# CVEs published 2022-11-14

97 CVEs were published on November 14, 2022: 8 critical, 21 high. Days are UTC.

- [CVE-2022-27896](https://cve.now/CVE-2022-27896.md): The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure. (CVSS 4.2, Palantir Foundry Code-Workbooks)
- [CVE-2022-28764](https://cve.now/CVE-2022-28764.md): Local information exposure in Zoom Clients (CVSS 3.3, Zoom Video Communications Zoom Client for Meetings · Zoo… +1)
- [CVE-2022-34320](https://cve.now/CVE-2022-34320.md): IBM CICS TX information disclosure (CVSS 5.9, IBM CICS TX)
- [CVE-2022-34317](https://cve.now/CVE-2022-34317.md): IBM CICS TX cross-site scripting (CVSS 5.4, IBM CICS TX)
- [CVE-2022-34318](https://cve.now/CVE-2022-34318.md): IBM CICS TX clickjacking (CVSS 5.4, IBM CICS TX)
- [CVE-2022-34316](https://cve.now/CVE-2022-34316.md): IBM CICS TX information disclosure (CVSS 3.7, IBM CICS TX)
- [CVE-2022-34314](https://cve.now/CVE-2022-34314.md): IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. (CVSS 4.0, IBM CICS TX)
- [CVE-2022-34315](https://cve.now/CVE-2022-34315.md): IBM CICS TX cross-site scripting (CVSS 5.4, IBM CICS TX)
- [CVE-2022-38705](https://cve.now/CVE-2022-38705.md): IBM CICS TX phishing (CVSS 5.3, IBM CICS TX)
- [CVE-2022-34312](https://cve.now/CVE-2022-34312.md): IBM CICS TX information disclosure (CVSS 4.0, IBM CICS TX)
- [CVE-2022-24938](https://cve.now/CVE-2022-24938.md): Malformed Zigbee packet causes Assert in EmberZNet 7.0.1 or earlier (CVSS 6.5, silabs.com Ember ZNet)
- [CVE-2022-34329](https://cve.now/CVE-2022-34329.md): IBM CICS TX information disclosure (CVSS 5.3, IBM CICS TX)
- [CVE-2022-34319](https://cve.now/CVE-2022-34319.md): IBM CICS TX information disclosure (CVSS 5.9, IBM CICS TX)
- [CVE-2022-24937](https://cve.now/CVE-2022-24937.md): Malformed Zigbee packet causes Assert in EmberZNet 7.0.0 or earlier (CVSS 6.5, Silicon Labs Ember ZNet)
- [CVE-2022-34313](https://cve.now/CVE-2022-34313.md): IBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies (CVSS 4.3, IBM CICS TX)
- [CVE-2022-0137](https://cve.now/CVE-2022-0137.md): A heap buffer overflow in image\_set\_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries. (CVSS 7.5, michaelrsweet htmldoc)
- [CVE-2022-35719](https://cve.now/CVE-2022-35719.md): IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user (CVSS 5.1, IBM MQ Internet Pass-Thru)
- [CVE-2022-0324](https://cve.now/CVE-2022-0324.md): Buffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC) (CVSS 8.1, Linux Foundation Software for Open Networking in the Cloud)
- [CVE-2022-31630](https://cve.now/CVE-2022-31630.md): OOB read due to insufficient input validation in imageloadfont() (CVSS 6.5, PHP Group PHP)
- [CVE-2021-38827](https://cve.now/CVE-2021-38827.md): Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to account takeover. (CVSS 7.5)
- [CVE-2021-38828](https://cve.now/CVE-2021-38828.md): Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text traffic sniffing. (CVSS 5.3)
- [CVE-2021-40272](https://cve.now/CVE-2021-40272.md): OP5 Monitor 8.3.1, 8.3.2, and OP5 8.3.3 are vulnerable to Cross Site Scripting (XSS). (CVSS 6.1)
- [CVE-2022-2449](https://cve.now/CVE-2022-2449.md): reSmush.it Image Optimizer \< 0.4.7 - Multiple CSRF (CVSS 6.5, reSmush.it : the only free Image Optimizer & compress plugin)
- [CVE-2022-2450](https://cve.now/CVE-2022-2450.md): reSmush.it Image Optimizer \< 0.4.4 - Subscriber+ AJAX Calls (CVSS 4.3, reSmush.it : the only free Image Optimizer & compress plugin)
- [CVE-2022-27949](https://cve.now/CVE-2022-27949.md): Apache Airflow prior to 2.3.1 may include sensitive values in rendered template (CVSS 7.5, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2022-30773](https://cve.now/CVE-2022-30773.md): DMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after parameter values have been checked but befor (CVSS 6.4)
- [CVE-2022-30774](https://cve.now/CVE-2022-30774.md): DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before (CVSS 6.4)
- [CVE-2022-31243](https://cve.now/CVE-2022-31243.md): Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesR (CVSS 6.4)
- [CVE-2022-32266](https://cve.now/CVE-2022-32266.md): DMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe could lead to a TOCTOU attack on the SMI han (CVSS 6.4)
- [CVE-2022-32267](https://cve.now/CVE-2022-32267.md): DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM corruption (a TOCTOU (CVSS 6.4)
- [CVE-2022-3238](https://cve.now/CVE-2022-3238.md): A double-free flaw was found in the Linux kernel’s NTFS3 subsystem in how a user triggers remount and umount simultaneously. (CVSS 7.8, Kernel)
- [CVE-2022-3362](https://cve.now/CVE-2022-3362.md): Insufficient Session Expiration in ikus060/rdiffweb (CVSS 6.1, ikus060/rdiffweb · rdiffweb)
- [CVE-2022-33905](https://cve.now/CVE-2022-33905.md): DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corruption (a TOCTOU att (CVSS 7.0)
- [CVE-2022-33906](https://cve.now/CVE-2022-33906.md): DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption throug (CVSS 6.4)
- [CVE-2022-33907](https://cve.now/CVE-2022-33907.md): DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corrup (CVSS 6.4)
- [CVE-2022-33908](https://cve.now/CVE-2022-33908.md): DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a T (CVSS 7.0)
- [CVE-2022-33909](https://cve.now/CVE-2022-33909.md): DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM corruption through a TO (CVSS 7.0)
- [CVE-2022-33982](https://cve.now/CVE-2022-33982.md): DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and le (CVSS 6.4)
- [CVE-2022-33983](https://cve.now/CVE-2022-33983.md): DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMRAM corruption through (CVSS 7.0)
- [CVE-2022-33984](https://cve.now/CVE-2022-33984.md): DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TO (CVSS 7.0)
- [CVE-2022-33985](https://cve.now/CVE-2022-33985.md): DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI handler could cause SMRAM corruption through a (CVSS 7.0)
- [CVE-2022-33986](https://cve.now/CVE-2022-33986.md): DMA attacks on the parameter buffer used by the VariableRuntimeDxe software SMI handler could lead to a TOCTOU attack. (CVSS 6.4)
- [CVE-2022-3415](https://cve.now/CVE-2022-3415.md): Chat Bubble \< 2.3 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1, Chat Bubble – Floating Chat with Contact Chat Icons, Messag…)
- [CVE-2022-34325](https://cve.now/CVE-2022-34325.md): DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruptio (CVSS 7.8)
- [CVE-2022-3469](https://cve.now/CVE-2022-3469.md): WP Attachments \< 5.0.5 - Admin+ Stored Cross-Site Scripting (CVSS 4.8, WP Attachments)
- [CVE-2022-3477](https://cve.now/CVE-2022-3477.md): tagDiv Composer \< 3.5 - Unauthenticated Account Takeover (CVSS 9.8, tagDiv Composer · tagDiv Newspaper +1)
- [CVE-2022-3484](https://cve.now/CVE-2022-3484.md): WPB Show Core - Reflected Cross-Site Scripting (CVSS 6.1, wpb-show-core)
- [CVE-2022-3538](https://cve.now/CVE-2022-3538.md): Webmaster Tools Verification \<= 1.2 - Unauthenticated Arbitrary Plugin Deactivation (CVSS 6.5, Webmaster Tools Verification)
- [CVE-2022-3539](https://cve.now/CVE-2022-3539.md): Testimonials (Free \< 2.7, Pro \< 1.0.8) - Admin+ Stored Cross-Site Scripting (CVSS 4.8, Testimonials · Testimonial Pro)
- [CVE-2022-35613](https://cve.now/CVE-2022-35613.md): Konker v2.3.9 was to discovered to contain a Cross-Site Request Forgery (CSRF). (CVSS 8.8)
- [CVE-2022-3574](https://cve.now/CVE-2022-3574.md): WPForms Pro \< 1.7.7 - CSV Injection (CVSS 9.8, WPForms Pro)
- [CVE-2022-3578](https://cve.now/CVE-2022-3578.md): ProfileGrid \< 5.1.1 - Reflected Cross-Site Scripting (CVSS 6.1, ProfileGrid – User Profiles, Memberships, Groups and Commun…)
- [CVE-2022-3631](https://cve.now/CVE-2022-3631.md): OAuth Client by DigitialPixies \<= 1.1.0 - Admin+ Stored Cross-Site Scripting (CVSS 4.8, OAuth Client by DigitialPixies)
- [CVE-2022-3632](https://cve.now/CVE-2022-3632.md): OAuth Client by DigitialPixies \<= 1.1.0 - CSRF (CVSS 6.5, OAuth Client by DigitialPixies)
- [CVE-2022-37109](https://cve.now/CVE-2022-37109.md): patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. (CVSS 9.8)
- [CVE-2022-37290](https://cve.now/CVE-2022-37290.md): GNOME Nautilus 42.2 allows a NULL pointer dereference and get\_basename application crash via a pasted ZIP archive. (CVSS 5.5)
- [CVE-2022-38167](https://cve.now/CVE-2022-38167.md): The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS. (CVSS 6.1)
- [CVE-2022-3903](https://cve.now/CVE-2022-3903.md): An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. (CVSS 4.6, Kernel)
- [CVE-2022-39385](https://cve.now/CVE-2022-39385.md): Users erroneously and transparently added to private messages in Discourse (CVSS 6.5, discourse)
- [CVE-2022-3988](https://cve.now/CVE-2022-3988.md): Frappe Search navbar\_search.html cross site scripting (CVSS 3.5, Frappe)
- [CVE-2022-3992](https://cve.now/CVE-2022-3992.md): SourceCodester Sanitization Management System Banner Image cross site scripting (CVSS 2.4, SourceCodester Sanitization Management System)
- [CVE-2022-3993](https://cve.now/CVE-2022-3993.md): Improper Restriction of Excessive Authentication Attempts in kareadita/kavita (CVSS 9.4, kareadita/kavita)
- [CVE-2022-40127](https://cve.now/CVE-2022-40127.md): Apache Airflow \<2.4.0 has an RCE in a bash example (CVSS 8.8, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2022-40405](https://cve.now/CVE-2022-40405.md): WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=l (CVSS 7.5)
- [CVE-2022-40735](https://cve.now/CVE-2022-40735.md): The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, beca (no CVSS)
- [CVE-2022-40903](https://cve.now/CVE-2022-40903.md): Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows (CVSS 6.5)
- [CVE-2022-41913](https://cve.now/CVE-2022-41913.md): Discourse-calendar exposes members of hidden groups (CVSS 4.3, discourse-calendar)
- [CVE-2022-42110](https://cve.now/CVE-2022-42110.md): A Cross-site scripting (XSS) vulnerability in the Announcements module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix (CVSS 6.1, com.liferay:com.liferay.announcements.web · com.liferay.por…)
- [CVE-2022-42984](https://cve.now/CVE-2022-42984.md): WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=se (CVSS 9.8)
- [CVE-2022-43030](https://cve.now/CVE-2022-43030.md): Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background. (CVSS 7.2)
- [CVE-2022-43146](https://cve.now/CVE-2022-43146.md): An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers to execute arbitrary (CVSS 7.2)
- [CVE-2022-43288](https://cve.now/CVE-2022-43288.md): Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order\_by parameter at /rukovoditel/index.php?module=logs/ (CVSS 8.8)
- [CVE-2022-43294](https://cve.now/CVE-2022-43294.md): Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter at (CVSS 9.8)
- [CVE-2022-43295](https://cve.now/CVE-2022-43295.md): XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795. (CVSS 5.5)
- [CVE-2022-43323](https://cve.now/CVE-2022-43323.md): EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component under the Edit Member (CVSS 8.8)
- [CVE-2022-43342](https://cve.now/CVE-2022-43342.md): A stored cross-site scripting (XSS) vulnerability in the Add function of Eramba GRC Software c2.8.1 allows attackers to execute arbitrary we (CVSS 5.4)
- [CVE-2022-43686](https://cve.now/CVE-2022-43686.md): In Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2, the authTypeConcreteCookieMap table can be filled up causing (CVSS 6.5, concrete5/concrete5)
- [CVE-2022-43687](https://cve.now/CVE-2022-43687.md): Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 does not issue a new session ID upon successful OAuth authenticat (CVSS 5.4, concrete5/concrete5)
- [CVE-2022-43688](https://cve.now/CVE-2022-43688.md): Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting (XSS) in icons since (no CVSS, concrete5/concrete5)
- [CVE-2022-43689](https://cve.now/CVE-2022-43689.md): Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XXE based DNS requests leading to IP disclosure. (CVSS 5.3, concrete5/concrete5)
- [CVE-2022-43690](https://cve.now/CVE-2022-43690.md): Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 did not use strict comparison for the legacy\_salt so that limited (CVSS 6.3, concrete5/concrete5)
- [CVE-2022-43691](https://cve.now/CVE-2022-43691.md): Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 inadvertently disclose server-side sensitive information (secrets (CVSS 5.3, concrete5/concrete5)
- [CVE-2022-43692](https://cve.now/CVE-2022-43692.md): Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS - user can cause an administrator (CVSS 6.1, concrete5/concrete5)
- [CVE-2022-43693](https://cve.now/CVE-2022-43693.md): Concrete CMS is vulnerable to CSRF due to the lack of "State" parameter for external Concrete authentication service for users of Concrete w (CVSS 8.8, concrete5/concrete5)
- [CVE-2022-43694](https://cve.now/CVE-2022-43694.md): Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the image manipulation library (CVSS 6.1, concrete5/concrete5)
- [CVE-2022-43695](https://cve.now/CVE-2022-43695.md): Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting (XSS) in dashboard/s (CVSS 4.8, concrete5/concrete5)
- [CVE-2022-43967](https://cve.now/CVE-2022-43967.md): Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the multilingual report due to (CVSS 6.1, concrete5/concrete5)
- [CVE-2022-43968](https://cve.now/CVE-2022-43968.md): Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the dashboard icons due to un-s (CVSS 6.1, concrete5/concrete5)
- [CVE-2022-44387](https://cve.now/CVE-2022-44387.md): EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information component under the Edit Mem (CVSS 8.8)
- [CVE-2022-44389](https://cve.now/CVE-2022-44389.md): EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module. (CVSS 6.5)
- [CVE-2022-44390](https://cve.now/CVE-2022-44390.md): A cross-site scripting (XSS) vulnerability in EyouCMS V1.5.9-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a crafte (no CVSS)
- [CVE-2022-45136](https://cve.now/CVE-2022-45136.md): Apache Jena SDB allows arbitrary deserialisation via JDBC (CVSS 9.8, Apache Software Foundation Apache Jena SDB · org.apache.jen…)
- [CVE-2022-45183](https://cve.now/CVE-2022-45183.md): Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to (no CVSS)
- [CVE-2022-45184](https://cve.now/CVE-2022-45184.md): The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, (no CVSS)
- [CVE-2022-45198](https://cve.now/CVE-2022-45198.md): Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification). (no CVSS, pillow)
- [CVE-2022-45199](https://cve.now/CVE-2022-45199.md): Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL. (no CVSS, pillow)
- [CVE-2022-45378](https://cve.now/CVE-2022-45378.md): Apache SOAP allows unauthenticated users to potentially invoke arbitrary code (CVSS 9.8, Apache Software Foundation Apache SOAP · soap:soap)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-11-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.