Week 30, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.9
  CVE-2022-2550 OS Command Injection in hestiacp/hestiacp

  hestiacp · hestiacp/hestiacp

  EPSS 49%
• Critical 9.8
  CVE-2022-35649 Moodle PostScript Code Injection
  EPSS 8.6%
• Critical 9.3
  CVE-2022-33965 WordPress WP Visitor Statistics plugin <= 5.7 - Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities

  osamaesh · WP Visitor Statistics (WordPress plugin)

  EPSS 4.4%
• Critical 9.8
  CVE-2020-28446 Command Injection
  EPSS 3.5%
• Critical 10.0
  CVE-2021-41556 sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution. If a victim e…
  EPSS 2.9%
• Critical 9.0
  CVE-2022-35131 Joplin is vulnerable to arbitrary code execution
  EPSS 2.3%
• Critical 9.8
  CVE-2022-36950 In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may be able to perform remote command execution through a Java classloader manipulation. Thi…
  EPSS 1.9%
• Critical 10.0
  CVE-2022-22683 Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote …

  Synology · Media Server

  EPSS 1.6%
• Critical 9.8
  CVE-2020-28445 Command Injection
  EPSS 1.5%
• Critical 9.4
  CVE-2020-28435 Command Injection
  EPSS 1.4%
• Critical 9.1
  CVE-2022-35643 IBM PowerVM VIOS 3.1 could allow a remote attacker to tamper with system configuration or cause a denial of service. IBM X-Force ID: 230956.

  IBM · PowerVM VIOS

  EPSS 1.4%
• Critical 9.8
  CVE-2020-28447 Command Injection
  EPSS 1.3%
• Critical 9.8
  CVE-2020-28438 Command Injection
  EPSS 1.3%
• Critical 9.8
  CVE-2020-28443 Command Injection
  EPSS 1.3%
• Critical 9.1
  CVE-2022-29951 JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol (configurable on ports 1024-65534 on either TCP or UDP) f…
  EPSS 1.3%

All 26 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2022-36446 software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.
  EPSS 96%
• Unscored
  CVE-2022-2414 Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retriev…
  EPSS 85%
• High 8.8
  CVE-2022-2294 Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag…

  Google · Chrome

  EPSS 71%
• Unscored
  CVE-2022-30287 Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class. This then leads t…
  EPSS 69%
• High 7.5
  CVE-2022-35869 This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentica…

  Inductive Automation · Ignition

  EPSS 60%
• High 7.5
  CVE-2022-35650 Moodle Arbitrary file read when importing lesson questions
  EPSS 54%
• High 8.8
  CVE-2022-35870 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Although …

  Inductive Automation · Ignition

  EPSS 44%
• High 8.1
  CVE-2022-35871 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentic…

  Inductive Automation · Ignition

  EPSS 41%