Week 31, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-21186 Arbitrary Command Injection
  EPSS 26%
• Critical 9.8
  CVE-2022-37434 zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications t…
  EPSS 19%
• Critical 9.8
  CVE-2022-2651 Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm

  bookwyrm-social · bookwyrm-social/bookwyrm

  EPSS 16%
• Critical 9.8
  CVE-2022-31181 Remote code execution in prestashop

  PrestaShop · PrestaShop

  EPSS 7.7%
• Critical 9.8
  CVE-2022-35866 This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authentication is not…

  Vinchin · Backup and Recovery

  EPSS 4.7%
• Critical 9.8
  CVE-2022-25168 Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar

  Apache Software Foundation · Apache Hadoop

  EPSS 4.6%
• Critical 9.6
  CVE-2022-22140 An os command injection vulnerability exists in the confsrv ucloud_add_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted netwo…

  Tcl · LinkHub Mesh Wifi

  EPSS 3.9%
• Critical 9.6
  CVE-2022-21178 An os command injection vulnerability exists in the confsrv ucloud_add_new_node functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14. A specially-crafted ne…

  Tcl · LinkHub Mesh Wifi

  EPSS 3.8%
• Critical 9.8
  CVE-2022-2272 This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4. Authentication is not required to exp…

  Sante · PACS Server

  EPSS 2.8%
• Critical 9.8
  CVE-2022-31180 Insufficient escaping of whitespace in shescape

  ericcornelissen · shescape

  EPSS 2%
• Critical 9.8
  CVE-2022-35143 Raneto v0.17.0 employs weak password complexity requirements
  EPSS 1.7%
• Critical 9.8
  CVE-2022-35223 EasyUse MailHunter Ultimate - Deserialization of Untrusted Data

  EasyUse · MailHunter Ultimate

  EPSS 1.7%
• Critical 9.8
  CVE-2020-28451 Command Injection
  EPSS 1.5%
• Critical 9.8
  CVE-2022-32965 ITPison OMICARD EDM - Use of Hard-coded Credentials

  ITPison · OMICARD EDM

  EPSS 1.5%
• Critical 9.1
  CVE-2022-35924 Verification requests (magic link) sent to unwanted emails

  nextauthjs · next-auth

  EPSS 1.5%

All 54 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 6.1
  CVE-2022-27166 XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2

  Apache Software Foundation · Apache JSPWiki

  EPSS 86%
• Medium 6.1
  CVE-2022-28730 Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp

  Apache Software Foundation · Apache JSPWiki

  EPSS 86%
• Medium 6.1
  CVE-2022-28732 Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin

  Apache Software Foundation · Apache JSPWiki

  EPSS 83%
• Medium 6.5
  CVE-2022-28731 Apache JSPWiki CSRF in UserPreferences.jsp

  Apache Software Foundation · Apache JSPWiki

  EPSS 59%
• High 7.4
  CVE-2022-35919 Authenticated requests for server update admin API allows path traversal in minio

  minio · minio

  EPSS 52%
• High 8.6
  CVE-2022-31188 Server-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)

  cvat-ai · cvat

  EPSS 48%
• High 7.2
  CVE-2022-36799 This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has been implemented. Affected versions of …

  Atlassian · Jira Server · Jira Data Center

  EPSS 47%
• Unscored
  CVE-2022-27255 In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remote…
  EPSS 37%