# CVEs published 2022-11-28

65 CVEs were published on November 28, 2022: 7 critical, 20 high. Days are UTC.

- [CVE-2022-38140](https://cve.now/CVE-2022-38140.md): WordPress SEO Plugin by Squirrly SEO Plugin \<= 12.1.10 is vulnerable to Arbitrary File Upload (CVSS 7.6, SEO Plugin by Squirrly SEO)
- [CVE-2022-34654](https://cve.now/CVE-2022-34654.md): WordPress Manage Notification E-mails Plugin \<= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Virgial Berveling Manage Notification E-mails)
- [CVE-2022-4169](https://cve.now/CVE-2022-4169.md): Theme and plugin translation for Polylang \<= 3.2.16 - Missing Authorization (CVSS 6.5, marcinkazmierski Theme and plugin translation for Polylang)
- [CVE-2022-41732](https://cve.now/CVE-2022-41732.md): IBM Maximo information disclosure (CVSS 6.2, IBM Maximo Mobile)
- [CVE-2021-45036](https://cve.now/CVE-2021-45036.md): Velneo vClient improper authentication (CVSS 8.7, Velneo vClient)
- [CVE-2022-42445](https://cve.now/CVE-2022-42445.md): HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445) (CVSS 4.9, HCL Software HCL Launch)
- [CVE-2022-3865](https://cve.now/CVE-2022-3865.md): WP User Merger \< 1.5.3 - Admin+ SQLi via ID (CVSS 8.8, WP User Merger)
- [CVE-2022-3847](https://cve.now/CVE-2022-3847.md): Showing URL in QR Code \<= 0.0.1 - Stored XSS via CSRF (no CVSS, Showing URL in QR Code)
- [CVE-2022-3823](https://cve.now/CVE-2022-3823.md): Beautiful Cookie Consent Banner \< 2.9.1 - Admin+ Stored XSS (CVSS 4.8, Beautiful Cookie Consent Banner)
- [CVE-2022-3511](https://cve.now/CVE-2022-3511.md): Awesome Support \< 6.1.2 - Subscriber+ Arbitrary Exported Tickets Download (CVSS 6.5, Awesome Support)
- [CVE-2022-3839](https://cve.now/CVE-2022-3839.md): Analytics for WP \<= 1.5.1 - Admin+ Stored XSS (CVSS 4.8, Analytics for WP)
- [CVE-2022-3603](https://cve.now/CVE-2022-3603.md): Export customers list CSV for WooCommerce \< 2.0.69 - CSV Injection (CVSS 9.8, Export customers list csv for WooCommerce, WordPress users…)
- [CVE-2022-3834](https://cve.now/CVE-2022-3834.md): Google Forms \<= 0.95 - Admin+ Stored XSS (CVSS 4.8, Google Forms)
- [CVE-2022-3822](https://cve.now/CVE-2022-3822.md): Donations via PayPal \< 1.9.9 - Admin+ Stored XSS (CVSS 4.8, Donations via PayPal)
- [CVE-2022-3848](https://cve.now/CVE-2022-3848.md): WP User Merger \< 1.5.3 - Admin+ SQLi via wpsu\_user\_id (CVSS 8.8, WP User Merger)
- [CVE-2022-3833](https://cve.now/CVE-2022-3833.md): Fancier Author Box by ThematoSoup \<= 1.4 - Admin+ Stored XSS (CVSS 4.8, Fancier Author Box by ThematoSoup)
- [CVE-2022-3824](https://cve.now/CVE-2022-3824.md): WP Admin UI Customize \< 1.5.13 - Admin+ Stored XSS (CVSS 4.8, WP Admin UI Customize)
- [CVE-2022-3849](https://cve.now/CVE-2022-3849.md): WP User Merger \< 1.5.3 - Admin+ SQLi via user\_id (CVSS 8.8, WP User Merger)
- [CVE-2022-3490](https://cve.now/CVE-2022-3490.md): Checkout Field Editor for WooCommerce \< 1.8.0 - Admin+ PHP Object Injection (CVSS 7.2, Checkout Field Editor (Checkout Manager) for WooCommerce)
- [CVE-2022-3828](https://cve.now/CVE-2022-3828.md): Video Thumbnails \<= 2.12.3 - Admin+ Stored XSS (CVSS 4.8, Video Thumbnails)
- [CVE-2022-2983](https://cve.now/CVE-2022-2983.md): Salat Times \< 3.2.2 - Admin+ Stored Cross-Site Scripting (CVSS 4.8, Salat Times)
- [CVE-2022-2311](https://cve.now/CVE-2022-2311.md): Find and Replace All \< 1.3 - Reflected Cross Site Scripting (CVSS 6.1, Find and Replace All)
- [CVE-2022-3610](https://cve.now/CVE-2022-3610.md): Jeeng Push Notifications \< 2.0.4 - Admin+ Stored Cross-Site Scripting (CVSS 4.8, Jeeng Push Notifications)
- [CVE-2022-3850](https://cve.now/CVE-2022-3850.md): Find and Replace All \<= 1.3 - Arbitrary Replacement via CSRF (CVSS 4.3, Find and Replace All)
- [CVE-2022-3831](https://cve.now/CVE-2022-3831.md): reCAPTCHA \<= 1.6 - Admin+ Stored XSS (CVSS 4.8, reCAPTCHA)
- [CVE-2022-3689](https://cve.now/CVE-2022-3689.md): HTML Forms \< 1.3.25 - Admin+ SQLi (CVSS 7.2, HTML Forms)
- [CVE-2021-25059](https://cve.now/CVE-2021-25059.md): Download Plugin \< 2.0.0 - Subscriber+ Website Download (CVSS 5.4, Download Plugin)
- [CVE-2022-3769](https://cve.now/CVE-2022-3769.md): OWM Weather \< 5.6.9 - Contributor+ SQLi (CVSS 8.8, OWM Weather)
- [CVE-2022-3768](https://cve.now/CVE-2022-3768.md): WPSmartContracts \< 1.3.12 - Author+ SQLi (CVSS 8.8, WPSmartContracts)
- [CVE-2022-3601](https://cve.now/CVE-2022-3601.md): Image Hover Effects Css3 \<= 4.5 - Admin+ Stored XSS (CVSS 4.8, Image Hover Effects Css3)
- [CVE-2022-4020](https://cve.now/CVE-2022-4020.md): Acer Aspire BIOS vulnerability (CVSS 8.1, Acer Aspire A315-22 · Acer Aspire A115-21 +3)
- [CVE-2022-43590](https://cve.now/CVE-2022-43590.md): A null pointer dereference vulnerability exists in the handle\_ioctl\_0x830a0\_systembuffer functionality of Callback technologies CBFS Filter (CVSS 6.2, Callback technologies CBFS Filter)
- [CVE-2022-43589](https://cve.now/CVE-2022-43589.md): A null pointer dereference vulnerability exists in the handle\_ioctl\_8314C functionality of Callback technologies CBFS Filter 20.0.8317. (CVSS 6.2, Callback technologies CBFS Filter)
- [CVE-2022-43588](https://cve.now/CVE-2022-43588.md): A null pointer dereference vulnerability exists in the handle\_ioctl\_83150 functionality of Callback technologies CBFS Filter 20.0.8317. (CVSS 6.2, Callback technologies CBFS Filter)
- [CVE-2022-24187](https://cve.now/CVE-2022-24187.md): The user\_id and device\_id on the Ourphoto App version 1.4.1 /device/\* end-points both suffer from insecure direct object reference vulnerabi (CVSS 7.5)
- [CVE-2022-24188](https://cve.now/CVE-2022-24188.md): The /device/signin end-point for the Ourphoto App version 1.4.1 discloses clear-text password information for functionality within the pictu (CVSS 7.5)
- [CVE-2022-24189](https://cve.now/CVE-2022-24189.md): The user\_token authorization header on the Ourphoto App version 1.4.1 /apiv1/\* end-points is not implemented properly. (CVSS 6.5)
- [CVE-2022-24190](https://cve.now/CVE-2022-24190.md): The /device/acceptBind end-point for Ourphoto App version 1.4.1 does not require authentication or authorization. (CVSS 7.5)
- [CVE-2022-31877](https://cve.now/CVE-2022-31877.md): An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet. (CVSS 8.8)
- [CVE-2022-36193](https://cve.now/CVE-2022-36193.md): SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the applicatio (CVSS 9.8)
- [CVE-2022-38753](https://cve.now/CVE-2022-38753.md): This update resolves a multi-factor authentication bypass attack (CVSS 6.3, NetIQ Advanced Authentication)
- [CVE-2022-38900](https://cve.now/CVE-2022-38900.md): decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. (CVSS 7.5, decode-uri-component)
- [CVE-2022-4104](https://cve.now/CVE-2022-4104.md): A loop with an unreachable exit condition can be triggered by passing a crafted JPEG file to the Lepton image compression tool, resulting in (CVSS 5.5, Dropbox Lepton)
- [CVE-2022-4127](https://cve.now/CVE-2022-4127.md): A NULL pointer dereference issue was discovered in the Linux kernel in io\_files\_update\_with\_index\_alloc. (CVSS 5.5, Linux kernel)
- [CVE-2022-4128](https://cve.now/CVE-2022-4128.md): A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect tim (CVSS 5.5, Linux kernel)
- [CVE-2022-4129](https://cve.now/CVE-2022-4129.md): A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). (CVSS 5.5, Linux kernel)
- [CVE-2022-41912](https://cve.now/CVE-2022-41912.md): crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements (CVSS 9.1, crewjam saml · github.com/crewjam/saml)
- [CVE-2022-41921](https://cve.now/CVE-2022-41921.md): Discourse chat messages should have a maximum character limit (CVSS 3.5, discourse)
- [CVE-2022-41944](https://cve.now/CVE-2022-41944.md): Discourse users can see notifications for topics they no longer have access to (CVSS 3.5, discourse)
- [CVE-2022-41957](https://cve.now/CVE-2022-41957.md): muhammara vulnerable to Unchecked Return Value to NULL Pointer Dereference (CVSS 7.5, julianhille MuhammaraJS · hummus +1)
- [CVE-2022-41965](https://cve.now/CVE-2022-41965.md): Opencast Authenticated OpenRedirect Vulnerability (CVSS 5.7, opencast · org.opencastproject:opencast-common)
- [CVE-2022-44283](https://cve.now/CVE-2022-44283.md): AVS Audio Converter 10.3 is vulnerable to Buffer Overflow. (CVSS 9.8)
- [CVE-2022-44284](https://cve.now/CVE-2022-44284.md): Dinstar FXO Analog VoIP Gateway DAG2000-16O is vulnerable to Cross Site Scripting (XSS). (CVSS 5.4)
- [CVE-2022-44399](https://cve.now/CVE-2022-44399.md): Poultry Farm Management System v1.0 contains a SQL injection vulnerability via the del parameter at /Redcock-Farm/farm/category.php. (CVSS 9.8)
- [CVE-2022-44400](https://cve.now/CVE-2022-44400.md): Purchase Order Management System v1.0 contains a file upload vulnerability via /purchase\_order/admin/?page=system\_info. (CVSS 9.8)
- [CVE-2022-44401](https://cve.now/CVE-2022-44401.md): Online Tours & Travels Management System v1.0 contains an arbitrary file upload vulnerability via /tour/admin/file.php. (CVSS 9.8)
- [CVE-2022-44937](https://cve.now/CVE-2022-44937.md): Bosscms v2.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Add function under the Administrator List module. (CVSS 6.5)
- [CVE-2022-45214](https://cve.now/CVE-2022-45214.md): A cross-site scripting (XSS) vulnerability in Sanitization Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTM (CVSS 6.1)
- [CVE-2022-45221](https://cve.now/CVE-2022-45221.md): Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in changepassword.php. (CVSS 4.8)
- [CVE-2022-45223](https://cve.now/CVE-2022-45223.md): Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /Admin/add-student.php. (CVSS 4.8)
- [CVE-2022-45224](https://cve.now/CVE-2022-45224.md): Web-Based Student Clearance System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in Admin/add-admin.php. (CVSS 4.8)
- [CVE-2022-45442](https://cve.now/CVE-2022-45442.md): Sinatra vulnerable to Reflected File Download attack (CVSS 8.8, sinatra)
- [CVE-2022-45921](https://cve.now/CVE-2022-45921.md): FusionAuth before 1.41.3 allows a file outside of the application root to be viewed or retrieved using an HTTP request. (CVSS 7.5, io.fusionauth:fusionauth-java-client)
- [CVE-2022-45939](https://cve.now/CVE-2022-45939.md): GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etag (CVSS 7.8)
- [CVE-2022-46147](https://cve.now/CVE-2022-46147.md): Drag and Drop XBlock v2 has XSS Issues in Xblock Input Fields (CVSS 8.4, openedx xblock-drag-and-drop-v2 · xblock-drag-and-drop-v2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-11-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.