# CVEs published 2022-09-30

68 CVEs were published on September 30, 2022: 6 critical, 25 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-42002](https://cve.now/CVE-2022-42002.md): SonicJS through 0.6.0 allows file overwrite. (no CVSS)
- [CVE-2022-39268](https://cve.now/CVE-2022-39268.md): orchest vulnerable to cross-site request forgery that allows control of a user instance (CVSS 8.1, orchest)
- [CVE-2022-34429](https://cve.now/CVE-2022-34429.md): Dell Hybrid Client below 1.8 version contains a Zip Slip Vulnerability in UI. (CVSS 6.5, Dell Hybrid Client)
- [CVE-2022-34428](https://cve.now/CVE-2022-34428.md): Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI. (CVSS 5.0, Dell Hybrid Client)
- [CVE-2021-36865](https://cve.now/CVE-2021-36865.md): WordPress Quiz And Survey Master plugin \<= 7.3.4 - Insecure direct object references (IDOR) vulnerability (CVSS 3.8, ExpressTech Quiz And Survey Master)
- [CVE-2022-20945](https://cve.now/CVE-2022-20945.md): Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability (CVSS 7.4, Cisco Aironet Access Point Software)
- [CVE-2022-20930](https://cve.now/CVE-2022-20930.md): Cisco SD-WAN Software Arbitrary File Corruption Vulnerability (CVSS 6.7, Cisco SD-WAN vManage)
- [CVE-2022-20919](https://cve.now/CVE-2022-20919.md): Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability (CVSS 8.6, Cisco IOS)
- [CVE-2022-40341](https://cve.now/CVE-2022-40341.md): mojoPortal v2.7 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a craf (CVSS 8.8)
- [CVE-2022-20856](https://cve.now/CVE-2022-20856.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Mobility Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2022-20855](https://cve.now/CVE-2022-20855.md): Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst Access Points Privilege Escalation Vulnerability (CVSS 7.9, Cisco IOS XE Software)
- [CVE-2022-20851](https://cve.now/CVE-2022-20851.md): Cisco IOS XE Software Web UI Command Injection Vulnerability (CVSS 5.5, Cisco IOS XE Software)
- [CVE-2022-20850](https://cve.now/CVE-2022-20850.md): Cisco SD-WAN Arbitrary File Deletion Vulnerability (CVSS 5.5, Cisco SD-WAN Solution)
- [CVE-2022-20848](https://cve.now/CVE-2022-20848.md): Cisco IOS XE Software for Embedded Wireless Controllers on Catalyst 9100 Series Access Points UDP Processing Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2022-20847](https://cve.now/CVE-2022-20847.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family DHCP Processing Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2022-20844](https://cve.now/CVE-2022-20844.md): Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability (CVSS 5.3, Cisco SD-WAN vManage)
- [CVE-2022-20818](https://cve.now/CVE-2022-20818.md): Cisco SD-WAN Software Privilege Escalation Vulnerabilities (CVSS 7.8, Cisco SD-WAN Solution)
- [CVE-2022-20810](https://cve.now/CVE-2022-20810.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Information Disclosure Vulnerability (CVSS 6.5, Cisco IOS XE Software)
- [CVE-2022-20775](https://cve.now/CVE-2022-20775.md): Cisco SD-WAN Software Privilege Escalation Vulnerability (CVSS 7.8, KEV, Cisco Catalyst SD-WAN · Cisco SD-WAN vContainer +2)
- [CVE-2022-20769](https://cve.now/CVE-2022-20769.md): Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability (CVSS 7.4, Cisco Wireless LAN Controller)
- [CVE-2022-20728](https://cve.now/CVE-2022-20728.md): Cisco Access Points VLAN Bypass from Native VLAN Vulnerability (CVSS 4.7, Cisco Aironet Access Point Software)
- [CVE-2022-20662](https://cve.now/CVE-2022-20662.md): Cisco Duo for macOS Authentication Bypass Vulnerability (CVSS 6.1, Cisco Duo)
- [CVE-2022-40923](https://cve.now/CVE-2022-40923.md): A vulnerability in the LIEF::MachO::SegmentCommand::virtual\_address function of LIEF v0.12.1 allows attackers to cause a denial of service ( (CVSS 6.5, lief)
- [CVE-2022-40943](https://cve.now/CVE-2022-40943.md): Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via bwdate-report-ds.php file. (CVSS 9.8)
- [CVE-2022-40756](https://cve.now/CVE-2022-40756.md): If folder security is misconfigured for Actian Zen PSQL BEFORE Patch Update 1 for Zen 15 SP1 (v15.11.005), Patch Update 4 for Zen 15 (v15.01 (CVSS 8.8)
- [CVE-2022-35155](https://cve.now/CVE-2022-35155.md): Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter. (CVSS 6.1)
- [CVE-2022-35156](https://cve.now/CVE-2022-35156.md): Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-p (CVSS 9.8)
- [CVE-2022-41975](https://cve.now/CVE-2022-41975.md): RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI installer Repair mode. (CVSS 7.8)
- [CVE-2022-40944](https://cve.now/CVE-2022-40944.md): Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via sales-report-ds.php file. (CVSS 9.8)
- [CVE-2021-33354](https://cve.now/CVE-2021-33354.md): Directory Traversal vulnerability in htmly before 2.8.1 allows remote attackers to perform arbitrary file deletions via modified file parame (CVSS 8.1)
- [CVE-2022-28851](https://cve.now/CVE-2022-28851.md): AEM Reflected XSS Arbitrary code execution (CVSS 5.4, Adobe Experience Manager)
- [CVE-2021-36855](https://cve.now/CVE-2021-36855.md): WordPress Booking Ultra Pro plugin \<= 1.1.4 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability (CVSS 6.1, Booking Ultra Pro)
- [CVE-2021-36854](https://cve.now/CVE-2021-36854.md): WordPress Booking Ultra Pro plugin \<= 1.1.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities (CVSS 5.4, Booking Ultra Pro)
- [CVE-2022-36965](https://cve.now/CVE-2022-36965.md): Stored and DOM XSS in QoE Applications: Orion Platform (CVSS 6.1, SolarWinds Orion Platform)
- [CVE-2022-32540](https://cve.now/CVE-2022-32540.md): Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 (CVSS 7.4, Bosch BVMS · Bosch VJD-7513)
- [CVE-2022-40316](https://cve.now/CVE-2022-40316.md): The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers ab (CVSS 4.3, moodle · moodle/moodle)
- [CVE-2022-40315](https://cve.now/CVE-2022-40315.md): A limited SQL injection risk was identified in the "browse list of users" site administration page. (CVSS 9.8, moodle · moodle/moodle)
- [CVE-2022-40313](https://cve.now/CVE-2022-40313.md): Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or a page failing to load (CVSS 7.1, moodle · moodle/moodle)
- [CVE-2022-40314](https://cve.now/CVE-2022-40314.md): A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified. (CVSS 9.8, moodle · moodle/moodle)
- [CVE-2022-21826](https://cve.now/CVE-2022-21826.md): Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request, (no CVSS, Pulse Connect Secure VPN Server)
- [CVE-2022-41870](https://cve.now/CVE-2022-41870.md): AP Manager in Innovaphone before 13r2 Service Release 17 allows command injection via a modified service ID during app upload. (CVSS 7.2)
- [CVE-2022-1959](https://cve.now/CVE-2022-1959.md): AppLock version 7.9.29 allows an attacker with physical access to the device to bypass biometric authentication. (CVSS 6.6, AppLock - Fingerprint)
- [CVE-2022-40277](https://cve.now/CVE-2022-40277.md): Joplin version 2.8.8 allows an external attacker to execute arbitrary commands remotely on any client that opens a link in a malicious markd (CVSS 7.8, Joplin)
- [CVE-2022-40274](https://cve.now/CVE-2022-40274.md): Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown fi (CVSS 7.8, Gridea)
- [CVE-2021-36830](https://cve.now/CVE-2021-36830.md): WordPress Comment Guestbook plugin \<= 0.8.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, mibuthu Comment Guestbook)
- [CVE-2021-36839](https://cve.now/CVE-2021-36839.md): WordPress Social Media Follow Buttons Bar plugin \<= 4.73 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, Space X-Chimp Social Media Follow Buttons Bar)
- [CVE-2022-36961](https://cve.now/CVE-2022-36961.md): Orion Platform SQL Injection Privilege Escalation Vulnerability (CVSS 8.8, SolarWinds Orion Platform)
- [CVE-2022-23726](https://cve.now/CVE-2022-23726.md): PingCentral versions prior to listed versions expose Spring Boot actuator endpoints that with administrative authentication return large amo (CVSS 5.4, Ping Identity PingCentral)
- [CVE-2022-41440](https://cve.now/CVE-2022-41440.md): Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php. (CVSS 7.2)
- [CVE-2022-41439](https://cve.now/CVE-2022-41439.md): Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/edituser.php. (CVSS 7.2)
- [CVE-2022-41437](https://cve.now/CVE-2022-41437.md): Billing System Project v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php\_action/createProduc (CVSS 7.2)
- [CVE-2022-37461](https://cve.now/CVE-2022-37461.md): Multiple cross-site scripting (XSS) vulnerabilities in Canon Medical Vitrea View 7.x before 7.7.6 allow remote attackers to inject arbitrary (CVSS 6.1)
- [CVE-2022-3371](https://cve.now/CVE-2022-3371.md): No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb (CVSS 7.5, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-2529](https://cve.now/CVE-2022-2529.md): Multiple DoS Attack Vectors in sflow packet handling (CVSS 7.5, Cloudflare goflow · github.com/cloudflare/goflow +1)
- [CVE-2022-2922](https://cve.now/CVE-2022-2922.md): Relative Path Traversal in dnnsoftware/dnn.platform (CVSS 4.9, dnnsoftware/dnn.platform · DotNetNuke.Core +1)
- [CVE-2022-41848](https://cve.now/CVE-2022-41848.md): drivers/char/pcmcia/synclink\_cs.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically prox (CVSS 4.2)
- [CVE-2022-21222](https://cve.now/CVE-2022-21222.md): Regular Expression Denial of Service (ReDoS) (CVSS 5.3, css-what)
- [CVE-2022-24373](https://cve.now/CVE-2022-24373.md): Regular Expression Denial of Service (ReDoS) (CVSS 5.3, react-native-reanimated)
- [CVE-2022-41845](https://cve.now/CVE-2022-41845.md): An issue was discovered in Bento4 1.6.0-639. (CVSS 5.5)
- [CVE-2022-41846](https://cve.now/CVE-2022-41846.md): An issue was discovered in Bento4 1.6.0-639. (CVSS 5.5)
- [CVE-2022-41847](https://cve.now/CVE-2022-41847.md): An issue was discovered in Bento4 1.6.0-639. (CVSS 5.5)
- [CVE-2022-41841](https://cve.now/CVE-2022-41841.md): An issue was discovered in Bento4 through 1.6.0-639. (CVSS 5.5)
- [CVE-2022-41842](https://cve.now/CVE-2022-41842.md): An issue was discovered in Xpdf 4.04. (CVSS 5.5)
- [CVE-2022-41843](https://cve.now/CVE-2022-41843.md): An issue was discovered in Xpdf 4.04. (CVSS 5.5)
- [CVE-2022-41844](https://cve.now/CVE-2022-41844.md): An issue was discovered in Xpdf 4.04. (CVSS 5.5)
- [CVE-2022-2778](https://cve.now/CVE-2022-2778.md): In affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null bytes. (CVSS 9.8, Octopus Deploy Octopus Server)
- [CVE-2022-41849](https://cve.now/CVE-2022-41849.md): drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximat (no CVSS)
- [CVE-2022-41850](https://cve.now/CVE-2022-41850.md): roccat\_report\_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in cer (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-09-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.