CVEs published November 29, 2022
86 CVEs were published on November 29, 2022: 3 critical, 28 high. 1 is now in CISA KEV.
- Published
- 86
- Critical
- 3
- High
- 28
- Medium
- 30
- Low
- 2
- Unrated
- 23
- Now in CISA KEV
- 1
- Fix available
- 29
Most affected products
- Google Chrome
- 22
- simplepress Simple:Press Forum
- 5
- codepeople Appointment Hour Booking – Booking Calendar
- 3
- SolarWinds Platform · SolarWinds Orion Platform
- 3
- tipsandtrickshq WP Affiliate Platform
- 3
- ultimatemember Ultimate Member – User Profile, Registration…
- 3
- discourse
- 2
- expresstech Quiz and Survey Master (QSM) – Easy Quiz and Su…
- 2
- QEMU
- 2
- TEAM JOHNLONG SOFTWARE CO. MAILD Mail Server
- 2
Critical 3
- CVE-2022-42109Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php.
- CVE-2022-44038Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component.
- CVE-2022-44354SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.
High 28
- CVE-2022-36964SolarWinds Platform Deserialization of Untrusted DataSolarWinds Platform · SolarWinds Orion Platform
- CVE-2022-36962SolarWinds Platform Command InjectionSolarWinds Platform · SolarWinds Orion Platform
- CVE-2022-36960SolarWinds Platform Improper Input ValidationSolarWinds Platform · SolarWinds Orion Platform
- CVE-2022-3898WP Affiliate Platform <= 6.3.9 - Cross-Site Request Forgerytipsandtrickshq WP Affiliate Platform
- CVE-2022-3747Becustom <= 1.0.5.2 - Cross-Site Request ForgeryMuffinGroup Becustom
- CVE-2022-3383Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Remote Code Execution via Multi-Selectultimatemember Ultimate Member – User Profile, Registration…
- CVE-2022-3384Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um_populate_dropdown_optionsultimatemember Ultimate Member – User Profile, Registration…
- CVE-2022-4035Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Formcodepeople Appointment Hour Booking – Booking Calendar
- CVE-2022-4032Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answerexpresstech Quiz and Survey Master (QSM) – Easy Quiz and Su…
- CVE-2022-4030Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletionsimplepress Simple:Press Forum
- CVE-2022-4027Simple:Press <= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Repliessimplepress Simple:Press Forum
- CVE-2022-21126Creation of Temporary File in Directory with Insecure Permissionscom.github.samtools:htsjdk
- CVE-2022-25848Directory Traversalstatic-dev-server
- CVE-2022-41675TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula InjectionTEAM JOHNLONG SOFTWARE CO. MAILD Mail Server
- CVE-2022-3086Cradlepoint IBR600 Command InjectionCradlepoint IBR600
- CVE-2022-3751 SQL Injection in owncast/owncastowncast/owncast · github.com/owncast/owncast
- CVE-2022-40799Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the
- CVE-2022-41568LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat.LINE client for iOS
- CVE-2022-43326An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.[*] allow
- CVE-2022-44037An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allow
- CVE-2022-44356WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allow
- CVE-2022-44635Apache Fineract allowed an authenticated user to perform remote code execution due to path traversalApache Software Foundation Apache Fineract
- CVE-2022-45202GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c
- CVE-2022-45329AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter.
- CVE-2022-45343GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the Q_IsTypeOn function at /gpac/src/bifs/unquant
- CVE-2022-46148Discourse allows self-XSS through malicious composer messagediscourse
- CVE-2022-46152OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup_shm_refs functionOP-TEE optee_os
- CVE-2022-46155Airtable.js credentials exposed in browser buildsairtable.js
Medium, low and unrated 55
- CVE-2022-3991Photospace Gallery <= 2.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scriptingdeanoakley Photospace Gallery
- CVE-2022-3995TeraWallet – For WooCommerce <= 1.4.3 - Insecure Direct Object Referencesubratamal Wallet for WooCommerce
- CVE-2022-3897WP Affiliate Platform <= 6.3.9 - Authenticated (Administrator+) Stored Cross-Site Scriptingtipsandtrickshq WP Affiliate Platform
- CVE-2022-3896WP Affiliate Platform <= 6.3.9 - Reflected Cross-Site Scriptingtipsandtrickshq WP Affiliate Platform
- CVE-2022-3361Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodesultimatemember Ultimate Member – User Profile, Registration…
- CVE-2022-4036Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypasscodepeople Appointment Hour Booking – Booking Calendar
- CVE-2022-4034Appointment Hour Booking <= 1.3.72 - CSV Injectioncodepeople Appointment Hour Booking – Booking Calendar
- CVE-2022-4033Quiz and Survey Master <= 8.0.4 - Improper Input Validationexpresstech Quiz and Survey Master (QSM) – Easy Quiz and Su…
- CVE-2022-4031Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modificationsimplepress Simple:Press Forum
- CVE-2022-4029Simple:Press <= 6.8 - Reflected Cross-Site Scripting via Cookie Valuesimplepress Simple:Press Forum
- CVE-2022-4028Simple:Press <= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signaturessimplepress Simple:Press Forum
- CVE-2022-41676TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site ScriptingTEAM JOHNLONG SOFTWARE CO. MAILD Mail Server
- CVE-2022-32967Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded CredentialsRealtek RTL8111EP-CG · Realtek RTL8111FP-CG
- CVE-2022-32966Realtek RTL8111FP-CG - Missing AuthorizationRealtek RTL8111FP-CG
- CVE-2021-31693The 10Web Photo Gallery plugin through 1.5.68 for WordPress allows XSS via album_gallery_id_0, bwg_album_search_0, and type_0 for bwg_fronte
- CVE-2022-36136ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment.
- CVE-2022-36137ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader.
- CVE-2022-36433The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_con
- CVE-2022-4144An out-of-bounds read flaw was found in the QXL display device emulation in QEMU.QEMU
- CVE-2022-4172An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_ersQEMU
- CVE-2022-4174Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted Google Chrome
- CVE-2022-4175Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption viGoogle Chrome
- CVE-2022-4176Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convincGoogle Chrome
- CVE-2022-4177Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potGoogle Chrome
- CVE-2022-4178Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentiGoogle Chrome
- CVE-2022-4179Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension toGoogle Chrome
- CVE-2022-4180Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to Google Chrome
- CVE-2022-4181Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a craftGoogle Chrome
- CVE-2022-4182Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass fenced frame restrGoogle Chrome
- CVE-2022-4183Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass navigation restGoogle Chrome
- CVE-2022-4184Insufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass autofill restrictionGoogle Chrome
- CVE-2022-4185Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents ofGoogle Chrome
- CVE-2022-4186Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to Google Chrome
- CVE-2022-4187Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker to bypass filesysteGoogle Chrome
- CVE-2022-4188Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass saGoogle Chrome
- CVE-2022-4189Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a maGoogle Chrome
- CVE-2022-4190Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictioGoogle Chrome
- CVE-2022-4191Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI inGoogle Chrome
- CVE-2022-4192Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific Google Chrome
- CVE-2022-4193Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system rGoogle Chrome
- CVE-2022-4194Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption viaGoogle Chrome
- CVE-2022-4195Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing wGoogle Chrome
- CVE-2022-4202GPAC lsr_dec.c lsr_translate_coords integer overflowGPAC
- CVE-2022-42099KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location Forum Subject input.
- CVE-2022-42100KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form.
- CVE-2022-44279Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php.
- CVE-2022-44355SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php.
- CVE-2022-45204GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function dimC_box_read at isomedia/box_code_3gpp.c.
- CVE-2022-45301Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group write privileges for th
- CVE-2022-45304Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group write privileges for th
- CVE-2022-45305Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for
- CVE-2022-45306Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write
- CVE-2022-45307Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the
- CVE-2022-46146Prometheus Exporter Toolkit vulnerable to basic authentication bypassprometheus exporter-toolkit · github.com/prometheus/exporte…
- CVE-2022-46150Discourse may allow exposure of hidden tags in the subject of notification emailsdiscourse