CVEs published November 18, 2022
105 CVEs were published on November 18, 2022: 6 critical, 29 high.
- Published
- 105
- Critical
- 6
- High
- 29
- Medium
- 66
- Low
- 3
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 27
Most affected products
- tensorflow · tensorflow-cpu +1
- 14
- tensorflow · tensorflow-gpu +1
- 8
- NVIDIA Cloud Gaming
- 6
- Constant Contact Creative Mail
- 3
- ExpressTech Quiz And Survey Master
- 3
- Api2Cart Bridge Connector
- 2
- Elastic Kibana
- 2
- Karmasis Informatics Infraskope SIEM+
- 2
- NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming
- 2
- NVIDIA GeForce, Workstation, Compute
- 2
Critical 6
- CVE-2022-42698WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary File Upload vulnerabilityApi2Cart Bridge Connector
- CVE-2022-42497WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary Code Execution vulnerabilityApi2Cart Bridge Connector
- CVE-2022-44584WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Deletion vulnerabilityWhatArmy WatchTowerHQ
- CVE-2022-44204D-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer Overflow.
- CVE-2022-45132In Linaro Automated Validation Architecture (LAVA) before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 tem
- CVE-2022-45474drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.
High 29
- CVE-2022-42459WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Auth. WordPress Options Change vulnerabilityBiplob Adhikari Image Hover Effects Ultimate
- CVE-2022-44583WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Download vulnerabilityWhatArmy WatchTowerHQ
- CVE-2022-38395HP Support Assistant uses HP Performance Tune-up as a diagnostic tool.HP Support Assistant
- CVE-2022-2794Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack.Certain HP PageWide Pro printers
- CVE-2022-41840WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerabilityCollne Welcart e-Commerce
- CVE-2022-24037Unauthorized modification in Karmasis Informatics Infraskope SIEM+Karmasis Informatics Infraskope SIEM+
- CVE-2022-30256An issue was discovered in MaraDNS Deadwood through 3.5.0021 that allows variant V1 of unintended domain name resolution.
- CVE-2022-31606NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a faNVIDIA Cloud Gaming
- CVE-2022-31607NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilitieNVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming
- CVE-2022-31608NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabiliNVIDIA GeForce, Workstation, Compute
- CVE-2022-31610NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabiNVIDIA Cloud Gaming
- CVE-2022-31612NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a loNVIDIA Cloud Gaming
- CVE-2022-31613NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where any local user can cause a null-pointer derefNVIDIA Cloud Gaming
- CVE-2022-31617NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabiNVIDIA Cloud Gaming
- CVE-2022-31694InstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the installer binary parent directory when displayiVMware InstallBuilder
- CVE-2022-34827Carel Boss Mini 1.5.0 has Improper Access Control.
- CVE-2022-37197IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.
- CVE-2022-38871In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages.github.com/free5gc/free5gc
- CVE-2022-4055When xdg-mail is configured to use thunderbird for mailto URLs, improper parsing of the URL can lead to additional headers being passed to txdg-utils
- CVE-2022-41894Buffer overflow in `CONV_3D_TRANSPOSE` on TFLitetensorflow
- CVE-2022-41900FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-42904Zoho ManageEngine ADManager Plus through 7151 allows authenticated admin users to execute the commands in proxy settings.
- CVE-2022-43308INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies.
- CVE-2022-44378Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=delete_mechanic.
- CVE-2022-44379Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_service.
- CVE-2022-44413Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechanic.php?id=.
- CVE-2022-44414Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.php?id=.
- CVE-2022-44415Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.php?id=.
- CVE-2022-44820Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manage_transaction&id=.
Medium, low and unrated 70
- CVE-2022-41609WordPress Better Messages plugin <= 1.9.10.68 - Server-Side Request Forgery (SSRF) vulnerabilityWordPlus Better Messages
- CVE-2022-41155WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerabilityPascal iQ Block Country
- CVE-2022-40216WordPress Better Messages plugin <= 1.9.10.69 - Auth. Messaging Block Bypass vulnerabilityWordPlus Better Messages
- CVE-2022-40130WordPress WP-Polls plugin <= 2.76.0 - Auth. Race Condition vulnerabilityLester 'GaMerZ' Chan WP-Polls
- CVE-2022-41618WordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerabilityDavid Lingren Media Library Assistant
- CVE-2022-41615WordPress Store Locator plugin <= 1.4.5 - Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerabilityAGILELOGIX Store Locator WordPress
- CVE-2022-41634WordPress Media Library Folders plugin <= 7.1.1 - Cross-Site Request Forgery (CSRF) vulnerabilityMax Foundry Media Library Folders
- CVE-2022-41135WordPress Modula plugin <= 2.6.9 - Unauth. Plugin Settings Change vulnerabilityWPChill Modula Image Gallery
- CVE-2022-41655WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerabilityAlgolPlus Phone Orders for WooCommerce
- CVE-2022-41643WordPress Accessibility plugin <= 1.0.3 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityOcta Code Accessibility
- CVE-2022-40963WordPress WP Page Builder plugin <= 1.2.6 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilitiesThemeum WP Page Builder
- CVE-2022-41685Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Integration for Szamlazz.hu & WooCommerce and Csomagpontok és szállítási címkék WooCommerce hez pluginsViszt Péter Integration for Szamlazz.hu & WooCommerce · Vis…
- CVE-2022-40695WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilitiesWP-buy SEO Redirection Plugin – 301 Redirect Manager
- CVE-2022-41788WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerabilityPenciDesign Soledad
- CVE-2022-43492WordPress Comments – wpDiscuz plugin 7.4.2 - Auth. Insecure Direct Object References (IDOR) vulnerabilitygVectors Team Comments – wpDiscuz
- CVE-2022-44740WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesConstant Contact Creative Mail
- CVE-2022-45082WordPress Accordions plugin <= 2.0.3 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilitiesBiplob Adhikari Accordions – Multiple Accordions or FAQs Bu…
- CVE-2022-44634WordPress S2W – Import Shopify to WooCommerce plugin <= 1.1.12 - Auth. Arbitrary File Read vulnerabilityVillaTheme S2W – Import Shopify to WooCommerce
- CVE-2022-45369WordPress Plugin for Google Reviews plugin <= 2.2.2 - Auth. Broken Access Control vulnerabilityRichPlugins Plugin for Google Reviews
- CVE-2022-41839WordPress LoginPress plugin <= 1.6.2 - Broken Access Control vulnerabilityWPBrigade LoginPress | Custom Login Page Customizer
- CVE-2022-42883WordPress Quiz And Survey Master plugin <= 7.3.10 - Sensitive Information Disclosure vulnerabilityExpressTech Quiz And Survey Master
- CVE-2022-40698WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerabilityExpressTech Quiz And Survey Master
- CVE-2022-45073WordPress REST API Authentication plugin <= 2.4.0 - Cross-Site Request Forgery (CSRF) vulnerabilityminiOrange WordPress REST API Authentication
- CVE-2022-42461WordPress miniOrange's Google Authenticator plugin <= 5.6.1 - Broken Access Control vulnerabilityminiOrange's Google Authenticator
- CVE-2022-43482WordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerabilityCodePeople Appointment Booking Calendar
- CVE-2022-41781WordPress Permalink Manager Lite plugin <= 2.2.20 - Broken Access Control vulnerabilityMaciej Bis Permalink Manager Lite
- CVE-2022-38075WordPress Mantenimiento web plugin <= 0.13 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)Carlos Doral Mantenimiento web
- CVE-2022-41692WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerabilityCodePeople Appointment Hour Booking
- CVE-2022-43463WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.9 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityYIKES Custom Product Tabs for WooCommerce
- CVE-2022-40687WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerabilityConstant Contact Creative Mail
- CVE-2022-41805WordPress Booster for WooCommerce plugin <= 5.6.6 - Cross-Site Request Forgery (CSRF) vulnerabilityPluggabl Booster for WooCommerce
- CVE-2022-40686WordPress Creative Mail plugin <= 1.5.4 - Cross-Site Request Forgery (CSRF) vulnerabilityConstant Contact Creative Mail
- CVE-2022-41652WordPress Quiz And Survey Master plugin <= 7.3.10 - Bypass vulnerabilityExpressTech Quiz And Survey Master
- CVE-2022-38974WordPress WPML Multilingual CMS premium plugin <= 4.5.10 - Broken Access Control vulnerabilityOnTheGoSystems WPML Multilingual CMS
- CVE-2022-22488IBM OpenBMC denial of serviceIBM OpenBMC
- CVE-2022-45471In JetBrains Hub before 2022.3.15181 Throttling was missed when sending emails to a particular email addressJetBrains Hub
- CVE-2022-24038Unauthorized modification in Karmasis Informatics Infraskope SIEM+Karmasis Informatics Infraskope SIEM+
- CVE-2021-22141An open redirect flaw was found in Kibana versions before 7.13.0 and 6.8.16.Elastic Kibana
- CVE-2021-31739The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability (XSS), because user input is not correctly encoded in HTML attri
- CVE-2021-33621The cgi gem before 0.1.0.2, 0.2.x before 0.2.2, and 0.3.x before 0.3.5 for Ruby allows HTTP response splitting.cgi
- CVE-2021-37936It was discovered that Kibana was not sanitizing document fields containing HTML snippets.Elastic Kibana
- CVE-2022-31615NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause NVIDIA GeForce, Workstation, Compute
- CVE-2022-31616NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a loNVIDIA Cloud Gaming
- CVE-2022-34665NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilitieNVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming
- CVE-2022-34667NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploNVIDIA CUDA Toolkit
- CVE-2022-41880ThreadUnsafeUnigramCandidateSampler Heap out of bounds in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41883Out of bounds segmentation fault due to unequal op inputs in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41884Seg fault in `ndarray_tensor_bridge` due to zero and large inputs in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-41885Overflow in `FusedResizeAndPadConv2D` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41886Overflow in `ImageProjectiveTransformV2` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41887Overflow in `tf.keras.losses.poisson` in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-41888Unckecked rank size in `tf.image.generate_bounding_box_proposals` in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-41889Segfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41890`CHECK` fail in `BCast` overflow in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41891Segfault in `tf.raw_ops.TensorListConcat` in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-41893`CHECK_EQ` fail in `tf.raw_ops.TensorListResize` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41895`MirrorPadGrad` heap out of bounds read in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-41896`tf.raw_ops.Mfcc` crashes in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41897`FractionalMaxPoolGrad` Heap out of bounds read in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41898`CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41899`CHECK` fail via inputs in `SdcaOptimizer` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41901`CHECK_EQ` fail via input in `SparseMatrixNNZ` in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-41907Overflow in `ResizeNearestNeighborGrad` in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-41908`CHECK` fail via inputs in `PyFunc` in Tensorflowtensorflow · tensorflow-gpu +1
- CVE-2022-41909Segfault in `CompositeTensorVariantToComponents` in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-41911Invalid char to bool conversion when printing a tensor in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2022-43673Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved (for a limited period of
- CVE-2022-44641In Linaro Automated Validation Architecture (LAVA) before 2022.11, users with valid credentials can submit crafted XMLRPC requests that caus
- CVE-2022-45163An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol (SDP) mode: i.MX RT 1010, i
- CVE-2022-45473In drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and drachtio.log has mode 0666.