# CVEs published 2022-10-13

63 CVEs were published on October 13, 2022: 6 critical, 31 high. Days are UTC.

- [CVE-2021-20030](https://cve.now/CVE-2021-20030.md): SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing (CVSS 7.5, SonicWall GMS)
- [CVE-2022-24697](https://cve.now/CVE-2022-24697.md): Apache Kylin prior to 4.0.2 allows command injection when the configuration overwrites function overwrites system parameters (CVSS 9.8, Apache Software Foundation Apache Kylin · org.apache.kyl… +2)
- [CVE-2022-2828](https://cve.now/CVE-2022-2828.md): In affected versions of Octopus Server it is possible to reveal information about teams via the API due to an Insecure Direct Object Referen (CVSS 6.5, Octopus Deploy Octopus Server)
- [CVE-2022-31123](https://cve.now/CVE-2022-31123.md): Grafana plugin signature bypass vulnerability (CVSS 6.1, grafana · github.com/grafana/grafana)
- [CVE-2022-31130](https://cve.now/CVE-2022-31130.md): Grafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins (CVSS 4.9, grafana · github.com/grafana/grafana)
- [CVE-2022-34020](https://cve.now/CVE-2022-34020.md): Cross Site Request Forgery (CSRF) vulnerability in ResIOT ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 allows attackers (CVSS 8.8)
- [CVE-2022-34021](https://cve.now/CVE-2022-34021.md): Multiple Cross Site Scripting (XSS) vulnerabilities in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via the form fields. (CVSS 5.4)
- [CVE-2022-34022](https://cve.now/CVE-2022-34022.md): SQL injection vulnerability in ResIOT IOT Platform + LoRaWAN Network Server through 4.1.1000114 via a crafted POST request to /ResiotQueryDB (CVSS 7.2)
- [CVE-2022-3456](https://cve.now/CVE-2022-3456.md): Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (CVSS 5.6, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-3457](https://cve.now/CVE-2022-3457.md): Origin Validation Error in ikus060/rdiffweb (CVSS 3.7, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-3492](https://cve.now/CVE-2022-3492.md): SourceCodester Human Resource Management System Profile Photo os command injection (CVSS 6.3, SourceCodester Human Resource Management System)
- [CVE-2022-3493](https://cve.now/CVE-2022-3493.md): SourceCodester Human Resource Management System Add Employee cross site scripting (CVSS 3.5, SourceCodester Human Resource Management System)
- [CVE-2022-35080](https://cve.now/CVE-2022-35080.md): SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png\_load at /lib/png.c. (CVSS 5.5)
- [CVE-2022-35081](https://cve.now/CVE-2022-35081.md): SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via png\_read\_header at /src/png2swf.c. (CVSS 5.5)
- [CVE-2022-35134](https://cve.now/CVE-2022-35134.md): Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability. (CVSS 5.4)
- [CVE-2022-35135](https://cve.now/CVE-2022-35135.md): Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/\<uuid\>. (CVSS 8.8)
- [CVE-2022-35136](https://cve.now/CVE-2022-35136.md): Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests. (CVSS 6.5)
- [CVE-2022-35611](https://cve.now/CVE-2022-35611.md): A Cross-Site Request Forgery (CSRF) in MQTTRoute v3.3 and below allows attackers to create and remove dashboards. (CVSS 4.3)
- [CVE-2022-35612](https://cve.now/CVE-2022-35612.md): A cross-site scripting (XSS) vulnerability in MQTTRoute v3.3 and below allows attackers to execute arbitrary web scripts or HTML via a craft (CVSS 5.4)
- [CVE-2022-35944](https://cve.now/CVE-2022-35944.md): October CMS Safe Mode bypass leads to authenticated RCE (Remote Code Execution) (CVSS 6.2, octobercms october · october/system)
- [CVE-2022-37208](https://cve.now/CVE-2022-37208.md): JFinal CMS 5.1.0 is vulnerable to SQL Injection. (CVSS 8.8)
- [CVE-2022-38902](https://cve.now/CVE-2022-38902.md): A Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in Liferay Digital Experience Platform 7.3.10 SP (CVSS 5.4)
- [CVE-2022-39201](https://cve.now/CVE-2022-39201.md): Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins (CVSS 6.8, grafana · github.com/grafana/grafana)
- [CVE-2022-39229](https://cve.now/CVE-2022-39229.md): Grafana users with email as a username can block other users from signing in (CVSS 4.3, grafana · github.com/grafana/grafana)
- [CVE-2022-39278](https://cve.now/CVE-2022-39278.md): Istio vulnerable to denial of service attack due to Golang Regex Library (CVSS 7.5, istio)
- [CVE-2022-39293](https://cve.now/CVE-2022-39293.md): Azure RTOS USBX Host PIMA vulnerable to read integer underflow with buffer overflow (CVSS 8.6, azure-rtos usbx)
- [CVE-2022-39295](https://cve.now/CVE-2022-39295.md): Improper Neutralization of Alternate XSS Syntax in Knowage-Server (CVSS 6.1, KnowageLabs Knowage-Server)
- [CVE-2022-39300](https://cve.now/CVE-2022-39300.md): Signature bypass via multiple root elements in node-SAML (CVSS 7.7, node-saml)
- [CVE-2022-39302](https://cve.now/CVE-2022-39302.md): Ree6 may bypass webhook protection (CVSS 5.5, Ree6-Applications Ree6)
- [CVE-2022-39303](https://cve.now/CVE-2022-39303.md): Ree6 vulnerable to SQL Injection (CVSS 8.1, Ree6-Applications Ree6)
- [CVE-2022-40187](https://cve.now/CVE-2022-40187.md): Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework (TCF) service enabled. (CVSS 8.0)
- [CVE-2022-41390](https://cve.now/CVE-2022-41390.md): OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php. (CVSS 9.8)
- [CVE-2022-41391](https://cve.now/CVE-2022-41391.md): OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php. (CVSS 9.8)
- [CVE-2022-41473](https://cve.now/CVE-2022-41473.md): RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Search function. (CVSS 6.1)
- [CVE-2022-41474](https://cve.now/CVE-2022-41474.md): RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily change the password of any (CVSS 6.5)
- [CVE-2022-41475](https://cve.now/CVE-2022-41475.md): RPCMS v3.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add an administrator accoun (CVSS 8.8)
- [CVE-2022-41480](https://cve.now/CVE-2022-41480.md): Tenda AC1200 US\_AC6V2.0RTL\_V15.03.06.51\_multi\_TDE01 was discovered to contain a buffer overflow in the 0x475dc function. (CVSS 7.5)
- [CVE-2022-41481](https://cve.now/CVE-2022-41481.md): Tenda AC1200 US\_AC6V2.0RTL\_V15.03.06.51\_multi\_TDE01 was discovered to contain a buffer overflow in the 0x47de1c function. (CVSS 7.5)
- [CVE-2022-41482](https://cve.now/CVE-2022-41482.md): Tenda AC1200 US\_AC6V2.0RTL\_V15.03.06.51\_multi\_TDE01 was discovered to contain a buffer overflow in the 0x47c5dc function. (CVSS 7.5)
- [CVE-2022-41483](https://cve.now/CVE-2022-41483.md): Tenda AC1200 US\_AC6V2.0RTL\_V15.03.06.51\_multi\_TDE01 was discovered to contain a buffer overflow in the 0x4a12cc function. (CVSS 7.5)
- [CVE-2022-41484](https://cve.now/CVE-2022-41484.md): Tenda AC1900 AP500(US)\_V1\_180320(Beta) was discovered to contain a buffer overflow in the 0x32384 function. (CVSS 7.5)
- [CVE-2022-41485](https://cve.now/CVE-2022-41485.md): Tenda AC1200 US\_AC6V2.0RTL\_V15.03.06.51\_multi\_TDE01 was discovered to contain a buffer overflow in the 0x47ce00 function. (CVSS 7.5)
- [CVE-2022-41489](https://cve.now/CVE-2022-41489.md): WAYOS LQ\_09 22.03.17V was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to send crafted requests to the s (CVSS 8.1)
- [CVE-2022-41495](https://cve.now/CVE-2022-41495.md): ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the rss\_url\_news parameter at /manager/index.php. (CVSS 9.8)
- [CVE-2022-41496](https://cve.now/CVE-2022-41496.md): iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php. (CVSS 9.8)
- [CVE-2022-41497](https://cve.now/CVE-2022-41497.md): ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg\_url parameter at /manager/index.php. (CVSS 9.8)
- [CVE-2022-41533](https://cve.now/CVE-2022-41533.md): Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php\_action/ (CVSS 7.2)
- [CVE-2022-41534](https://cve.now/CVE-2022-41534.md): Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php\_action/ (CVSS 7.2)
- [CVE-2022-41674](https://cve.now/CVE-2022-41674.md): An issue was discovered in the Linux kernel before 5.19.16. (CVSS 8.1, :linux\_kernel:)
- [CVE-2022-42156](https://cve.now/CVE-2022-42156.md): D-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomography\_ping\_number parameter at function (CVSS 8.8)
- [CVE-2022-42159](https://cve.now/CVE-2022-42159.md): D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator. (CVSS 4.3)
- [CVE-2022-42160](https://cve.now/CVE-2022-42160.md): D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the system\_time\_timezone parameter at funct (CVSS 8.8)
- [CVE-2022-42161](https://cve.now/CVE-2022-42161.md): D-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at functio (CVSS 8.8)
- [CVE-2022-42719](https://cve.now/CVE-2022-42719.md): A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be use (CVSS 8.8, :linux\_kernel:)
- [CVE-2022-42720](https://cve.now/CVE-2022-42720.md): Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used (CVSS 7.8, :linux\_kernel:)
- [CVE-2022-42721](https://cve.now/CVE-2022-42721.md): A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local att (CVSS 5.5, :linux\_kernel:)
- [CVE-2022-42722](https://cve.now/CVE-2022-42722.md): In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL (no CVSS)
- [CVE-2022-42889](https://cve.now/CVE-2022-42889.md): Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults (no CVSS, Apache Software Foundation Apache Commons Text · org.apa… +1)
- [CVE-2022-42899](https://cve.now/CVE-2022-42899.md): Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read and stack overflow issues when opening crafte (CVSS 7.8)
- [CVE-2022-42900](https://cve.now/CVE-2022-42900.md): Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds read issues when opening crafted FBX files. (CVSS 7.8)
- [CVE-2022-42901](https://cve.now/CVE-2022-42901.md): Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT (CVSS 7.8)
- [CVE-2022-42902](https://cve.now/CVE-2022-42902.md): In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava\_server/lavatable.py. (CVSS 8.8)
- [CVE-2022-42906](https://cve.now/CVE-2022-42906.md): powerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbitrary code execution. (CVSS 7.8, powerline-gitstatus)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.