# CVEs published 2022-11-23

94 CVEs were published on November 23, 2022: 23 critical, 30 high. Days are UTC.

- [CVE-2021-35246](https://cve.now/CVE-2021-35246.md): Unprotected Transport of Credentials (HSTS) Vulnerability (CVSS 5.3, SolarWinds Engineer's Toolset)
- [CVE-2022-42896](https://cve.now/CVE-2022-42896.md): Info Leak in l2cap\_core in the Linux Kernel (CVSS 8.0, Linux Kernel)
- [CVE-2022-42895](https://cve.now/CVE-2022-42895.md): Info Leak in l2cap\_core in the Linux Kernel (CVSS 5.1, Linux Kernel)
- [CVE-2022-4045](https://cve.now/CVE-2022-4045.md): Authenticated user could send multiple requests containing a parameter which could fetch a large amount of data and can crash a Mattermost server (CVSS 3.1, Mattermost · github.com/mattermost/mattermost-server)
- [CVE-2022-4044](https://cve.now/CVE-2022-4044.md): Authenticated user could send multiple requests containing a large Auto Responder Message payload and can crash a Mattermost server (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server)
- [CVE-2022-4019](https://cve.now/CVE-2022-4019.md): Authenticated user could send multiple requests containing a large payload to a Playbooks API and can crash a Mattermost server (CVSS 4.3, Mattermost Playbooks Plugin)
- [CVE-2009-1142](https://cve.now/CVE-2009-1142.md): An issue was discovered in open-vm-tools 2009.03.18-154848. (CVSS 6.7)
- [CVE-2009-1143](https://cve.now/CVE-2009-1143.md): An issue was discovered in open-vm-tools 2009.03.18-154848. (CVSS 7.0)
- [CVE-2020-23583](https://cve.now/CVE-2020-23583.md): OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. (CVSS 9.8)
- [CVE-2020-23584](https://cve.now/CVE-2020-23584.md): Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands wit (CVSS 9.8)
- [CVE-2020-23585](https://cve.now/CVE-2020-23585.md): A remote attacker can conduct a cross-site request forgery (CSRF) attack on OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: (CVSS 8.8)
- [CVE-2020-23586](https://cve.now/CVE-2020-23586.md): A vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP\_V3.3.1-191028 allows an unauthenticated, remote (CVSS 4.3)
- [CVE-2020-23587](https://cve.now/CVE-2020-23587.md): A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP\_V3.3.1-191028 allows an unauthenticated, rem (CVSS 3.1)
- [CVE-2020-23588](https://cve.now/CVE-2020-23588.md): A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP\_V3.3.1-191028 allows an unauthenticated, remote attack (CVSS 4.3)
- [CVE-2020-23589](https://cve.now/CVE-2020-23589.md): A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP\_V3.3.1-191028 allows an unauthenticated, remote attack (CVSS 6.5)
- [CVE-2020-23590](https://cve.now/CVE-2020-23590.md): A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP\_V3.3.1-191028 allows an unauthenticated remote attacke (CVSS 6.5)
- [CVE-2020-23591](https://cve.now/CVE-2020-23591.md): A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP\_V3.3.1-191028 allows an attacker to upload arbitrary f (CVSS 9.8)
- [CVE-2020-23592](https://cve.now/CVE-2020-23592.md): A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP\_V3.3.1-191028 allows an unauthenticated, remote attack (CVSS 8.8)
- [CVE-2020-23593](https://cve.now/CVE-2020-23593.md): A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP\_V3.3.1-191028 allows an unauthenticated, remote attacke (CVSS 6.5)
- [CVE-2021-29334](https://cve.now/CVE-2021-29334.md): An issue was discovered in JIZHI CMS 1.9.4. (CVSS 8.8)
- [CVE-2021-35284](https://cve.now/CVE-2021-35284.md): SQL Injection vulnerability in function get\_user in login\_manager.php in rizalafani cms-php v1. (CVSS 9.8)
- [CVE-2021-43258](https://cve.now/CVE-2021-43258.md): CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. (CVSS 8.8)
- [CVE-2021-46854](https://cve.now/CVE-2021-46854.md): mod\_radius in ProFTPD before 1.3.7c allows memory disclosure to RADIUS servers because it copies blocks of 16 characters. (CVSS 7.5)
- [CVE-2022-23740](https://cve.now/CVE-2022-23740.md): Improper Neutralization of Argument Delimiters in a Command in GitHub Enterprise Server leading to Remote Code Execution (CVSS 8.8, GitHub Enterprise Server)
- [CVE-2022-34830](https://cve.now/CVE-2022-34830.md): An Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged user to make improper GPU processing operati (CVSS 7.5)
- [CVE-2022-35500](https://cve.now/CVE-2022-35500.md): Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality. (CVSS 5.4)
- [CVE-2022-35501](https://cve.now/CVE-2022-35501.md): Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post functio (CVSS 5.4)
- [CVE-2022-36111](https://cve.now/CVE-2022-36111.md): immundb has insufficient verification of data authenticity (CVSS 5.4, codenotary immudb · github.com/codenotary/immudb)
- [CVE-2022-36337](https://cve.now/CVE-2022-36337.md): An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. (CVSS 8.2)
- [CVE-2022-37421](https://cve.now/CVE-2022-37421.md): Silverstripe silverstripe/cms through 4.11.0 allows XSS. (CVSS 5.4, silverstripe/cms)
- [CVE-2022-37429](https://cve.now/CVE-2022-37429.md): Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 2) via JavaScript payload to the href attribute of a link by splitti (CVSS 5.4, silverstripe/framework)
- [CVE-2022-37430](https://cve.now/CVE-2022-37430.md): Silverstripe silverstripe/framework through 4.11 allows XSS vulnerability via href attribute of a link (issue 2 of 2). (CVSS 5.4, silverstripe/framework)
- [CVE-2022-37772](https://cve.now/CVE-2022-37772.md): Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts due to excessive verbose responses from the a (CVSS 7.5)
- [CVE-2022-38113](https://cve.now/CVE-2022-38113.md): Information Disclosure Vulnerability (CVSS 5.3, SolarWinds SEM)
- [CVE-2022-38114](https://cve.now/CVE-2022-38114.md): Client-Side Desync Vulnerability (CVSS 6.1, SolarWinds SEM)
- [CVE-2022-38115](https://cve.now/CVE-2022-38115.md): Insecure Methods Vulnerability (CVSS 5.3, SolarWinds SEM)
- [CVE-2022-38145](https://cve.now/CVE-2022-38145.md): Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payload to a page's meta (CVSS 5.4, silverstripe/versioned-admin)
- [CVE-2022-38147](https://cve.now/CVE-2022-38147.md): Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3). (CVSS 5.4, silverstripe/assets)
- [CVE-2022-39833](https://cve.now/CVE-2022-39833.md): FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API (CVSS 7.2)
- [CVE-2022-40304](https://cve.now/CVE-2022-40304.md): An issue was discovered in libxml2 before 2.10.3. (CVSS 7.8)
- [CVE-2022-40770](https://cve.now/CVE-2022-40770.md): Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to authenticated command injection. (CVSS 7.2)
- [CVE-2022-40771](https://cve.now/CVE-2022-40771.md): Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclo (CVSS 4.9)
- [CVE-2022-40772](https://cve.now/CVE-2022-40772.md): Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data (CVSS 6.5)
- [CVE-2022-41446](https://cve.now/CVE-2022-41446.md): An access control issue in /Admin/dashboard.php of Record Management System using CodeIgniter v1.0 allows attackers to access and modify use (CVSS 5.4)
- [CVE-2022-41875](https://cve.now/CVE-2022-41875.md): Remote Code Execution in Optica (CVSS 10.0, airbnb optica)
- [CVE-2022-41922](https://cve.now/CVE-2022-41922.md): yiisoft/yii before v1.1.27 vulnerable to Remote Code Execution if the application calls \`unserialize()\` on arbitrary user input (CVSS 8.1, yiisoft yii · yiisoft/yii)
- [CVE-2022-41923](https://cve.now/CVE-2022-41923.md): Grails Spring Security Core plugin vulnerable to privilege escalation (CVSS 9.1, grails-spring-security-core)
- [CVE-2022-41924](https://cve.now/CVE-2022-41924.md): Tailscale Windows daemon is vulnerable to RCE via CSRF (CVSS 9.6, tailscale · tailscale.com)
- [CVE-2022-41925](https://cve.now/CVE-2022-41925.md): Tailscale daemon is vulnerable to information disclosure via CSRF (CVSS 3.8, tailscale · tailscale.com +1)
- [CVE-2022-41927](https://cve.now/CVE-2022-41927.md): XWiki Platform vulnerable to Cross-Site Request Forgery (CSRF) allowing to delete or rename tags (CVSS 7.4, xwiki-platform · org.xwiki.platform:xwiki-platform-tag-ui)
- [CVE-2022-41928](https://cve.now/CVE-2022-41928.md): XWiki Platform vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml (CVSS 9.9, xwiki-platform · org.xwiki.platform:xwiki-platform-attachme…)
- [CVE-2022-41929](https://cve.now/CVE-2022-41929.md): Missing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcore (CVSS 4.9, xwiki-platform · org.xwiki.platform:xwiki-platform-oldcore)
- [CVE-2022-41930](https://cve.now/CVE-2022-41930.md): org.xwiki.platform:xwiki-platform-user-profile-ui missing authorization to enable or disable users (CVSS 7.5, xwiki-platform · org.xwiki.platform:xwiki-platform-user-pro…)
- [CVE-2022-41931](https://cve.now/CVE-2022-41931.md): Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui (CVSS 9.9, xwiki-platform · org.xwiki.platform:xwiki-platform-icon-ui)
- [CVE-2022-41932](https://cve.now/CVE-2022-41932.md): Creation of new database tables through login form on PostgreSQL (CVSS 7.5, xwiki-platform · org.xwiki.platform:xwiki-platform-oldcore)
- [CVE-2022-41933](https://cve.now/CVE-2022-41933.md): Plaintext storage of password in org.xwiki.platform:xwiki-platform-security-authentication-default (CVSS 6.2, xwiki-platform · org.xwiki.platform:xwiki-platform-security…)
- [CVE-2022-41934](https://cve.now/CVE-2022-41934.md): Improper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-menu-ui (CVSS 9.9, xwiki-platform · org.xwiki.platform:xwiki-platform-menu-ui)
- [CVE-2022-41935](https://cve.now/CVE-2022-41935.md): Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-livetable-ui (CVSS 5.3, xwiki-platform · org.xwiki.platform:xwiki-platform-livetabl…)
- [CVE-2022-41946](https://cve.now/CVE-2022-41946.md): TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc (CVSS 4.7, pgjdbc · org.postgresql:postgresql)
- [CVE-2022-42095](https://cve.now/CVE-2022-42095.md): Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content. (CVSS 4.8, backdrop/backdrop)
- [CVE-2022-43196](https://cve.now/CVE-2022-43196.md): dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file\_manage\_control.php. (CVSS 9.1)
- [CVE-2022-43213](https://cve.now/CVE-2022-43213.md): Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editorder.php. (CVSS 9.8)
- [CVE-2022-44117](https://cve.now/CVE-2022-44117.md): Boa 0.94.14rc21 is vulnerable to SQL Injection via username. (no CVSS)
- [CVE-2022-44118](https://cve.now/CVE-2022-44118.md): dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file\_manage\_control.php. (CVSS 9.8)
- [CVE-2022-44120](https://cve.now/CVE-2022-44120.md): dedecmdv6 6.1.9 is vulnerable to SQL Injection. (CVSS 9.8)
- [CVE-2022-44139](https://cve.now/CVE-2022-44139.md): Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php. (CVSS 9.8)
- [CVE-2022-44140](https://cve.now/CVE-2022-44140.md): Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /Member/memberedit.html component. (CVSS 8.8)
- [CVE-2022-44249](https://cve.now/CVE-2022-44249.md): TOTOLINK NR1800X V9.1.0u.6279\_B20210910 contains a command injection via the FileName parameter in the UploadFirmwareFile function. (CVSS 9.8)
- [CVE-2022-44250](https://cve.now/CVE-2022-44250.md): TOTOLINK NR1800X V9.1.0u.6279\_B20210910 contains a command injection via the hostName parameter in the setOpModeCfg function. (CVSS 9.8)
- [CVE-2022-44251](https://cve.now/CVE-2022-44251.md): TOTOLINK NR1800X V9.1.0u.6279\_B20210910 contains a command injection via the ussd parameter in the setUssd function. (CVSS 9.8)
- [CVE-2022-44252](https://cve.now/CVE-2022-44252.md): TOTOLINK NR1800X V9.1.0u.6279\_B20210910 contains a command injection via the FileName parameter in the setUploadSetting function. (CVSS 9.8)
- [CVE-2022-44253](https://cve.now/CVE-2022-44253.md): TOTOLINK LR350 V9.3.5u.6369\_B20220309 contains a post-authentication buffer overflow via parameter ip in the setDiagnosisCfg function. (CVSS 8.8)
- [CVE-2022-44254](https://cve.now/CVE-2022-44254.md): TOTOLINK LR350 V9.3.5u.6369\_B20220309 contains a post-authentication buffer overflow via parameter text in the setSmsCfg function. (CVSS 8.8)
- [CVE-2022-44255](https://cve.now/CVE-2022-44255.md): TOTOLINK LR350 V9.3.5u.6369\_B20220309 contains a pre-authentication buffer overflow in the main function via long post data. (CVSS 9.8)
- [CVE-2022-44256](https://cve.now/CVE-2022-44256.md): TOTOLINK LR350 V9.3.5u.6369\_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function. (CVSS 8.8)
- [CVE-2022-44257](https://cve.now/CVE-2022-44257.md): TOTOLINK LR350 V9.3.5u.6369\_B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function. (CVSS 8.8)
- [CVE-2022-44258](https://cve.now/CVE-2022-44258.md): TOTOLINK LR350 V9.3.5u.6369\_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function. (CVSS 8.8)
- [CVE-2022-44259](https://cve.now/CVE-2022-44259.md): TOTOLINK LR350 V9.3.5u.6369\_B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParental (CVSS 8.8)
- [CVE-2022-44260](https://cve.now/CVE-2022-44260.md): TOTOLINK LR350 V9.3.5u.6369\_B20220309 contains a post-authentication buffer overflow via parameter sPort/ePort in the setIpPortFilterRules f (CVSS 8.8)
- [CVE-2022-44278](https://cve.now/CVE-2022-44278.md): Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user/manage\_user&id=. (CVSS 7.2)
- [CVE-2022-44280](https://cve.now/CVE-2022-44280.md): Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete\_img. (CVSS 6.5)
- [CVE-2022-44789](https://cve.now/CVE-2022-44789.md): A logical issue in O\_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code E (CVSS 8.8)
- [CVE-2022-45149](https://cve.now/CVE-2022-45149.md): A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course redirect URL. (CVSS 5.4, Moodle · moodle/moodle)
- [CVE-2022-45150](https://cve.now/CVE-2022-45150.md): A reflected cross-site scripting vulnerability was discovered in Moodle. (CVSS 6.1, Moodle · moodle/moodle)
- [CVE-2022-45151](https://cve.now/CVE-2022-45151.md): The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied data in several "social (CVSS 5.4, Moodle · moodle/moodle)
- [CVE-2022-45276](https://cve.now/CVE-2022-45276.md): An issue in the /index/user/user\_edit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account pa (CVSS 9.8)
- [CVE-2022-45278](https://cve.now/CVE-2022-45278.md): Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /index.php/admins/Fields/get\_fields.html component. (CVSS 8.8)
- [CVE-2022-45280](https://cve.now/CVE-2022-45280.md): A cross-site scripting (XSS) vulnerability in the Url parameter in /login.php of EyouCMS v1.6.0 allows attackers to execute arbitrary web sc (CVSS 5.4)
- [CVE-2022-45462](https://cve.now/CVE-2022-45462.md): Apache DolphinScheduler prior to 2.0.5 have command execution vulnerability (CVSS 9.8, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2022-45472](https://cve.now/CVE-2022-45472.md): CAE LearningSpace Enterprise (with Intuity License) image 267r patch 639 allows DOM XSS, related to ontouchmove and onpointerup. (CVSS 5.4)
- [CVE-2022-45866](https://cve.now/CVE-2022-45866.md): qpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup and other products, allows directory traversa (CVSS 5.3)
- [CVE-2022-45868](https://cve.now/CVE-2022-45868.md): The web-based admin console in H2 Database Engine before 2.2.220 can be started via the CLI with the argument -webAdminPassword, which allow (CVSS 8.4, com.h2database:h2)
- [CVE-2022-45872](https://cve.now/CVE-2022-45872.md): iTerm2 before 3.4.18 mishandles a DECRQSS response. (CVSS 9.8)
- [CVE-2022-45873](https://cve.now/CVE-2022-45873.md): systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. (CVSS 5.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-11-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.