# CVEs published 2022-10-24

37 CVEs were published on October 24, 2022: 11 critical, 5 high. Days are UTC.

- [CVE-2022-33757](https://cve.now/CVE-2022-33757.md): An authenticated attacker could read Nessus Debug Log file attachments from the web UI without having the correct privileges to do so. (CVSS 6.5, Tenable Nessus)
- [CVE-2022-29851](https://cve.now/CVE-2022-29851.md): documentconverter in OX App Suite through 7.10.6, in a non-default configuration with ghostscript, allows OS Command Injection because file (CVSS 9.8)
- [CVE-2022-31468](https://cve.now/CVE-2022-31468.md): OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter. (CVSS 6.1)
- [CVE-2022-38117](https://cve.now/CVE-2022-38117.md): Juiker app - Hard-coded Credentials (CVSS 5.5, Juiker app)
- [CVE-2021-26727](https://cve.now/CVE-2021-26727.md): spx\_restservice SubNet\_handler\_func Multiple Command Injections and Stack-Based Buffer Overflows (CVSS 10.0, Lanner IAC-AST2500A)
- [CVE-2021-26728](https://cve.now/CVE-2021-26728.md): spx\_restservice KillDupUsr\_func Command Injection and Stack-Based Buffer Overflow (CVSS 10.0, Lanner IAC-AST2500A)
- [CVE-2021-26729](https://cve.now/CVE-2021-26729.md): spx\_restservice Login\_handler\_func Command Injection and Multiple Stack-Based Buffer Overflows (CVSS 10.0, Lanner IAC-AST2500A)
- [CVE-2021-26730](https://cve.now/CVE-2021-26730.md): spx\_restservice Login\_handler\_func Subfunction Stack-Based Buffer Overflow (CVSS 10.0, Lanner IAC-AST2500A)
- [CVE-2021-26731](https://cve.now/CVE-2021-26731.md): spx\_restservice modifyUserb\_func Command Injection and Multiple Stack-Based Buffer Overflows (CVSS 9.1, Lanner IAC-AST2500A)
- [CVE-2021-26732](https://cve.now/CVE-2021-26732.md): spx\_restservice First\_network\_func Broken Access Control (CVSS 6.5, Lanner IAC-AST2500A)
- [CVE-2021-26733](https://cve.now/CVE-2021-26733.md): spx\_restservice FirstReset\_handler\_func Broken Access Control (CVSS 5.3, Lanner IAC-AST2500A)
- [CVE-2021-42010](https://cve.now/CVE-2021-42010.md): CRLF log injection (CVSS 9.8, Apache Software Foundation Apache Heron · org.apache.heron:…)
- [CVE-2021-4228](https://cve.now/CVE-2021-4228.md): Hard-coded TLS Certificate (CVSS 5.8, Lanner IAC-AST2500A)
- [CVE-2021-44467](https://cve.now/CVE-2021-44467.md): spx\_restservice KillDupUsr\_func Broken Access Control (CVSS 5.3, Lanner IAC-AST2500A)
- [CVE-2021-44769](https://cve.now/CVE-2021-44769.md): TLS Certificate Generation Function Improper Input Validation (CVSS 4.9, Lanner IAC-AST2500A)
- [CVE-2021-44776](https://cve.now/CVE-2021-44776.md): spx\_restservice SubNet\_handler\_func Broken Access Control (CVSS 6.5, Lanner IAC-AST2500A)
- [CVE-2021-45925](https://cve.now/CVE-2021-45925.md): Username Enumeration (CVSS 5.3, Lanner IAC-AST2500A)
- [CVE-2021-46279](https://cve.now/CVE-2021-46279.md): Session Fixation and Insufficient Session Expiration (CVSS 5.8, Lanner IAC-AST2500A)
- [CVE-2021-46848](https://cve.now/CVE-2021-46848.md): GNU Libtasn1 before 4.19.0 has an ETYPE\_OK off-by-one array size check that affects asn1\_encode\_simple\_der. (CVSS 9.1)
- [CVE-2021-46850](https://cve.now/CVE-2021-46850.md): myVesta Control Panel before 0.9.8-26-43 and Vesta Control Panel before 0.9.8-26 are vulnerable to command injection. (CVSS 7.2)
- [CVE-2022-3344](https://cve.now/CVE-2022-3344.md): A flaw was found in the KVM's AMD nested virtualization (SVM). (CVSS 5.5, Linux kernel)
- [CVE-2022-36368](https://cve.now/CVE-2022-36368.md): Multiple stored cross-site scripting vulnerabilities in the web user interface of IPFire versions prior to 2.27 allows a remote authenticate (CVSS 4.8, IPFire Project IPFire)
- [CVE-2022-3676](https://cve.now/CVE-2022-3676.md): In Eclipse Openj9 before version 0.35.0, interface calls can be inlined without a runtime type check. (CVSS 6.5, The Eclipse Foundation Eclipse OpenJ9)
- [CVE-2022-38580](https://cve.now/CVE-2022-38580.md): Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF). (CVSS 9.8, github.com/zalando/skipper)
- [CVE-2022-39305](https://cve.now/CVE-2022-39305.md): Gin-vue-admin vulnerable to Unrestricted Upload of File with Dangerous Type (CVSS 9.8, flipped-aurora gin-vue-admin)
- [CVE-2022-39313](https://cve.now/CVE-2022-39313.md): Parse Server crashes when receiving file download request with invalid byte range (CVSS 7.5, parse-community parse-server · parse-server)
- [CVE-2022-39314](https://cve.now/CVE-2022-39314.md): User enumeration in the code-based login and password reset forms (CVSS 4.8, getkirby kirby · getkirby/cms)
- [CVE-2022-39836](https://cve.now/CVE-2022-39836.md): An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. (CVSS 5.5)
- [CVE-2022-39837](https://cve.now/CVE-2022-39837.md): An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. (CVSS 5.5)
- [CVE-2022-40690](https://cve.now/CVE-2022-40690.md): Cross-site scripting vulnerability in BookStack versions prior to v22.09 allows a remote authenticated attacker to inject an arbitrary scrip (CVSS 5.4, BookStack)
- [CVE-2022-40984](https://cve.now/CVE-2022-40984.md): Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 allows an attacker to (CVSS 9.8, Yokogawa Test & Measurement WTViewerE series)
- [CVE-2022-41796](https://cve.now/CVE-2022-41796.md): Untrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3 and prior allows an attacker to gain privileg (CVSS 7.8, Sony Content Transfer)
- [CVE-2022-41797](https://cve.now/CVE-2022-41797.md): Improper authorization in handler for custom URL scheme vulnerability in Lemon8 App for Android versions prior to 3.3.5 and Lemon8 App for i (CVSS 6.5, ByteDance K.K. Lemon8 App for Android and Lemon8 App for iOS)
- [CVE-2022-41799](https://cve.now/CVE-2022-41799.md): Improper access control vulnerability in GROWI prior to v5.1.4 (v5 series) and versions prior to v4.5.25 (v4 series) allows a remote authent (CVSS 6.5, WESEEK GROWI v5 series and v4 series)
- [CVE-2022-41986](https://cve.now/CVE-2022-41986.md): Information disclosure vulnerability in Android App 'IIJ SmartKey' versions prior to 2.1.4 allows an attacker to obtain a one-time password (CVSS 7.5, Internet Initiative Japan IIJ SmartKey)
- [CVE-2022-43677](https://cve.now/CVE-2022-43677.md): In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString. (no CVSS, github.com/free5gc/aper · github.com/free5gc/free5gc)
- [CVE-2022-43680](https://cve.now/CVE-2022-43680.md): In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML\_ExternalEntityParserCreate in ou (CVSS 7.5, platform/external/expat)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-10-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.