# CVEs published 2022-09-21

92 CVEs were published on September 21, 2022: 11 critical, 30 high. Days are UTC.

- [CVE-2022-28982](https://cve.now/CVE-2022-28982.md): A cross-site scripting (XSS) vulnerability in Liferay Portal v7.3.3 through v7.4.2 and Liferay DXP v7.3 before service pack 3 allows attacke (CVSS 6.1, com.liferay:com.liferay.asset.taglib)
- [CVE-2022-28978](https://cve.now/CVE-2022-28978.md): Stored cross-site scripting (XSS) vulnerability in the Site module's user membership administration page in Liferay Portal 7.0.1 through 7.4 (CVSS 5.4, com.liferay:com.liferay.site.memberships.web · com.liferay.…)
- [CVE-2022-39975](https://cve.now/CVE-2022-39975.md): The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check (CVSS 4.3, com.liferay.portal:release.portal.bom)
- [CVE-2022-35896](https://cve.now/CVE-2022-35896.md): An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. (CVSS 6.0)
- [CVE-2022-28979](https://cve.now/CVE-2022-28979.md): Liferay Portal v7.1.0 through v7.4.2 and Liferay DXP 7.1 before fix pack 26, 7.2 before fix pack 15, and 7.3 before service pack 3 was disco (CVSS 6.1, com.liferay:com.liferay.portal.search.web · com.liferay.por…)
- [CVE-2022-39224](https://cve.now/CVE-2022-39224.md): Arbitrary shell execution when extracting or listing files contained in a malicious rpm. (CVSS 7.0, jordansissel ruby-arr-pm · arr-pm)
- [CVE-2022-35895](https://cve.now/CVE-2022-35895.md): An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. (CVSS 8.2)
- [CVE-2022-28802](https://cve.now/CVE-2022-28802.md): Code by Zapier before 2022-08-17 allowed intra-account privilege escalation that included execution of Python or JavaScript code. (CVSS 8.8)
- [CVE-2022-3233](https://cve.now/CVE-2022-3233.md): Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb (CVSS 4.3, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-40217](https://cve.now/CVE-2022-40217.md): WordPress WPide plugin \<= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerability (CVSS 6.5, XplodedThemes WPIDE – File Manager & Code Editor)
- [CVE-2022-38073](https://cve.now/CVE-2022-38073.md): WordPress Awesome Support plugin \<= 6.0.7 - Multiple Authenticated Persistent XSS (Additional Interested Parties) (CVSS 5.4, Awesome Support Team Awesome Support · awesome-support/awes…)
- [CVE-2022-36365](https://cve.now/CVE-2022-36365.md): WordPress WHA Crossword plugin \<= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 5.4, WHA Crossword)
- [CVE-2022-36383](https://cve.now/CVE-2022-36383.md): WordPress Word Search Puzzles game plugin \<= 2.0.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 5.4, WHA Word Search Puzzles game)
- [CVE-2022-36390](https://cve.now/CVE-2022-36390.md): WordPress Event Calendar – Calendar plugin \<= 1.4.6 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability (CVSS 4.1, Totalsoft Event Calendar – Calendar)
- [CVE-2022-36386](https://cve.now/CVE-2022-36386.md): WordPress Import any XML or CSV File to WordPress plugin \<= 3.6.7 - Authenticated Arbitrary Code Execution vulnerability (CVSS 9.1, Soflyy Import any XML or CSV File to WordPress)
- [CVE-2022-40219](https://cve.now/CVE-2022-40219.md): WordPress FavIcon Switcher plugin \<= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, SedLex FavIcon Switcher)
- [CVE-2022-3252](https://cve.now/CVE-2022-3252.md): Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received H (no CVSS, Swift Project SwiftNIO Extras)
- [CVE-2022-23952](https://cve.now/CVE-2022-23952.md): In Keylime before 6.3.0, current keylime installer installs the keylime.conf file, which can contain sensitive data, as world-readable. (CVSS 7.5, keylime)
- [CVE-2022-23951](https://cve.now/CVE-2022-23951.md): In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bombs. (CVSS 5.5, keylime)
- [CVE-2022-23950](https://cve.now/CVE-2022-23950.md): In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a method to pr (CVSS 7.5, keylime)
- [CVE-2022-23949](https://cve.now/CVE-2022-23949.md): In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar. (CVSS 7.5, keylime)
- [CVE-2021-43310](https://cve.now/CVE-2021-43310.md): A vulnerability in Keylime before 6.3.0 allows an attacker to craft a request to the agent that resets the U and V keys as if the agent were (CVSS 9.8, keylime)
- [CVE-2022-23948](https://cve.now/CVE-2022-23948.md): A flaw was found in Keylime before 6.3.0. (CVSS 7.5, keylime)
- [CVE-2022-29800](https://cve.now/CVE-2022-29800.md): A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. (CVSS 4.7, networkd-dispatcher)
- [CVE-2022-29799](https://cve.now/CVE-2022-29799.md): A vulnerability was found in networkd-dispatcher. (CVSS 5.5, networkd-dispatcher)
- [CVE-2022-35621](https://cve.now/CVE-2022-35621.md): Access control vulnerability in Evoh NFT EvohClaimable contract with sha256 hash code fa2084d5abca91a62ed1d2f1cad3ec318e6a9a2d7f1510a00d8987 (CVSS 5.3)
- [CVE-2022-30578](https://cve.now/CVE-2022-30578.md): TIBCO EBX Add-ons Stored XSS vulnerability (CVSS 8.0, TIBCO Software TIBCO EBX Add-ons)
- [CVE-2022-30577](https://cve.now/CVE-2022-30577.md): TIBCO EBX Stored XSS vulnerability (CVSS 8.0, TIBCO Software TIBCO EBX)
- [CVE-2022-31679](https://cve.now/CVE-2022-31679.md): Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsup (CVSS 3.7, Spring Data REST · org.springframework.data:spring-data-res…)
- [CVE-2022-40030](https://cve.now/CVE-2022-40030.md): SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeSt (CVSS 9.8)
- [CVE-2022-40029](https://cve.now/CVE-2022-40029.md): SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newPr (CVSS 4.8)
- [CVE-2022-40028](https://cve.now/CVE-2022-40028.md): SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newPr (CVSS 4.8)
- [CVE-2022-40027](https://cve.now/CVE-2022-40027.md): SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component newTa (CVSS 6.1)
- [CVE-2022-40026](https://cve.now/CVE-2022-40026.md): SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at board.ph (CVSS 7.2)
- [CVE-2022-3250](https://cve.now/CVE-2022-3250.md): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb (CVSS 4.9, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-3251](https://cve.now/CVE-2022-3251.md): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/minarca (CVSS 7.5, ikus060/minarca)
- [CVE-2022-37027](https://cve.now/CVE-2022-37027.md): Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. (CVSS 7.2)
- [CVE-2022-40616](https://cve.now/CVE-2022-40616.md): IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain sensitive information or pe (CVSS 6.5, IBM Maximo Asset Management)
- [CVE-2022-41255](https://cve.now/CVE-2022-41255.md): Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins controller where it can (CVSS 6.5, Jenkins project Jenkins CONS3RT Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41254](https://cve.now/CVE-2022-41254.md): Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allow attackers with Overall/Read permission to connect to an attacker (CVSS 6.5, Jenkins project Jenkins CONS3RT Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41253](https://cve.now/CVE-2022-41253.md): A cross-site request forgery (CSRF) vulnerability in Jenkins CONS3RT Plugin 1.0.0 and earlier allows attackers to connect to an attacker-spe (CVSS 8.8, Jenkins project Jenkins CONS3RT Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41252](https://cve.now/CVE-2022-41252.md): Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enumerate credentials ID (CVSS 4.3, Jenkins project Jenkins CONS3RT Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41250](https://cve.now/CVE-2022-41250.md): A missing permission check in Jenkins SCM HttpClient Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an a (CVSS 6.5, Jenkins project Jenkins SCM HttpClient Plugin · com.meowlom…)
- [CVE-2022-41251](https://cve.now/CVE-2022-41251.md): A missing permission check in Jenkins Apprenda Plugin 2.2.0 and earlier allows users with Overall/Read permission to enumerate credentials I (CVSS 4.3, Jenkins project Jenkins Apprenda Plugin · org.jenkins-ci.pl…)
- [CVE-2022-41249](https://cve.now/CVE-2022-41249.md): A cross-site request forgery (CSRF) vulnerability in Jenkins SCM HttpClient Plugin 1.5 and earlier allows attackers to connect to an attacke (CVSS 8.8, Jenkins project Jenkins SCM HttpClient Plugin · com.meowlom…)
- [CVE-2022-41248](https://cve.now/CVE-2022-41248.md): Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, increasing the poten (CVSS 5.3, Jenkins project Jenkins BigPanda Notifier Plugin · org.jenk…)
- [CVE-2022-41247](https://cve.now/CVE-2022-41247.md): Jenkins BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration file on the Jenkins c (CVSS 4.3, Jenkins project Jenkins BigPanda Notifier Plugin · org.jenk…)
- [CVE-2022-41246](https://cve.now/CVE-2022-41246.md): A missing permission check in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers with Overall/Read permission (CVSS 6.5, Jenkins project Jenkins Worksoft Execution Manager Plugin ·…)
- [CVE-2022-41244](https://cve.now/CVE-2022-41244.md): Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server (CVSS 8.1, Jenkins project Jenkins View26 Test-Reporting Plugin · org.…)
- [CVE-2022-41245](https://cve.now/CVE-2022-41245.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers to co (CVSS 8.8, Jenkins project Jenkins Worksoft Execution Manager Plugin ·…)
- [CVE-2022-41242](https://cve.now/CVE-2022-41242.md): A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover info (CVSS 5.4, Jenkins project Jenkins extreme-feedback Plugin · org.jenki…)
- [CVE-2022-41243](https://cve.now/CVE-2022-41243.md): Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could b (CVSS 8.1, Jenkins project Jenkins SmallTest Plugin · com.smalltest:sm…)
- [CVE-2022-41241](https://cve.now/CVE-2022-41241.md): Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. (CVSS 9.8, Jenkins project Jenkins RQM Plugin · net.praqma:rqm-plugin)
- [CVE-2022-41240](https://cve.now/CVE-2022-41240.md): Jenkins Walti Plugin 1.0.1 and earlier does not escape the information provided by the Walti API, resulting in a stored cross-site scripting (CVSS 5.4, Jenkins project Jenkins Walti Plugin · org.jenkins-ci.plugi…)
- [CVE-2022-41239](https://cve.now/CVE-2022-41239.md): Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying the (CVSS 5.4, Jenkins project Jenkins DotCi Plugin · com.groupon.jenkins-…)
- [CVE-2022-41238](https://cve.now/CVE-2022-41238.md): A missing permission check in Jenkins DotCi Plugin 2.40.00 and earlier allows unauthenticated attackers to trigger builds of jobs correspond (CVSS 9.8, Jenkins project Jenkins DotCi Plugin · com.groupon.jenkins-…)
- [CVE-2022-41236](https://cve.now/CVE-2022-41236.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Security Inspector Plugin 117.v6eecc36919c2 and earlier allows attackers to rep (CVSS 8.8, Jenkins project Jenkins Security Inspector Plugin · org.jen…)
- [CVE-2022-41237](https://cve.now/CVE-2022-41237.md): Jenkins DotCi Plugin 2.40.00 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a (CVSS 9.8, Jenkins project Jenkins DotCi Plugin · com.groupon.jenkins-…)
- [CVE-2022-41235](https://cve.now/CVE-2022-41235.md): Jenkins WildFly Deployer Plugin 1.0.2 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkin (CVSS 5.3, Jenkins project Jenkins WildFly Deployer Plugin · org.jenki…)
- [CVE-2022-41234](https://cve.now/CVE-2022-41234.md): Jenkins Rundeck Plugin 3.6.11 and earlier does not protect access to the /plugin/rundeck/webhook/ endpoint, allowing users with Overall/Read (CVSS 8.8, Jenkins project Jenkins Rundeck Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41233](https://cve.now/CVE-2022-41233.md): Jenkins Rundeck Plugin 3.6.11 and earlier does not perform Run/Artifacts permission checks in multiple HTTP endpoints, allowing attackers wi (CVSS 4.3, Jenkins project Jenkins Rundeck Plugin · org.jenkins-ci.plu…)
- [CVE-2022-41232](https://cve.now/CVE-2022-41232.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to replace any config. (CVSS 8.0, Jenkins project Jenkins Build-Publisher Plugin · org.jenkin…)
- [CVE-2022-41230](https://cve.now/CVE-2022-41230.md): Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Rea (CVSS 4.3, Jenkins project Jenkins Build-Publisher Plugin · org.jenkin…)
- [CVE-2022-41231](https://cve.now/CVE-2022-41231.md): Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on (CVSS 5.7, Jenkins project Jenkins Build-Publisher Plugin · org.jenkin…)
- [CVE-2022-41229](https://cve.now/CVE-2022-41229.md): Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of the Execute NetStorm/N (CVSS 5.4, Jenkins project Jenkins NS-ND Integration Performance Publi…)
- [CVE-2022-41228](https://cve.now/CVE-2022-41228.md): A missing permission check in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows attackers with Overall/Rea (CVSS 8.8, Jenkins project Jenkins NS-ND Integration Performance Publi…)
- [CVE-2022-41227](https://cve.now/CVE-2022-41227.md): A cross-site request forgery (CSRF) vulnerability in Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.129 and earlier allows att (CVSS 8.8, Jenkins project Jenkins NS-ND Integration Performance Publi…)
- [CVE-2022-41225](https://cve.now/CVE-2022-41225.md): Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine API, resulting in a (CVSS 5.4, Jenkins project Jenkins Anchore Container Image Scanner Plu…)
- [CVE-2022-41226](https://cve.now/CVE-2022-41226.md): Jenkins Compuware Common Configuration Plugin 1.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) atta (CVSS 9.8, Jenkins project Jenkins Compuware Common Configuration Plug…)
- [CVE-2022-41224](https://cve.now/CVE-2022-41224.md): Jenkins 2.367 through 2.369 (both inclusive) does not escape tooltips of the l:helpIcon UI component used for some help icons on the Jenkins (CVSS 5.4, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2019-5641](https://cve.now/CVE-2019-5641.md): Rapid7 InsightVM Information Disclosure after Logout (CVSS 3.3, Rapid7 InsightVM)
- [CVE-2022-37246](https://cve.now/CVE-2022-37246.md): Craft CMS 4.2.0.1 is affected by Cross Site Scripting (XSS) in the file src/web/assets/cp/src/js/BaseElementSelectInput.js and in specific o (CVSS 5.4, craftcms/cms)
- [CVE-2022-2265](https://cve.now/CVE-2022-2265.md): Path traversal in Identity and Directory Management System (CVSS 7.5, Çekino Bilgi Teknolojileri)
- [CVE-2022-38928](https://cve.now/CVE-2022-38928.md): XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393. (CVSS 7.8)
- [CVE-2022-3255](https://cve.now/CVE-2022-3255.md): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore (CVSS 6.8, pimcore/pimcore)
- [CVE-2022-3068](https://cve.now/CVE-2022-3068.md): Improper Privilege Management in octoprint/octoprint (CVSS 5.3, octoprint/octoprint · octoprint)
- [CVE-2022-2888](https://cve.now/CVE-2022-2888.md): Insufficient Session Expiration in octoprint/octoprint (CVSS 4.4, octoprint/octoprint · octoprint)
- [CVE-2022-3080](https://cve.now/CVE-2022-3080.md): BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly (CVSS 7.5, ISC BIND9)
- [CVE-2022-38178](https://cve.now/CVE-2022-38178.md): Memory leaks in EdDSA DNSSEC verification code (CVSS 7.5, ISC BIND9)
- [CVE-2022-38177](https://cve.now/CVE-2022-38177.md): Memory leak in ECDSA DNSSEC verification code (CVSS 7.5, ISC BIND9)
- [CVE-2022-2906](https://cve.now/CVE-2022-2906.md): Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only) (CVSS 7.5, ISC BIND9)
- [CVE-2022-2881](https://cve.now/CVE-2022-2881.md): Buffer overread in statistics channel code (CVSS 5.5, ISC BIND9)
- [CVE-2022-2795](https://cve.now/CVE-2022-2795.md): Processing large delegations may severely degrade resolver performance (CVSS 5.3, ISC BIND9)
- [CVE-2022-2872](https://cve.now/CVE-2022-2872.md): Unrestricted Upload of File with Dangerous Type in octoprint/octoprint (CVSS 3.7, octoprint/octoprint · octoprint)
- [CVE-2022-0495](https://cve.now/CVE-2022-0495.md): SQL Injection in KOHA (CVSS 9.4, Parantez Teknoloji)
- [CVE-2022-2315](https://cve.now/CVE-2022-2315.md): SQL Injection in Database Accreditation System (CVSS 9.4, Database Software)
- [CVE-2022-40754](https://cve.now/CVE-2022-40754.md): Open Redirect (CVSS 6.1, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2022-40604](https://cve.now/CVE-2022-40604.md): Format String Vulnerability (CVSS 7.5, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2022-41220](https://cve.now/CVE-2022-41220.md): md2roff 1.9 has a stack-based buffer overflow via a Markdown file, a different vulnerability than CVE-2022-34913. (CVSS 9.8)
- [CVE-2022-37026](https://cve.now/CVE-2022-37026.md): In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-cert (CVSS 9.8)
- [CVE-2022-41218](https://cve.now/CVE-2022-41218.md): In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb\_de (CVSS 5.5)
- [CVE-2022-41222](https://cve.now/CVE-2022-41222.md): mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move. (CVSS 7.0, :linux\_kernel:)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.