CVEs published October 28, 2022
84 CVEs were published on October 28, 2022: 28 critical, 19 high.
- Published
- 84
- Critical
- 28
- High
- 19
- Medium
- 33
- Low
- 2
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 16
Most affected products
- Cloudflare WARP
- 5
- seccome Ehoney
- 5
- ExpressTech Quiz And Survey Master
- 3
- GitLab
- 3
- Haas CNC Controller
- 3
- Honeywell Experion PKS
- 3
- Aruba EdgeConnect Enterprise Orchestrator (on-premises), Ar…
- 2
- Bricks Builder Bricks
- 2
- ansible, ansible community.aws, ansible amazon.aws · ansible
- 1
- Apache Software Foundation Apache DolphinScheduler · org.ap…
- 1
Critical 28
- CVE-2022-3708Web Stories <= 1.24.0 - Server Side Request Forgerygoogle Web Stories
- CVE-2022-41636Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext.Haas CNC Controller
- CVE-2022-2475Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service.Haas CNC Controller
- CVE-2022-2474Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allowHaas CNC Controller
- CVE-2022-41648The HEIDENHAIN Controller TNC 640 NC software Version 340590 07 SP5, is vulnerable to improper authentication in its DNC communication for CHEIDENHAIN Controller TNC 640 NC Software
- CVE-2022-37425The FILES directive inside a VM template allows execution of uploaded files when the template is instantiated, resulting in a Remote Code Execution (RCE) attack.
- CVE-2021-38397Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous TypeHoneywell Experion PKS
- CVE-2021-38395Honeywell Experion PKS and ACE Controllers InjectionHoneywell Experion PKS
- CVE-2021-36206CEVASJohnson Controls CEVAS
- CVE-2021-37782Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php.
- CVE-2021-38217SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php.
- CVE-2021-38729SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php.
- CVE-2021-38730SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php.
- CVE-2021-38731SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php.
- CVE-2021-38732SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php.
- CVE-2021-38733SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php.
- CVE-2021-38734SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php.
- CVE-2021-38736SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php.
- CVE-2021-38737SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php.
- CVE-2022-31678VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability.VMware Cloud Foundation
- CVE-2022-3741Improper Restriction of Excessive Authentication Attempts in chatwoot/chatwootchatwoot/chatwoot
- CVE-2022-37621Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable browserify-shim
- CVE-2022-37913Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attAruba EdgeConnect Enterprise Orchestrator (on-premises), Ar…
- CVE-2022-37914Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attAruba EdgeConnect Enterprise Orchestrator (on-premises), Ar…
- CVE-2022-37915A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote attAruba EdgeConnect Enterprise Orchestrator
- CVE-2022-39366DataHub missing JWT signature checkdatahub-project datahub · acryl-datahub
- CVE-2022-43168Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports_id parameter.
- CVE-2022-43286Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs_json_parse_iterator_c
High 19
- CVE-2022-3401The Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include executable code blocBricks Builder Bricks
- CVE-2021-36898WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerabilityExpressTech Quiz And Survey Master
- CVE-2022-2864The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.7.demonisblack demon image annotation
- CVE-2021-38399Honeywell Experion PKS and ACE Controllers Relative Path TraversalHoneywell Experion PKS
- CVE-2022-33859Unrestricted file upload in Eaton Foreseer EPMSEaton Foreseer EPMS
- CVE-2021-35387Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php.
- CVE-2022-39367Vulnerability in handling of uploaded QTI ZIP filesdavemckain qtiworks
- CVE-2022-43228Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /clearance/clearance.
- CVE-2022-43229Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/update_
- CVE-2022-43230Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=book
- CVE-2022-43231Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/manage_website.php.
- CVE-2022-43232Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php_action/fetchOrderDat
- CVE-2022-43233Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php_action/fetchSelected
- CVE-2022-43275Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/php_action/editProductImage.
- CVE-2022-43276Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /php_action/fetchSelec
- CVE-2022-43280wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr->GetReturnCallDropKeepCount.
- CVE-2022-43281wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector<wabt::Type, std::allocator<wabt::Type>>::size() wabt
- CVE-2022-43282wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr->GetReturnCallDropKeepCount.
- CVE-2022-43285Nginx NJS v0.7.4 was discovered to contain a segmentation violation in njs_promise_reaction_job.
Medium, low and unrated 37
- CVE-2022-3402Log HTTP Requests <= 1.3.1 - Stored Cross-Site Scriptingmgibbs189 Log HTTP Requests
- CVE-2022-3228Using custom code, an attacker can write into name or description fields larger than the appropriate buffer size causing a stack-based buffeHost Engineering H0-ECOM100 Communications Module
- CVE-2021-36864WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerabilityExpressTech Quiz And Survey Master
- CVE-2022-3400The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks_save_post AJAX action iBricks Builder Bricks
- CVE-2021-36863WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityExpressTech Quiz And Survey Master
- CVE-2021-36858WordPress Testimonials plugin <= 2.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityThemepoints Testimonials
- CVE-2022-37426Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Content Injection.
- CVE-2022-37424The FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure.
- CVE-2022-3320Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint commandCloudflare WARP
- CVE-2022-3322Lock WARP switch bypass on WARP mobile client using iOS quick actionCloudflare WARP
- CVE-2022-3337Lock WARP switch bypass by removing VPN profile on iOS mobile clientCloudflare WARP
- CVE-2022-3321Lock WARP switch feature bypass on WARP mobile client for iOSCloudflare WARP
- CVE-2022-3512Lock WARP switch bypass using warp-cli 'add-trusted-ssid' commandCloudflare WARP
- CVE-2022-3616OctoRPKI crash when maximum iterations number is reachedCloudflare OctoRPKI · github.com/cloudflare/cfrpki
- CVE-2021-35388Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php.
- CVE-2021-37781Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php.
- CVE-2021-38728SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php.
- CVE-2022-26884Apache DolphinScheduler exposes files without authenticationApache Software Foundation Apache DolphinScheduler · org.ap…
- CVE-2022-2826An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.1GitLab
- CVE-2022-2882An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 beforeGitLab
- CVE-2022-3018An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 1GitLab
- CVE-2022-3697A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module.ansible, ansible community.aws, ansible amazon.aws · ansible
- CVE-2022-3729seccome Ehoney attack sql injectionseccome Ehoney
- CVE-2022-3730seccome Ehoney falco sql injectionseccome Ehoney
- CVE-2022-3731seccome Ehoney token sql injectionseccome Ehoney
- CVE-2022-3732seccome Ehoney set sql injectionseccome Ehoney
- CVE-2022-3733SourceCodester Web-Based Student Clearance System edit-admin.php sql injectionSourceCodester Web-Based Student Clearance System
- CVE-2022-3734Redis on Windows dbghelp.dll uncontrolled search pathRedis
- CVE-2022-3735seccome Ehoney signup access controlseccome Ehoney
- CVE-2022-43164A stored cross-site scripting (XSS) vulnerability in the Global Lists feature (/index.php?module=global_lists/lists) of Rukovoditel v3.2.1 a
- CVE-2022-43165A stored cross-site scripting (XSS) vulnerability in the Global Variables feature (/index.php?module=global_vars/vars) of Rukovoditel v3.2.1
- CVE-2022-43166A stored cross-site scripting (XSS) vulnerability in the Global Entities feature (/index.php?module=entities/entities) of Rukovoditel v3.2.1
- CVE-2022-43167A stored cross-site scripting (XSS) vulnerability in the Users Alerts feature (/index.php?module=users_alerts/users_alerts) of Rukovoditel v
- CVE-2022-43169A stored cross-site scripting (XSS) vulnerability in the Users Access Groups feature (/index.php?module=users_groups/users_groups) of Rukovo
- CVE-2022-43170A stored cross-site scripting (XSS) vulnerability in the Dashboard Configuration feature (index.php?module=dashboard_configure/index) of Ruk
- CVE-2022-43283wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write.
- CVE-2022-43284Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs_scope_valid_value at njs_scope.h.