# CVEs published 2022-09-23

201 CVEs were published on September 23, 2022: 37 critical, 56 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-40122](https://cve.now/CVE-2022-40122.md): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust\_id parameter at /net-banking/edit\_customer\_a (CVSS 9.8)
- [CVE-2022-40120](https://cve.now/CVE-2022-40120.md): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search\_term parameter at /net-banking/customer\_tr (CVSS 9.8)
- [CVE-2022-40121](https://cve.now/CVE-2022-40121.md): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/manage\_customers (CVSS 9.8)
- [CVE-2022-40118](https://cve.now/CVE-2022-40118.md): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust\_id parameter at /net-banking/send\_funds\_acti (CVSS 9.8)
- [CVE-2022-40119](https://cve.now/CVE-2022-40119.md): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search\_term parameter at /net-banking/transaction (CVSS 9.8)
- [CVE-2022-40116](https://cve.now/CVE-2022-40116.md): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php. (CVSS 9.8)
- [CVE-2022-40117](https://cve.now/CVE-2022-40117.md): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust\_id parameter at /net-banking/delete\_customer (CVSS 9.8)
- [CVE-2022-40115](https://cve.now/CVE-2022-40115.md): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust\_id parameter at /net-banking/delete\_benefici (CVSS 9.8)
- [CVE-2022-40114](https://cve.now/CVE-2022-40114.md): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust\_id parameter at /net-banking/edit\_customer.p (CVSS 9.8)
- [CVE-2022-40113](https://cve.now/CVE-2022-40113.md): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the cust\_id parameter at /net-banking/send\_funds.php. (CVSS 9.8)
- [CVE-2022-22629](https://cve.now/CVE-2022-22629.md): A buffer overflow issue was addressed with improved memory handling. (CVSS 8.8, Apple Safari · Apple tvOS +1)
- [CVE-2022-32831](https://cve.now/CVE-2022-32831.md): An out-of-bounds read was addressed with improved bounds checking. (CVSS 7.1, Apple macOS)
- [CVE-2022-32841](https://cve.now/CVE-2022-32841.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS · Apple tvOS +1)
- [CVE-2022-32851](https://cve.now/CVE-2022-32851.md): An out-of-bounds read issue was addressed with improved input validation. (CVSS 7.1, Apple macOS)
- [CVE-2022-32825](https://cve.now/CVE-2022-32825.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS · Apple tvOS +1)
- [CVE-2022-32828](https://cve.now/CVE-2022-32828.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS · Apple tvOS)
- [CVE-2022-32832](https://cve.now/CVE-2022-32832.md): The issue was addressed with improved memory handling. (CVSS 6.7, Apple macOS · Apple tvOS +1)
- [CVE-2022-32842](https://cve.now/CVE-2022-32842.md): An out-of-bounds read issue was addressed with improved input validation. (CVSS 7.8, Apple macOS)
- [CVE-2022-32845](https://cve.now/CVE-2022-32845.md): This issue was addressed with improved checks. (CVSS 10.0, Apple macOS · Apple watchOS)
- [CVE-2022-32848](https://cve.now/CVE-2022-32848.md): A logic issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2022-32819](https://cve.now/CVE-2022-32819.md): A logic issue was addressed with improved state management. (CVSS 7.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-32821](https://cve.now/CVE-2022-32821.md): A memory corruption issue was addressed with improved validation. (CVSS 7.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-32823](https://cve.now/CVE-2022-32823.md): A memory initialization issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS · Apple tvOS +1)
- [CVE-2022-32826](https://cve.now/CVE-2022-32826.md): An authorization issue was addressed with improved state management. (CVSS 7.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-32829](https://cve.now/CVE-2022-32829.md): This issue was addressed with improved checks. (CVSS 7.8, Apple macOS)
- [CVE-2022-32807](https://cve.now/CVE-2022-32807.md): This issue was addressed with improved file handling. (CVSS 7.1, Apple macOS)
- [CVE-2022-32815](https://cve.now/CVE-2022-32815.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-32816](https://cve.now/CVE-2022-32816.md): The issue was addressed with improved UI handling. (CVSS 6.5, Apple macOS · Apple tvOS +1)
- [CVE-2022-32817](https://cve.now/CVE-2022-32817.md): An out-of-bounds read issue was addressed with improved bounds checking. (CVSS 5.5, Apple macOS · Apple tvOS +1)
- [CVE-2022-32818](https://cve.now/CVE-2022-32818.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS)
- [CVE-2022-32820](https://cve.now/CVE-2022-32820.md): An out-of-bounds write issue was addressed with improved input validation. (CVSS 7.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-32799](https://cve.now/CVE-2022-32799.md): An out-of-bounds read issue was addressed with improved bounds checking. (CVSS 5.9, Apple macOS)
- [CVE-2022-32800](https://cve.now/CVE-2022-32800.md): This issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2022-32801](https://cve.now/CVE-2022-32801.md): This issue was addressed with improved checks. (CVSS 7.8, Apple macOS)
- [CVE-2022-32843](https://cve.now/CVE-2022-32843.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 7.1, Apple macOS)
- [CVE-2022-32847](https://cve.now/CVE-2022-32847.md): This issue was addressed with improved checks. (CVSS 9.1, Apple macOS · Apple tvOS +1)
- [CVE-2022-32792](https://cve.now/CVE-2022-32792.md): An out-of-bounds write issue was addressed with improved input validation. (CVSS 8.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-32797](https://cve.now/CVE-2022-32797.md): This issue was addressed with improved checks. (CVSS 7.1, Apple macOS)
- [CVE-2022-32798](https://cve.now/CVE-2022-32798.md): An out-of-bounds write issue was addressed with improved input validation. (CVSS 7.8, Apple macOS)
- [CVE-2022-32805](https://cve.now/CVE-2022-32805.md): The issue was addressed with improved handling of caches. (CVSS 5.5, Apple macOS)
- [CVE-2022-32853](https://cve.now/CVE-2022-32853.md): An out-of-bounds read issue was addressed with improved input validation. (CVSS 7.1, Apple macOS)
- [CVE-2022-32786](https://cve.now/CVE-2022-32786.md): An issue in the handling of environment variables was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2022-32789](https://cve.now/CVE-2022-32789.md): A logic issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2022-32796](https://cve.now/CVE-2022-32796.md): A memory corruption issue was addressed with improved state management. (CVSS 7.8, Apple macOS)
- [CVE-2022-32787](https://cve.now/CVE-2022-32787.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 8.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-32790](https://cve.now/CVE-2022-32790.md): This issue was addressed with improved checks. (CVSS 7.5, Apple macOS · Apple watchOS)
- [CVE-2022-32783](https://cve.now/CVE-2022-32783.md): A logic issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2022-32852](https://cve.now/CVE-2022-32852.md): An out-of-bounds read issue was addressed with improved input validation. (CVSS 7.1, Apple macOS)
- [CVE-2020-36521](https://cve.now/CVE-2020-36521.md): An out-of-bounds read was addressed with improved input validation. (CVSS 7.1, Apple iTunes for Windows · Apple iOS and iPadOS +2)
- [CVE-2022-22628](https://cve.now/CVE-2022-22628.md): A use after free issue was addressed with improved memory management. (CVSS 8.8, Apple Safari · Apple tvOS +1)
- [CVE-2022-26700](https://cve.now/CVE-2022-26700.md): A memory corruption issue was addressed with improved state management. (CVSS 8.8, Apple macOS · Apple watchOS)
- [CVE-2022-32781](https://cve.now/CVE-2022-32781.md): This issue was addressed by enabling hardened runtime. (CVSS 4.4, Apple macOS)
- [CVE-2022-32782](https://cve.now/CVE-2022-32782.md): This issue was addressed by enabling hardened runtime. (CVSS 4.4, Apple macOS)
- [CVE-2022-32785](https://cve.now/CVE-2022-32785.md): A null pointer dereference was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2022-22610](https://cve.now/CVE-2022-22610.md): A memory corruption issue was addressed with improved state management. (CVSS 8.8, Apple Safari · Apple tvOS +1)
- [CVE-2022-22624](https://cve.now/CVE-2022-22624.md): A use after free issue was addressed with improved memory management. (CVSS 8.8, Apple Safari · Apple tvOS)
- [CVE-2022-22637](https://cve.now/CVE-2022-22637.md): A logic issue was addressed with improved state management. (CVSS 8.8, Apple Safari · Apple tvOS +1)
- [CVE-2022-26707](https://cve.now/CVE-2022-26707.md): An issue in the handling of environment variables was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2022-40106](https://cve.now/CVE-2022-40106.md): Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the set\_local\_time function. (CVSS 7.5)
- [CVE-2022-40107](https://cve.now/CVE-2022-40107.md): Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formexeCommand function. (CVSS 7.5)
- [CVE-2022-40105](https://cve.now/CVE-2022-40105.md): Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterGet function. (CVSS 7.5)
- [CVE-2022-40104](https://cve.now/CVE-2022-40104.md): Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDget function. (CVSS 7.5)
- [CVE-2022-40102](https://cve.now/CVE-2022-40102.md): Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. (CVSS 7.5)
- [CVE-2022-40103](https://cve.now/CVE-2022-40103.md): Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formSetAutoPing function. (CVSS 5.5)
- [CVE-2022-40101](https://cve.now/CVE-2022-40101.md): Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterSet function. (CVSS 7.5)
- [CVE-2022-40100](https://cve.now/CVE-2022-40100.md): Tenda i9 v1.0.0.8(3828) was discovered to contain a command injection vulnerability via the FormexeCommand function. (CVSS 9.8)
- [CVE-2022-38454](https://cve.now/CVE-2022-38454.md): WordPress Kraken.io Image Optimizer plugin \<= 2.6.5 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Karim Salman Kraken.io Image Optimizer)
- [CVE-2022-38079](https://cve.now/CVE-2022-38079.md): WordPress Backup Scheduler plugin \<= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, SedLex Backup Scheduler)
- [CVE-2022-40132](https://cve.now/CVE-2022-40132.md): WordPress Seriously Simple Podcasting plugin \<= 2.16.0 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Castos Seriously Simple Podcasting)
- [CVE-2022-38704](https://cve.now/CVE-2022-38704.md): WordPress SEO Redirection plugin \<= 8.9 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, WP-buy SEO Redirection Plugin – 301 Redirect Manager)
- [CVE-2022-36340](https://cve.now/CVE-2022-36340.md): WordPress MailOptin plugin \<= 1.2.49.0 - Unauthenticated Optin Campaign Cache Deletion vulnerability (CVSS 6.5, MailOptin Popup Builder Team MailOptin)
- [CVE-2022-3263](https://cve.now/CVE-2022-3263.md): Measuresoft ScadaPro Server Improper Access Control (CVSS 7.8, Measuresoft ScadaPro Server)
- [CVE-2022-30124](https://cve.now/CVE-2022-30124.md): An improper authentication vulnerability exists in Rocket.Chat Mobile App \<4.14.1.22788 that allowed an attacker with physical access to a m (CVSS 6.8, Rocket.Chat Mobile app)
- [CVE-2022-32211](https://cve.now/CVE-2022-32211.md): A SQL injection vulnerability exists in Rocket.Chat \<v3.18.6, \<v4.4.4 and \<v4.7.3 which can allow an attacker to retrieve a reset password t (CVSS 8.8, Rocket.Chat)
- [CVE-2022-32217](https://cve.now/CVE-2022-32217.md): A cleartext storage of sensitive information exists in Rocket.Chat \<v4.6.4 due to Oauth token being leaked in plaintext in Rocket.chat logs. (CVSS 5.3, Rocket.chat)
- [CVE-2022-32219](https://cve.now/CVE-2022-32219.md): An information disclosure vulnerability exists in Rocket.Chat \<v4.7.5 which allowed the "users.list" REST endpoint gets a query parameter fr (CVSS 4.3, Rocket.Chat)
- [CVE-2022-32220](https://cve.now/CVE-2022-32220.md): An information disclosure vulnerability exists in Rocket.Chat \<v5 due to the getUserMentionsByChannel meteor server method discloses message (CVSS 6.5, Rocket.Chat)
- [CVE-2022-32218](https://cve.now/CVE-2022-32218.md): An information disclosure vulnerability exists in Rocket.Chat \<v5, \<v4.8.2 and \<v4.7.5 due to the actionLinkHandler method was found to allo (CVSS 4.3, Rocket.chat)
- [CVE-2022-32226](https://cve.now/CVE-2022-32226.md): An improper access control vulnerability exists in Rocket.Chat \<v5, \<v4.8.2 and \<v4.7.5 due to input data in the getUsersOfRoom Meteor serve (CVSS 4.3, Rocket.Chat)
- [CVE-2022-32227](https://cve.now/CVE-2022-32227.md): A cleartext transmission of sensitive information exists in Rocket.Chat \<v5, \<v4.8.2 and \<v4.7.5 relating to Oauth tokens by having the perm (CVSS 6.5, Rocket.Chat)
- [CVE-2022-32228](https://cve.now/CVE-2022-32228.md): An information disclosure vulnerability exists in Rocket.Chat \<v5, \<v4.8.2 and \<v4.7.5 since the getReadReceipts Meteor server method does n (CVSS 4.3, Rocket.Chat)
- [CVE-2022-32229](https://cve.now/CVE-2022-32229.md): A information disclosure vulnerability exists in Rockert.Chat \<v5 due to /api/v1/chat.getThreadsList lack of sanitization of user inputs and (CVSS 4.3, Rocket.Chat)
- [CVE-2022-35247](https://cve.now/CVE-2022-35247.md): A information disclosure vulnerability exists in Rocket.chat \<v5, \<v4.8.2 and \<v4.7.5 where the lack of ACL checks in the getRoomRoles Meteo (CVSS 4.3, Rocket.Chat)
- [CVE-2022-35246](https://cve.now/CVE-2022-35246.md): A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat \<v5, \<v4.8.2 and \<v4.7.5 in the getS3FileUrl Mete (CVSS 4.3, Rocket.Chat)
- [CVE-2022-35248](https://cve.now/CVE-2022-35248.md): A improper authentication vulnerability exists in Rocket.Chat \<v5, \<v4.8.2 and \<v4.7.5 that allowed two factor authentication can be bypasse (no CVSS, Rocket.Chat)
- [CVE-2022-35249](https://cve.now/CVE-2022-35249.md): A information disclosure vulnerability exists in Rocket.Chat \<v5 where the getUserMentionsByChannel meteor server method discloses messages (CVSS 4.3, Rocket.Chat)
- [CVE-2022-35250](https://cve.now/CVE-2022-35250.md): A privilege escalation vulnerability exists in Rocket.chat \<v5 which made it possible to elevate privileges for any authenticated user to vi (CVSS 4.3, Rocket.chat)
- [CVE-2022-35251](https://cve.now/CVE-2022-35251.md): A cross-site scripting vulnerability exists in Rocket.chat \<v5 due to style injection in the complete chat window, an adversary is able to m (CVSS 5.4, Rocket.chat)
- [CVE-2022-28886](https://cve.now/CVE-2022-28886.md): Denial-of-Service (DoS) Vulnerability (CVSS 4.3, All F-Secure and WithSecure Endpoint Protection products fo…)
- [CVE-2022-38439](https://cve.now/CVE-2022-38439.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-38438](https://cve.now/CVE-2022-38438.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2022-40630](https://cve.now/CVE-2022-40630.md): Improper Session Management Vulnerability in Tacitine Firewall (CVSS 6.5, Tacitine Firewall)
- [CVE-2022-35893](https://cve.now/CVE-2022-35893.md): An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. (CVSS 8.2)
- [CVE-2022-40629](https://cve.now/CVE-2022-40629.md): Sensitive Information Disclosure Vulnerability in Tacitine Firewall (CVSS 7.5, Tacitine Firewall)
- [CVE-2022-40748](https://cve.now/CVE-2022-40748.md): IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. (CVSS 5.4, IBM InfoSphere Information Server)
- [CVE-2022-35721](https://cve.now/CVE-2022-35721.md): IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Jazz for Service Management)
- [CVE-2022-34348](https://cve.now/CVE-2022-34348.md): IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. (CVSS 7.1, IBM Partner Engagement Manager)
- [CVE-2022-22423](https://cve.now/CVE-2022-22423.md): IBM Common Cryptographic Architecture (CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769) could allow a local user to cause a denial of service (CVSS 6.5, IBM CCA for MTM)
- [CVE-2022-40359](https://cve.now/CVE-2022-40359.md): Cross site scripting (XSS) vulnerability in kfm through 1.4.7 via crafted GET request to /kfm/index.php. (CVSS 6.1)
- [CVE-2022-40358](https://cve.now/CVE-2022-40358.md): An issue was discovered in AjaXplorer 4.2.3, allows attackers to cause cross site scripting vulnerabilities via a crafted svg file upload. (CVSS 5.4)
- [CVE-2022-36338](https://cve.now/CVE-2022-36338.md): An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. (CVSS 8.2)
- [CVE-2022-35099](https://cve.now/CVE-2022-35099.md): SWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixel(unsigned char\*) at /xpdf/Stream.cc. (CVSS 5.5)
- [CVE-2022-35098](https://cve.now/CVE-2022-35098.md): SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via GfxICCBasedColorSpace::getDefaultColor(GfxColor\*) at /xpdf/Gfx (CVSS 5.5)
- [CVE-2022-35097](https://cve.now/CVE-2022-35097.md): SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::writeTTF at /xpdf/FoFiTrueType.cc. (CVSS 5.5)
- [CVE-2022-35096](https://cve.now/CVE-2022-35096.md): SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via draw\_stroke at /gfxpoly/stroke.c. (CVSS 5.5)
- [CVE-2022-35095](https://cve.now/CVE-2022-35095.md): SWFTools commit 772e55a2 was discovered to contain a segmentation violation via InfoOutputDev::type3D1 at /pdf/InfoOutputDev.cc. (CVSS 5.5)
- [CVE-2022-35094](https://cve.now/CVE-2022-35094.md): SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable\*) at /xpdf/Stream.cc. (CVSS 5.5)
- [CVE-2022-35093](https://cve.now/CVE-2022-35093.md): SWFTools commit 772e55a2 was discovered to contain a global buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc. (CVSS 5.5)
- [CVE-2022-35092](https://cve.now/CVE-2022-35092.md): SWFTools commit 772e55a2 was discovered to contain a segmentation violation via convert\_gfxline at /gfxpoly/convert.c. (CVSS 5.5)
- [CVE-2022-35091](https://cve.now/CVE-2022-35091.md): SWFTools commit 772e55a2 was discovered to contain a floating point exception (FPE) via DCTStream::readMCURow() at /xpdf/Stream.cc.ow() (CVSS 5.5)
- [CVE-2022-40628](https://cve.now/CVE-2022-40628.md): Remote Code Execution Vulnerability in Tacitine Firewall (CVSS 9.8, Tacitine Firewall)
- [CVE-2022-2970](https://cve.now/CVE-2022-2970.md): MZ Automation libIEC61850 Stack-Based Buffer Overflow (CVSS 10.0, MZ Automation libIEC61850)
- [CVE-2022-2972](https://cve.now/CVE-2022-2972.md): MZ Automation libIEC61850 Stack-Based Buffer Overflow (CVSS 10.0, MZ Automation libIEC61850)
- [CVE-2022-2971](https://cve.now/CVE-2022-2971.md): MZ Automation libIEC61850 Access of Resource Using Incompatible Type ('Type Confusion') (CVSS 8.6, MZ Automation libIEC61850)
- [CVE-2022-2973](https://cve.now/CVE-2022-2973.md): MZ Automation libIEC61850 NULL Pointer Dereference (CVSS 8.6, MZ Automation libIEC61850)
- [CVE-2021-3782](https://cve.now/CVE-2021-3782.md): An internal reference count is held on the buffer pool, incremented every time a new buffer is created from the pool. (CVSS 6.6, wayland)
- [CVE-2022-38742](https://cve.now/CVE-2022-38742.md): Rockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service Attack (CVSS 8.1, Rockwell Automation ThinManager ThinServer)
- [CVE-2022-40215](https://cve.now/CVE-2022-40215.md): WordPress Tabs plugin \<= 3.7.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 3.4, Biplob Adhikari Tabs)
- [CVE-2022-36417](https://cve.now/CVE-2022-36417.md): WordPress 3D Tag Cloud plugin \<= 3.8 - Multiple Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability (CVSS 6.1, Vinoj Cardoza 3D Tag Cloud)
- [CVE-2022-38134](https://cve.now/CVE-2022-38134.md): WordPress Customer Reviews for WooCommerce plugin \<= 5.3.5 - Authenticated Broken Access Control vulnerability (CVSS 4.3, CusRev Customer Reviews for WooCommerce)
- [CVE-2022-38470](https://cve.now/CVE-2022-38470.md): WordPress Customer Reviews for WooCommerce plugin \<= 5.3.5 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 4.3, CusRev Customer Reviews for WooCommerce)
- [CVE-2022-2070](https://cve.now/CVE-2022-2070.md): Grandstream GSD3710 Stack-based Buffer Overflow (CVSS 9.8, Grandstream GSD3710)
- [CVE-2022-2025](https://cve.now/CVE-2022-2025.md): Grandstream GSD3710 Stack-based Buffer Overflow (CVSS 9.8, Grandstream GSD3710)
- [CVE-2022-40194](https://cve.now/CVE-2022-40194.md): WordPress Customer Reviews for WooCommerce plugin \<= 5.3.5 - Sensitive Information Disclosure vulnerability (CVSS 5.3, CusRev Customer Reviews for WooCommerce)
- [CVE-2021-45035](https://cve.now/CVE-2021-45035.md): Velneo vClient Improper authentication (CVSS 6.3, Velneo vClient)
- [CVE-2022-38061](https://cve.now/CVE-2022-38061.md): WordPress Export Post Info plugin \<= 1.2.0 - Authenticated CSV Injection vulnerability (CVSS 6.2, Apasionados Export Post Info)
- [CVE-2022-40672](https://cve.now/CVE-2022-40672.md): WordPress CPO Shortcodes plugin \<= 1.5.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, WPChill CPO Shortcodes)
- [CVE-2022-40861](https://cve.now/CVE-2022-40861.md): Tenda AC18 router V15.03.05.19 contains a stack overflow vulnerability in the formSetQosBand-\>FUN\_0007db78 function with the request /goform (CVSS 7.2)
- [CVE-2022-40195](https://cve.now/CVE-2022-40195.md): WordPress PCA Predict plugin \<= 1.0.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, PCA Predict)
- [CVE-2022-38085](https://cve.now/CVE-2022-38085.md): WordPress Read more By Adam plugin \<= 1.1.8 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Adam Skaat Read more By Adam)
- [CVE-2022-37342](https://cve.now/CVE-2022-37342.md): WordPress Add Shortcodes Actions And Filters plugin \<= 2.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, Michael Simpson Add Shortcodes Actions And Filters)
- [CVE-2022-36388](https://cve.now/CVE-2022-36388.md): WordPress YDS Support Ticket System plugin \<= 1.0 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Ydesignservices YDS Support Ticket System)
- [CVE-2022-40193](https://cve.now/CVE-2022-40193.md): WordPress Awesome Filterable Portfolio plugin \<= 1.9.7 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 6.1, BriniA Awesome Filterable Portfolio)
- [CVE-2022-40855](https://cve.now/CVE-2022-40855.md): Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. (CVSS 9.8)
- [CVE-2022-35238](https://cve.now/CVE-2022-35238.md): WordPress Awesome Filterable Portfolio plugin \<= 1.9.7 - Unauthenticated Plugin Settings Change vulnerability (CVSS 6.5, BriniA Awesome Filterable Portfolio)
- [CVE-2022-38460](https://cve.now/CVE-2022-38460.md): WordPress NOTICE BOARD plugin \<= 1.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 5.4, Jitendriya Tripathy NOTICE BOARD)
- [CVE-2022-40866](https://cve.now/CVE-2022-40866.md): Tenda W20E router V15.11.0.6 (US\_W20EV4.0br\_V15.11.0.6(1068\_1546\_841)\_CN\_TDC) contains a stack overflow vulnerability in the function formSe (CVSS 9.8)
- [CVE-2022-40867](https://cve.now/CVE-2022-40867.md): Tenda W20E router V15.11.0.6 (US\_W20EV4.0br\_V15.11.0.6(1068\_1546\_841)\_CN\_TDC) contains a stack overflow vulnerability in the function formIP (CVSS 9.8)
- [CVE-2022-37328](https://cve.now/CVE-2022-37328.md): WordPress History Timeline plugin \<= 1.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 3.4, Themes Awesome History Timeline)
- [CVE-2022-40868](https://cve.now/CVE-2022-40868.md): Tenda W20E router V15.11.0.6 (US\_W20EV4.0br\_V15.11.0.6(1068\_1546\_841)\_CN\_TDC) contains a stack overflow vulnerability in the function formDe (CVSS 9.8)
- [CVE-2022-36791](https://cve.now/CVE-2022-36791.md): WordPress Torro Forms plugin \<= 1.0.16 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 5.4, Awesome UG Torro Forms)
- [CVE-2022-40310](https://cve.now/CVE-2022-40310.md): WordPress Rate my Post – WP Rating System plugin \<= 3.3.4 - Race Condition vulnerability (CVSS 4.3, Blaz K. Rate my Post – WP Rating System)
- [CVE-2022-40671](https://cve.now/CVE-2022-40671.md): WordPress Rate my Post – WP Rating System plugin \<= 3.3.4 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Blaz K. Rate my Post – WP Rating System)
- [CVE-2022-40854](https://cve.now/CVE-2022-40854.md): Tenda AC18 router contained a stack overflow vulnerability in /goform/fast\_setting\_wifi\_set (CVSS 9.8)
- [CVE-2022-3257](https://cve.now/CVE-2022-3257.md): Server-side Denial of Service while processing a specifically crafted GIF file (CVSS 3.1, Mattermost · github.com/mattermost/mattermost-server/v6)
- [CVE-2022-23144](https://cve.now/CVE-2022-23144.md): There is a broken access control vulnerability in ZTE ZXvSTB product. (CVSS 9.1, ZXvSTB)
- [CVE-2022-40851](https://cve.now/CVE-2022-40851.md): Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat. (CVSS 9.8)
- [CVE-2022-27492](https://cve.now/CVE-2022-27492.md): An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file. (CVSS 7.8, Meta WhatsApp Business for iOS · Meta WhatsApp for iOS +2)
- [CVE-2022-40853](https://cve.now/CVE-2022-40853.md): Tenda AC15 router V15.03.05.19 contains a stack overflow via the list parameter at /goform/fast\_setting\_wifi\_set (CVSS 9.8)
- [CVE-2022-3144](https://cve.now/CVE-2022-3144.md): Wordfence Security – Firewall & Malware Scan \<= 7.6.0 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, mmaunder Wordfence Security – Firewall, Malware Scan, and L…)
- [CVE-2022-2937](https://cve.now/CVE-2022-2937.md): Image Hover Effects Ultimate \<= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & Description (CVSS 6.4, biplob018 Image Hover Effects Ultimate)
- [CVE-2022-38703](https://cve.now/CVE-2022-38703.md): WordPress Button Plugin MaxButtons plugin \<= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 3.4, Max Foundry WordPress Button Plugin MaxButtons)
- [CVE-2022-40213](https://cve.now/CVE-2022-40213.md): WordPress GS Testimonial Slider plugin \<= 1.9.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 4.1, GS Plugins GS Testimonial Slider)
- [CVE-2022-40860](https://cve.now/CVE-2022-40860.md): Tenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand-\>FUN\_0007dd20 with request /goform/Set (CVSS 9.8)
- [CVE-2022-40093](https://cve.now/CVE-2022-40093.md): Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/up (CVSS 7.2)
- [CVE-2022-40092](https://cve.now/CVE-2022-40092.md): Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/up (CVSS 7.2)
- [CVE-2022-40091](https://cve.now/CVE-2022-40091.md): Online Tours & Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /tour/admin/up (CVSS 7.2)
- [CVE-2022-40862](https://cve.now/CVE-2022-40862.md): Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/ (CVSS 9.8)
- [CVE-2022-38095](https://cve.now/CVE-2022-38095.md): WordPress Advanced Dynamic Pricing for WooCommerce plugin \<= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, AlgolPlus Advanced Dynamic Pricing for WooCommerce)
- [CVE-2022-36798](https://cve.now/CVE-2022-36798.md): WordPress Mega Addons For WPBakery Page Builder plugin \<= 4.2.7 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 5.4, Topdigitaltrends Mega Addons For WPBakery Page Builder)
- [CVE-2022-37339](https://cve.now/CVE-2022-37339.md): WordPress Meet My Team plugin \<= 2.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.1, Fullworks Meet My Team)
- [CVE-2022-40864](https://cve.now/CVE-2022-40864.md): Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function setSmartPowerManagement with the request /go (CVSS 9.8)
- [CVE-2022-30121](https://cve.now/CVE-2022-30121.md): The “LANDesk(R) Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables (CVSS 6.7, Ivanti Endpoint Manager)
- [CVE-2022-35257](https://cve.now/CVE-2022-35257.md): A local privilege escalation vulnerability in UI Desktop for Windows (Version 0.55.1.2 and earlier) allows a malicious actor with local acce (CVSS 7.8, UI Desktop for Windows)
- [CVE-2022-40865](https://cve.now/CVE-2022-40865.md): Tenda AC15 and AC18 routers V15.03.05.19 contain heap overflow vulnerabilities in the function setSchedWifi with the request /goform/openSch (CVSS 9.8)
- [CVE-2022-37338](https://cve.now/CVE-2022-37338.md): WordPress Blossom Recipe Maker plugin \<= 1.0.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 4.1, Blossomthemes Blossom Recipe Maker)
- [CVE-2022-37330](https://cve.now/CVE-2022-37330.md): WordPress WHA Crossword plugin \<= 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 5.4, WHA Crossword)
- [CVE-2022-40869](https://cve.now/CVE-2022-40869.md): Tenda AC15 and AC18 routers V15.03.05.19 contain stack overflow vulnerabilities in the function fromDhcpListClient with a combined parameter (CVSS 9.8)
- [CVE-2022-3236](https://cve.now/CVE-2022-3236.md): A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 (CVSS 9.8, KEV, Sophos Firewall)
- [CVE-2022-2347](https://cve.now/CVE-2022-2347.md): Unchecked Download size in Uboot (CVSS 7.7, Uboot)
- [CVE-2022-2566](https://cve.now/CVE-2022-2566.md): Heap-memory write in FFMPEG (CVSS 9.0, FFMPEG)
- [CVE-2022-2785](https://cve.now/CVE-2022-2785.md): Arbitrary Memory read in BPF Linux Kernel (CVSS 6.7, Linux Kernel Kernel)
- [CVE-2022-40979](https://cve.now/CVE-2022-40979.md): In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable (CVSS 4.4, JetBrains TeamCity)
- [CVE-2022-38936](https://cve.now/CVE-2022-38936.md): An issue has been found in PBC through 2022-8-27. (CVSS 7.5)
- [CVE-2022-33683](https://cve.now/CVE-2022-33683.md): Disabled Certificate Validation makes Broker, Proxy Admin Clients vulnerable to MITM attack (CVSS 5.9, Apache Software Foundation Apache Pulsar · org.apache.pu… +1)
- [CVE-2022-33682](https://cve.now/CVE-2022-33682.md): Disabled Hostname Verification makes Brokers, Proxies vulnerable to MITM attack (CVSS 5.9, Apache Software Foundation Apache Pulsar · org.apache.pu… +1)
- [CVE-2022-33681](https://cve.now/CVE-2022-33681.md): Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM (CVSS 5.9, Apache Software Foundation Apache Pulsar · org.apache.pulsa…)
- [CVE-2022-24280](https://cve.now/CVE-2022-24280.md): Apache Pulsar Proxy target broker address isn't validated (CVSS 6.5, Apache Software Foundation Apache Pulsar · org.apache.pulsa…)
- [CVE-2022-3269](https://cve.now/CVE-2022-3269.md): Session Fixation in ikus060/rdiffweb (CVSS 6.4, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-26112](https://cve.now/CVE-2022-26112.md): Pinot query endpoint and the realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support (CVSS 9.8, Apache Software Foundation Apache Pinot · org.apache.pinot:…)
- [CVE-2022-39238](https://cve.now/CVE-2022-39238.md): Improper Authentication in Arvados when using PAM as identity provider (CVSS 4.2, arvados)
- [CVE-2022-39239](https://cve.now/CVE-2022-39239.md): nefly-ipx subject to Server-Side Request Forgery and Stored Cross-Site Scripting via Cache Poisoning and Improper Host Validation (CVSS 6.1, netlify-ipx · @netlify/ipx)
- [CVE-2022-39231](https://cve.now/CVE-2022-39231.md): Parse Server subject to Improper Authentication allowing Auth adapter app ID validation to be circumvented (CVSS 3.7, parse-community parse-server · parse-server)
- [CVE-2022-39230](https://cve.now/CVE-2022-39230.md): Security issue in fhir-works-on-aws-authz-smart (CVSS 6.5, awslabs fhir-works-on-aws-authz-smart · fhir-works-on-aws-a…)
- [CVE-2022-39227](https://cve.now/CVE-2022-39227.md): Python-jwt subject to Authentication Bypass by Spoofing (CVSS 9.1, davedoesdev python-jwt · python-jwt)
- [CVE-2022-39225](https://cve.now/CVE-2022-39225.md): Parse Server subject to Incorrect Resource Transfer Between Spheres (CVSS 4.3, parse-community parse-server · parse-server)
- [CVE-2020-36604](https://cve.now/CVE-2020-36604.md): hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function. (CVSS 8.1, @hapi/hoek · hoek)
- [CVE-2022-41322](https://cve.now/CVE-2022-41322.md): In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. (CVSS 7.8)
- [CVE-2022-41320](https://cve.now/CVE-2022-41320.md): Veritas System Recovery (VSR) versions 18 and 21 store a network destination password in the Windows registry during configuration of the ba (CVSS 6.5)
- [CVE-2022-37232](https://cve.now/CVE-2022-37232.md): Netgear N300 wireless router wnr2000v4-V1.0.0.70 is vulnerable to Buffer Overflow via uhttpd. (no CVSS)
- [CVE-2022-37235](https://cve.now/CVE-2022-37235.md): Netgear Nighthawk AC1900 Smart WiFi Dual Band Gigabit Router R7000-V1.0.11.134\_10.2.119 is vulnerable to Buffer Overflow via the wl binary i (CVSS 9.8)
- [CVE-2021-41803](https://cve.now/CVE-2021-41803.md): HashiCorp Consul 1.8.1 up to 1.11.8, 1.12.4, and 1.13.1 do not properly validate the node or segment names prior to interpolation and usage (CVSS 7.1, github.com/hashicorp/consul)
- [CVE-2022-3278](https://cve.now/CVE-2022-3278.md): NULL Pointer Dereference in vim/vim (CVSS 6.8, vim/vim)
- [CVE-2022-32814](https://cve.now/CVE-2022-32814.md): A type confusion issue was addressed with improved state handling. (CVSS 7.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-32849](https://cve.now/CVE-2022-32849.md): An information disclosure issue was addressed by removing the vulnerable code. (CVSS 5.5, Apple macOS · Apple tvOS)
- [CVE-2022-35252](https://cve.now/CVE-2022-35252.md): When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back t (CVSS 3.7, https://github.com/curl/curl)
- [CVE-2022-35951](https://cve.now/CVE-2022-35951.md): Redis subject to Integer Overflow leading to Remote Code Execution via Heap Overflow (CVSS 7.0, redis)
- [CVE-2022-36944](https://cve.now/CVE-2022-36944.md): Scala 2.13.x before 2.13.9 has a Java deserialization chain in its JAR file. (CVSS 9.8, org.scala-lang:scala-library)
- [CVE-2022-40188](https://cve.now/CVE-2022-40188.md): Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. (CVSS 7.5)
- [CVE-2022-40716](https://cve.now/CVE-2022-40716.md): HashiCorp Consul and Consul Enterprise up to 1.11.8, 1.12.4, and 1.13.1 do not check for multiple SAN URI values in a CSR on the internal RP (CVSS 6.5, github.com/hashicorp/consul)
- [CVE-2022-41319](https://cve.now/CVE-2022-41319.md): A Reflected Cross-Site Scripting (XSS) vulnerability affects the Veritas Desktop Laptop Option (DLO) application login page (aka the DLOServ (CVSS 6.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.