# CVEs published 2022-09-14

49 CVEs were published on September 14, 2022: 3 critical, 5 high. Days are UTC.

- [CVE-2020-36603](https://cve.now/CVE-2020-36603.md): The HoYoVerse (formerly miHoYo) Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function cal (CVSS 6.5)
- [CVE-2022-38308](https://cve.now/CVE-2022-38308.md): TOTOLink A700RU V7.4cu.2313\_B20191024 was discovered to contain a command injection vulnerability via the lang parameter in the function cst (no CVSS)
- [CVE-2022-37724](https://cve.now/CVE-2022-37724.md): Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all (no CVSS, wonder:wonder)
- [CVE-2022-38301](https://cve.now/CVE-2022-38301.md): Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a cra (no CVSS)
- [CVE-2022-3216](https://cve.now/CVE-2022-3216.md): Nintendo Game Boy Color Mobile Adapter GB Tetsuji memory corruption (CVSS 5.0, Nintendo Game Boy Color)
- [CVE-2022-40365](https://cve.now/CVE-2022-40365.md): Cross site scripting (XSS) vulnerability in ouqiang gocron through 1.5.3, allows attackers to execute arbitrary code via scope.row.hostname (no CVSS, github.com/ouqiang/gocron)
- [CVE-2022-40438](https://cve.now/CVE-2022-40438.md): Buffer overflow vulnerability in function AP4\_MemoryByteStream::WritePartial in mp42aac in Bento4 v1.6.0-639, allows attackers to cause a de (no CVSS)
- [CVE-2022-40439](https://cve.now/CVE-2022-40439.md): An memory leak issue was discovered in AP4\_StdcFileByteStream::Create in mp42ts in Bento4 v1.6.0-639, allows attackers to cause a denial of (no CVSS)
- [CVE-2022-40476](https://cve.now/CVE-2022-40476.md): A null pointer dereference issue was discovered in fs/io\_uring.c in the Linux kernel before 5.15.62. (no CVSS)
- [CVE-2022-36056](https://cve.now/CVE-2022-36056.md): Vulnerabilities with blob verification in sigstore cosign (CVSS 5.5, sigstore cosign · github.com/sigstore/cosign)
- [CVE-2022-31187](https://cve.now/CVE-2022-31187.md): Stored Cross Site Scripting (XSS) through global search in GLPI (CVSS 6.8, glpi-project glpi)
- [CVE-2022-35946](https://cve.now/CVE-2022-35946.md): SQL injection through plugin controller in GLPI (CVSS 5.5, glpi-project glpi)
- [CVE-2022-35947](https://cve.now/CVE-2022-35947.md): SQL injection in GLPI (CVSS 10.0, glpi-project glpi)
- [CVE-2022-36112](https://cve.now/CVE-2022-36112.md): Blind Server-Side Request Forgery (SSRF) in GLPI (CVSS 3.5, glpi-project glpi)
- [CVE-2022-35945](https://cve.now/CVE-2022-35945.md): Cross site scripting (XSS) via registration API in GLPI (CVSS 6.3, glpi-project glpi)
- [CVE-2022-31143](https://cve.now/CVE-2022-31143.md): Leak of sensitive information through login page error in GLPI (CVSS 5.3, glpi-project glpi)
- [CVE-2022-29492](https://cve.now/CVE-2022-29492.md): A vulnerability exists in the handling of a malformed IEC 104 TCP packet. Upon receiving a malformed IEC 104 TCP packet, the malformed packet is dropped, however the TCP connection is left open. This may cause a denial-of-service if the affected conne ... (CVSS 5.3, Hitachi Energy MicroSCADA X SYS600 · Hitachi Energy MicroSC…)
- [CVE-2022-1778](https://cve.now/CVE-2022-1778.md): A vulnerability exists during the start of the affected SYS600, where an input validation flaw causes a buffer-overflow while reading a specific configuration file. Subsequently SYS600 will fail to start. The configuration file can only be accessed by ... (CVSS 7.5, Hitachi Energy MicroSCADA X SYS600)
- [CVE-2022-29922](https://cve.now/CVE-2022-29922.md): A vulnerability exists in the handling of a specially crafted IEC 61850 packet with a valid data item but with incorrect data type in the IEC 61850 OPC Server. The vulnerability may cause a denial-of-service on the IEC 61850 OPC Server part of the SYS ... (CVSS 7.5, Hitachi Energy MicroSCADA X SYS600 · Hitachi Energy MicroSC…)
- [CVE-2022-2277](https://cve.now/CVE-2022-2277.md): A vulnerability exists in the ICCP stack of the affected SYS600 versions due to validation flaw in the process that establishes the ICCP communication. The validation flaw will cause a denial-of-service when ICCP of SYS600 is request to forward any da ... (CVSS 7.5, Hitachi Energy MicroSCADA X SYS600)
- [CVE-2022-0029](https://cve.now/CVE-2022-0029.md): Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File (CVSS 5.5, Palo Alto Networks Cortex XDR Agent)
- [CVE-2021-38924](https://cve.now/CVE-2021-38924.md): IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical erro (CVSS 5.3, IBM Maximo Asset Management)
- [CVE-2022-3212](https://cve.now/CVE-2022-3212.md): DoS in axum-core due to missing request size limit (CVSS 7.5, tokio-rs axum-core · axum-core)
- [CVE-2022-38796](https://cve.now/CVE-2022-38796.md): A Host Header Injection vulnerability in Feehi CMS 2.1.1 may allow an attacker to spoof a particular header. (no CVSS, feehi/cms)
- [CVE-2022-22520](https://cve.now/CVE-2022-22520.md): User enumeration vulnerability in MB connect line and Helmholz products (CVSS 5.3, MB connect line mymbCONNECT24 · MB connect line mbCONNEC… +2)
- [CVE-2022-2900](https://cve.now/CVE-2022-2900.md): Server-Side Request Forgery (SSRF) in ionicabizau/parse-url (CVSS 9.1, ionicabizau/parse-url · parse-url)
- [CVE-2022-40626](https://cve.now/CVE-2022-40626.md): Reflected XSS in the backurl parameter of Zabbix Frontend (CVSS 4.8, Zabbix Frontend)
- [CVE-2022-40673](https://cve.now/CVE-2022-40673.md): KDiskMark before 3.1.0 lacks authorization checking for D-Bus methods such as Helper::flushPageCache. (no CVSS)
- [CVE-2022-37140](https://cve.now/CVE-2022-37140.md): PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE). (no CVSS)
- [CVE-2022-37138](https://cve.now/CVE-2022-37138.md): Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after (no CVSS)
- [CVE-2022-37139](https://cve.now/CVE-2022-37139.md): Loan Management System version 1.0 suffers from a persistent cross site scripting vulnerability. (no CVSS)
- [CVE-2022-37137](https://cve.now/CVE-2022-37137.md): PayMoney 3.3 is vulnerable to Stored Cross-Site Scripting (XSS) during replying the ticket. (CVSS 5.4)
- [CVE-2022-36668](https://cve.now/CVE-2022-36668.md): Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. (no CVSS)
- [CVE-2022-36667](https://cve.now/CVE-2022-36667.md): Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function. (no CVSS)
- [CVE-2022-36669](https://cve.now/CVE-2022-36669.md): Hospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass. (no CVSS)
- [CVE-2022-36436](https://cve.now/CVE-2022-36436.md): OSU Open Source Lab VNCAuthProxy through 1.1.1 is affected by an vncap/vnc/protocol.py VNCServerAuthenticator authentication-bypass vulnerab (CVSS 9.8, vncauthproxy)
- [CVE-2022-34831](https://cve.now/CVE-2022-34831.md): An issue was discovered in Keyfactor PrimeKey EJBCA before 7.9.0, related to possible inconsistencies in DNS identifiers submitted in an ACM (no CVSS)
- [CVE-2020-19587](https://cve.now/CVE-2020-19587.md): Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbit (no CVSS)
- [CVE-2020-19586](https://cve.now/CVE-2020-19586.md): Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Adm (no CVSS)
- [CVE-2018-25047](https://cve.now/CVE-2018-25047.md): In Smarty before 3.1.47 and 4.x before 4.2.1, libs/plugins/function.mailto.php allows XSS. (no CVSS, smarty/smarty)
- [CVE-2022-20231](https://cve.now/CVE-2022-20231.md): In smc\_intc\_request\_fiq of arm\_gic.c, there is a possible out of bounds write due to improper input validation. (no CVSS, Android)
- [CVE-2022-20364](https://cve.now/CVE-2022-20364.md): In sysmmu\_unmap of TBD, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2022-2977](https://cve.now/CVE-2022-2977.md): A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. (no CVSS, Linux kernel)
- [CVE-2022-3202](https://cve.now/CVE-2022-3202.md): A NULL pointer dereference flaw in diFree in fs/jfs/inode.c in Journaled File System (JFS)in the Linux kernel. (no CVSS, Kernel)
- [CVE-2022-36113](https://cve.now/CVE-2022-36113.md): Extracting malicious crates can corrupt arbitrary files (CVSS 4.6, rust-lang cargo · cargo)
- [CVE-2022-36114](https://cve.now/CVE-2022-36114.md): Extracting malicious crates can fill the file system (CVSS 4.8, rust-lang cargo · cargo)
- [CVE-2022-37661](https://cve.now/CVE-2022-37661.md): SmartRG SR506n 2.5.15 and SR510n 2.6.13 routers are vulnerable to Remote Code Execution (RCE) via the ping host feature. (no CVSS)
- [CVE-2022-40674](https://cve.now/CVE-2022-40674.md): libexpat before 2.4.9 has a use-after-free in the doContent function in xmlparse.c. (CVSS 8.1)
- [CVE-2022-40734](https://cve.now/CVE-2022-40734.md): UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working\_dir=%2F.. (no CVSS, unisharp/laravel-filemanager)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.