Week 22, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-26134 In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbit…

  Atlassian · Confluence Server · Confluence Data Center

  EPSS 100%
• Critical 9.8
  CVE-2022-1660 Keysight N6854A Geolocation server and N6841A RF Sensor software

  Keysight · N6854A Geolocation server and N6841A RF Sensor software

  EPSS 17%
• Critical 9.1
  CVE-2022-31003 Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP

  freeswitch · sofia-sip

  EPSS 4.1%
• Critical 9.0
  CVE-2022-21122 Arbitrary Code Execution
  EPSS 2.7%
• Critical 9.8
  CVE-2020-28246 Server-Side Template Injection in formio
  EPSS 2.4%
• Critical
  CVE-2021-32546 OS Command Injection in gogs
  EPSS 2.2%
• Critical 9.8
  CVE-2022-26869 Dell PowerStore versions 2.0.0.x, 2.0.1.x and 2.1.0.x contains an open port vulnerability. A remote unauthenticated attacker could potentially exploit this vul…

  Dell · PowerStore

  EPSS 2.1%
• Critical 9.1
  CVE-2022-1931 Incorrect Synchronization in polonel/trudesk

  polonel · polonel/trudesk

  EPSS 1.7%
• Critical 9.1
  CVE-2022-31013 Authentication bypass in Vartalap chat-server

  ramank775 · chat-server

  EPSS 1.5%
• Critical 9.8
  CVE-2021-26634 Maxboard multiple vulnerabilities

  Max Yi · MaxBoard

  EPSS 1.4%
• Critical 9.1
  CVE-2022-1947 Use of Incorrect Operator in polonel/trudesk

  polonel · polonel/trudesk

  EPSS 1.3%
• Critical 9.4
  CVE-2022-30234 A CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to be executed when root level access is obtained. Affected Produ…

  Schneider Electric · Wiser Smart

  EPSS 1.2%
• Critical 9.1
  CVE-2021-33473 Arbitrary file write in dragonfly
  EPSS 1.1%
• Critical 9.3
  CVE-2022-31462 Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth br…
• Critical 9.8
  CVE-2022-26493 miniOrange SAML Authentication Bypass

  Xecuify · Drupal 7 miniOrange SAML SP · Drupal 9 miniOrange SAML SP · Drupal 8 miniOrange SAML SP

All 19 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.8
  CVE-2022-30190 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 98%
• Unscored
  CVE-2021-42887 In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
  EPSS 44%
• Medium 4.9
  CVE-2022-31007 Privilege escalation from administrator in eLabFTW

  elabftw · elabftw

  EPSS 27%
• Unscored
  CVE-2021-44080 A Command Injection vulnerability in httpd web server (setup.cgi) in SerComm h500s, FW: lowi-h500s-v3.4.22 allows logged in administrators to arbitrary OS comm…
  EPSS 25%
• Unscored
  CVE-2022-1556 StaffList < 3.1.5 - Admin+ SQLi
  EPSS 20%
• Unscored
  CVE-2022-30808 elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.
  EPSS 17%
• Unscored
  CVE-2022-28799 The TikTok application before 23.7.3 for Android allows account takeover. A crafted URL (unvalidated deeplink) can force the com.zhiliaoapp.musically WebView t…
  EPSS 16%
• High 7.5
  CVE-2022-1661 Keysight N6854A Geolocation server and N6841A RF Sensor software

  Keysight · N6854A Geolocation server and N6841A RF Sensor software

  EPSS 16%