# CVEs published 2022-10-28

84 CVEs were published on October 28, 2022: 28 critical, 19 high. Days are UTC.

- [CVE-2022-3708](https://cve.now/CVE-2022-3708.md): Web Stories \<= 1.24.0 - Server Side Request Forgery (CVSS 9.6, google Web Stories)
- [CVE-2022-3402](https://cve.now/CVE-2022-3402.md): Log HTTP Requests \<= 1.3.1 - Stored Cross-Site Scripting (CVSS 6.1, mgibbs189 Log HTTP Requests)
- [CVE-2022-3401](https://cve.now/CVE-2022-3401.md): The Bricks theme for WordPress is vulnerable to remote code execution due to the theme allowing site editors to include executable code bloc (CVSS 8.8, Bricks Builder Bricks)
- [CVE-2022-3228](https://cve.now/CVE-2022-3228.md): Using custom code, an attacker can write into name or description fields larger than the appropriate buffer size causing a stack-based buffe (CVSS 6.5, Host Engineering H0-ECOM100 Communications Module)
- [CVE-2022-41636](https://cve.now/CVE-2022-41636.md): Communication traffic involving "Ethernet Q Commands" service of Haas Controller version 100.20.000.1110 is transmitted in cleartext. (CVSS 9.1, Haas CNC Controller)
- [CVE-2022-2475](https://cve.now/CVE-2022-2475.md): Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service. (CVSS 9.8, Haas CNC Controller)
- [CVE-2022-2474](https://cve.now/CVE-2022-2474.md): Authentication is currently unsupported in Haas Controller version 100.20.000.1110 when using the “Ethernet Q Commands” service, which allow (CVSS 9.8, Haas CNC Controller)
- [CVE-2022-41648](https://cve.now/CVE-2022-41648.md): The HEIDENHAIN Controller TNC 640 NC software Version 340590 07 SP5, is vulnerable to improper authentication in its DNC communication for C (CVSS 9.2, HEIDENHAIN Controller TNC 640 NC Software)
- [CVE-2021-36898](https://cve.now/CVE-2021-36898.md): WordPress Quiz And Survey Master plugin \<= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability (CVSS 7.5, ExpressTech Quiz And Survey Master)
- [CVE-2021-36864](https://cve.now/CVE-2021-36864.md): WordPress Quiz And Survey Master plugin \<= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability (CVSS 3.4, ExpressTech Quiz And Survey Master)
- [CVE-2022-3400](https://cve.now/CVE-2022-3400.md): The Bricks theme for WordPress is vulnerable to authorization bypass due to a missing capability check on the bricks\_save\_post AJAX action i (CVSS 6.5, Bricks Builder Bricks)
- [CVE-2022-2864](https://cve.now/CVE-2022-2864.md): The demon image annotation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.7. (CVSS 8.8, demonisblack demon image annotation)
- [CVE-2021-36863](https://cve.now/CVE-2021-36863.md): WordPress Quiz And Survey Master plugin \<= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability (CVSS 5.4, ExpressTech Quiz And Survey Master)
- [CVE-2021-36858](https://cve.now/CVE-2021-36858.md): WordPress Testimonials plugin \<= 2.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, Themepoints Testimonials)
- [CVE-2022-37426](https://cve.now/CVE-2022-37426.md): Unrestricted Upload of File with Dangerous Type vulnerability in OpenNebula OpenNebula core on Linux allows File Content Injection. (CVSS 4.3)
- [CVE-2022-37425](https://cve.now/CVE-2022-37425.md): The FILES directive inside a VM template allows execution of uploaded files when the template is instantiated, resulting in a Remote Code Execution (RCE) attack. (CVSS 9.9)
- [CVE-2022-37424](https://cve.now/CVE-2022-37424.md): The FILES Directive allows arbitrary files from the frontend system (including sensitive files) to be included when a VM is started from that template, which may result in Information Disclosure. (CVSS 6.5)
- [CVE-2022-3320](https://cve.now/CVE-2022-3320.md): Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command (CVSS 6.7, Cloudflare WARP)
- [CVE-2022-3322](https://cve.now/CVE-2022-3322.md): Lock WARP switch bypass on WARP mobile client using iOS quick action (CVSS 6.7, Cloudflare WARP)
- [CVE-2022-3337](https://cve.now/CVE-2022-3337.md): Lock WARP switch bypass by removing VPN profile on iOS mobile client (CVSS 6.7, Cloudflare WARP)
- [CVE-2022-3321](https://cve.now/CVE-2022-3321.md): Lock WARP switch feature bypass on WARP mobile client for iOS (CVSS 6.7, Cloudflare WARP)
- [CVE-2022-3512](https://cve.now/CVE-2022-3512.md): Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command (CVSS 6.7, Cloudflare WARP)
- [CVE-2022-3616](https://cve.now/CVE-2022-3616.md): OctoRPKI crash when maximum iterations number is reached (CVSS 5.4, Cloudflare OctoRPKI · github.com/cloudflare/cfrpki)
- [CVE-2021-38397](https://cve.now/CVE-2021-38397.md): Honeywell Experion PKS and ACE Controllers Unrestricted Upload of File with Dangerous Type (CVSS 10.0, Honeywell Experion PKS)
- [CVE-2021-38395](https://cve.now/CVE-2021-38395.md): Honeywell Experion PKS and ACE Controllers Injection (CVSS 9.1, Honeywell Experion PKS)
- [CVE-2021-38399](https://cve.now/CVE-2021-38399.md): Honeywell Experion PKS and ACE Controllers Relative Path Traversal (CVSS 7.5, Honeywell Experion PKS)
- [CVE-2021-36206](https://cve.now/CVE-2021-36206.md): CEVAS (CVSS 10.0, Johnson Controls CEVAS)
- [CVE-2022-33859](https://cve.now/CVE-2022-33859.md): Unrestricted file upload in Eaton Foreseer EPMS (CVSS 8.1, Eaton Foreseer EPMS)
- [CVE-2021-35387](https://cve.now/CVE-2021-35387.md): Hospital Management System v 4.0 is vulnerable to SQL Injection via file:hospital/hms/admin/view-patient.php. (CVSS 8.8)
- [CVE-2021-35388](https://cve.now/CVE-2021-35388.md): Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php. (CVSS 5.4)
- [CVE-2021-37781](https://cve.now/CVE-2021-37781.md): Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php. (CVSS 5.4)
- [CVE-2021-37782](https://cve.now/CVE-2021-37782.md): Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php. (CVSS 9.8)
- [CVE-2021-38217](https://cve.now/CVE-2021-38217.md): SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS\_User.php. (CVSS 9.8)
- [CVE-2021-38728](https://cve.now/CVE-2021-38728.md): SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant\_M\_Coup.php. (CVSS 6.1)
- [CVE-2021-38729](https://cve.now/CVE-2021-38729.md): SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant\_Plist.php. (CVSS 9.8)
- [CVE-2021-38730](https://cve.now/CVE-2021-38730.md): SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant\_Info.php. (CVSS 9.8)
- [CVE-2021-38731](https://cve.now/CVE-2021-38731.md): SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant\_Zekou.php. (CVSS 9.8)
- [CVE-2021-38732](https://cve.now/CVE-2021-38732.md): SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant\_Message.php. (CVSS 9.8)
- [CVE-2021-38733](https://cve.now/CVE-2021-38733.md): SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant\_BlogCat.php. (CVSS 9.8)
- [CVE-2021-38734](https://cve.now/CVE-2021-38734.md): SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant\_Menu.php. (CVSS 9.8)
- [CVE-2021-38736](https://cve.now/CVE-2021-38736.md): SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant\_Global.php. (CVSS 9.8)
- [CVE-2021-38737](https://cve.now/CVE-2021-38737.md): SEMCMS v 1.1 is vulnerable to SQL Injection via Ant\_Pro.php. (CVSS 9.8)
- [CVE-2022-26884](https://cve.now/CVE-2022-26884.md): Apache DolphinScheduler exposes files without authentication (CVSS 6.5, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2022-2826](https://cve.now/CVE-2022-2826.md): An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.1 (CVSS 2.7, GitLab)
- [CVE-2022-2882](https://cve.now/CVE-2022-2882.md): An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.2.5, all versions starting from 15.3 before (CVSS 5.5, GitLab)
- [CVE-2022-3018](https://cve.now/CVE-2022-3018.md): An information disclosure vulnerability in GitLab CE/EE affecting all versions starting from 9.3 before 15.2.5, all versions starting from 1 (CVSS 6.8, GitLab)
- [CVE-2022-31678](https://cve.now/CVE-2022-31678.md): VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerability. (CVSS 9.1, VMware Cloud Foundation)
- [CVE-2022-3697](https://cve.now/CVE-2022-3697.md): A flaw was found in Ansible in the amazon.aws collection when using the tower\_callback parameter from the amazon.aws.ec2\_instance module. (no CVSS, ansible, ansible community.aws, ansible amazon.aws · ansible)
- [CVE-2022-3729](https://cve.now/CVE-2022-3729.md): seccome Ehoney attack sql injection (CVSS 6.3, seccome Ehoney)
- [CVE-2022-3730](https://cve.now/CVE-2022-3730.md): seccome Ehoney falco sql injection (CVSS 6.3, seccome Ehoney)
- [CVE-2022-3731](https://cve.now/CVE-2022-3731.md): seccome Ehoney token sql injection (CVSS 6.3, seccome Ehoney)
- [CVE-2022-3732](https://cve.now/CVE-2022-3732.md): seccome Ehoney set sql injection (CVSS 6.3, seccome Ehoney)
- [CVE-2022-3733](https://cve.now/CVE-2022-3733.md): SourceCodester Web-Based Student Clearance System edit-admin.php sql injection (CVSS 5.0, SourceCodester Web-Based Student Clearance System)
- [CVE-2022-3734](https://cve.now/CVE-2022-3734.md): Redis on Windows dbghelp.dll uncontrolled search path (CVSS 6.3, Redis)
- [CVE-2022-3735](https://cve.now/CVE-2022-3735.md): seccome Ehoney signup access control (CVSS 6.3, seccome Ehoney)
- [CVE-2022-3741](https://cve.now/CVE-2022-3741.md): Improper Restriction of Excessive Authentication Attempts in chatwoot/chatwoot (CVSS 9.4, chatwoot/chatwoot)
- [CVE-2022-37621](https://cve.now/CVE-2022-37621.md): Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable (CVSS 9.8, browserify-shim)
- [CVE-2022-37913](https://cve.now/CVE-2022-37913.md): Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote att (CVSS 9.8, Aruba EdgeConnect Enterprise Orchestrator (on-premises), Ar…)
- [CVE-2022-37914](https://cve.now/CVE-2022-37914.md): Vulnerabilities in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote att (CVSS 9.8, Aruba EdgeConnect Enterprise Orchestrator (on-premises), Ar…)
- [CVE-2022-37915](https://cve.now/CVE-2022-37915.md): A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an unauthenticated remote att (CVSS 9.8, Aruba EdgeConnect Enterprise Orchestrator)
- [CVE-2022-39366](https://cve.now/CVE-2022-39366.md): DataHub missing JWT signature check (CVSS 9.9, datahub-project datahub · acryl-datahub)
- [CVE-2022-39367](https://cve.now/CVE-2022-39367.md): Vulnerability in handling of uploaded QTI ZIP files (CVSS 8.6, davemckain qtiworks)
- [CVE-2022-43164](https://cve.now/CVE-2022-43164.md): A stored cross-site scripting (XSS) vulnerability in the Global Lists feature (/index.php?module=global\_lists/lists) of Rukovoditel v3.2.1 a (CVSS 5.4)
- [CVE-2022-43165](https://cve.now/CVE-2022-43165.md): A stored cross-site scripting (XSS) vulnerability in the Global Variables feature (/index.php?module=global\_vars/vars) of Rukovoditel v3.2.1 (CVSS 5.4)
- [CVE-2022-43166](https://cve.now/CVE-2022-43166.md): A stored cross-site scripting (XSS) vulnerability in the Global Entities feature (/index.php?module=entities/entities) of Rukovoditel v3.2.1 (CVSS 5.4)
- [CVE-2022-43167](https://cve.now/CVE-2022-43167.md): A stored cross-site scripting (XSS) vulnerability in the Users Alerts feature (/index.php?module=users\_alerts/users\_alerts) of Rukovoditel v (CVSS 5.4)
- [CVE-2022-43168](https://cve.now/CVE-2022-43168.md): Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the reports\_id parameter. (CVSS 9.8)
- [CVE-2022-43169](https://cve.now/CVE-2022-43169.md): A stored cross-site scripting (XSS) vulnerability in the Users Access Groups feature (/index.php?module=users\_groups/users\_groups) of Rukovo (CVSS 5.4)
- [CVE-2022-43170](https://cve.now/CVE-2022-43170.md): A stored cross-site scripting (XSS) vulnerability in the Dashboard Configuration feature (index.php?module=dashboard\_configure/index) of Ruk (CVSS 5.4)
- [CVE-2022-43228](https://cve.now/CVE-2022-43228.md): Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden\_id parameter at /clearance/clearance. (CVSS 7.2)
- [CVE-2022-43229](https://cve.now/CVE-2022-43229.md): Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/update\_ (CVSS 7.2)
- [CVE-2022-43230](https://cve.now/CVE-2022-43230.md): Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=book (CVSS 7.2)
- [CVE-2022-43231](https://cve.now/CVE-2022-43231.md): Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/manage\_website.php. (CVSS 7.2)
- [CVE-2022-43232](https://cve.now/CVE-2022-43232.md): Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php\_action/fetchOrderDat (CVSS 7.2)
- [CVE-2022-43233](https://cve.now/CVE-2022-43233.md): Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /php\_action/fetchSelected (CVSS 7.2)
- [CVE-2022-43275](https://cve.now/CVE-2022-43275.md): Canteen Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /youthappam/php\_action/editProductImage. (CVSS 7.2)
- [CVE-2022-43276](https://cve.now/CVE-2022-43276.md): Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the productId parameter at /php\_action/fetchSelec (CVSS 7.2)
- [CVE-2022-43280](https://cve.now/CVE-2022-43280.md): wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-\>GetReturnCallDropKeepCount. (CVSS 7.1)
- [CVE-2022-43281](https://cve.now/CVE-2022-43281.md): wasm-interp v1.0.29 was discovered to contain a heap overflow via the component std::vector\<wabt::Type, std::allocator\<wabt::Type\>\>::size() (CVSS 7.8, wabt)
- [CVE-2022-43282](https://cve.now/CVE-2022-43282.md): wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallIndirectExpr-\>GetReturnCallDropKeepCount. (CVSS 7.1)
- [CVE-2022-43283](https://cve.now/CVE-2022-43283.md): wasm2c v1.0.29 was discovered to contain an abort in CWriter::Write. (CVSS 5.5)
- [CVE-2022-43284](https://cve.now/CVE-2022-43284.md): Nginx NJS v0.7.2 to v0.7.4 was discovered to contain a segmentation violation via njs\_scope\_valid\_value at njs\_scope.h. (no CVSS)
- [CVE-2022-43285](https://cve.now/CVE-2022-43285.md): Nginx NJS v0.7.4 was discovered to contain a segmentation violation in njs\_promise\_reaction\_job. (CVSS 7.5)
- [CVE-2022-43286](https://cve.now/CVE-2022-43286.md): Nginx NJS v0.7.2 was discovered to contain a heap-use-after-free bug caused by illegal memory copy in the function njs\_json\_parse\_iterator\_c (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-10-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.