# CVEs published 2022-11-01

211 CVEs were published on November 1, 2022: 10 critical, 81 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2022-3781](https://cve.now/CVE-2022-3781.md): Dashlane password and Keepass Server password in My Account Settings are not encrypted in the database in Devolutions Remote Desktop Manage (CVSS 6.5, Devolutions Remote Desktop Manager · Devolutions Server)
- [CVE-2022-3780](https://cve.now/CVE-2022-3780.md): Database connections on deleted users could stay active on MySQL data sources in Remote Desktop Manager 2022.3.7 and below which allow delet (CVSS 7.5, Devolutions Remote Desktop Manager)
- [CVE-2022-3509](https://cve.now/CVE-2022-3509.md): Parsing issue in protobuf textformat (CVSS 7.5, Google ProtocolBuffers · com.google.protobuf:protobuf-ja… +1)
- [CVE-2020-4099](https://cve.now/CVE-2020-4099.md): HCL Verse for Android is susceptible to an APK signing key check vulnerability (CVSS 5.9, HCL Software HCL Verse for Android)
- [CVE-2022-3369](https://cve.now/CVE-2022-3369.md): Improper handling of registry symbolic links in Bitdefender Engines (CVSS 8.6, Bitdefender Engines)
- [CVE-2022-25885](https://cve.now/CVE-2022-25885.md): Denial of Service (DoS) (CVSS 7.5, muhammara · hummus)
- [CVE-2022-41553](https://cve.now/CVE-2022-41553.md): Information Exposure Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer (CVSS 6.5, Hitachi Infrastructure Analytics Advisor · Hitachi Ops Cent…)
- [CVE-2022-41552](https://cve.now/CVE-2022-41552.md): Server-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer (CVSS 9.8, Hitachi Infrastructure Analytics Advisor · Hitachi Ops Cent…)
- [CVE-2022-3191](https://cve.now/CVE-2022-3191.md): Information Exposure Vulnerability in Hitachi Ops Center Analyzer (CVSS 6.6, Hitachi Ops Center Analyzer)
- [CVE-2020-36605](https://cve.now/CVE-2020-36605.md): File Permissions Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer, Hitachi Ops Center Viewpoint (CVSS 6.6, Hitachi Infrastructure Analytics Advisor · Hitachi Ops C… +1)
- [CVE-2022-22658](https://cve.now/CVE-2022-22658.md): An input validation issue was addressed with improved input validation. (CVSS 6.5, Apple iOS)
- [CVE-2022-22677](https://cve.now/CVE-2022-22677.md): A logic issue in the handling of concurrent media was addressed with improved state handling. (CVSS 4.3, Apple macOS)
- [CVE-2022-23738](https://cve.now/CVE-2022-23738.md): Incomplete cache verification issue in GitHub Enterprise Server leading to exposure of private repo files (CVSS 5.7, GitHub Enterprise Server)
- [CVE-2022-2572](https://cve.now/CVE-2022-2572.md): In affected versions of Octopus Server where access is managed by an external authentication provider, it was possible that the API key/keys (CVSS 9.8, Octopus Deploy Octopus Server)
- [CVE-2022-25892](https://cve.now/CVE-2022-25892.md): Denial of Service (DoS) (CVSS 7.5, muhammara · hummus)
- [CVE-2022-26709](https://cve.now/CVE-2022-26709.md): A use after free issue was addressed with improved memory management. (CVSS 8.8, Apple macOS · Apple watchOS)
- [CVE-2022-26710](https://cve.now/CVE-2022-26710.md): A use after free issue was addressed with improved memory management. (CVSS 8.8, Apple macOS · Apple watchOS)
- [CVE-2022-26716](https://cve.now/CVE-2022-26716.md): A memory corruption issue was addressed with improved state management. (CVSS 8.8, Apple macOS · Apple watchOS)
- [CVE-2022-26717](https://cve.now/CVE-2022-26717.md): A use after free issue was addressed with improved memory management. (CVSS 8.8, Apple macOS · Apple watchOS)
- [CVE-2022-26719](https://cve.now/CVE-2022-26719.md): A memory corruption issue was addressed with improved state management. (CVSS 8.8, Apple macOS · Apple watchOS)
- [CVE-2022-26730](https://cve.now/CVE-2022-26730.md): A memory corruption issue existed in the processing of ICC profiles. (CVSS 8.8, Apple macOS)
- [CVE-2022-26762](https://cve.now/CVE-2022-26762.md): A memory corruption issue was addressed with improved memory handling. (CVSS 7.8, Apple macOS)
- [CVE-2022-27582](https://cve.now/CVE-2022-27582.md): Password recovery vulnerability in SICK SIM4000 (PPC) Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userle (CVSS 9.8, SICK SIM4000)
- [CVE-2022-27584](https://cve.now/CVE-2022-27584.md): Password recovery vulnerability in SICK SIM2000ST Partnumber 1080579 allows an unprivileged remote attacker to gain access to the userlevel (CVSS 9.8, SICK SIM2000ST)
- [CVE-2022-27585](https://cve.now/CVE-2022-27585.md): Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version \<1.6.0 allows an unprivileged remote (CVSS 9.8, SICK SIM1000 FX)
- [CVE-2022-27586](https://cve.now/CVE-2022-27586.md): Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version \<2.0.0 allows an unprivileged remote attacker to ga (CVSS 9.8, SICK SIM1004)
- [CVE-2022-31777](https://cve.now/CVE-2022-31777.md): Apache Spark XSS vulnerability in log viewer UI Javascript (CVSS 5.4, Apache Software Foundation Apache Spark · pyspark +5)
- [CVE-2022-32794](https://cve.now/CVE-2022-32794.md): A logic issue was addressed with improved state management. (CVSS 7.8, Apple macOS)
- [CVE-2022-32827](https://cve.now/CVE-2022-32827.md): A memory corruption issue was addressed with improved state management. (CVSS 5.5, Apple macOS)
- [CVE-2022-32835](https://cve.now/CVE-2022-32835.md): This issue was addressed with improved entitlements. (CVSS 3.3, Apple iOS · Apple watchOS)
- [CVE-2022-32858](https://cve.now/CVE-2022-32858.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS · Apple watchOS)
- [CVE-2022-32859](https://cve.now/CVE-2022-32859.md): A logic issue was addressed with improved state management. (CVSS 5.3, Apple iOS)
- [CVE-2022-32862](https://cve.now/CVE-2022-32862.md): This issue was addressed with improved data protection. (CVSS 5.5, Apple macOS)
- [CVE-2022-32865](https://cve.now/CVE-2022-32865.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple macOS)
- [CVE-2022-32866](https://cve.now/CVE-2022-32866.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple macOS · Apple watchOS)
- [CVE-2022-32867](https://cve.now/CVE-2022-32867.md): This issue was addressed with improved data protection. (CVSS 2.4, Apple macOS)
- [CVE-2022-32870](https://cve.now/CVE-2022-32870.md): A logic issue was addressed with improved state management. (CVSS 2.4, Apple macOS · Apple watchOS)
- [CVE-2022-32875](https://cve.now/CVE-2022-32875.md): A logic issue was addressed with improved state management. (CVSS 5.0, Apple macOS · Apple watchOS)
- [CVE-2022-32877](https://cve.now/CVE-2022-32877.md): A configuration issue was addressed with additional restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2022-32879](https://cve.now/CVE-2022-32879.md): A logic issue was addressed with improved state management. (CVSS 2.4, Apple macOS · Apple watchOS)
- [CVE-2022-32881](https://cve.now/CVE-2022-32881.md): A logic issue was addressed with improved restrictions. (CVSS 5.5, Apple macOS · Apple watchOS)
- [CVE-2022-32887](https://cve.now/CVE-2022-32887.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS)
- [CVE-2022-32888](https://cve.now/CVE-2022-32888.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 8.8, Apple macOS · Apple watchOS)
- [CVE-2022-32889](https://cve.now/CVE-2022-32889.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS · Apple watchOS)
- [CVE-2022-32890](https://cve.now/CVE-2022-32890.md): A logic issue was addressed with improved checks. (CVSS 8.6, Apple macOS)
- [CVE-2022-32892](https://cve.now/CVE-2022-32892.md): An access issue was addressed with improvements to the sandbox. (CVSS 4.7, Apple macOS)
- [CVE-2022-32895](https://cve.now/CVE-2022-32895.md): A race condition was addressed with improved state handling. (CVSS 4.7, Apple macOS)
- [CVE-2022-32898](https://cve.now/CVE-2022-32898.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple macOS · Apple watchOS)
- [CVE-2022-32899](https://cve.now/CVE-2022-32899.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple macOS · Apple watchOS)
- [CVE-2022-32903](https://cve.now/CVE-2022-32903.md): A use after free issue was addressed with improved memory management. (CVSS 7.8, Apple iOS · Apple watchOS)
- [CVE-2022-32904](https://cve.now/CVE-2022-32904.md): An access issue was addressed with additional sandbox restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2022-32905](https://cve.now/CVE-2022-32905.md): This issue was addressed with improved validation of symlinks. (CVSS 7.8, Apple macOS)
- [CVE-2022-32907](https://cve.now/CVE-2022-32907.md): This issue was addressed with improved checks. (CVSS 7.8, Apple iOS · Apple watchOS)
- [CVE-2022-32909](https://cve.now/CVE-2022-32909.md): The issue was addressed with improved handling of caches. (CVSS 5.5, Apple iOS)
- [CVE-2022-32910](https://cve.now/CVE-2022-32910.md): A logic issue was addressed with improved checks. (CVSS 7.5, Apple macOS)
- [CVE-2022-32913](https://cve.now/CVE-2022-32913.md): The issue was addressed with additional restrictions on the observability of app states. (CVSS 3.3, Apple macOS · Apple watchOS)
- [CVE-2022-32914](https://cve.now/CVE-2022-32914.md): A use after free issue was addressed with improved memory management. (CVSS 7.8, Apple macOS · Apple watchOS)
- [CVE-2022-32915](https://cve.now/CVE-2022-32915.md): A type confusion issue was addressed with improved checks. (CVSS 7.8, Apple macOS)
- [CVE-2022-32918](https://cve.now/CVE-2022-32918.md): This issue was addressed with improved data protection. (CVSS 5.5, Apple macOS)
- [CVE-2022-32922](https://cve.now/CVE-2022-32922.md): A use after free issue was addressed with improved memory management. (CVSS 8.8, Apple macOS)
- [CVE-2022-32923](https://cve.now/CVE-2022-32923.md): A correctness issue in the JIT was addressed with improved checks. (CVSS 6.5, Apple macOS · Apple tvOS +1)
- [CVE-2022-32924](https://cve.now/CVE-2022-32924.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-32925](https://cve.now/CVE-2022-32925.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 7.1, Apple iOS · Apple watchOS)
- [CVE-2022-32926](https://cve.now/CVE-2022-32926.md): The issue was addressed with improved bounds checks. (CVSS 6.7, Apple macOS · Apple tvOS +1)
- [CVE-2022-32927](https://cve.now/CVE-2022-32927.md): The issue was addressed with improved memory handling. (CVSS 7.5, Apple iOS and iPadOS)
- [CVE-2022-32928](https://cve.now/CVE-2022-32928.md): A logic issue was addressed with improved restrictions. (CVSS 5.3, Apple macOS · Apple watchOS)
- [CVE-2022-32929](https://cve.now/CVE-2022-32929.md): A permissions issue was addressed with additional restrictions. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2022-32932](https://cve.now/CVE-2022-32932.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple iOS and iPadOS · Apple watchOS)
- [CVE-2022-32934](https://cve.now/CVE-2022-32934.md): The issue was addressed with improved memory handling. (CVSS 8.8, Apple macOS)
- [CVE-2022-32935](https://cve.now/CVE-2022-32935.md): A lock screen issue was addressed with improved state management. (CVSS 4.6, Apple macOS)
- [CVE-2022-32936](https://cve.now/CVE-2022-32936.md): An out-of-bounds read was addressed with improved input validation. (CVSS 5.5, Apple macOS)
- [CVE-2022-32938](https://cve.now/CVE-2022-32938.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (CVSS 5.3, Apple macOS)
- [CVE-2022-32939](https://cve.now/CVE-2022-32939.md): The issue was addressed with improved bounds checks. (CVSS 7.8, Apple iOS and iPadOS)
- [CVE-2022-32940](https://cve.now/CVE-2022-32940.md): The issue was addressed with improved bounds checks. (CVSS 7.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-32941](https://cve.now/CVE-2022-32941.md): The issue was addressed with improved bounds checks. (CVSS 9.8, Apple macOS)
- [CVE-2022-32944](https://cve.now/CVE-2022-32944.md): A memory corruption issue was addressed with improved state management. (CVSS 7.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-32946](https://cve.now/CVE-2022-32946.md): This issue was addressed with improved entitlements. (CVSS 5.5, Apple iOS and iPadOS)
- [CVE-2022-32947](https://cve.now/CVE-2022-32947.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple macOS · Apple watchOS)
- [CVE-2022-3304](https://cve.now/CVE-2022-3304.md): Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted (CVSS 8.8, Google Chrome)
- [CVE-2022-3305](https://cve.now/CVE-2022-3305.md): Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruptio (CVSS 8.8, Google Chrome)
- [CVE-2022-3306](https://cve.now/CVE-2022-3306.md): Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruptio (CVSS 8.8, Google Chrome)
- [CVE-2022-3307](https://cve.now/CVE-2022-3307.md): Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a craft (CVSS 8.8, Google Chrome)
- [CVE-2022-3308](https://cve.now/CVE-2022-3308.md): Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform (CVSS 7.4, Google Chrome)
- [CVE-2022-3309](https://cve.now/CVE-2022-3309.md): Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in (CVSS 6.5, Google Chrome)
- [CVE-2022-3310](https://cve.now/CVE-2022-3310.md): Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user (CVSS 6.5, Google Chrome)
- [CVE-2022-3311](https://cve.now/CVE-2022-3311.md): Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentiall (no CVSS, Google Chrome)
- [CVE-2022-3312](https://cve.now/CVE-2022-3312.md): Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass man (CVSS 4.6, Google Chrome)
- [CVE-2022-3313](https://cve.now/CVE-2022-3313.md): Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HT (CVSS 6.5, Google Chrome)
- [CVE-2022-3314](https://cve.now/CVE-2022-3314.md): Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potential (CVSS 6.5, Google Chrome)
- [CVE-2022-3315](https://cve.now/CVE-2022-3315.md): Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a craft (no CVSS, Google Chrome)
- [CVE-2022-3316](https://cve.now/CVE-2022-3316.md): Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass secu (no CVSS, Google Chrome)
- [CVE-2022-3317](https://cve.now/CVE-2022-3317.md): Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass (no CVSS, Google Chrome)
- [CVE-2022-3318](https://cve.now/CVE-2022-3318.md): Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user (no CVSS, Google Chrome)
- [CVE-2022-3370](https://cve.now/CVE-2022-3370.md): Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption v (no CVSS, Google Chrome)
- [CVE-2022-3373](https://cve.now/CVE-2022-3373.md): Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds memory write via a c (CVSS 8.8, Google Chrome)
- [CVE-2022-3443](https://cve.now/CVE-2022-3443.md): Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System rest (no CVSS, Google Chrome)
- [CVE-2022-3444](https://cve.now/CVE-2022-3444.md): Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System rest (no CVSS, Google Chrome)
- [CVE-2022-34662](https://cve.now/CVE-2022-34662.md): Apache DolphinScheduler prior to 3.0.0 allows path traversal (CVSS 6.5, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2022-3602](https://cve.now/CVE-2022-3602.md): X.509 Email Address 4-byte Buffer Overflow (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2022-3652](https://cve.now/CVE-2022-3652.md): Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted (no CVSS, Google Chrome)
- [CVE-2022-3653](https://cve.now/CVE-2022-3653.md): Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via (no CVSS, Google Chrome)
- [CVE-2022-3654](https://cve.now/CVE-2022-3654.md): Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a craf (no CVSS, Google Chrome)
- [CVE-2022-3655](https://cve.now/CVE-2022-3655.md): Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malici (no CVSS, Google Chrome)
- [CVE-2022-3656](https://cve.now/CVE-2022-3656.md): Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrict (no CVSS, Google Chrome)
- [CVE-2022-3657](https://cve.now/CVE-2022-3657.md): Use after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extensi (no CVSS, Google Chrome)
- [CVE-2022-3658](https://cve.now/CVE-2022-3658.md): Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a use (no CVSS, Google Chrome)
- [CVE-2022-3659](https://cve.now/CVE-2022-3659.md): Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engag (no CVSS, Google Chrome)
- [CVE-2022-3660](https://cve.now/CVE-2022-3660.md): Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304.62 allowed a remote attacker to hide the co (no CVSS, Google Chrome)
- [CVE-2022-3661](https://cve.now/CVE-2022-3661.md): Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the rendere (no CVSS, Google Chrome)
- [CVE-2022-3723](https://cve.now/CVE-2022-3723.md): Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted (CVSS 8.8, KEV, Google Chrome)
- [CVE-2022-3786](https://cve.now/CVE-2022-3786.md): X.509 Email Address Variable Length Buffer Overflow (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2022-3789](https://cve.now/CVE-2022-3789.md): Tim Campus Confession Wall share.php sql injection (CVSS 5.5, Tim Campus Confession Wall)
- [CVE-2022-3797](https://cve.now/CVE-2022-3797.md): eolinker apinto-dashboard login redirect (CVSS 6.3, eolinker apinto-dashboard)
- [CVE-2022-3798](https://cve.now/CVE-2022-3798.md): IBAX go-ibax tablesInfo sql injection (CVSS 6.3, go-ibax · github.com/IBAX-io/go-ibax)
- [CVE-2022-3799](https://cve.now/CVE-2022-3799.md): IBAX go-ibax tablesInfo sql injection (CVSS 6.3, go-ibax · github.com/IBAX-io/go-ibax)
- [CVE-2022-3800](https://cve.now/CVE-2022-3800.md): IBAX go-ibax rowsInfo sql injection (CVSS 6.3, go-ibax · github.com/IBAX-io/go-ibax)
- [CVE-2022-3801](https://cve.now/CVE-2022-3801.md): IBAX go-ibax rowsInfo sql injection (CVSS 6.3, go-ibax · github.com/IBAX-io/go-ibax)
- [CVE-2022-3802](https://cve.now/CVE-2022-3802.md): IBAX go-ibax rowsInfo sql injection (CVSS 6.3, go-ibax · github.com/IBAX-io/go-ibax)
- [CVE-2022-3803](https://cve.now/CVE-2022-3803.md): eolinker apinto-dashboard cross site scripting (CVSS 3.5, eolinker apinto-dashboard)
- [CVE-2022-3804](https://cve.now/CVE-2022-3804.md): eolinker apinto-dashboard login cross site scripting (CVSS 4.3, eolinker apinto-dashboard)
- [CVE-2022-3807](https://cve.now/CVE-2022-3807.md): Axiomatic Bento4 Incomplete Fix CVE-2019-13238 resource consumption (CVSS 4.3, Axiomatic Bento4)
- [CVE-2022-3809](https://cve.now/CVE-2022-3809.md): Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of service (CVSS 4.3, Axiomatic Bento4)
- [CVE-2022-3810](https://cve.now/CVE-2022-3810.md): Axiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4\_File denial of service (CVSS 4.3, Axiomatic Bento4)
- [CVE-2022-3812](https://cve.now/CVE-2022-3812.md): Axiomatic Bento4 mp4encrypt AP4\_ContainerAtom memory leak (CVSS 4.3, Axiomatic Bento4)
- [CVE-2022-3813](https://cve.now/CVE-2022-3813.md): Axiomatic Bento4 mp4edit memory leak (CVSS 4.3, Axiomatic Bento4)
- [CVE-2022-3814](https://cve.now/CVE-2022-3814.md): Axiomatic Bento4 mp4decrypt memory leak (CVSS 4.3, Axiomatic Bento4)
- [CVE-2022-3815](https://cve.now/CVE-2022-3815.md): Axiomatic Bento4 mp4decrypt memory leak (CVSS 4.3, Axiomatic Bento4)
- [CVE-2022-3816](https://cve.now/CVE-2022-3816.md): Axiomatic Bento4 mp4decrypt memory leak (CVSS 4.3, Axiomatic Bento4)
- [CVE-2022-3817](https://cve.now/CVE-2022-3817.md): Axiomatic Bento4 mp4mux memory leak (CVSS 4.3, Axiomatic Bento4)
- [CVE-2022-39369](https://cve.now/CVE-2022-39369.md): Service Hostname Discovery Exploitation in phpCAS (CVSS 8.0, apereo phpCAS · apereo/phpcas)
- [CVE-2022-40839](https://cve.now/CVE-2022-40839.md): A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to (CVSS 7.5)
- [CVE-2022-42252](https://cve.now/CVE-2022-42252.md): Apache Tomcat request smuggling via malformed content-length (CVSS 7.5, Apache Software Foundation Apache Tomcat · org.apache.to… +1)
- [CVE-2022-42309](https://cve.now/CVE-2022-42309.md): Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a wrong pointer during (no CVSS, xen)
- [CVE-2022-42310](https://cve.now/CVE-2022-42310.md): Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest (no CVSS, xen)
- [CVE-2022-42311](https://cve.now/CVE-2022-42311.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5, xen)
- [CVE-2022-42312](https://cve.now/CVE-2022-42312.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5, xen)
- [CVE-2022-42313](https://cve.now/CVE-2022-42313.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5, xen)
- [CVE-2022-42314](https://cve.now/CVE-2022-42314.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5, xen)
- [CVE-2022-42315](https://cve.now/CVE-2022-42315.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5, xen)
- [CVE-2022-42316](https://cve.now/CVE-2022-42316.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5, xen)
- [CVE-2022-42317](https://cve.now/CVE-2022-42317.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5, xen)
- [CVE-2022-42318](https://cve.now/CVE-2022-42318.md): Xenstore: guests can let run xenstored out of memory T\[his CNA information record relates to multiple CVEs; the text explains which aspects/ (CVSS 6.5, xen)
- [CVE-2022-42319](https://cve.now/CVE-2022-42319.md): Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might need to allocate quit (no CVSS, xen)
- [CVE-2022-42320](https://cve.now/CVE-2022-42320.md): Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. (no CVSS, xen)
- [CVE-2022-42321](https://cve.now/CVE-2022-42321.md): Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations (e.g. (no CVSS, xen)
- [CVE-2022-42322](https://cve.now/CVE-2022-42322.md): Xenstore: Cooperating guests can create arbitrary numbers of nodes T\[his CNA information record relates to multiple CVEs; the text explains (no CVSS, xen)
- [CVE-2022-42323](https://cve.now/CVE-2022-42323.md): Xenstore: Cooperating guests can create arbitrary numbers of nodes T\[his CNA information record relates to multiple CVEs; the text explains (no CVSS, xen)
- [CVE-2022-42324](https://cve.now/CVE-2022-42324.md): Oxenstored 32-\>31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. (no CVSS, xen)
- [CVE-2022-42325](https://cve.now/CVE-2022-42325.md): Xenstore: Guests can create arbitrary number of nodes via transactions T\[his CNA information record relates to multiple CVEs; the text expla (no CVSS, xen)
- [CVE-2022-42326](https://cve.now/CVE-2022-42326.md): Xenstore: Guests can create arbitrary number of nodes via transactions T\[his CNA information record relates to multiple CVEs; the text expla (CVSS 5.5, xen)
- [CVE-2022-42327](https://cve.now/CVE-2022-42327.md): x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and wri (CVSS 7.1, xen)
- [CVE-2022-42788](https://cve.now/CVE-2022-42788.md): A permissions issue existed. (CVSS 5.5, Apple macOS)
- [CVE-2022-42789](https://cve.now/CVE-2022-42789.md): An issue in code signature validation was addressed with improved checks. (no CVSS, Apple macOS)
- [CVE-2022-42790](https://cve.now/CVE-2022-42790.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2022-42791](https://cve.now/CVE-2022-42791.md): A race condition was addressed with improved state handling. (CVSS 7.0, Apple macOS)
- [CVE-2022-42793](https://cve.now/CVE-2022-42793.md): An issue in code signature validation was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2022-42795](https://cve.now/CVE-2022-42795.md): A memory consumption issue was addressed with improved memory handling. (CVSS 8.8, Apple macOS · Apple watchOS)
- [CVE-2022-42796](https://cve.now/CVE-2022-42796.md): This issue was addressed by removing the vulnerable code. (CVSS 7.8, Apple macOS)
- [CVE-2022-42798](https://cve.now/CVE-2022-42798.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS · Apple tvOS +1)
- [CVE-2022-42799](https://cve.now/CVE-2022-42799.md): The issue was addressed with improved UI handling. (CVSS 6.1, Apple macOS · Apple tvOS +1)
- [CVE-2022-42800](https://cve.now/CVE-2022-42800.md): This issue was addressed with improved checks. (CVSS 7.8, Apple macOS · Apple watchOS)
- [CVE-2022-42801](https://cve.now/CVE-2022-42801.md): A logic issue was addressed with improved checks. (CVSS 7.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-42803](https://cve.now/CVE-2022-42803.md): A race condition was addressed with improved locking. (CVSS 7.0, Apple macOS · Apple tvOS +1)
- [CVE-2022-42806](https://cve.now/CVE-2022-42806.md): A race condition was addressed with improved locking. (CVSS 7.0, Apple macOS)
- [CVE-2022-42808](https://cve.now/CVE-2022-42808.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 9.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-42809](https://cve.now/CVE-2022-42809.md): The issue was addressed with improved memory handling. (CVSS 7.8, Apple macOS)
- [CVE-2022-42810](https://cve.now/CVE-2022-42810.md): The issue was addressed with improved memory handling. (CVSS 5.5, Apple macOS · Apple tvOS)
- [CVE-2022-42811](https://cve.now/CVE-2022-42811.md): An access issue was addressed with additional sandbox restrictions. (CVSS 5.5, Apple macOS · Apple tvOS +1)
- [CVE-2022-42813](https://cve.now/CVE-2022-42813.md): A certificate validation issue existed in the handling of WKWebView. (CVSS 9.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-42814](https://cve.now/CVE-2022-42814.md): A logic issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2022-42815](https://cve.now/CVE-2022-42815.md): This issue was addressed with improved data protection. (CVSS 5.5, Apple macOS)
- [CVE-2022-42817](https://cve.now/CVE-2022-42817.md): A logic issue was addressed with improved state management. (CVSS 6.5, Apple iOS and iPadOS · Apple watchOS)
- [CVE-2022-42818](https://cve.now/CVE-2022-42818.md): This issue was addressed with improved data protection. (CVSS 5.9, Apple macOS)
- [CVE-2022-42819](https://cve.now/CVE-2022-42819.md): An access issue was addressed with improved access restrictions. (CVSS 5.5, Apple macOS)
- [CVE-2022-42820](https://cve.now/CVE-2022-42820.md): A memory corruption issue was addressed with improved state management. (CVSS 7.8, Apple macOS)
- [CVE-2022-42823](https://cve.now/CVE-2022-42823.md): A type confusion issue was addressed with improved memory handling. (CVSS 8.8, Apple macOS · Apple tvOS +1)
- [CVE-2022-42824](https://cve.now/CVE-2022-42824.md): A logic issue was addressed with improved state management. (CVSS 5.5, Apple macOS · Apple tvOS +1)
- [CVE-2022-42825](https://cve.now/CVE-2022-42825.md): This issue was addressed by removing additional entitlements. (CVSS 5.5, Apple macOS · Apple tvOS +1)
- [CVE-2022-42827](https://cve.now/CVE-2022-42827.md): An out-of-bounds write issue was addressed with improved bounds checking. (CVSS 7.8, KEV, Apple iOS and iPadOS)
- [CVE-2022-42829](https://cve.now/CVE-2022-42829.md): A use after free issue was addressed with improved memory management. (CVSS 6.7, Apple macOS)
- [CVE-2022-42830](https://cve.now/CVE-2022-42830.md): The issue was addressed with improved memory handling. (CVSS 6.7, Apple macOS)
- [CVE-2022-42831](https://cve.now/CVE-2022-42831.md): A race condition was addressed with improved locking. (CVSS 6.4, Apple macOS)
- [CVE-2022-42832](https://cve.now/CVE-2022-42832.md): A race condition was addressed with improved locking. (CVSS 6.4, Apple macOS)
- [CVE-2022-43076](https://cve.now/CVE-2022-43076.md): A cross-site scripting (XSS) vulnerability in /admin/edit-admin.php of Web-Based Student Clearance System v1.0 allows attackers to execute a (CVSS 4.8)
- [CVE-2022-43078](https://cve.now/CVE-2022-43078.md): A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Web-Based Student Clearance System v1.0 allows attackers to execute arbi (CVSS 4.8)
- [CVE-2022-43079](https://cve.now/CVE-2022-43079.md): A cross-site scripting (XSS) vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scrip (CVSS 6.1)
- [CVE-2022-43081](https://cve.now/CVE-2022-43081.md): Fast Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the component /fastfood/purchase.php. (CVSS 7.5)
- [CVE-2022-43082](https://cve.now/CVE-2022-43082.md): A cross-site scripting (XSS) vulnerability in /fastfood/purchase.php of Fast Food Ordering System v1.0 allows attackers to execute arbitrary (CVSS 6.1)
- [CVE-2022-43083](https://cve.now/CVE-2022-43083.md): An arbitrary file upload vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary code vi (CVSS 7.2)
- [CVE-2022-43084](https://cve.now/CVE-2022-43084.md): A cross-site scripting (XSS) vulnerability in admin-add-vehicle.php of Vehicle Booking System v1.0 allows attackers to execute arbitrary web (CVSS 4.8)
- [CVE-2022-43085](https://cve.now/CVE-2022-43085.md): An arbitrary file upload vulnerability in add\_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a cra (CVSS 7.2)
- [CVE-2022-43086](https://cve.now/CVE-2022-43086.md): Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via update\_customer.php. (CVSS 4.9)
- [CVE-2022-43124](https://cve.now/CVE-2022-43124.md): Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=us (CVSS 7.2)
- [CVE-2022-43125](https://cve.now/CVE-2022-43125.md): Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/m (CVSS 7.2)
- [CVE-2022-43126](https://cve.now/CVE-2022-43126.md): Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/tests/ma (CVSS 7.2)
- [CVE-2022-43127](https://cve.now/CVE-2022-43127.md): Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /appointments/u (CVSS 7.2)
- [CVE-2022-43221](https://cve.now/CVE-2022-43221.md): open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. (CVSS 7.5)
- [CVE-2022-43222](https://cve.now/CVE-2022-43222.md): open5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. (CVSS 7.5)
- [CVE-2022-43223](https://cve.now/CVE-2022-43223.md): open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. (CVSS 7.5)
- [CVE-2022-43328](https://cve.now/CVE-2022-43328.md): Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php. (CVSS 7.2)
- [CVE-2022-43329](https://cve.now/CVE-2022-43329.md): Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php. (CVSS 7.2)
- [CVE-2022-43330](https://cve.now/CVE-2022-43330.md): Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /editorder.php. (CVSS 7.2)
- [CVE-2022-43331](https://cve.now/CVE-2022-43331.md): Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php\_action/printOrder.php. (CVSS 7.2)
- [CVE-2022-43353](https://cve.now/CVE-2022-43353.md): Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view (CVSS 7.2)
- [CVE-2022-43354](https://cve.now/CVE-2022-43354.md): Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/mana (CVSS 7.2)
- [CVE-2022-43355](https://cve.now/CVE-2022-43355.md): Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master. (CVSS 7.2)
- [CVE-2022-43361](https://cve.now/CVE-2022-43361.md): Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component pop\_chart.ph (CVSS 4.8)
- [CVE-2022-43362](https://cve.now/CVE-2022-43362.md): Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loan\_by\_class (CVSS 7.2)
- [CVE-2022-43989](https://cve.now/CVE-2022-43989.md): Password recovery vulnerability in SICK SIM2x00 (ARM) Partnumber 1092673 and 1081902 with firmware version \< 1.2.0 allows an unprivileged re (CVSS 7.3, SICK SIM2x00)
- [CVE-2022-43990](https://cve.now/CVE-2022-43990.md): Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version \<2.2.0 allows an unprivileged remote attacker to ga (CVSS 7.3, SICK SIM1012)
- [CVE-2022-44542](https://cve.now/CVE-2022-44542.md): lesspipe before 2.06 allows attackers to execute code via Perl Storable (pst) files, because of deserialized object destructor execution via (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-11-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.