# CVEs published 2022-09-20

96 CVEs were published on September 20, 2022: 13 critical, 51 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-38619](https://cve.now/CVE-2022-38619.md): SmartVista SVFE2 v2.2.22 was discovered to contain a SQL injection vulnerability via the UserForm:j\_id90 parameter at /SVFE2/pages/feegroups (CVSS 9.8)
- [CVE-2022-35085](https://cve.now/CVE-2022-35085.md): SWFTools commit 772e55a2 was discovered to contain a memory leak via /lib/mem.c. (CVSS 5.5)
- [CVE-2022-35086](https://cve.now/CVE-2022-35086.md): SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S. (CVSS 5.5)
- [CVE-2022-35087](https://cve.now/CVE-2022-35087.md): SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c. (CVSS 5.5)
- [CVE-2022-35088](https://cve.now/CVE-2022-35088.md): SWFTools commit 772e55a2 was discovered to contain a heap buffer-overflow via getGifDelayTime at /home/bupt/Desktop/swftools/src/src/gif2swf (CVSS 5.5)
- [CVE-2022-35089](https://cve.now/CVE-2022-35089.md): SWFTools commit 772e55a2 was discovered to contain a heap-buffer-overflow via getTransparentColor at /home/bupt/Desktop/swftools/src/gif2swf (CVSS 5.5)
- [CVE-2022-35090](https://cve.now/CVE-2022-35090.md): SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via \_\_asan\_memcpy at /asan/asan\_interceptors\_memintrinsics.cpp:. (CVSS 5.5)
- [CVE-2022-39221](https://cve.now/CVE-2022-39221.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') McWebserver Minecraft Mod (CVSS 7.5, J-onasJones McWebserver)
- [CVE-2022-39220](https://cve.now/CVE-2022-39220.md): XSS Vulnerabilities in WebClient (CVSS 6.1, drakkan sftpgo · github.com/drakkan/sftpgo +1)
- [CVE-2022-32802](https://cve.now/CVE-2022-32802.md): A logic issue was addressed with improved checks. (CVSS 7.8, Apple macOS · Apple tvOS)
- [CVE-2022-32880](https://cve.now/CVE-2022-32880.md): This issue was addressed by enabling hardened runtime. (CVSS 6.5, Apple macOS)
- [CVE-2022-32882](https://cve.now/CVE-2022-32882.md): This issue was addressed with improved checks. (CVSS 9.8, Apple macOS)
- [CVE-2022-26696](https://cve.now/CVE-2022-26696.md): This issue was addressed with improved environment sanitization. (CVSS 8.8, Apple macOS)
- [CVE-2022-32861](https://cve.now/CVE-2022-32861.md): A logic issue was addressed with improved state management. (CVSS 5.3, Apple macOS)
- [CVE-2022-32788](https://cve.now/CVE-2022-32788.md): A buffer overflow was addressed with improved bounds checking. (CVSS 9.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-23685](https://cve.now/CVE-2022-23685.md): A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site R (CVSS 8.8, Aruba ClearPass Policy Manager)
- [CVE-2022-23692](https://cve.now/CVE-2022-23692.md): Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQ (CVSS 8.8, Aruba ClearPass Policy Manager)
- [CVE-2022-23693](https://cve.now/CVE-2022-23693.md): Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQ (CVSS 8.8, Aruba ClearPass Policy Manager)
- [CVE-2022-23695](https://cve.now/CVE-2022-23695.md): Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQ (CVSS 8.8, Aruba ClearPass Policy Manager)
- [CVE-2022-23694](https://cve.now/CVE-2022-23694.md): Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQ (CVSS 8.8, Aruba ClearPass Policy Manager)
- [CVE-2022-28637](https://cve.now/CVE-2022-28637.md): A local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, i (CVSS 7.8, HPE Integrated Lights-Out)
- [CVE-2022-28639](https://cve.now/CVE-2022-28639.md): A remote potential adjacent denial of service (DoS) and potential adjacent arbitrary code execution vulnerability that could potentially lea (CVSS 8.8, HPE Integrated Lights-Out)
- [CVE-2022-28638](https://cve.now/CVE-2022-28638.md): An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that could potentially lead (CVSS 7.8, HPE Integrated Lights-Out)
- [CVE-2022-23696](https://cve.now/CVE-2022-23696.md): Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQ (CVSS 8.8, Aruba ClearPass Policy Manager)
- [CVE-2022-28640](https://cve.now/CVE-2022-28640.md): A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and a (CVSS 8.8, HPE Integrated Lights-Out)
- [CVE-2022-40357](https://cve.now/CVE-2022-40357.md): A security issue was discovered in Z-BlogPHP \<= 1.7.2. (CVSS 9.8)
- [CVE-2022-37877](https://cve.now/CVE-2022-37877.md): A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. (CVSS 7.8, Aruba ClearPass Policy Manager)
- [CVE-2022-37880](https://cve.now/CVE-2022-37880.md): Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on (CVSS 7.2, Aruba ClearPass Policy Manager)
- [CVE-2022-38931](https://cve.now/CVE-2022-38931.md): A Server-Side Request Forgery (SSRF) in fetch\_net\_file\_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the applicatio (CVSS 8.8)
- [CVE-2022-37878](https://cve.now/CVE-2022-37878.md): Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on (CVSS 7.2, Aruba ClearPass Policy Manager)
- [CVE-2022-37879](https://cve.now/CVE-2022-37879.md): Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on (CVSS 7.2, Aruba ClearPass Policy Manager)
- [CVE-2022-37884](https://cve.now/CVE-2022-37884.md): A vulnerability exists in the ClearPass Policy Manager Guest User Interface that can allow an unauthenticated attacker to send specific oper (CVSS 7.5, Aruba ClearPass Policy Manager)
- [CVE-2022-37881](https://cve.now/CVE-2022-37881.md): Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on (CVSS 7.2, Aruba ClearPass Policy Manager)
- [CVE-2022-37882](https://cve.now/CVE-2022-37882.md): Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on (CVSS 7.2, Aruba ClearPass Policy Manager)
- [CVE-2022-37883](https://cve.now/CVE-2022-37883.md): Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on (CVSS 7.2, Aruba ClearPass Policy Manager)
- [CVE-2022-39218](https://cve.now/CVE-2022-39218.md): Random number seed fixed during compilation (CVSS 7.5, fastly js-compute-runtime · @fastly/js-compute)
- [CVE-2021-46835](https://cve.now/CVE-2021-46835.md): There is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. (CVSS 4.3, WS7200-10)
- [CVE-2022-37395](https://cve.now/CVE-2022-37395.md): A Huawei device has an input verification vulnerability. (CVSS 7.5, CV81-WDM FW)
- [CVE-2021-46834](https://cve.now/CVE-2021-46834.md): A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked (CVSS 5.5, JAD-AL50)
- [CVE-2022-33735](https://cve.now/CVE-2022-33735.md): There is a password verification vulnerability in WS7200-10 11.0.2.13. (CVSS 6.5, WS7200-10)
- [CVE-2020-36602](https://cve.now/CVE-2020-36602.md): There is an out-of-bounds read and write vulnerability in some headset products. (CVSS 6.1, 576up005 HOTA-CM-H-Shark-BD;577HOTA-CM-H-Shark-BD;581up-HOT…)
- [CVE-2022-40009](https://cve.now/CVE-2022-40009.md): SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function grow\_unicode at /lib/ttf.c. (CVSS 9.8)
- [CVE-2022-40008](https://cve.now/CVE-2022-40008.md): SWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8 at /lib/ttf.c. (CVSS 9.8)
- [CVE-2022-30579](https://cve.now/CVE-2022-30579.md): TIBCO Spotfire Server Blind SSRF vulnerability (CVSS 7.1, TIBCO Software TIBCO Spotfire Analytics Platform for AWS Ma…)
- [CVE-2022-38955](https://cve.now/CVE-2022-38955.md): An exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. (CVSS 7.5)
- [CVE-2022-38956](https://cve.now/CVE-2022-38956.md): An exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi Range Extender. (CVSS 5.3)
- [CVE-2022-37205](https://cve.now/CVE-2022-37205.md): JFinal CMS 5.1.0 is affected by: SQL Injection. (CVSS 8.8)
- [CVE-2022-37265](https://cve.now/CVE-2022-37265.md): Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js. (CVSS 9.8, steal)
- [CVE-2022-40262](https://cve.now/CVE-2022-40262.md): The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase. (CVSS 8.2, AMI Aptio)
- [CVE-2022-40261](https://cve.now/CVE-2022-40261.md): SMM memory corruption vulnerability in OverClockSmiHandler SMM driver (CVSS 8.2, AMI Aptio)
- [CVE-2022-40250](https://cve.now/CVE-2022-40250.md): Stack overflow vulnerability in SMI handler on SmmSmbiosElog. (CVSS 8.8, AMI Aptio)
- [CVE-2022-40246](https://cve.now/CVE-2022-40246.md): Arbitrary write vulnerability in SbPei module leads to arbitrary code execution during PEI phase. (CVSS 7.2, AMI Aptio)
- [CVE-2022-26873](https://cve.now/CVE-2022-26873.md): The stack buffer overflow vulnerability in PlatformInitAdvancedPreMem leads to arbitrary code execution during PEI phase. (CVSS 8.2, AMI Aptio)
- [CVE-2022-37259](https://cve.now/CVE-2022-37259.md): A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js. (CVSS 7.5, steal)
- [CVE-2022-39974](https://cve.now/CVE-2022-39974.md): WASM3 v0.5.0 was discovered to contain a segmentation fault via the component op\_Select\_i32\_srs in wasm3/source/m3\_exec.h. (CVSS 7.5, pywasm3 · wasm3)
- [CVE-2016-20015](https://cve.now/CVE-2016-20015.md): In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any (CVSS 7.5)
- [CVE-2017-20148](https://cve.now/CVE-2017-20148.md): In the ebuild package through logcheck-1.3.23.ebuild for Logcheck on Gentoo, it is possible to achieve root privilege escalation from the lo (CVSS 9.8)
- [CVE-2022-41138](https://cve.now/CVE-2022-41138.md): In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution. (CVSS 9.8)
- [CVE-2017-20147](https://cve.now/CVE-2017-20147.md): In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping u (CVSS 6.5)
- [CVE-2022-37204](https://cve.now/CVE-2022-37204.md): Final CMS 5.1.0 is vulnerable to SQL Injection. (CVSS 9.8)
- [CVE-2022-38916](https://cve.now/CVE-2022-38916.md): A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files (CVSS 9.8, pagekit/pagekit)
- [CVE-2022-35196](https://cve.now/CVE-2022-35196.md): TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php. (CVSS 8.8)
- [CVE-2022-32167](https://cve.now/CVE-2022-32167.md): Cloudreve - Stored XSS (CVSS 5.4, Cloudreve · github.com/HFO4/cloudreve +1)
- [CVE-2021-33081](https://cve.now/CVE-2021-33081.md): Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information dis (CVSS 7.9, Intel(R) SSD DC)
- [CVE-2021-33076](https://cve.now/CVE-2021-33076.md): Improper authentication in firmware for some Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of (CVSS 5.3, Intel(R) SSD DC)
- [CVE-2021-33079](https://cve.now/CVE-2021-33079.md): Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information dis (CVSS 4.1, Intel(R) SSD DC)
- [CVE-2022-40955](https://cve.now/CVE-2022-40955.md): Deserialization attack in Apache InLong prior to version 1.3.0 allows RCE via JDBC (CVSS 8.8, Apache Software Foundation Apache InLong · org.apache.inlon…)
- [CVE-2022-3245](https://cve.now/CVE-2022-3245.md): Code Injection in display of tag title on saving tags in microweber/microweber (CVSS 4.3, microweber/microweber)
- [CVE-2022-2177](https://cve.now/CVE-2022-2177.md): SQL Injection in Kayrasoft (CVSS 9.4, Kayrasoft)
- [CVE-2022-3005](https://cve.now/CVE-2022-3005.md): Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm (CVSS 5.4, yetiforcecompany/yetiforcecrm · yetiforce/yetiforce-crm)
- [CVE-2022-3242](https://cve.now/CVE-2022-3242.md): HTML code Injection in template search keyword in microweber/microweber (CVSS 4.3, microweber/microweber)
- [CVE-2022-3079](https://cve.now/CVE-2022-3079.md): Festo: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Function (CVSS 7.5, FESTO Control block CPX-CEC-C1 · FESTO Control block CPX-CM…)
- [CVE-2022-3004](https://cve.now/CVE-2022-3004.md): Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm (CVSS 6.3, yetiforcecompany/yetiforcecrm · yetiforce/yetiforce-crm)
- [CVE-2022-34917](https://cve.now/CVE-2022-34917.md): Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers (CVSS 7.5, Apache Software Foundation Apache Kafka · org.apache.kafka:…)
- [CVE-2022-3000](https://cve.now/CVE-2022-3000.md): Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm (CVSS 6.3, yetiforcecompany/yetiforcecrm · yetiforce/yetiforce-crm)
- [CVE-2022-2924](https://cve.now/CVE-2022-2924.md): Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm (CVSS 7.1, yetiforcecompany/yetiforcecrm · yetiforce/yetiforce-crm)
- [CVE-2022-34746](https://cve.now/CVE-2022-34746.md): An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was foun (CVSS 5.9, Zyxel GS1900 series firmware)
- [CVE-2022-32795](https://cve.now/CVE-2022-32795.md): This issue was addressed with improved checks. (no CVSS, Apple iOS)
- [CVE-2022-32854](https://cve.now/CVE-2022-32854.md): This issue was addressed with improved checks. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2022-32863](https://cve.now/CVE-2022-32863.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2022-32864](https://cve.now/CVE-2022-32864.md): The issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS)
- [CVE-2022-32868](https://cve.now/CVE-2022-32868.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple Safari)
- [CVE-2022-32872](https://cve.now/CVE-2022-32872.md): A logic issue was addressed with improved restrictions. (CVSS 2.4, Apple iOS)
- [CVE-2022-32883](https://cve.now/CVE-2022-32883.md): A logic issue was addressed with improved restrictions. (CVSS 5.5, Apple iOS · Apple macOS)
- [CVE-2022-32886](https://cve.now/CVE-2022-32886.md): A buffer overflow issue was addressed with improved memory handling. (CVSS 8.8, Apple iOS · Apple Safari)
- [CVE-2022-32908](https://cve.now/CVE-2022-32908.md): A memory corruption issue was addressed with improved input validation. (CVSS 7.8, Apple iOS · Apple macOS)
- [CVE-2022-32911](https://cve.now/CVE-2022-32911.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS · Apple macOS)
- [CVE-2022-32912](https://cve.now/CVE-2022-32912.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 8.8, Apple iOS · Apple Safari)
- [CVE-2022-32917](https://cve.now/CVE-2022-32917.md): The issue was addressed with improved bounds checks. (CVSS 7.8, KEV, Apple iOS · Apple macOS)
- [CVE-2022-35957](https://cve.now/CVE-2022-35957.md): Authentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin (CVSS 6.6, grafana · github.com/grafana/grafana)
- [CVE-2022-37972](https://cve.now/CVE-2022-37972.md): Microsoft Endpoint Configuration Manager Spoofing Vulnerability (CVSS 7.5, Microsoft Endpoint Configuration Manager)
- [CVE-2022-38340](https://cve.now/CVE-2022-38340.md): Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedata (CVSS 9.1)
- [CVE-2022-39955](https://cve.now/CVE-2022-39955.md): Partial rule set bypass in OWASP ModSecurity Core Rule Set by submitting a specially crafted HTTP Content-Type header (CVSS 7.3, OWASP ModSecurity Core Rule Set)
- [CVE-2022-39956](https://cve.now/CVE-2022-39956.md): Partial rule set bypass in OWASP ModSecurity Core Rule Set for HTTP multipart requests using character encoding in the Content-Type or Content-Transfer-Encoding header (CVSS 7.3, OWASP ModSecurity Core Rule Set)
- [CVE-2022-39957](https://cve.now/CVE-2022-39957.md): Response body bypass in OWASP ModSecurity Core Rule Set via a specialy crafted charset in the HTTP Accept header (CVSS 7.3, OWASP ModSecurity Core Rule Set)
- [CVE-2022-39958](https://cve.now/CVE-2022-39958.md): Response body bypass in OWASP ModSecurity Core Rule Set via repeated HTTP Range header submission with a small byte range (CVSS 7.5, OWASP ModSecurity Core Rule Set)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.