# CVEs published 2022-03-03

50 CVEs were published on March 3, 2022: 1 critical, 9 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2021-3640](https://cve.now/CVE-2021-3640.md): A flaw use-after-free in function sco\_sock\_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO\_REGISTER (no CVSS, kernel)
- [CVE-2022-22943](https://cve.now/CVE-2022-22943.md): VMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path vulnerability. (no CVSS, VMware Tools for Windows)
- [CVE-2022-25220](https://cve.now/CVE-2022-25220.md): PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descriptions while creati (no CVSS, PeTeReport)
- [CVE-2022-23052](https://cve.now/CVE-2022-23052.md): PeteReport Version 0.5 contains a Cross Site Request Forgery (CSRF) vulnerability allowing an attacker to trick users into deleting users, p (no CVSS, PeTeReport)
- [CVE-2022-23051](https://cve.now/CVE-2022-23051.md): PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying th (no CVSS, PeTeReport)
- [CVE-2021-38578](https://cve.now/CVE-2021-38578.md): Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize. (CVSS 7.4, TianoCore EDK II)
- [CVE-2022-23710](https://cve.now/CVE-2022-23710.md): A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Preview Pane) which co (no CVSS, Elastic kibana)
- [CVE-2022-23709](https://cve.now/CVE-2022-23709.md): A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. (no CVSS, Elastic kibana)
- [CVE-2022-23708](https://cve.now/CVE-2022-23708.md): A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built pro (no CVSS, elasticsearch · org.elasticsearch:elasticsearch)
- [CVE-2021-4002](https://cve.now/CVE-2021-4002.md): A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget (no CVSS, kernel)
- [CVE-2021-3762](https://cve.now/CVE-2021-3762.md): A directory traversal vulnerability was found in the ClairCore engine of Clair. (no CVSS, quay/claircore · github.com/quay/claircore)
- [CVE-2022-0265](https://cve.now/CVE-2022-0265.md): Improper Restriction of XML External Entity Reference in hazelcast/hazelcast (CVSS 7.3, hazelcast/hazelcast · com.hazelcast:hazelcast)
- [CVE-2022-24725](https://cve.now/CVE-2022-24725.md): Exposure of home directory through shescape on Unix with Bash (CVSS 6.2, ericcornelissen shescape · shescape)
- [CVE-2022-24723](https://cve.now/CVE-2022-24723.md): Improper Input Validation in URI.js (CVSS 5.3, medialize URI.js · urijs)
- [CVE-2022-24724](https://cve.now/CVE-2022-24724.md): Integer overflow in table parsing extension leads to heap memory corruption (CVSS 8.8, github cmark-gfm)
- [CVE-2021-3602](https://cve.now/CVE-2021-3602.md): An information disclosure flaw was found in Buildah, when building containers using chroot isolation. (no CVSS, buildah · github.com/containers/buildah)
- [CVE-2021-3609](https://cve.now/CVE-2021-3609.md): .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to co (no CVSS, kernel)
- [CVE-2021-3620](https://cve.now/CVE-2021-3620.md): A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclose (no CVSS, ansible)
- [CVE-2022-22700](https://cve.now/CVE-2022-22700.md): CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. (no CVSS, CyberArk Identity)
- [CVE-2022-25125](https://cve.now/CVE-2022-25125.md): MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file /mdiy/dict/listExcludeApp. (no CVSS)
- [CVE-2022-23898](https://cve.now/CVE-2022-23898.md): MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via the categoryId parameter in the file IContentDao.xml. (no CVSS, net.mingsoft:ms-mcms)
- [CVE-2022-23899](https://cve.now/CVE-2022-23899.md): MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java. (no CVSS, net.mingsoft:ms-mcms)
- [CVE-2022-26129](https://cve.now/CVE-2022-26129.md): Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functions, parse\_hello\_subt (CVSS 7.8, FRRouting)
- [CVE-2022-26128](https://cve.now/CVE-2022-26128.md): A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the input packet length in the babel\_packet\_examin (no CVSS, FRRouting)
- [CVE-2022-26127](https://cve.now/CVE-2022-26127.md): A buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the input packet length in the babel\_packet\_exam (no CVSS, FRRouting)
- [CVE-2022-25138](https://cve.now/CVE-2022-25138.md): Axelor Open Suite v5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Name parameter. (no CVSS)
- [CVE-2022-0841](https://cve.now/CVE-2022-0841.md): OS Command Injection in ljharb/npm-lockfile (CVSS 3.8, ljharb/npm-lockfile · npm-lockfile)
- [CVE-2022-0753](https://cve.now/CVE-2022-0753.md): Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp (CVSS 3.5, hestiacp/hestiacp)
- [CVE-2021-43774](https://cve.now/CVE-2021-43774.md): A risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. (no CVSS)
- [CVE-2022-22706](https://cve.now/CVE-2022-22706.md): Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. (CVSS 7.8, KEV)
- [CVE-2022-25031](https://cve.now/CVE-2022-25031.md): Remote Desktop Commander Suite Agent before v4.8 contains an unquoted service path which allows attackers to escalate privileges to the syst (no CVSS)
- [CVE-2021-45819](https://cve.now/CVE-2021-45819.md): Wordline HIDCCEMonitorSVC before v5.2.4.3 contains an unquoted service path which allows attackers to escalate privileges to the system leve (CVSS 6.4)
- [CVE-2021-40637](https://cve.now/CVE-2021-40637.md): OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php. (no CVSS)
- [CVE-2021-40636](https://cve.now/CVE-2021-40636.md): OS4ED openSIS 8.0 is affected by SQL Injection in CheckDuplicateName.php, which can extract information from the database. (no CVSS)
- [CVE-2021-40635](https://cve.now/CVE-2021-40635.md): OS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSearch.php, ChooseRequestSearch.php. (no CVSS)
- [CVE-2022-0528](https://cve.now/CVE-2022-0528.md): Server-Side Request Forgery (SSRF) in transloadit/uppy (CVSS 6.5, transloadit/uppy · @uppy/companion)
- [CVE-2021-42950](https://cve.now/CVE-2021-42950.md): Remote Code Execution (RCE) vulnerability exists in Zepl Notebooks all previous versions before October 25 2021. (no CVSS)
- [CVE-2022-23849](https://cve.now/CVE-2022-23849.md): The biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access the application because of authentication (no CVSS)
- [CVE-2022-24573](https://cve.now/CVE-2022-24573.md): A stored cross-site scripting (XSS) vulnerability in the admin interface in Element-IT HTTP Commander 7.0.0 allows unauthenticated users to (no CVSS)
- [CVE-2022-24563](https://cve.now/CVE-2022-24563.md): In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro\_ (no CVSS, genix/cms)
- [CVE-2021-26259](https://cve.now/CVE-2021-26259.md): A flaw was found in htmldoc in v1.9.12. (no CVSS, htmldoc)
- [CVE-2021-26948](https://cve.now/CVE-2021-26948.md): Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service via a (no CVSS, htmldoc)
- [CVE-2021-3638](https://cve.now/CVE-2021-3638.md): An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. (no CVSS, QEMU)
- [CVE-2022-0492](https://cve.now/CVE-2022-0492.md): A vulnerability was found in the Linux kernel’s cgroup\_release\_agent\_write in the kernel/cgroup/cgroup-v1.c function. (CVSS 7.8, KEV, kernel)
- [CVE-2022-0730](https://cve.now/CVE-2022-0730.md): Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types. (no CVSS, Cati)
- [CVE-2022-21716](https://cve.now/CVE-2022-21716.md): Buffer Overflow in Twisted (CVSS 7.5, twisted)
- [CVE-2022-22947](https://cve.now/CVE-2022-22947.md): In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuat (CVSS 10.0, KEV, Spring Cloud Gateway · org.springframework.cloud:spring-clo…)
- [CVE-2022-23648](https://cve.now/CVE-2022-23648.md): Insecure handling of image volumes in containerd CRI plugin (CVSS 7.5, containerd · github.com/containerd/containerd)
- [CVE-2022-26125](https://cve.now/CVE-2022-26125.md): Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isisd/isis\_tlvs.c. (CVSS 7.5, FRRouting)
- [CVE-2022-26126](https://cve.now/CVE-2022-26126.md): Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated binary string in isis\_n (no CVSS, FRRouting)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-03-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.