# CVEs published 2022-09-29

34 CVEs were published on September 29, 2022: 7 critical, 17 high. Days are UTC.

- [CVE-2022-3364](https://cve.now/CVE-2022-3364.md): No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb (CVSS 5.3, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-39232](https://cve.now/CVE-2022-39232.md): Discourse vulnerable to incomplete quote causing a topic to crash in the browser (CVSS 6.5, discourse)
- [CVE-2022-39226](https://cve.now/CVE-2022-39226.md): Discourse user profile location and website fields were not sufficiently length-limited (CVSS 4.3, discourse)
- [CVE-2022-36068](https://cve.now/CVE-2022-36068.md): Discourse moderators can edit themes via the API (CVSS 7.2, discourse)
- [CVE-2022-36066](https://cve.now/CVE-2022-36066.md): Discourse vulnerable to RCE via admins uploading maliciously zipped file (CVSS 9.1, discourse)
- [CVE-2022-40472](https://cve.now/CVE-2022-40472.md): ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 was discovered to contain a CSV injection vulnerability. (CVSS 8.0)
- [CVE-2022-33880](https://cve.now/CVE-2022-33880.md): hms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the type parameter. (CVSS 9.8)
- [CVE-2022-35137](https://cve.now/CVE-2022-35137.md): DGIOT Lightweight industrial IoT v4.5.4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities. (CVSS 5.4)
- [CVE-2022-39266](https://cve.now/CVE-2022-39266.md): isolated-vm has vulnerable CachedDataOptions in API (CVSS 9.7, laverdet isolated-vm · isolated-vm)
- [CVE-2022-29503](https://cve.now/CVE-2022-29503.md): A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. (CVSS 8.1, Anker Eufy Homebase · uClibC +1)
- [CVE-2022-40879](https://cve.now/CVE-2022-40879.md): kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter 'errorMsg.' (CVSS 6.1)
- [CVE-2022-40887](https://cve.now/CVE-2022-40887.md): SourceCodester Best Student Result Management System 1.0 is vulnerable to SQL Injection. (CVSS 9.8)
- [CVE-2022-39168](https://cve.now/CVE-2022-39168.md): IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. (CVSS 4.6, IBM Robotic Process Automation)
- [CVE-2022-40931](https://cve.now/CVE-2022-40931.md): dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS). (CVSS 6.1, github.com/dutchcoders/transfer.sh)
- [CVE-2022-38732](https://cve.now/CVE-2022-38732.md): SnapCenter versions prior to 4.7 shipped without Content Security Policy (CSP) implemented which could allow certain types of attacks that o (CVSS 7.5, SnapCenter)
- [CVE-2022-39254](https://cve.now/CVE-2022-39254.md): When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder (CVSS 8.6, poljar matrix-nio · matrix-nio)
- [CVE-2022-39252](https://cve.now/CVE-2022-39252.md): When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder (CVSS 8.6, matrix-org matrix-rust-sdk · matrix-sdk-crypto)
- [CVE-2022-40408](https://cve.now/CVE-2022-40408.md): FeehiCMS v2.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted payload injected into the Comment box und (CVSS 5.4, feehi/feehicms)
- [CVE-2022-40407](https://cve.now/CVE-2022-40407.md): A zip slip vulnerability in the file upload function of Chamilo v1.11 allows attackers to execute arbitrary code via a crafted Zip file. (CVSS 8.8)
- [CVE-2022-40890](https://cve.now/CVE-2022-40890.md): A vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service. (CVSS 7.5)
- [CVE-2022-40363](https://cve.now/CVE-2022-40363.md): A buffer overflow in the component nfc\_device\_load\_mifare\_ul\_data of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to c (CVSS 5.5)
- [CVE-2022-40126](https://cve.now/CVE-2022-40126.md): A misconfiguration in the Service Mode profile directory of Clash for Windows v0.19.9 allows attackers to escalate privileges and execute ar (CVSS 7.8)
- [CVE-2022-40475](https://cve.now/CVE-2022-40475.md): TOTOLINK A860R V4.1.2cu.5182\_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi. (CVSS 9.8)
- [CVE-2022-3355](https://cve.now/CVE-2022-3355.md): Cross-site Scripting (XSS) - Stored in inventree/inventree (CVSS 8.2, inventree/inventree · inventree)
- [CVE-2021-43362](https://cve.now/CVE-2021-43362.md): MedData HBYS 1.0 Remote SQL Injection Vulnerability (CVSS 9.9, MedData HBYS)
- [CVE-2021-43361](https://cve.now/CVE-2021-43361.md): MedData HBYS 1.0 Remote SQL Injection Vulnerability (CVSS 9.9, MedData HBYS)
- [CVE-2019-5797](https://cve.now/CVE-2019-5797.md): Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a craf (CVSS 7.5, Google Chrome)
- [CVE-2020-11015](https://cve.now/CVE-2020-11015.md): Device Authentication Vulnerability in thinx-device-api IoT Device Management Server (CVSS 7.5, suculent thinx-device-api)
- [CVE-2022-40048](https://cve.now/CVE-2022-40048.md): Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File function. (CVSS 7.2)
- [CVE-2022-35888](https://cve.now/CVE-2022-35888.md): Ampere Altra and Ampere Altra Max devices through 2022-07-15 allow attacks via Hertzbleed, which is a power side-channel attack that extract (CVSS 6.5)
- [CVE-2022-3352](https://cve.now/CVE-2022-3352.md): Use After Free in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2022-39173](https://cve.now/CVE-2022-39173.md): In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake. (CVSS 7.5)
- [CVE-2022-39250](https://cve.now/CVE-2022-39250.md): Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification (CVSS 8.6, matrix-org matrix-js-sdk · matrix-js-sdk)
- [CVE-2022-41828](https://cve.now/CVE-2022-41828.md): In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check th (CVSS 8.8, com.amazon.redshift:redshift-jdbc42)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.