-2022-38309](https://cve.now/CVE-2022-38309.md): Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServe (no CVSS)
- [CVE-2022-38314](https://cve.now/CVE-2022-38314.md): Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentContr (no CVSS)
- [CVE-2022-36069](https://cve.now/CVE-2022-36069.md): Poetry Argument Injection vulnerability can lead to local Code Execution (CVSS 7.3, python-poetry poetry · poetry)
- [CVE-2022-36070](https://cve.now/CVE-2022-36070.md): Poetry's Untrusted Search Path can lead to Local Code Execution on Windows (CVSS 7.3, python-poetry poetry · poetry)
- [CVE-2022-30078](https://cve.now/CVE-2022-30078.md): NETGEAR R6200\_V2 firmware versions through R6200v2-V1.0.3.12\_10.1.11 and R6300\_V2 firmware versions through R6300v2-V1.0.4.52\_10.0.93 allow (no CVSS)
- [CVE-2022-1807](https://cve.now/CVE-2022-1807.md): Multiple SQLi vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin in Sophos Firewall older than version 18. (CVSS 7.2, Sophos Firewall)
- [CVE-2022-30312](https://cve.now/CVE-2022-30312.md): The Trend Controls IC protocol through 2022-05-06 allows Cleartext Transmission of Sensitive Information. (CVSS 6.5)
- [CVE-2022-31414](https://cve.now/CVE-2022-31414.md): D-Link DIR-1960 firmware DIR-1960\_A1\_1.11 was discovered to contain a buffer overflow via srtcat in prog.cgi. (CVSS 7.5)
- [CVE-2022-36587](https://cve.now/CVE-2022-36587.md): In Tenda G3 US\_G3V3.0br\_V15.11.0.6(7663)\_EN\_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary. (CVSS 9.8)
- [CVE-2022-36661](https://cve.now/CVE-2022-36661.md): xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi\_pci\_read(). (CVSS 6.5)
- [CVE-2022-36660](https://cve.now/CVE-2022-36660.md): xhyve commit dfbe09b was discovered to contain a stack buffer overflow via the component pci\_vtrnd\_notify(). (CVSS 9.8)
- [CVE-2022-36659](https://cve.now/CVE-2022-36659.md): xhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi\_pci\_write(). (CVSS 6.5)
- [CVE-2022-37780](https://cve.now/CVE-2022-37780.md): Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution (RCE) vulnera (CVSS 7.2)
- [CVE-2022-36539](https://cve.now/CVE-2022-36539.md): WeDayCare B.V Ouderapp before v1.1.22 allows attackers to alter the ID value within intercepted calls to gain access to data of other parent (no CVSS)
- [CVE-2022-37731](https://cve.now/CVE-2022-37731.md): ftcms 2.1 poster.PHP has a XSS vulnerability. (no CVSS)
- [CVE-2022-37730](https://cve.now/CVE-2022-37730.md): In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) vulnerability in the PHP page, which causes the attacker to forge a link to trick (no CVSS)
- [CVE-2022-3152](https://cve.now/CVE-2022-3152.md): Unverified Password Change in phpfusion/phpfusion (CVSS 9.6, phpfusion/phpfusion)
- [CVE-2022-31166](https://cve.now/CVE-2022-31166.md): XWiki.WebHome vulnerable to Improper Privilege Management in XWiki resolving groups (CVSS 8.1, xwiki-platform · org.xwiki.platform:xwiki-platform-oldcore)
- [CVE-2022-31167](https://cve.now/CVE-2022-31167.md): XWiki Platform Security Parent POM vulnerable to overwriting of security rules of a page with a final page having the same reference (CVSS 7.1, xwiki-platform · org.xwiki.platform:xwiki-platform-security)
- [CVE-2022-35513](https://cve.now/CVE-2022-35513.md): The Blink1Control2 application \<= 2.2.7 uses weak password encryption and an insecure method of storage. (no CVSS, Blink1Control2)
- [CVE-2022-31149](https://cve.now/CVE-2022-31149.md): ActivityWatch vulnerable to DNS rebinding attack (CVSS 8.8, activitywatch)
- [CVE-2022-36271](https://cve.now/CVE-2022-36271.md): Outbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. (CVSS 7.8)
- [CVE-2022-37108](https://cve.now/CVE-2022-37108.md): An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingester (CVSS 8.7)
- [CVE-2022-37189](https://cve.now/CVE-2022-37189.md): DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service. (no CVSS, mei2volpiano)
- [CVE-2022-31251](https://cve.now/CVE-2022-31251.md): slurm: %post for slurm-testsuite operates as root in user owned directory (CVSS 6.5, openSUSE Factory)
- [CVE-2022-21950](https://cve.now/CVE-2022-21950.md): canna: unsafe handling of /tmp/.iroha\_unix directory (CVSS 5.3, openSUSE Backports SLE-15-SP3 · openSUSE Backports SLE-15-S…)
- [CVE-2022-31247](https://cve.now/CVE-2022-31247.md): Rancher: Downstream cluster privilege escalation through cluster and project role template binding (CRTB/PRTB) (CVSS 9.1, SUSE Rancher · github.com/rancher/rancher)
- [CVE-2021-36783](https://cve.now/CVE-2021-36783.md): Rancher: Failure to properly sanitize credentials in cluster template answers (CVSS 9.9, SUSE Rancher · github.com/rancher/rancher)
- [CVE-2021-36782](https://cve.now/CVE-2021-36782.md): Rancher: Plaintext storage and exposure of credentials in Rancher API and cluster.management.cattle.io object (CVSS 9.9, SUSE Rancher · github.com/rancher/rancher)
- [CVE-2022-40023](https://cve.now/CVE-2022-40023.md): Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. (no CVSS, mako)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.