无胁科技-TVD每日漏洞情报-2022-11-16

漏洞名称:WordPress plugin Better Search Replace SQL注入漏洞
漏洞级别:高危
漏洞编号:CVE-2022-2593;CNNVD-202208-3642
相关涉及:WordPress Better Search and Replace plugin for WordPress 1.4.0
漏洞状态:POC
参考链接:https://tvd.wuthreat.com/#/listDetail?TVD_ID=TVD-2022-17225

漏洞名称:Google Chrome 存在堆释放后重用
漏洞级别:高危
漏洞编号:CVE-2022-3842;CNNVD-202211-2549
相关涉及:Chromium 106.0.5215.0 (Developer Build) (64-bit)
漏洞状态:POC
参考链接:https://tvd.wuthreat.com/#/listDetail?TVD_ID=TVD-2022-20112

漏洞名称:HMS-PHP SQL注入漏洞
漏洞级别:高危
漏洞编号:CVE-2022-3972;CNNVD-202211-2667
相关涉及:HMS-PHP
漏洞状态:POC
参考链接:https://tvd.wuthreat.com/#/listDetail?TVD_ID=TVD-2022-21910

漏洞名称:taoCMS 路径遍历漏洞
漏洞级别:严重
漏洞编号:CVE-2022-36261;CNNVD-202208-3747
相关涉及:taoCMS taoCMS 3.0.2
漏洞状态:POC
参考链接:https://tvd.wuthreat.com/#/listDetail?TVD_ID=TVD-2022-17322

漏洞名称:IOTransfer V4 - 未引用的服务路径
漏洞级别:中危
漏洞编号:CVE-2022-37197;CNNVD-202211-2643
相关涉及:IOBit IOTransfer V4版本
漏洞状态:EXP
参考链接:https://tvd.wuthreat.com/#/listDetail?TVD_ID=TVD-2022-20138