Week 39, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-41352 An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole (extraction to …
  EPSS 95%
• Critical 9.8
  CVE-2022-40942 Tenda TX3 US_TX3V1.0br_V16.03.13.11 is vulnerable to stack overflow via compare_parentcontrol_time.
  EPSS 8.5%
• Critical 9.6
  CVE-2022-3075 Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially…

  Google · Chrome

  EPSS 5.8%
• Critical 9.8
  CVE-2022-40475 TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi.
  EPSS 3.6%
• Critical 9.6
  CVE-2022-40083 Labstack Echo Open Redirect vulnerability
  EPSS 3.2%
• Critical 9.8
  CVE-2022-40314 Moodle remote code execution
  EPSS 2.1%
• Critical 9.1
  CVE-2022-36066 Discourse vulnerable to RCE via admins uploading maliciously zipped file

  Discourse · Discourse

  EPSS 2.1%
• Critical 9.8
  CVE-2022-28721 Certain HP Print Products are potentially vulnerable to Remote Code Execution.
  EPSS 2%
• Critical 9.8
  CVE-2022-30004 Sourcecodester Online Market Place Site v1.0 suffers from an unauthenticated blind SQL Injection Vulnerability allowing remote attackers to dump the SQL databa…
  EPSS 1.9%
• Critical 9.8
  CVE-2022-39033 Smart eVision - Path Traversal -1

  Smart eVision Information Technology · Smart eVision

  EPSS 1.8%
• Critical 9.0
  CVE-2022-39256 Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution.

  Orckestra · C1-CMS-Foundation

  EPSS 1.7%
• Critical 9.8
  CVE-2022-40929 XXL-JOB contains a Command execution vulnerability in background tasks
  EPSS 1.6%
• Critical 9.8
  CVE-2022-40944 Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via sales-report-ds.php file.
  EPSS 1.5%
• Critical 9.8
  CVE-2022-40943 Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via bwdate-report-ds.php file.
  EPSS 1.5%
• Critical 9.1
  CVE-2022-30935 An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any user through the use of a bad randomne…
  EPSS 1.4%

All 39 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.8
  CVE-2022-36961 Orion Platform SQL Injection Privilege Escalation Vulnerability

  SolarWinds · Orion Platform

  EPSS 74%
• Medium 6.5
  CVE-2022-31629 $_COOKIE names string replacement (. -> _): cookie integrity vulnerabilities

  PHP Group · PHP

  EPSS 50%
• Unscored
  CVE-2022-21826 Pulse Secure version 9.115 and below may be susceptible to client-side http request smuggling, When the application receives a POST request, it ignores the req…
  EPSS 46%
• Medium 6.1
  CVE-2022-3062 Simple File List < 4.4.12 - Reflected Cross-Site Scripting
  EPSS 44%
• Medium 5.4
  CVE-2022-28851 AEM Reflected XSS Arbitrary code execution

  Adobe · Experience Manager

  EPSS 37%
• High 8.8
  CVE-2022-2998 Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI inter…

  Google · Chrome

  EPSS 30%
• High 7.5
  CVE-2022-3323 An SQL injection vulnerability in Advantech iView 5.7.04.6469. The specific flaw exists within the ConfigurationServlet endpoint, which listens on TCP port 808…
  EPSS 29%
• High 8.8
  CVE-2022-3038 Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p…

  Google · Chrome

  EPSS 25%