Week 48, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-44366 Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setDiagnoseInfo.
  EPSS 9.9%
• Critical 9.8
  CVE-2022-43325 An unauthenticated command injection vulnerability in the product license validation function of Telos Alliance Omnia MPX Node 1.3.* - 1.4.* allows attackers t…
  EPSS 6.2%
• Critical 9.8
  CVE-2022-4221 OS command injection in ASUS M25 NAS

  ASUS · NAS-M25

  EPSS 4.9%
• Critical 9.8
  CVE-2022-44291 webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php.
  EPSS 4.1%
• Critical 9.8
  CVE-2022-44290 webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php.
  EPSS 4.1%
• Critical 9.8
  CVE-2022-46366 Apache Tapestry prior to version 4 (EOL) allows RCE though deserialization of untrusted input

  Apache Software Foundation · Apache Tapestry

  EPSS 3.7%
• Critical 9.8
  CVE-2022-44928 D-Link DVG-G5402SP GE_1.03 was discovered to contain a command injection vulnerability via the Maintenance function.
  EPSS 2.8%
• Critical 9.8
  CVE-2022-44930 D-Link DHP-W310AV 3.10EU was discovered to contain a command injection vulnerability via the System Checks function.
  EPSS 2.6%
• Critical 9.8
  CVE-2022-46414 An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticated remote command execution can occur vi…
  EPSS 2.5%
• Critical 9.1
  CVE-2022-41912 crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements

  crewjam · saml

  EPSS 2.3%
• Critical 9.8
  CVE-2022-43333 Telenia Software s.r.l TVox before v22.0.17 was discovered to contain a remote code execution (RCE) vulnerability in the component action_export_control.php.
  EPSS 1.8%
• Critical 9.8
  CVE-2022-44038 Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component.
  EPSS 1.8%
• Critical 9.8
  CVE-2022-44354 SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file.
  EPSS 1.7%
• Critical 9.8
  CVE-2022-44262 ff4j is vulnerable to Remote Code Execution (RCE)
  EPSS 1.6%
• Critical 9.8
  CVE-2022-36193 SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or beha…
  EPSS 1.5%

All 39 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.3
  CVE-2022-1471 Remote Code execution in SnakeYAML

  SnakeYaml · SnakeYaml

  EPSS 100%
• High 8.8
  CVE-2022-44635 Apache Fineract allowed an authenticated user to perform remote code execution due to path traversal

  Apache Software Foundation · Apache Fineract

  EPSS 69%
• Medium 6.3
  CVE-2022-4257 C-DATA Web Management System GET Parameter jumpto.php argument injection

  CData · Web Management System

  EPSS 44%
• High 8.8
  CVE-2022-40799 Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.
  EPSS 34%
• Unscored
  CVE-2022-4178 Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap c…

  Google · Chrome

  EPSS 24%
• High 8.8
  CVE-2022-4262 Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…

  Google · Chrome

  EPSS 24%
• High 7.5
  CVE-2022-38900 decode-uri-component vulnerable to Denial of Service (DoS)
  EPSS 23%
• High 8.8
  CVE-2022-36964 SolarWinds Platform Deserialization of Untrusted Data

  SolarWinds · SolarWinds Platform · Orion Platform

  EPSS 18%