11/21/2022 08:12 AM EST
Original release date: November 21, 2022 | Last revised: November 22, 2022
High Vulnerabilities
| Primary Vendor — Product |
Description | Published | CVSS Score | Source & Patch Info |
|---|---|---|---|---|
| aiphone — gt-dmb-n_firmware | Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges. | 2022-11-14 | 7.5 | CVE-2022-40903 MISC MISC |
| amazon — opensearch | OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementation of fine-grained access control rules (document-level security, field-level security and field masking) where they are not correctly applied to the indices that back data streams potentially leading to incorrect access authorization. OpenSearch 1.3.7 and 2.4.0 contain a fix for this issue. Users are advised to update. There are no known workarounds for this issue. | 2022-11-15 | 9.8 | CVE-2022-41918 MISC CONFIRM |
| amazon — opensearch_notifications | OpenSearch Notifications is a notifications plugin for OpenSearch that enables other plugins to send notifications via Email, Slack, Amazon Chime, Custom web-hook etc channels. A potential SSRF issue in OpenSearch Notifications Plugin 2.2.0 and below could allow an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Notification plugin’s intended scope. OpenSearch 2.2.1+ contains the fix for this issue. There are currently no recommended workarounds. | 2022-11-11 | 8.7 | CVE-2022-41906 MISC CONFIRM MISC |
| apache — airflow | A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0. | 2022-11-14 | 8.8 | CVE-2022-40127 MISC MISC MLIST |
| apache — airflow | A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for tasks which were not executed (for example when they were depending on past and previous instances of the task failed). This issue affects Apache Airflow prior to 2.3.1. | 2022-11-14 | 7.5 | CVE-2022-27949 MISC MISC MLIST |
| apache — archiva | If anonymous read enabled, it’s possible to read the database file directly without logging in. | 2022-11-15 | 7.5 | CVE-2022-40308 CONFIRM MLIST |
| apache — sshd | Class org.apache.sshd.server. |
2022-11-16 | 9.8 | CVE-2022-45047 CONFIRM |
| archesproject — arches | Arches is a web platform for creating, managing, & visualizing geospatial data. Versions prior to 6.1.2, 6.2.1, and 7.1.2 are vulnerable to SQL Injection. With a carefully crafted web request, it’s possible to execute certain unwanted sql statements against the database. This issue is fixed in version 7.12, 6.2.1, and 6.1.2. Users are recommended to upgrade as soon as possible. There are no workarounds. | 2022-11-11 | 9.8 | CVE-2022-41892 CONFIRM |
| atlassian — bitbucket | There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their username can exploit this issue to execute arbitrary code on the system. This vulnerability can be unauthenticated if the Bitbucket Server and Data Center instance has enabled “Allow public signup”. | 2022-11-17 | 9.8 | CVE-2022-43781 MISC MISC |
| atlassian — confluence_data_center | The Netic User Export add-on before 1.3.5 for Atlassian Confluence has the functionality to generate a list of users in the application, and export it. During export, the HTTP request has a fileName parameter that accepts any file on the system (e.g., an SSH private key) to be downloaded. | 2022-11-15 | 7.5 | CVE-2022-42977 MISC |
| atlassian — confluence_data_center | In the Netic User Export add-on before 1.3.5 for Atlassian Confluence, authorization is mishandled. An unauthenticated attacker could access files on the remote system. | 2022-11-15 | 7.5 | CVE-2022-42978 MISC |
| atlassian — crowd | Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent ability to call privileged endpoints in Crowd’s REST API under the {{usermanagement}} path. This vulnerability can only be exploited by IPs specified under the crowd application allowlist in the Remote Addresses configuration, which is {{none}} by default. The affected versions are all versions 3.x.x, versions 4.x.x before version 4.4.4, and versions 5.x.x before 5.0.3 | 2022-11-17 | 9.8 | CVE-2022-43782 MISC |
| automattic — crowdsignal_dashboard | Auth. (contributor+) Privilege Escalation vulnerability in Crowdsignal Dashboard plugin <= 3.0.9 on WordPress. | 2022-11-17 | 8.8 | CVE-2022-45069 CONFIRM |
| automotive_shop_management_ |
Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f= |
2022-11-18 | 7.2 | CVE-2022-44378 MISC |
| automotive_shop_management_ |
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f= |
2022-11-18 | 7.2 | CVE-2022-44379 MISC |
| automotive_shop_management_ |
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f= |
2022-11-17 | 7.2 | CVE-2022-44402 MISC |
| automotive_shop_management_ |
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_ |
2022-11-17 | 7.2 | CVE-2022-44403 MISC |
| automotive_shop_management_ |
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_ |
2022-11-18 | 7.2 | CVE-2022-44413 MISC |
| automotive_shop_management_ |
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_ |
2022-11-18 | 7.2 | CVE-2022-44414 MISC |
| automotive_shop_management_ |
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_ |
2022-11-18 | 7.2 | CVE-2022-44415 MISC |
| automotive_shop_management_ |
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page= |
2022-11-18 | 7.2 | CVE-2022-44820 MISC |
| axiosys — bento4 | A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4_StdcFileByteStream:: |
2022-11-13 | 8.8 | CVE-2022-3974 N/A N/A N/A |
| backclick — backclick | An issue was discovered in BACKCLICK Professional 5.9.63. User authentication for accessing the CORBA back-end services can be bypassed. | 2022-11-17 | 9.8 | CVE-2022-44001 MISC MISC |
| backclick — backclick | An issue was discovered in BACKCLICK Professional 5.9.63. Due to insufficient escaping of user-supplied input, the application is vulnerable to SQL injection at various locations. | 2022-11-16 | 9.8 | CVE-2022-44003 MISC MISC |
| backclick — backclick | An issue was discovered in BACKCLICK Professional 5.9.63. Due to insecure design or lack of authentication, unauthenticated attackers can complete the password-reset process for any account and set a new password. | 2022-11-16 | 9.8 | CVE-2022-44004 MISC MISC |
| backclick — backclick | An issue was discovered in BACKCLICK Professional 5.9.63. Due to improper validation or sanitization of upload filenames, an externally reachable, unauthenticated update function permits writing files outside the intended target location. Achieving remote code execution is possible, e.g., by uploading an executable file. | 2022-11-16 | 9.8 | CVE-2022-44006 MISC MISC |
| badgermeter — moni\ | In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS. | 2022-11-15 | 8.8 | CVE-2020-12507 MISC |
| badgermeter — moni\ | In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module. | 2022-11-15 | 7.5 | CVE-2020-12508 MISC |
| bruhn-newtech — cbrn-analysis | CBRN-Analysis before 22 has weak file permissions under Public Profile, leading to disclosure of file contents or privilege escalation. | 2022-11-12 | 8.8 | CVE-2022-45193 MISC |
| camp_project — camp | patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936af |
2022-11-14 | 9.8 | CVE-2022-37109 MISC MISC MISC |
| canteen_management_system_ |
An arbitrary file upload vulnerability in the component /pages/save_user.php of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. | 2022-11-15 | 9.8 | CVE-2022-43265 MISC MISC |
| canteen_management_system_ |
An arbitrary file upload vulnerability in the image upload function of Canteen Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. | 2022-11-14 | 7.2 | CVE-2022-43146 MISC MISC |
| cisco — firepower_management_center | A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when an SSH session fails to be established. An attacker could exploit this vulnerability by sending a high rate of crafted SSH connections to the instance. A successful exploit could allow the attacker to cause resource exhaustion, resulting in a reboot on the affected device. | 2022-11-15 | 7.5 | CVE-2022-20854 MISC |
| clogica — seo_redirection | Multiple Cross-Site Scripting (CSRF) vulnerabilities in SEO Redirection Plugin plugin <= 8.9 on WordPress. | 2022-11-18 | 8.8 | CVE-2022-40695 CONFIRM CONFIRM |
| college_management_system_ |
College Management System v1.0 – SQL Injection (SQLi). By inserting SQL commands to the username and password fields in the login.php page. | 2022-11-17 | 9.8 | CVE-2022-39180 MISC |
| college_management_system_ |
College Management System v1.0 – Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload .php file that contains malicious code via student.php file. | 2022-11-17 | 7.2 | CVE-2022-39179 MISC |
| concretecms — concrete_cms | Concrete CMS is vulnerable to CSRF due to the lack of “State” parameter for external Concrete authentication service for users of Concrete who use the “out of the box” core OAuth. | 2022-11-14 | 8.8 | CVE-2022-43693 MISC MISC MISC MISC MISC |
| constantcontact — creative_mail | Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress. | 2022-11-18 | 8.8 | CVE-2022-40686 CONFIRM |
| constantcontact — creative_mail | Cross-Site Request Forgery (CSRF) vulnerability in Creative Mail plugin <= 1.5.4 on WordPress. | 2022-11-18 | 8.8 | CVE-2022-40687 CONFIRM |
| contec — solarview_compact_firmware | SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php | 2022-11-17 | 9.8 | CVE-2022-40881 MISC |
| crm42_project — crm42 | A vulnerability was found in tholum crm42. It has been rated as critical. This issue affects some unknown processing of the file crm42\class\class.user.php of the component Login. The manipulation of the argument user_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213461 was assigned to this vulnerability. | 2022-11-11 | 9.8 | CVE-2022-3955 N/A N/A |
| deltaww — diaenergie | SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network | 2022-11-17 | 8.8 | CVE-2022-41775 MISC |
| deltaww — diaenergie | SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network | 2022-11-17 | 8.8 | CVE-2022-43447 MISC |
| deltaww — diaenergie | SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network | 2022-11-17 | 8.8 | CVE-2022-43452 MISC |
| deltaww — diaenergie | SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network | 2022-11-17 | 8.8 | CVE-2022-43457 MISC |
| deltaww — diaenergie | SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network | 2022-11-17 | 8.8 | CVE-2022-43506 MISC |
| diffie-hellman_key_exchange_ |
Using long exponents in the Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. An attacker may cause asymmetric resource consumption with any common client application which uses a DHE implementation that applies short exponents. The attack may be more disruptive in cases where a client sends arbitrary numbers that are actually not DH public keys (aka the D(HE)ater attack) or can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE. This can affect TLS, SSH, and IKE. | 2022-11-14 | 7.5 | CVE-2022-40735 MISC MISC MISC MISC MISC |
| dolibarr — dolibarr_erp\/crm | Dolibarr Open Source ERP & CRM for Business before v14.0.1 allows attackers to escalate privileges via a crafted API. | 2022-11-17 | 9.8 | CVE-2022-43138 MISC |
| dreamer_cms_project — dreamer_cms | Dreamer CMS 4.0.01 is vulnerable to SQL Injection. | 2022-11-17 | 9.8 | CVE-2022-42245 MISC |
| duofoxtechnologies — duofox_cms | Doufox 0.0.4 contains a CSRF vulnerability that can add system administrator account. | 2022-11-17 | 8.8 | CVE-2022-42246 MISC |
| eolink — goku_lite | A vulnerability classified as critical has been found in eolinker goku_lite. This affects an unknown part of the file /balance/service/list. The manipulation of the argument route/keyword leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213453 was assigned to this vulnerability. | 2022-11-11 | 9.8 | CVE-2022-3947 N/A N/A N/A |
| eolink — goku_lite | A vulnerability classified as critical was found in eolinker goku_lite. This vulnerability affects unknown code of the file /plugin/getList. The manipulation of the argument route/keyword leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-213454 is the identifier assigned to this vulnerability. | 2022-11-11 | 9.8 | CVE-2022-3948 N/A N/A N/A |
| erp_project — erp | A vulnerability was found in jerryhanjj ERP. It has been declared as critical. Affected by this vulnerability is the function uploadImages of the file application/controllers/ |
2022-11-11 | 8.8 | CVE-2022-3944 N/A N/A |
| export_users_with_meta_project — export_users_with_meta | Auth. CSV Injection vulnerability in Export Users With Meta plugin <= 0.6.8 on WordPress. | 2022-11-17 | 8 | CVE-2022-44577 CONFIRM |
| eyoucms — eyoucms | EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Top Up Balance component under the Edit Member module. | 2022-11-14 | 8.8 | CVE-2022-43323 MISC |
| eyoucms — eyoucms | EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Basic Information component under the Edit Member module. | 2022-11-14 |
Share this:
Discover more from #News247WorldPress
Subscribe to get the latest posts sent to your email.