# CVEs published 2022-11-29

86 CVEs were published on November 29, 2022: 3 critical, 28 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-36964](https://cve.now/CVE-2022-36964.md): SolarWinds Platform Deserialization of Untrusted Data (CVSS 8.8, SolarWinds Platform · SolarWinds Orion Platform)
- [CVE-2022-36962](https://cve.now/CVE-2022-36962.md): SolarWinds Platform Command Injection (CVSS 7.2, SolarWinds Platform · SolarWinds Orion Platform)
- [CVE-2022-36960](https://cve.now/CVE-2022-36960.md): SolarWinds Platform Improper Input Validation (CVSS 8.8, SolarWinds Platform · SolarWinds Orion Platform)
- [CVE-2022-3991](https://cve.now/CVE-2022-3991.md): Photospace Gallery \<= 2.3.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4, deanoakley Photospace Gallery)
- [CVE-2022-3995](https://cve.now/CVE-2022-3995.md): TeraWallet – For WooCommerce \<= 1.4.3 - Insecure Direct Object Reference (CVSS 4.3, subratamal Wallet for WooCommerce)
- [CVE-2022-3898](https://cve.now/CVE-2022-3898.md): WP Affiliate Platform \<= 6.3.9 - Cross-Site Request Forgery (CVSS 8.8, tipsandtrickshq WP Affiliate Platform)
- [CVE-2022-3897](https://cve.now/CVE-2022-3897.md): WP Affiliate Platform \<= 6.3.9 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 5.5, tipsandtrickshq WP Affiliate Platform)
- [CVE-2022-3896](https://cve.now/CVE-2022-3896.md): WP Affiliate Platform \<= 6.3.9 - Reflected Cross-Site Scripting (CVSS 6.1, tipsandtrickshq WP Affiliate Platform)
- [CVE-2022-3747](https://cve.now/CVE-2022-3747.md): Becustom \<= 1.0.5.2 - Cross-Site Request Forgery (CVSS 8.8, MuffinGroup Becustom)
- [CVE-2022-3383](https://cve.now/CVE-2022-3383.md): Ultimate Member – User Profile, User Registration, Login & Membership Plugin \<= 2.5.0 - Authenticated (Admin+) Remote Code Execution via Multi-Select (CVSS 7.2, ultimatemember Ultimate Member – User Profile, Registration…)
- [CVE-2022-3384](https://cve.now/CVE-2022-3384.md): Ultimate Member – User Profile, User Registration, Login & Membership Plugin \<= 2.5.0 - Authenticated (Admin+) Limited Remote Code Execution via um\_populate\_dropdown\_options (CVSS 7.2, ultimatemember Ultimate Member – User Profile, Registration…)
- [CVE-2022-3361](https://cve.now/CVE-2022-3361.md): Ultimate Member – User Profile, User Registration, Login & Membership Plugin \<= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodes (CVSS 4.3, ultimatemember Ultimate Member – User Profile, Registration…)
- [CVE-2022-4036](https://cve.now/CVE-2022-4036.md): Appointment Hour Booking \<= 1.3.72 - CAPTCHA Bypass (CVSS 5.3, codepeople Appointment Hour Booking – Booking Calendar)
- [CVE-2022-4035](https://cve.now/CVE-2022-4035.md): Appointment Hour Booking \<= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form (CVSS 7.2, codepeople Appointment Hour Booking – Booking Calendar)
- [CVE-2022-4034](https://cve.now/CVE-2022-4034.md): Appointment Hour Booking \<= 1.3.72 - CSV Injection (CVSS 5.8, codepeople Appointment Hour Booking – Booking Calendar)
- [CVE-2022-4033](https://cve.now/CVE-2022-4033.md): Quiz and Survey Master \<= 8.0.4 - Improper Input Validation (CVSS 5.3, expresstech Quiz and Survey Master (QSM) – Easy Quiz and Su…)
- [CVE-2022-4032](https://cve.now/CVE-2022-4032.md): Quiz and Survey Master \<= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer (CVSS 7.2, expresstech Quiz and Survey Master (QSM) – Easy Quiz and Su…)
- [CVE-2022-4031](https://cve.now/CVE-2022-4031.md): Simple:Press \<= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification (CVSS 3.8, simplepress Simple:Press Forum)
- [CVE-2022-4030](https://cve.now/CVE-2022-4030.md): Simple:Press \<= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion (CVSS 8.1, simplepress Simple:Press Forum)
- [CVE-2022-4029](https://cve.now/CVE-2022-4029.md): Simple:Press \<= 6.8 - Reflected Cross-Site Scripting via Cookie Value (CVSS 4.7, simplepress Simple:Press Forum)
- [CVE-2022-4028](https://cve.now/CVE-2022-4028.md): Simple:Press \<= 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Signatures (CVSS 6.4, simplepress Simple:Press Forum)
- [CVE-2022-4027](https://cve.now/CVE-2022-4027.md): Simple:Press \<= 6.8 - Unauthenticated Stored Cross-Site Scripting via Forum Replies (CVSS 7.2, simplepress Simple:Press Forum)
- [CVE-2022-21126](https://cve.now/CVE-2022-21126.md): Creation of Temporary File in Directory with Insecure Permissions (CVSS 7.3, com.github.samtools:htsjdk)
- [CVE-2022-25848](https://cve.now/CVE-2022-25848.md): Directory Traversal (CVSS 7.5, static-dev-server)
- [CVE-2022-41676](https://cve.now/CVE-2022-41676.md): TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site Scripting (CVSS 5.4, TEAM JOHNLONG SOFTWARE CO. MAILD Mail Server)
- [CVE-2022-41675](https://cve.now/CVE-2022-41675.md): TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Formula Injection (CVSS 8.0, TEAM JOHNLONG SOFTWARE CO. MAILD Mail Server)
- [CVE-2022-32967](https://cve.now/CVE-2022-32967.md): Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials (CVSS 2.1, Realtek RTL8111EP-CG · Realtek RTL8111FP-CG)
- [CVE-2022-32966](https://cve.now/CVE-2022-32966.md): Realtek RTL8111FP-CG - Missing Authorization (CVSS 6.5, Realtek RTL8111FP-CG)
- [CVE-2021-31693](https://cve.now/CVE-2021-31693.md): The 10Web Photo Gallery plugin through 1.5.68 for WordPress allows XSS via album\_gallery\_id\_0, bwg\_album\_search\_0, and type\_0 for bwg\_fronte (no CVSS)
- [CVE-2022-3086](https://cve.now/CVE-2022-3086.md): Cradlepoint IBR600 Command Injection (CVSS 7.1, Cradlepoint IBR600)
- [CVE-2022-36136](https://cve.now/CVE-2022-36136.md): ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input Deposit Comment. (CVSS 4.8)
- [CVE-2022-36137](https://cve.now/CVE-2022-36137.md): ChurchCRM Version 4.4.5 has XSS vulnerabilities that allow attackers to store XSS via location input sHeader. (CVSS 4.8)
- [CVE-2022-36433](https://cve.now/CVE-2022-36433.md): The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short\_con (CVSS 6.1)
- [CVE-2022-3751](https://cve.now/CVE-2022-3751.md): SQL Injection in owncast/owncast (CVSS 8.8, owncast/owncast · github.com/owncast/owncast)
- [CVE-2022-40799](https://cve.now/CVE-2022-40799.md): Data Integrity Failure in 'Backup Config' in D-Link DNR-322L \<= 2.60B15 allows an authenticated attacker to execute OS level commands on the (CVSS 8.8, KEV)
- [CVE-2022-4144](https://cve.now/CVE-2022-4144.md): An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. (CVSS 6.5, QEMU)
- [CVE-2022-41568](https://cve.now/CVE-2022-41568.md): LINE client for iOS before 12.17.0 might be crashed by sharing an invalid shared key of e2ee in group chat. (CVSS 7.5, LINE client for iOS)
- [CVE-2022-4172](https://cve.now/CVE-2022-4172.md): An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read\_ers (CVSS 6.5, QEMU)
- [CVE-2022-4174](https://cve.now/CVE-2022-4174.md): Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted (no CVSS, Google Chrome)
- [CVE-2022-4175](https://cve.now/CVE-2022-4175.md): Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption vi (no CVSS, Google Chrome)
- [CVE-2022-4176](https://cve.now/CVE-2022-4176.md): Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinc (no CVSS, Google Chrome)
- [CVE-2022-4177](https://cve.now/CVE-2022-4177.md): Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to pot (no CVSS, Google Chrome)
- [CVE-2022-4178](https://cve.now/CVE-2022-4178.md): Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potenti (no CVSS, Google Chrome)
- [CVE-2022-4179](https://cve.now/CVE-2022-4179.md): Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to (no CVSS, Google Chrome)
- [CVE-2022-4180](https://cve.now/CVE-2022-4180.md): Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to (no CVSS, Google Chrome)
- [CVE-2022-4181](https://cve.now/CVE-2022-4181.md): Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a craft (no CVSS, Google Chrome)
- [CVE-2022-4182](https://cve.now/CVE-2022-4182.md): Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass fenced frame restr (no CVSS, Google Chrome)
- [CVE-2022-4183](https://cve.now/CVE-2022-4183.md): Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass navigation rest (no CVSS, Google Chrome)
- [CVE-2022-4184](https://cve.now/CVE-2022-4184.md): Insufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass autofill restriction (no CVSS, Google Chrome)
- [CVE-2022-4185](https://cve.now/CVE-2022-4185.md): Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of (no CVSS, Google Chrome)
- [CVE-2022-4186](https://cve.now/CVE-2022-4186.md): Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to (no CVSS, Google Chrome)
- [CVE-2022-4187](https://cve.now/CVE-2022-4187.md): Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker to bypass filesyste (no CVSS, Google Chrome)
- [CVE-2022-4188](https://cve.now/CVE-2022-4188.md): Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass sa (no CVSS, Google Chrome)
- [CVE-2022-4189](https://cve.now/CVE-2022-4189.md): Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a ma (no CVSS, Google Chrome)
- [CVE-2022-4190](https://cve.now/CVE-2022-4190.md): Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictio (no CVSS, Google Chrome)
- [CVE-2022-4191](https://cve.now/CVE-2022-4191.md): Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI in (no CVSS, Google Chrome)
- [CVE-2022-4192](https://cve.now/CVE-2022-4192.md): Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific (no CVSS, Google Chrome)
- [CVE-2022-4193](https://cve.now/CVE-2022-4193.md): Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system r (no CVSS, Google Chrome)
- [CVE-2022-4194](https://cve.now/CVE-2022-4194.md): Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via (no CVSS, Google Chrome)
- [CVE-2022-4195](https://cve.now/CVE-2022-4195.md): Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing w (no CVSS, Google Chrome)
- [CVE-2022-4202](https://cve.now/CVE-2022-4202.md): GPAC lsr\_dec.c lsr\_translate\_coords integer overflow (CVSS 6.3, GPAC)
- [CVE-2022-42099](https://cve.now/CVE-2022-42099.md): KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location Forum Subject input. (CVSS 5.4)
- [CVE-2022-42100](https://cve.now/CVE-2022-42100.md): KLiK SocialMediaWebsite Version 1.0.1 has XSS vulnerabilities that allow attackers to store XSS via location input reply-form. (CVSS 5.4)
- [CVE-2022-42109](https://cve.now/CVE-2022-42109.md): Online-shopping-system-advanced 1.0 was discovered to contain a SQL injection vulnerability via the p parameter at /shopping/product.php. (CVSS 9.8)
- [CVE-2022-43326](https://cve.now/CVE-2022-43326.md): An Insecure Direct Object Reference (IDOR) vulnerability in the password reset function of Telos Alliance Omnia MPX Node 1.0.0-1.4.\[\*\] allow (CVSS 7.5)
- [CVE-2022-44037](https://cve.now/CVE-2022-44037.md): An access control issue in APsystems ENERGY COMMUNICATION UNIT (ECU-C) Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allow (CVSS 8.8)
- [CVE-2022-44038](https://cve.now/CVE-2022-44038.md): Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component. (CVSS 9.8)
- [CVE-2022-44279](https://cve.now/CVE-2022-44279.md): Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php\_action/createBrand.php. (CVSS 6.1)
- [CVE-2022-44354](https://cve.now/CVE-2022-44354.md): SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file. (CVSS 9.8)
- [CVE-2022-44355](https://cve.now/CVE-2022-44355.md): SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network\_test.php. (CVSS 6.1)
- [CVE-2022-44356](https://cve.now/CVE-2022-44356.md): WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allow (CVSS 7.5)
- [CVE-2022-44635](https://cve.now/CVE-2022-44635.md): Apache Fineract allowed an authenticated user to perform remote code execution due to path traversal (CVSS 8.8, Apache Software Foundation Apache Fineract)
- [CVE-2022-45202](https://cve.now/CVE-2022-45202.md): GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC\_box\_read at isomedia/box\_code\_3gpp.c (CVSS 7.8)
- [CVE-2022-45204](https://cve.now/CVE-2022-45204.md): GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function dimC\_box\_read at isomedia/box\_code\_3gpp.c. (CVSS 5.5)
- [CVE-2022-45301](https://cve.now/CVE-2022-45301.md): Insecure permissions in Chocolatey Ruby package v3.1.2.1 and below grants all users in the Authenticated Users group write privileges for th (CVSS 4.3)
- [CVE-2022-45304](https://cve.now/CVE-2022-45304.md): Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group write privileges for th (CVSS 4.3)
- [CVE-2022-45305](https://cve.now/CVE-2022-45305.md): Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for (CVSS 4.3)
- [CVE-2022-45306](https://cve.now/CVE-2022-45306.md): Insecure permissions in Chocolatey Azure-Pipelines-Agent package v2.211.1 and below grants all users in the Authenticated Users group write (CVSS 4.3)
- [CVE-2022-45307](https://cve.now/CVE-2022-45307.md): Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the (CVSS 4.3)
- [CVE-2022-45329](https://cve.now/CVE-2022-45329.md): AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter. (CVSS 7.5)
- [CVE-2022-45343](https://cve.now/CVE-2022-45343.md): GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the Q\_IsTypeOn function at /gpac/src/bifs/unquant (CVSS 7.8)
- [CVE-2022-46146](https://cve.now/CVE-2022-46146.md): Prometheus Exporter Toolkit vulnerable to basic authentication bypass (CVSS 6.2, prometheus exporter-toolkit · github.com/prometheus/exporte…)
- [CVE-2022-46148](https://cve.now/CVE-2022-46148.md): Discourse allows self-XSS through malicious composer message (CVSS 7.1, discourse)
- [CVE-2022-46150](https://cve.now/CVE-2022-46150.md): Discourse may allow exposure of hidden tags in the subject of notification emails (CVSS 4.3, discourse)
- [CVE-2022-46152](https://cve.now/CVE-2022-46152.md): OP-TEE Trusted OS vulnerable to Improper Validation of Array Index in the cleanup\_shm\_refs function (CVSS 8.2, OP-TEE optee\_os)
- [CVE-2022-46155](https://cve.now/CVE-2022-46155.md): Airtable.js credentials exposed in browser builds (CVSS 7.6, airtable.js)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-11-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.