# CVEs published 2022-11-06

6 CVEs were published on November 6, 2022: 2 critical, 4 high. Days are UTC.

- [CVE-2022-37710](https://cve.now/CVE-2022-37710.md): Patterson Dental Eaglesoft 21 has AES-256 encryption but there are two ways to obtain a keyfile: (1) keybackup.data \> License \> Encryption K (CVSS 7.8)
- [CVE-2022-40284](https://cve.now/CVE-2022-40284.md): A buffer overflow was discovered in NTFS-3G before 2022.10.3. (CVSS 7.8)
- [CVE-2022-42707](https://cve.now/CVE-2022-42707.md): In Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0, embedded images are accessible without (CVSS 7.5)
- [CVE-2022-42905](https://cve.now/CVE-2022-42905.md): In wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL\_CALLBACKS flag), then a malicious TLS 1.3 client or network atta (CVSS 9.1)
- [CVE-2022-42919](https://cve.now/CVE-2022-42919.md): Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. (CVSS 7.8)
- [CVE-2022-44544](https://cve.now/CVE-2022-44544.md): Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PDF export to trigger (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-11-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.