Week 49, 2022

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-46169 Unauthenticated Command Injection

  Cacti · cacti

  EPSS 100%
• Critical 9.4
  CVE-2022-46164 Account takeover via prototype vulnerability

  NodeBB · NodeBB

  EPSS 47%
• Critical 9.8
  CVE-2022-45025 Markdown Preview Enhanced v0.6.5 and v0.19.6 for VSCode and Atom was discovered to contain a command injection vulnerability via the PDF file import function.
  EPSS 35%
• Critical 9.8
  CVE-2022-45359 WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload

  Yith · YITH WooCommerce Gift Cards

  EPSS 14%
• Critical 9.8
  CVE-2020-6627 The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_backend_launch in ci…
  EPSS 13%
• Critical 9.8
  CVE-2022-32221 When doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNCTION`) to ask for data to send, even when the `CURLOPT_POSTFIEL…
  EPSS 5.1%
• Critical 9.8
  CVE-2022-4407 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

  thorsten · thorsten/phpmyfaq

  EPSS 4.9%
• Critical 9.8
  CVE-2022-27773 A privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that allows a user to execute commands with elevated privileges.
  EPSS 2.8%
• Critical 9.8
  CVE-2022-32224 Active Record RCE bug with Serialized Columns
  EPSS 2.6%
• Critical 9.8
  CVE-2022-45477 Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authorization or authentication. …

  Telepad · Telepad

  EPSS 2.5%
• Critical 9.8
  CVE-2022-45497 Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the tpi_get_ping_output function at /goform/exeCommand.
  EPSS 2.5%
• Critical 9.8
  CVE-2022-45506 Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName.
  EPSS 2.5%
• Critical 9.1
  CVE-2022-44900 py7zr directory traversal vulnerability
  EPSS 2.3%
• Critical 9.8
  CVE-2022-4170 The rxvt-unicode package is vulnerable to a remote code execution, in the Perl background extension, when an attacker can control the data written to the user'…
  EPSS 2.2%
• Critical 9.8
  CVE-2022-41642 Nadesiko3 OS Command Injection vulnerability

  kujirahand · Nadesiko3 (PC Version)

  EPSS 2.2%

All 49 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.8
  CVE-2022-41622 iControl SOAP vulnerability

  F5 · BIG-IP · BIG-IQ Centralized Management

  EPSS 92%
• High 8.7
  CVE-2022-41800 Appliance mode iControl REST vulnerability

  F5 · BIG-IP

  EPSS 77%
• High 7.5
  CVE-2022-46770 qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of for…
  EPSS 23%
• High 7.5
  CVE-2022-45504 An issue in the component tpi_systool_handle(0) (/goform/SysToolRestoreSet) of Tenda W6-S v1.0.0.4(510) allows unauthenticated attackers to arbitrarily reboot …
  EPSS 18%
• High 8.1
  CVE-2022-43548 A OS Command Injection vulnerability exists in Node.js versions <14.21.1, <16.18.1, <18.12.1, <19.0.1 due to an insufficient IsAllowedHost check that can easil…

  Node.js · node

  EPSS 15%
• High 8.1
  CVE-2022-20968 A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenticated, adjacent att…

  Cisco · Cisco Session Initiation Protocol (SIP) Software

  EPSS 6.4%
• Medium 5.3
  CVE-2022-41717 Excessive memory growth in net/http and golang.org/x/net/http2

  Go standard library · golang.org/x/net · net/http · golang.org/x/net/http2

  EPSS 6.1%
• High 8.8
  CVE-2022-45915 ILIAS before 7.16 allows OS Command Injection.
  EPSS 5%