# CVEs published 2022-01-07

102 CVEs were published on January 7, 2022: 3 critical, 8 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2021-30360](https://cve.now/CVE-2021-30360.md): Users have access to the directory where the installation repair occurs. (no CVSS, Check Point Remote Access Client)
- [CVE-2021-22060](https://cve.now/CVE-2021-22060.md): In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older unsupported versions, it is possible for a user to provide malicious (no CVSS, Spring Framework · org.springframework:spring-core)
- [CVE-2021-23173](https://cve.now/CVE-2021-23173.md): ICSMA-22-006-01 Philips Engage Software (CVSS 2.6, Philips Engage Software)
- [CVE-2022-21823](https://cve.now/CVE-2022-21823.md): A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control \<2021.2 (10.7.30.0) that could allow an attacke (no CVSS, Ivanti Workspace Control)
- [CVE-2021-35247](https://cve.now/CVE-2021-35247.md): Improper Input Validation Vulnerability in Serv-U (CVSS 4.3, KEV, SolarWinds Serv-U)
- [CVE-2021-39996](https://cve.now/CVE-2021-39996.md): There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. (no CVSS, EMUI;Magic UI;HarmonyOS)
- [CVE-2021-39993](https://cve.now/CVE-2021-39993.md): There is an Integer overflow vulnerability with ACPU in smartphones. (no CVSS, EMUI;Magic UI)
- [CVE-2021-39998](https://cve.now/CVE-2021-39998.md): There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. (no CVSS, EMUI;Magic UI;HarmonyOS)
- [CVE-2021-40032](https://cve.now/CVE-2021-40032.md): The bone voice ID TA has a vulnerability in information management,Successful exploitation of this vulnerability may affect data confidentia (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2021-40028](https://cve.now/CVE-2021-40028.md): The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data integrity. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-40027](https://cve.now/CVE-2021-40027.md): The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data conf (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2021-40022](https://cve.now/CVE-2021-40022.md): The weaver module has a vulnerability in parameter type verification,Successful exploitation of this vulnerability may affect data confident (no CVSS, Huawei HarmonyOS)
- [CVE-2021-40025](https://cve.now/CVE-2021-40025.md): The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability (no CVSS, Huawei HarmonyOS)
- [CVE-2021-40021](https://cve.now/CVE-2021-40021.md): The eID module has an out-of-bounds memory write vulnerability,Successful exploitation of this vulnerability may affect data confidentiality (no CVSS, Huawei HarmonyOS)
- [CVE-2021-40018](https://cve.now/CVE-2021-40018.md): The eID module has a null pointer reference vulnerability. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-40014](https://cve.now/CVE-2021-40014.md): The bone voice ID trusted application (TA) has a heap overflow vulnerability. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2021-40010](https://cve.now/CVE-2021-40010.md): The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution. (no CVSS, HarmonyOS;EMUI;Magic UI)
- [CVE-2021-40039](https://cve.now/CVE-2021-40039.md): There is a Null pointer dereference vulnerability in the camera module in smartphones. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-40038](https://cve.now/CVE-2021-40038.md): There is a Double free vulnerability in the AOD module in smartphones. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-40037](https://cve.now/CVE-2021-40037.md): There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-40035](https://cve.now/CVE-2021-40035.md): There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-40031](https://cve.now/CVE-2021-40031.md): There is a Null pointer dereference vulnerability in the camera module in smartphones. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-40026](https://cve.now/CVE-2021-40026.md): There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-40029](https://cve.now/CVE-2021-40029.md): There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-40009](https://cve.now/CVE-2021-40009.md): There is an Out-of-bounds write vulnerability in the AOD module in smartphones. (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-40020](https://cve.now/CVE-2021-40020.md): There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. (no CVSS, Huawei EMUI · Huawei Magic UI)
- [CVE-2021-40011](https://cve.now/CVE-2021-40011.md): There is an uncontrolled resource consumption vulnerability in the display module. (no CVSS, EMUI;Magic UI;HarmonyOS)
- [CVE-2021-40005](https://cve.now/CVE-2021-40005.md): The distributed data service component has a vulnerability in data access control. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-40006](https://cve.now/CVE-2021-40006.md): Vulnerability of design defects in the security algorithm component. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2021-40004](https://cve.now/CVE-2021-40004.md): The cellular module has a vulnerability in permission management. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-40003](https://cve.now/CVE-2021-40003.md): HwPCAssistant has a path traversal vulnerability. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-40002](https://cve.now/CVE-2021-40002.md): The Bluetooth module has an out-of-bounds write vulnerability. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-40000](https://cve.now/CVE-2021-40000.md): The Bluetooth module has an out-of-bounds write vulnerability. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-40001](https://cve.now/CVE-2021-40001.md): The CaasKit module has a path traversal vulnerability. (no CVSS, Huawei HarmonyOS)
- [CVE-2021-40041](https://cve.now/CVE-2021-40041.md): There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. (no CVSS, WS318n-21)
- [CVE-2022-22289](https://cve.now/CVE-2022-22289.md): Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information. (CVSS 5.3, Samsung Mobile S Assistant)
- [CVE-2022-22287](https://cve.now/CVE-2022-22287.md): Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox. (CVSS 3.9, Samsung Mobile Samsung Email)
- [CVE-2022-22288](https://cve.now/CVE-2022-22288.md): Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist. (CVSS 7.5, Samsung Mobile Galaxy Store)
- [CVE-2022-22286](https://cve.now/CVE-2022-22286.md): A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Android Q(10.0) allows at (CVSS 4.4, Samsung Mobile Bixby Routines)
- [CVE-2022-22285](https://cve.now/CVE-2022-22285.md): A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows att (CVSS 4.4, Samsung Mobile Reminder)
- [CVE-2022-22283](https://cve.now/CVE-2022-22283.md): Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App. (CVSS 2.8, Samsung Mobile Samsung Health)
- [CVE-2022-22284](https://cve.now/CVE-2022-22284.md): Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication (CVSS 5.7, Samsung Mobile Samsung Internet)
- [CVE-2022-22271](https://cve.now/CVE-2022-22271.md): A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy data from arbitrary (CVSS 5.5, Samsung Mobile Devices)
- [CVE-2022-22270](https://cve.now/CVE-2022-22270.md): An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact info (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2022-22269](https://cve.now/CVE-2022-22269.md): Keeping sensitive data in unprotected BluetoothSettingsProvider prior to SMR Jan-2022 Release 1 allows untrusted applications to get a local (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-22267](https://cve.now/CVE-2022-22267.md): Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-22272](https://cve.now/CVE-2022-22272.md): Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READ\_PRIVILEGED\_PHONE\_STATE (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-22268](https://cve.now/CVE-2022-22268.md): Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to temporary unlock the Knox Gu (CVSS 6.1, Samsung Mobile Devices)
- [CVE-2022-22264](https://cve.now/CVE-2022-22264.md): Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary fil (CVSS 7.7, Samsung Mobile Devices)
- [CVE-2022-22263](https://cve.now/CVE-2022-22263.md): Unprotected dynamic receiver in SecSettings prior to SMR Jan-2022 Release 1 allows untrusted applications to launch arbitrary activity. (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-22266](https://cve.now/CVE-2022-22266.md): (Applicable to China models only) Unprotected WifiEvaluationService in TencentWifiSecurity application prior to SMR Jan-2022 Release 1 allow (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-22265](https://cve.now/CVE-2022-22265.md): An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code (CVSS 5.0, KEV, Samsung Mobile Devices)
- [CVE-2021-32998](https://cve.now/CVE-2021-32998.md): The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arb (CVSS 7.4, FANUC R-30iA, R-30iA Mate · FANUC R-30iB, R-30iB Mate, R… +1)
- [CVE-2021-32996](https://cve.now/CVE-2021-32996.md): The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to crash. (CVSS 7.5, FANUC R-30iA, R-30iA Mate · FANUC R-30iB, R-30iB Mate, R… +1)
- [CVE-2021-46055](https://cve.now/CVE-2021-46055.md): A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow\*). (no CVSS)
- [CVE-2021-46054](https://cve.now/CVE-2021-46054.md): A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRethrow(wasm::Rethrow\*). (no CVSS)
- [CVE-2021-46053](https://cve.now/CVE-2021-46053.md): A Denial of Service vulnerability exists in Binaryen 103. (no CVSS)
- [CVE-2021-46052](https://cve.now/CVE-2021-46052.md): A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate. (no CVSS)
- [CVE-2021-46050](https://cve.now/CVE-2021-46050.md): A Stack Overflow vulnerability exists in Binaryen 103 via the printf\_common function. (no CVSS)
- [CVE-2021-46048](https://cve.now/CVE-2021-46048.md): A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunctions. (no CVSS)
- [CVE-2022-22702](https://cve.now/CVE-2022-22702.md): PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not validate that requests (no CVSS, PartKeepr)
- [CVE-2022-22701](https://cve.now/CVE-2022-22701.md): PartKeepr versions up to v1.4.0, loads attachments using a URL while creating a part and allows the use of the 'file://' URI scheme, allowin (no CVSS, PartKeepr)
- [CVE-2021-23543](https://cve.now/CVE-2021-23543.md): Sandbox Bypass (CVSS 9.8, realms-shim)
- [CVE-2021-23568](https://cve.now/CVE-2021-23568.md): Prototype Pollution (CVSS 7.3, extend2)
- [CVE-2021-23594](https://cve.now/CVE-2021-23594.md): Sandbox Bypass (CVSS 9.8, realms-shim)
- [CVE-2021-42748](https://cve.now/CVE-2021-42748.md): In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API. (no CVSS)
- [CVE-2021-42749](https://cve.now/CVE-2021-42749.md): In Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when viewing the post archives. (no CVSS)
- [CVE-2021-38990](https://cve.now/CVE-2021-38990.md): IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the mount command which could lead to c (CVSS 8.4, IBM AIX · IBM VIOS)
- [CVE-2021-38957](https://cve.now/CVE-2021-38957.md): IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to hazardous input validation during QR code gen (CVSS 3.1, IBM Security Verify Access)
- [CVE-2021-38956](https://cve.now/CVE-2021-38956.md): IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information in HTTP response headers that could aid in f (CVSS 5.3, IBM Security Verify Access)
- [CVE-2021-38921](https://cve.now/CVE-2021-38921.md): IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decryp (CVSS 5.9, IBM Security Verify Access)
- [CVE-2021-38895](https://cve.now/CVE-2021-38895.md): IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. (CVSS 3.0, IBM Security Verify Access)
- [CVE-2021-38894](https://cve.now/CVE-2021-38894.md): IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a detailed technical e (CVSS 2.7, IBM Security Verify Access)
- [CVE-2022-21667](https://cve.now/CVE-2022-21667.md): Denial of Service in soketi (CVSS 7.5, soketi · @soketi/soketi)
- [CVE-2022-0133](https://cve.now/CVE-2022-0133.md): Improper Access Control in chocobozzz/peertube (CVSS 5.3, chocobozzz/peertube)
- [CVE-2022-0132](https://cve.now/CVE-2022-0132.md): Server-Side Request Forgery (SSRF) in chocobozzz/peertube (CVSS 4.8, chocobozzz/peertube)
- [CVE-2020-29050](https://cve.now/CVE-2020-29050.md): SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql c (no CVSS)
- [CVE-2021-46147](https://cve.now/CVE-2021-46147.md): An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. (no CVSS)
- [CVE-2021-46148](https://cve.now/CVE-2021-46148.md): An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. (no CVSS)
- [CVE-2021-46149](https://cve.now/CVE-2021-46149.md): An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. (no CVSS)
- [CVE-2021-46150](https://cve.now/CVE-2021-46150.md): An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. (no CVSS)
- [CVE-2021-46146](https://cve.now/CVE-2021-46146.md): An issue was discovered in MediaWiki before 1.35.5, 1.36.x before 1.36.3, and 1.37.x before 1.37.1. (no CVSS)
- [CVE-2020-9061](https://cve.now/CVE-2020-9061.md): Z-Wave devices using Silicon Labs 500 and 700 series chipsets, including but not likely limited to the SiLabs UZB-7 version 7.00, ZooZ ZST10 (no CVSS, ZooZ ZST10 · Silicon Labs 500 series +4)
- [CVE-2020-9060](https://cve.now/CVE-2020-9060.md): Z-Wave devices based on Silicon Labs 500 series chipsets using S2, including but likely not limited to the ZooZ ZST10 version 6.04, ZooZ ZEN (no CVSS, ZooZ ZEN25 · ZooZ ZEN20 +4)
- [CVE-2020-9059](https://cve.now/CVE-2020-9059.md): Z-Wave devices based on Silicon Labs 500 series chipsets using S0 authentication are susceptible to uncontrolled resource consumption leadin (no CVSS, Schlage BE468 · Silicon Labs 500 series)
- [CVE-2020-9058](https://cve.now/CVE-2020-9058.md): Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 (no CVSS, Linear LB60Z-1 · Dome DM501 +2)
- [CVE-2020-9057](https://cve.now/CVE-2020-9057.md): Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range to (no CVSS, Linear WADWAZ-1 · Linear WAPIRZ-1 +3)
- [CVE-2021-20048](https://cve.now/CVE-2021-20048.md): A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to cause Denial of Servic (no CVSS, SonicWall SonicOS)
- [CVE-2021-20046](https://cve.now/CVE-2021-20046.md): A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated attacker to cause Denial of S (no CVSS, SonicWall SonicOS)
- [CVE-2021-38674](https://cve.now/CVE-2021-38674.md): Reflected XSS Vulnerability in TFTP (CVSS 4.2, QNAP Systems QuTS hero · QNAP Systems QTS +1)
- [CVE-2021-25743](https://cve.now/CVE-2021-25743.md): ANSI escape characters in kubectl output are not being filtered (CVSS 3.0, Kubernetes · k8s.io/kubernetes)
- [CVE-2021-22569](https://cve.now/CVE-2021-22569.md): Denial of Service of protobuf-java parsing procedure (CVSS 7.5, Google protobuf-java · Google protobuf-kotlin +4)
- [CVE-2021-42392](https://cve.now/CVE-2021-42392.md): The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. (no CVSS, h2database h2 · com.h2database:h2)
- [CVE-2021-44528](https://cve.now/CVE-2021-44528.md): A open redirect vulnerability exists in Action Pack \>= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combinati (no CVSS, https://github.com/rails/rails · actionpack)
- [CVE-2021-46045](https://cve.now/CVE-2021-46045.md): GPAC 1.0.1 is affected by: Abort failed. (no CVSS)
- [CVE-2021-46046](https://cve.now/CVE-2021-46046.md): A Pointer Derefernce Vulnerbility exists GPAC 1.0.1 the gf\_isom\_box\_size function, which could cause a Denial of Service (context-dependent) (no CVSS)
- [CVE-2021-46047](https://cve.now/CVE-2021-46047.md): A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf\_hinter\_finalize function. (no CVSS)
- [CVE-2021-46049](https://cve.now/CVE-2021-46049.md): A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the gf\_fileio\_check function, which could cause a Denial of Service. (no CVSS)
- [CVE-2021-46051](https://cve.now/CVE-2021-46051.md): A Pointer Dereference Vulnerability exists in GPAC 1.0.1 via the Media\_IsSelfContained function, which could cause a Denial of Service. (no CVSS)
- [CVE-2022-22815](https://cve.now/CVE-2022-22815.md): path\_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. (no CVSS, pillow)
- [CVE-2022-22816](https://cve.now/CVE-2022-22816.md): path\_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path. (no CVSS, pillow)
- [CVE-2022-22817](https://cve.now/CVE-2022-22817.md): PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method. (CVSS 9.8, pillow)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-01-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.