# CVEs published 2022-11-12

11 CVEs were published on November 12, 2022: 3 critical, 4 high. Days are UTC.

- [CVE-2022-38650](https://cve.now/CVE-2022-38650.md): A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. (no CVSS)
- [CVE-2022-38651](https://cve.now/CVE-2022-38651.md): A security filter misconfiguration exists in VMware Hyperic Server 5.8.6. (CVSS 9.8)
- [CVE-2022-38652](https://cve.now/CVE-2022-38652.md): A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. (no CVSS)
- [CVE-2022-3963](https://cve.now/CVE-2022-3963.md): gnuboard5 FAQ Key ID faq.php cross site scripting (CVSS 3.5, gnuboard5)
- [CVE-2022-40773](https://cve.now/CVE-2022-40773.md): Zoho ManageEngine ServiceDesk Plus MSP before 10609 and SupportCenter Plus before 11025 are vulnerable to privilege escalation. (CVSS 8.8)
- [CVE-2022-41339](https://cve.now/CVE-2022-41339.md): In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation. (CVSS 7.8)
- [CVE-2022-43671](https://cve.now/CVE-2022-43671.md): Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection. (CVSS 9.8)
- [CVE-2022-43672](https://cve.now/CVE-2022-43672.md): Zoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection (in a diffe (CVSS 9.8)
- [CVE-2022-45188](https://cve.now/CVE-2022-45188.md): Netatalk through 3.1.13 has an afp\_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. (CVSS 7.8)
- [CVE-2022-45195](https://cve.now/CVE-2022-45195.md): SimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation function to intended data, which can interfere w (CVSS 5.3)
- [CVE-2022-45196](https://cve.now/CVE-2022-45196.md): Hyperledger Fabric 2.3 allows attackers to cause a denial of service (orderer crash) by repeatedly sending a crafted channel tx with the sam (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-11-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.