Week 38, 2022

19–25 September 2022

New CVEs: 585
Critical: 77
High: 182
Newly exploited: 2
Advisories: 133
Malicious pkgs: 23

Newly exploited 2

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2022-3236 KEV Sep 23, 2022 A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.
Sophos · Sophos Firewall

EPSS 99%
Critical 9.8
CVE-2022-35405 KEV Sep 22, 2022 Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEn…
EPSS 100%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2022-35914 /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
EPSS 100%
Critical 9.8
CVE-2022-3236 A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.
Sophos · Sophos Firewall

EPSS 99%
Critical 9.6
CVE-2022-38545 Valine code injection vulnerability
EPSS 34%
Critical 9.8
CVE-2022-38916 Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
EPSS 18%
Critical 9.8
CVE-2022-40855 Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows…
EPSS 14%
Critical 9.8
CVE-2022-36944 Scala subject to file deletion, code execution due to Java deserialization chain with LazyList object deserialization
EPSS 11%
Critical 9.8
CVE-2022-40851 Tenda AC15 V15.03.05.19 contained a stack overflow via the function fromAddressNat.
EPSS 9.9%
Critical 9.8
CVE-2022-2070 Grandstream GSD3710 Stack-based Buffer Overflow
Grandstream · Grandstream GSD3710

EPSS 5.8%
Critical 9.8
CVE-2022-2025 Grandstream GSD3710 Stack-based Buffer Overflow
Grandstream · Grandstream GSD3710

EPSS 5.5%
Critical 10.0
CVE-2022-32845 This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break o…
Apple · macOS · watchOS

EPSS 5.4%
Critical 9.1
CVE-2022-39227 Python-jwt subject to Authentication Bypass by Spoofing
davedoesdev · python-jwt

EPSS 5.3%
Critical 9.1
CVE-2022-32847 This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12…
Apple · macOS · watchOS · tvOS

EPSS 3.2%
Critical 9.8
CVE-2022-32788 A buffer overflow was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. A …
Apple · macOS · watchOS · tvOS

EPSS 2.8%
Critical 9.8
CVE-2022-40089 A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerabilit…
EPSS 2.7%
Critical 9.8
CVE-2022-36934 An integer overflow in WhatsApp could result in remote code execution in an established video call.
Meta · WhatsApp for iOS · WhatsApp Business for Android · WhatsApp Business for iOS

EPSS 2.5%

All 77 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Unscored
CVE-2022-2753 Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Stored XSS
EPSS 84%
Unscored
CVE-2022-3218 Necta WiFi Mouse (Mouse Server) client-side authentication bypass
Necta · WiFi Mouse (Mouse Server)

EPSS 74%
Medium 6.1
CVE-2022-39197 An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7 that allowed a remote attacker to execute HTML on the Cobalt Str…
EPSS 44%
Unscored
CVE-2022-2754 Ketchup Restaurant Reservations <= 1.0.0 - Unauthenticated Blind SQLi
EPSS 39%
High 8.1
CVE-2022-38742 Rockwell Automation ThinManager Software Vulnerable to Arbitrary Code Execution and Denial-Of-Service Attack
Rockwell Automation · ThinManager® ThinServer™

EPSS 23%
High 7.2
CVE-2022-37027 Ahsay AhsayCBS 9.1.4.0 allows an authenticated system user to inject arbitrary Java JVM options. Administrators that can modify the Runtime Options in the web …
EPSS 22%
Unscored
CVE-2022-3142 NEX-Forms < 7.9.7 - Authenticated SQLi
EPSS 15%
Unscored
CVE-2022-2840 Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi
EPSS 13%

Advisories

ICSA-22-263-03 Dataprobe iBoot-PDU 12 CVEs
SUSE-SU-2022:3338-1 Security update for ardana-ansible, ardana-cobbler, grafana, openstack-heat-templates, openstack-murano, python-Django, rabbitmq-server, rubygem-puma 7 CVEs
SUSE-SU-2022:3339-1 Security update for ardana-ansible, ardana-cobbler, ardana-tempest, grafana, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-neutron-gbp, openstack-nova, python-Django1, rabbitmq-server, rubygem-puma 6 CVEs
SUSE-SU-2022:3314-1 Security update for SUSE Manager Server 4.2 4 CVEs
SUSE-SU-2022:3313-1 Security update for release-notes-susemanager, release-notes-susemanager-proxy 4 CVEs
SUSE-SU-2022:3333-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container 3 CVEs
SUSE-SU-2022:3321-1 Security update for kubevirt, virt-api-container, virt-controller-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container 3 CVEs
SUSE-SU-2022:3335-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer 1 CVEs
SUSE-SU-2022:3334-1 Security update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, containerized-data-importer 1 CVEs
ICSA-22-263-02 Hitachi Energy AFF660/665 Series 1 CVEs