# CVEs published 2022-11-27

8 CVEs were published on November 27, 2022: 2 critical, 4 high. Days are UTC.

- [CVE-2022-43705](https://cve.now/CVE-2022-43705.md): In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. (CVSS 9.1)
- [CVE-2022-45914](https://cve.now/CVE-2022-45914.md): The ESL (Electronic Shelf Label) protocol, as implemented by (for example) the OV80e934802 RF transceiver on the ETAG-2130-V4.3 20190629 boa (CVSS 6.5)
- [CVE-2022-45919](https://cve.now/CVE-2022-45919.md): An issue was discovered in the Linux kernel through 6.0.10. (no CVSS)
- [CVE-2022-45930](https://cve.now/CVE-2022-45930.md): A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. (CVSS 7.5)
- [CVE-2022-45931](https://cve.now/CVE-2022-45931.md): A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. (CVSS 7.5)
- [CVE-2022-45932](https://cve.now/CVE-2022-45932.md): A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. (CVSS 7.5)
- [CVE-2022-45933](https://cve.now/CVE-2022-45933.md): KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authentic (CVSS 9.8, github.com/benc-uk/kubeview)
- [CVE-2022-45934](https://cve.now/CVE-2022-45934.md): An issue was discovered in the Linux kernel through 6.0.10. (CVSS 7.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-11-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.