# CVEs published 2022-12-07

79 CVEs were published on December 7, 2022: 9 critical, 31 high. Days are UTC.

- [CVE-2022-4291](https://cve.now/CVE-2022-4291.md): Aswjsflt.dll in Avast Antivirus windows caused a crash of the Mozilla Firefox browser due to heap corruption (CVSS 7.7, NortonLifelock Avast Antivirus)
- [CVE-2022-3092](https://cve.now/CVE-2022-3092.md): GE CIMPLICITY Out-of-bounds Write (CVSS 7.8, GE CIMPLICITY)
- [CVE-2022-3084](https://cve.now/CVE-2022-3084.md): GE CIMPLICITY Access of Uninitialized Pointer (CVSS 7.8, GE CIMPLICITY)
- [CVE-2022-2952](https://cve.now/CVE-2022-2952.md): GE CIMPLICITY Access of Uninitialized Pointer (CVSS 7.8, GE CIMPLICITY)
- [CVE-2022-2948](https://cve.now/CVE-2022-2948.md): GE CIMPLICITY Heap-based Buffer Overflow (CVSS 7.8, GE CIMPLICITY)
- [CVE-2022-2002](https://cve.now/CVE-2022-2002.md): GE CIMPLICITY Untrusted Pointer Dereference (CVSS 7.8, GE CIMPLICITY)
- [CVE-2022-23471](https://cve.now/CVE-2022-23471.md): containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak (CVSS 5.7, containerd · github.com/containerd/containerd)
- [CVE-2022-23491](https://cve.now/CVE-2022-23491.md): Removal of TrustCor root certificate (CVSS 6.8, python-certifi · certifi)
- [CVE-2022-23487](https://cve.now/CVE-2022-23487.md): libp2p denial of service vulnerability from lack of resource management (CVSS 7.5, js-libp2p · libp2p)
- [CVE-2022-23486](https://cve.now/CVE-2022-23486.md): libp2p-rust denial of service vulnerability from lack of resource management (CVSS 7.5, rust-libp2p · libp2p)
- [CVE-2022-43581](https://cve.now/CVE-2022-43581.md): IBM Content Navigator code execution (CVSS 7.5, IBM Content Navigator)
- [CVE-2022-20691](https://cve.now/CVE-2022-20691.md): A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmware could allow an una (CVSS 5.3, Cisco Analog Telephone Adaptor (ATA) Software)
- [CVE-2022-20690](https://cve.now/CVE-2022-20690.md): Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow (CVSS 5.3, Cisco Analog Telephone Adaptor (ATA) Software)
- [CVE-2022-20689](https://cve.now/CVE-2022-20689.md): Multiple vulnerabilities in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow (CVSS 5.3, Cisco Analog Telephone Adaptor (ATA) Software)
- [CVE-2022-20688](https://cve.now/CVE-2022-20688.md): A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an unaut (CVSS 5.3, Cisco Analog Telephone Adaptor (ATA) Software)
- [CVE-2022-20687](https://cve.now/CVE-2022-20687.md): Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware (CVSS 5.3, Cisco Analog Telephone Adaptor (ATA) Software)
- [CVE-2022-20686](https://cve.now/CVE-2022-20686.md): Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware (CVSS 5.3, Cisco Analog Telephone Adaptor (ATA) Software)
- [CVE-2022-41735](https://cve.now/CVE-2022-41735.md): IBM Business Process Manager cross-site scripting (CVSS 5.4, IBM Business Process Manager)
- [CVE-2020-36565](https://cve.now/CVE-2020-36565.md): Directory traversal on Windows in github.com/labstack/echo/v4 (CVSS 5.3, github.com/labstack/echo/v4)
- [CVE-2022-41720](https://cve.now/CVE-2022-41720.md): Restricted file access on Windows in os and net/http (CVSS 7.5, Go standard library os · Go standard library net/http +1)
- [CVE-2022-3641](https://cve.now/CVE-2022-3641.md): Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated use (CVSS 8.8, Devolutions Remote Desktop Manager)
- [CVE-2022-45910](https://cve.now/CVE-2022-45910.md): Apache ManifoldCF: LDAP Injection Vulnerability - ActiveDirectory Authorities (CVSS 5.3, Apache Software Foundation Apache ManifoldCF)
- [CVE-2022-46742](https://cve.now/CVE-2022-46742.md): Code injection in paddle.audio.functional.get\_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. (CVSS 10.0, PaddlePaddle)
- [CVE-2022-46741](https://cve.now/CVE-2022-46741.md): Out-of-bounds read in gather\_tree in PaddlePaddle before 2.4. (CVSS 7.1, PaddlePaddle)
- [CVE-2022-41800](https://cve.now/CVE-2022-41800.md): Appliance mode iControl REST vulnerability (CVSS 8.7, F5 BIG-IP)
- [CVE-2022-41622](https://cve.now/CVE-2022-41622.md): iControl SOAP vulnerability (CVSS 8.8, F5 BIG-IP · F5 BIG-IQ Centralized Management)
- [CVE-2022-34840](https://cve.now/CVE-2022-34840.md): Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration se (CVSS 6.5, Buffalo network devices)
- [CVE-2022-3643](https://cve.now/CVE-2022-3643.md): Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a (no CVSS, Linux)
- [CVE-2022-37406](https://cve.now/CVE-2022-37406.md): Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authenticated attacker wit (no CVSS, RICOH COMPANY Aficio SP)
- [CVE-2022-39044](https://cve.now/CVE-2022-39044.md): Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege t (CVSS 6.8, Buffalo network devices)
- [CVE-2022-40966](https://cve.now/CVE-2022-40966.md): Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and acce (CVSS 8.8, Buffalo network devices)
- [CVE-2022-41783](https://cve.now/CVE-2022-41783.md): tdpServer of TP-Link RE300 V1 improperly processes its input, which may allow an attacker to cause a denial-of-service (DoS) condition of th (CVSS 5.5, TP-Link RE300)
- [CVE-2022-41994](https://cve.now/CVE-2022-41994.md): Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker (CVSS 4.8, baserCMS Users Community baserCMS · baserproject/basercms)
- [CVE-2022-42328](https://cve.now/CVE-2022-42328.md): Guests can trigger deadlock in Linux netback driver T\[his CNA information record relates to multiple CVEs; the text explains which aspects/v (CVSS 6.2, Linux)
- [CVE-2022-42329](https://cve.now/CVE-2022-42329.md): Guests can trigger deadlock in Linux netback driver T\[his CNA information record relates to multiple CVEs; the text explains which aspects/v (CVSS 5.5, Linux)
- [CVE-2022-42458](https://cve.now/CVE-2022-42458.md): Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticat (CVSS 9.8, Shift Tech bingo!CMS)
- [CVE-2022-42486](https://cve.now/CVE-2022-42486.md): Stored cross-site scripting vulnerability in User group management of baserCMS versions prior to 4.7.2 allows a remote authenticated attacke (CVSS 4.8, baserCMS Users Community baserCMS · baserproject/basercms)
- [CVE-2022-4261](https://cve.now/CVE-2022-4261.md): Rapid7 Nexpose Update Validation Issue (CVSS 4.4, Rapid7 Nexpose · Rapid7 InsightVM)
- [CVE-2022-4322](https://cve.now/CVE-2022-4322.md): maku-boot Scheduled Task AbstractScheduleJob.java doExecute injection (CVSS 6.3, maku-boot)
- [CVE-2022-4341](https://cve.now/CVE-2022-4341.md): csliuwy coder-chain\_gdut cross site scripting (CVSS 3.5, csliuwy coder-chain\_gdut)
- [CVE-2022-43464](https://cve.now/CVE-2022-43464.md): Hidden functionality vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote auth (CVSS 8.8, UNIMO Technology Co. UDR-JA1604/UDR-JA1608/UDR-JA1616)
- [CVE-2022-43468](https://cve.now/CVE-2022-43468.md): External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the (CVSS 7.5, Hector Cabrera WordPress Popular Posts)
- [CVE-2022-43508](https://cve.now/CVE-2022-43508.md): Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code exec (CVSS 7.8, OMRON CX-Programmer)
- [CVE-2022-43509](https://cve.now/CVE-2022-43509.md): Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code (CVSS 7.8, OMRON CX-Programmer)
- [CVE-2022-43660](https://cve.now/CVE-2022-43660.md): Improper neutralization of Server-Side Includes (SSW) within a web page in Movable Type series allows a remote authenticated attacker with P (CVSS 7.2, Six Apart Movable Type)
- [CVE-2022-43667](https://cve.now/CVE-2022-43667.md): Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitr (CVSS 7.8, OMRON CX-Programmer)
- [CVE-2022-43668](https://cve.now/CVE-2022-43668.md): Typora versions prior to 1.4.4 fails to properly neutralize JavaScript code, which may result in executing JavaScript code contained in the (CVSS 6.1, Typora)
- [CVE-2022-44153](https://cve.now/CVE-2022-44153.md): Rapid Software LLC Rapid SCADA 5.8.4 is vulnerable to Cross Site Scripting (XSS). (CVSS 6.1)
- [CVE-2022-44351](https://cve.now/CVE-2022-44351.md): Skycaiji v2.5.1 was discovered to contain a deserialization vulnerability via /SkycaijiApp/admin/controller/Mystore.php. (CVSS 9.8)
- [CVE-2022-44361](https://cve.now/CVE-2022-44361.md): An issue was discovered in ZZCMS 2022. (CVSS 5.4)
- [CVE-2022-44371](https://cve.now/CVE-2022-44371.md): hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution (RCE). (CVSS 9.8)
- [CVE-2022-44373](https://cve.now/CVE-2022-44373.md): A stack overflow vulnerability exists in TrendNet Wireless AC Easy-Upgrader TEW-820AP (Version v1.0R, firmware version 1.01.B01) which may r (CVSS 8.8)
- [CVE-2022-44393](https://cve.now/CVE-2022-44393.md): Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/view\_service&id=. (CVSS 7.2)
- [CVE-2022-44606](https://cve.now/CVE-2022-44606.md): OS command injection vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote auth (CVSS 8.8, UNIMO Technology Co. UDR-JA1604/UDR-JA1608/UDR-JA1616)
- [CVE-2022-44608](https://cve.now/CVE-2022-44608.md): Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume hu (CVSS 7.5, Cybozu Remote Service)
- [CVE-2022-44620](https://cve.now/CVE-2022-44620.md): Improper authentication vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote a (CVSS 8.8, UNIMO Technology Co. UDR-JA1604/UDR-JA1608/UDR-JA1616)
- [CVE-2022-44849](https://cve.now/CVE-2022-44849.md): A Cross-Site Request Forgery (CSRF) in the Administrator List of MetInfo v7.7 allows attackers to arbitrarily add Super Administrator accoun (CVSS 8.8)
- [CVE-2022-44942](https://cve.now/CVE-2022-44942.md): Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function. (CVSS 8.1, github.com/casdoor/casdoor)
- [CVE-2022-45008](https://cve.now/CVE-2022-45008.md): Online Leave Management System v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /leave\_syst (CVSS 4.8)
- [CVE-2022-45009](https://cve.now/CVE-2022-45009.md): Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave\_system/classes/SystemSettings (CVSS 7.2)
- [CVE-2022-45010](https://cve.now/CVE-2022-45010.md): Simple Phone Book/Directory Web App v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at /PhoneBook/edit (CVSS 9.8)
- [CVE-2022-45025](https://cve.now/CVE-2022-45025.md): Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF fil (CVSS 9.8)
- [CVE-2022-45026](https://cve.now/CVE-2022-45026.md): An issue in Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom allows attackers to execute arbitrary commands during the GFM e (CVSS 9.8)
- [CVE-2022-45113](https://cve.now/CVE-2022-45113.md): Improper validation of syntactic correctness of input vulnerability exist in Movable Type series. (CVSS 6.5, Six Apart Movable Type)
- [CVE-2022-45122](https://cve.now/CVE-2022-45122.md): Cross-site scripting vulnerability in Movable Type Movable Type 7 r.5301 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.5301 (CVSS 6.1, Six Apart Movable Type)
- [CVE-2022-45217](https://cve.now/CVE-2022-45217.md): A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML (CVSS 5.4)
- [CVE-2022-45550](https://cve.now/CVE-2022-45550.md): AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE). (CVSS 9.8)
- [CVE-2022-45915](https://cve.now/CVE-2022-45915.md): ILIAS before 7.16 allows OS Command Injection. (CVSS 8.8)
- [CVE-2022-45916](https://cve.now/CVE-2022-45916.md): ILIAS before 7.16 allows XSS. (CVSS 5.4)
- [CVE-2022-45917](https://cve.now/CVE-2022-45917.md): ILIAS before 7.16 has an Open Redirect. (CVSS 6.1)
- [CVE-2022-45918](https://cve.now/CVE-2022-45918.md): ILIAS before 7.16 allows External Control of File Name or Path. (no CVSS)
- [CVE-2022-46682](https://cve.now/CVE-2022-46682.md): Jenkins Plot Plugin 2.1.11 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. (CVSS 9.8, Jenkins Project Jenkins Plot Plugin · org.jenkins-ci.plugin…)
- [CVE-2022-46683](https://cve.now/CVE-2022-46683.md): Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is legitimately pointing (CVSS 6.1, Jenkins Project Jenkins Google Login Plugin · org.jenkins-c…)
- [CVE-2022-46684](https://cve.now/CVE-2022-46684.md): Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML (CVSS 5.4, Jenkins Project Jenkins Checkmarx Plugin · com.checkmarx.je…)
- [CVE-2022-46685](https://cve.now/CVE-2022-46685.md): In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credentials masking, potential (CVSS 4.3, Jenkins Project Jenkins Gitea Plugin · org.jenkins-ci.plugi…)
- [CVE-2022-46686](https://cve.now/CVE-2022-46686.md): Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display names on the Custom (CVSS 5.4, Jenkins Project Jenkins Custom Build Properties Plugin · io…)
- [CVE-2022-46687](https://cve.now/CVE-2022-46687.md): Jenkins Spring Config Plugin 2.0.0 and earlier does not escape build display names shown on the Spring Config view, resulting in a stored cr (CVSS 5.4, Jenkins Project Jenkins Spring Config Plugin · io.jenkins.p…)
- [CVE-2022-46688](https://cve.now/CVE-2022-46688.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenk (CVSS 6.5, Jenkins Project Jenkins Sonar Gerrit Plugin · org.jenkins-c…)
- [CVE-2022-46770](https://cve.now/CVE-2022-46770.md): qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumpt (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-12-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.