# CVEs published 2022-11-24

21 CVEs were published on November 24, 2022: 1 critical, 8 high. Days are UTC.

- [CVE-2022-29833](https://cve.now/CVE-2022-29833.md): Insufficiently Protected Credentials vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later allows a remote un (CVSS 6.8, Mitsubishi Electric GX Works3)
- [CVE-2022-29832](https://cve.now/CVE-2022-29832.md): Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, G (CVSS 3.7, Mitsubishi Electric GX Works3 · Mitsubishi Electric GX W… +1)
- [CVE-2022-29831](https://cve.now/CVE-2022-29831.md): Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions from 1.015R to 1.095Z allows a remote unauthe (CVSS 7.5, Mitsubishi Electric GX Works3)
- [CVE-2022-29830](https://cve.now/CVE-2022-29830.md): Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z, and Motion Control Settin (CVSS 9.1, Mitsubishi Electric GX Works3 · Mitsubishi Electric Motion…)
- [CVE-2022-29829](https://cve.now/CVE-2022-29829.md): Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GO (CVSS 6.8, Mitsubishi Electric GX Works3 · Mitsubishi Electric GT D… +2)
- [CVE-2022-29828](https://cve.now/CVE-2022-29828.md): Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenti (CVSS 6.8, Mitsubishi Electric GX Works3)
- [CVE-2022-29827](https://cve.now/CVE-2022-29827.md): Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A and later allows a remote unauthenti (CVSS 6.8, Mitsubishi Electric GX Works3)
- [CVE-2022-29826](https://cve.now/CVE-2022-29826.md): Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.087R and Motion Control (CVSS 6.8, Mitsubishi Electric GX Works3 · Mitsubishi Electric Motion…)
- [CVE-2022-29825](https://cve.now/CVE-2022-29825.md): Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 Version1 (GOT2000) ve (CVSS 5.6, Mitsubishi Electric GX Works3 · Mitsubishi Electric GT D… +1)
- [CVE-2022-25164](https://cve.now/CVE-2022-25164.md): Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.095Z and Mitsubishi Elec (CVSS 8.6, Mitsubishi Electric GX Works3 · Mitsubishi Electric MX OPC…)
- [CVE-2022-40977](https://cve.now/CVE-2022-40977.md): PILZ: PASvisu and PMI affected by ZipSlip (CVSS 7.5, PILZ PASvisu · PILZ PMI v5xx +2)
- [CVE-2022-40976](https://cve.now/CVE-2022-40976.md): PILZ: Multiple products affected by ZipSlip (CVSS 5.5, PILZ PAScal · PILZ PASconnect +3)
- [CVE-2022-40266](https://cve.now/CVE-2022-40266.md): Denial-of-Service (DoS) Vulnerability in FTP Server Function on GOT2000 Series (CVSS 5.3, Mitsubishi Electric GOT2000 Series GT27 model · Mitsubis… +1)
- [CVE-2022-44749](https://cve.now/CVE-2022-44749.md): Opening workflows from untrusted resources may override arbitrary file system contents (CVSS 5.5, KNIME Analytics Platform)
- [CVE-2022-44748](https://cve.now/CVE-2022-44748.md): Uploading workflows to KNIME Server may override arbitrary file system contents (CVSS 7.1, KNIME Server)
- [CVE-2022-2650](https://cve.now/CVE-2022-2650.md): Improper Restriction of Excessive Authentication Attempts in wger-project/wger (CVSS 7.8, wger-project/wger · wger)
- [CVE-2022-26885](https://cve.now/CVE-2022-26885.md): Apache DolphinScheduler config file read by task risk (CVSS 7.5, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2022-4088](https://cve.now/CVE-2022-4088.md): rickxy Stock Management System processlogin.php sql injection (CVSS 7.3, rickxy Stock Management System)
- [CVE-2022-4089](https://cve.now/CVE-2022-4089.md): rickxy Stock Management System processlogin.php cross site scripting (CVSS 4.3, rickxy Stock Management System)
- [CVE-2022-4090](https://cve.now/CVE-2022-4090.md): rickxy Stock Management System cross-site request forgery (CVSS 4.3, rickxy Stock Management System)
- [CVE-2022-4136](https://cve.now/CVE-2022-4136.md): Exposed Dangerous Method or Function in qmpaas/leadshop (CVSS 8.6, qmpaas/leadshop)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-11-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.