Week 47, 2022
21 November to 27 November 2022. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 357CVEs publishedin the whole week
- 97CriticalCVSS 9.0 and above
- 124HighCVSS 7.0 to 8.9
- 0Added to KEVknown exploited, newly listed
Most severe new CVEsBy CVSS score
- CVE-2022-41875
Remote Code Execution in Optica
airbnb · optica
Critical10.0 - CVE-2022-41934
Improper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-menu-ui
xwiki · xwiki-platform
Critical9.9 - CVE-2022-41931
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in xwiki-platform-icon-ui
xwiki · xwiki-platform
Critical9.9 - CVE-2022-41928
XWiki Platform vulnerable to Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml
xwiki · xwiki-platform
Critical9.9 - CVE-2022-45933
KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authentication, and…
Product not named
Critical9.8 - CVE-2020-23584
Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using…
Product not named
Critical9.8 - CVE-2022-4116
A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to remote…
quarkus
Critical9.8 - CVE-2021-3437
Potential security vulnerabilities have been identified in an OMEN Gaming Hub SDK package which may allow escalation of privilege and/or denial of service. HP…
HP Inc. · OMEN Gaming Hub SDK
Critical9.8 - CVE-2022-40189
Apache Airlfow Pig Provider RCE
Apache Software Foundation · Apache Airlfow Pig Provider
Critical9.8 - CVE-2022-3634
Contact Form 7 Database Addon < 1.2.6.5 - CSV Injection
Unknown · Contact Form 7 Database Addon
Critical9.8