# CVEs published 2022-09-28

73 CVEs were published on September 28, 2022: 11 critical, 20 high. Days are UTC.

- [CVE-2022-3326](https://cve.now/CVE-2022-3326.md): Weak Password Requirements in ikus060/rdiffweb (CVSS 5.4, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-31629](https://cve.now/CVE-2022-31629.md): $\_COOKIE names string replacement (. -\> \_): cookie integrity vulnerabilities (CVSS 6.5, PHP Group PHP)
- [CVE-2022-31628](https://cve.now/CVE-2022-31628.md): phar wrapper can occur dos when using quine gzip file (CVSS 2.3, PHP Group PHP)
- [CVE-2022-40710](https://cve.now/CVE-2022-40710.md): A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attac (no CVSS, Trend Micro Deep Security)
- [CVE-2022-40709](https://cve.now/CVE-2022-40709.md): An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local (no CVSS, Trend Micro Deep Security)
- [CVE-2022-40708](https://cve.now/CVE-2022-40708.md): An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local (CVSS 3.3, Trend Micro Deep Security)
- [CVE-2022-40707](https://cve.now/CVE-2022-40707.md): An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local (no CVSS, Trend Micro Deep Security)
- [CVE-2022-39263](https://cve.now/CVE-2022-39263.md): NextAuth.js Upstash Adapter missing token verification (CVSS 6.8, nextauthjs next-auth · @next-auth/upstash-redis-adapter)
- [CVE-2022-39257](https://cve.now/CVE-2022-39257.md): Matrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions (CVSS 7.5, matrix-org matrix-ios-sdk)
- [CVE-2022-39255](https://cve.now/CVE-2022-39255.md): Matrix iOS SDK vulnerable ton Olm/Megolm protocol confusion (CVSS 8.6, matrix-org matrix-ios-sdk)
- [CVE-2022-34424](https://cve.now/CVE-2022-34424.md): Networking OS10, versions 10.5.1.x, 10.5.2.x, and 10.5.3.x contain a vulnerability that could allow an attacker to cause a system crash by r (CVSS 7.5, Dell Networking OS10)
- [CVE-2022-34394](https://cve.now/CVE-2022-34394.md): Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. (CVSS 3.7, Dell Networking OS10)
- [CVE-2022-29089](https://cve.now/CVE-2022-29089.md): Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. (CVSS 6.4, Dell Networking OS10)
- [CVE-2022-3292](https://cve.now/CVE-2022-3292.md): Use of Cache Containing Sensitive Information in ikus060/rdiffweb (CVSS 4.3, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-39248](https://cve.now/CVE-2022-39248.md): matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion (CVSS 8.6, matrix-org matrix-android-sdk2 · org.matrix.android:matrix-…)
- [CVE-2022-39246](https://cve.now/CVE-2022-39246.md): matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions (CVSS 7.5, matrix-org matrix-android-sdk2 · org.matrix.android:matrix-…)
- [CVE-2022-23716](https://cve.now/CVE-2022-23716.md): A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in d (CVSS 5.3, Elastic Cloud Enterprise)
- [CVE-2022-3215](https://cve.now/CVE-2022-3215.md): NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. (CVSS 7.5, Swift Project SwiftNIO)
- [CVE-2022-36781](https://cve.now/CVE-2022-36781.md): ConnectWise - ScreenConnect Session Code Bypass (CVSS 5.3, ConnectWise ScreenConnect)
- [CVE-2022-3287](https://cve.now/CVE-2022-3287.md): When creating an OPERATOR user account on the BMC, the redfish plugin saved the auto-generated password to /etc/fwupd/redfish.conf without p (CVSS 6.5, fwupd)
- [CVE-2022-3193](https://cve.now/CVE-2022-3193.md): An HTML injection/reflected Cross-site scripting (XSS) vulnerability was found in the ovirt-engine. (CVSS 6.1, ovirt-engine)
- [CVE-2021-41434](https://cve.now/CVE-2021-41434.md): A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitra (CVSS 5.4)
- [CVE-2022-38934](https://cve.now/CVE-2022-38934.md): readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file. (CVSS 3.3)
- [CVE-2022-36771](https://cve.now/CVE-2022-36771.md): IBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive information from that they should not have access t (CVSS 4.3, IBM QRadar User Behavior Analytics)
- [CVE-2022-35722](https://cve.now/CVE-2022-35722.md): IBM Jazz for Service Management is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Jazz for Service Management)
- [CVE-2022-35282](https://cve.now/CVE-2022-35282.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). (CVSS 4.3, IBM WebSphere Application Server)
- [CVE-2022-22387](https://cve.now/CVE-2022-22387.md): IBM Application Gateway is vulnerable to cross-site scripting. (CVSS 5.4, IBM Application Gateway)
- [CVE-2022-36448](https://cve.now/CVE-2022-36448.md): An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. (CVSS 8.2)
- [CVE-2022-3354](https://cve.now/CVE-2022-3354.md): Open5GS UDP Packet ogs-tlv-msg.c denial of service (CVSS 3.5, Open5GS)
- [CVE-2022-40942](https://cve.now/CVE-2022-40942.md): Tenda TX3 US\_TX3V1.0br\_V16.03.13.11 is vulnerable to stack overflow via compare\_parentcontrol\_time. (CVSS 9.8)
- [CVE-2022-40912](https://cve.now/CVE-2022-40912.md): ETAP Lighting International NV ETAP Safety Manager 1.0.0.32 is vulnerable to Cross Site Scripting (XSS). (CVSS 6.1)
- [CVE-2022-28816](https://cve.now/CVE-2022-28816.md): Reflected XSS in Carlo Gavazzi UWP 3.0 (CVSS 6.1, Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller · C…)
- [CVE-2022-28815](https://cve.now/CVE-2022-28815.md): SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy (CVSS 2.7, Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller · C…)
- [CVE-2022-28814](https://cve.now/CVE-2022-28814.md): Path traversal in Carlo Gavazzi UWP 3.0 could lead to full device access (CVSS 9.8, Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller · C…)
- [CVE-2022-28812](https://cve.now/CVE-2022-28812.md): Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server. (CVSS 9.8, Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller · C…)
- [CVE-2022-28811](https://cve.now/CVE-2022-28811.md): Possible command injection in Car Park Server in Carlo Gavazzi UWP3.0 (CVSS 9.8, Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller · C…)
- [CVE-2022-22526](https://cve.now/CVE-2022-22526.md): Missing authentication for API in Carlo Gavazzi UWP 3.0 Car Park Server (CVSS 9.8, Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller · C…)
- [CVE-2022-22524](https://cve.now/CVE-2022-22524.md): SQL-injection in Carlo Gavazzi UWP 3.0 allows for full database access (CVSS 9.4, Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller · C…)
- [CVE-2022-22525](https://cve.now/CVE-2022-22525.md): Command injection in restore function of Carlo Gavazzi UWP3.0 allows for command injection (CVSS 7.2, Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller · C…)
- [CVE-2022-22523](https://cve.now/CVE-2022-22523.md): Carlo Gavazzi UWP 3.0 WebApp allows for authentication bypass (CVSS 7.5, Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller · C…)
- [CVE-2022-22522](https://cve.now/CVE-2022-22522.md): Hard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device (CVSS 9.8, Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller · C…)
- [CVE-2022-40083](https://cve.now/CVE-2022-40083.md): Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. (CVSS 9.6, github.com/labstack/echo/v4)
- [CVE-2022-40082](https://cve.now/CVE-2022-40082.md): Hertz v0.3.0 ws discovered to contain a path traversal vulnerability via the normalizePath function. (CVSS 7.5, github.com/cloudwego/hertz)
- [CVE-2022-40486](https://cve.now/CVE-2022-40486.md): TP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. (CVSS 8.8)
- [CVE-2022-3349](https://cve.now/CVE-2022-3349.md): Sony PS4/PS5 exFAT UVFAT\_readupcasetable heap-based overflow (CVSS 6.8, Sony PS4 · Sony PS5)
- [CVE-2022-30935](https://cve.now/CVE-2022-30935.md): An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any user through the us (CVSS 9.1)
- [CVE-2022-32169](https://cve.now/CVE-2022-32169.md): bytebase - Improper Authorization (CVSS 4.3, bytebase · github.com/bytebase/bytebase)
- [CVE-2022-32170](https://cve.now/CVE-2022-32170.md): bytebase - Improper Authorization (CVSS 4.3, bytebase · github.com/bytebase/bytebase)
- [CVE-2022-32166](https://cve.now/CVE-2022-32166.md): ovs - buffer over-read (CVSS 6.1, ovs)
- [CVE-2022-32168](https://cve.now/CVE-2022-32168.md): notepad-plus-plus - DLL Hijacking (CVSS 7.8, notepad-plus-plus)
- [CVE-2022-3348](https://cve.now/CVE-2022-3348.md): Exposure of Sensitive Information to an Unauthorized Actor in tooljet/tooljet (CVSS 6.5, tooljet/tooljet)
- [CVE-2022-3333](https://cve.now/CVE-2022-3333.md): Zephyr Project Manager REST Call cross site scripting (CVSS 3.5, Zephyr Project Manager)
- [CVE-2022-3332](https://cve.now/CVE-2022-3332.md): SourceCodester Food Ordering Management System POST Parameter router.php sql injection (CVSS 6.3, SourceCodester Food Ordering Management System)
- [CVE-2022-39054](https://cve.now/CVE-2022-39054.md): COWELL INFORMATION SYSTEM CO., LTD. enterprise travel management system - Reflected XSS (CVSS 6.1, COWELL INFORMATION SYSTEM CO. enterprise travel management…)
- [CVE-2022-39053](https://cve.now/CVE-2022-39053.md): HEIMAVISTA INC. Rpage - Reflected XSS (CVSS 6.1, HEIMAVISTA Rpage)
- [CVE-2022-39035](https://cve.now/CVE-2022-39035.md): Smart eVision - Stored XSS (CVSS 6.1, Smart eVision Information Technology Smart eVision)
- [CVE-2022-39034](https://cve.now/CVE-2022-39034.md): Smart eVision - Path Traversal -2 (CVSS 6.5, Smart eVision Information Technology Smart eVision)
- [CVE-2022-39033](https://cve.now/CVE-2022-39033.md): Smart eVision - Path Traversal -1 (CVSS 9.8, Smart eVision Information Technology Smart eVision)
- [CVE-2022-39032](https://cve.now/CVE-2022-39032.md): Smart eVision - Improper Privilege Management (CVSS 8.8, Smart eVision Information Technology Smart eVision)
- [CVE-2022-39031](https://cve.now/CVE-2022-39031.md): Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -3 (CVSS 5.3, Smart eVision Information Technology Smart eVision)
- [CVE-2022-39030](https://cve.now/CVE-2022-39030.md): Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -2 (CVSS 7.5, Smart eVision Information Technology Smart eVision)
- [CVE-2022-39029](https://cve.now/CVE-2022-39029.md): Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -1 (CVSS 6.5, Smart eVision Information Technology Smart eVision)
- [CVE-2022-38699](https://cve.now/CVE-2022-38699.md): ASUS Armoury Crate Service - Arbitrary File Creation via Elevation of Privilege Flaw (CVSS 5.9, ASUS Armoury Crate Service)
- [CVE-2021-43980](https://cve.now/CVE-2021-43980.md): Apache Tomcat: Information disclosure (CVSS 3.7, Apache Software Foundation Apache Tomcat · org.apache.tomca…)
- [CVE-2022-1270](https://cve.now/CVE-2022-1270.md): In GraphicsMagick, a heap buffer overflow was found when parsing MIFF. (CVSS 7.8, GraphicsMagick)
- [CVE-2022-2760](https://cve.now/CVE-2022-2760.md): In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an erro (CVSS 4.3, Octopus Deploy Octopus Server)
- [CVE-2022-28813](https://cve.now/CVE-2022-28813.md): SQL-injection in Car Park Server 3.0 allows for full database access. (CVSS 7.5, Carlo Gavazzi UWP 3.0 Monitoring Gateway and Controller · C…)
- [CVE-2022-39236](https://cve.now/CVE-2022-39236.md): Matrix Javascript SDK improper beacon events can cause availability issues (CVSS 4.3, matrix-org matrix-js-sdk · matrix-js-sdk)
- [CVE-2022-39249](https://cve.now/CVE-2022-39249.md): Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions (CVSS 7.5, matrix-org matrix-js-sdk · matrix-js-sdk)
- [CVE-2022-39251](https://cve.now/CVE-2022-39251.md): Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion (CVSS 8.6, matrix-org matrix-js-sdk · matrix-js-sdk)
- [CVE-2022-39261](https://cve.now/CVE-2022-39261.md): Twig may load a template outside a configured directory when using the filesystem loader (CVSS 7.5, twigphp Twig · drupal/core +1)
- [CVE-2022-39264](https://cve.now/CVE-2022-39264.md): nheko vulnerable to secret poisoning using MITM on secret requests by the homeserver (CVSS 8.6, Nheko-Reborn nheko)
- [CVE-2022-40929](https://cve.now/CVE-2022-40929.md): XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. (CVSS 9.8, com.xuxueli:xxl-job-core)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.