# CVEs published 2022-03-06

12 CVEs were published on March 6, 2022: 0 critical, 1 high. Days are UTC.

- [CVE-2022-0697](https://cve.now/CVE-2022-0697.md): Open Redirect in archivy/archivy (CVSS 3.4, archivy/archivy · archivy)
- [CVE-2021-44421](https://cve.now/CVE-2021-44421.md): The pointer-validation logic in util/mem\_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacke (no CVSS)
- [CVE-2021-44749](https://cve.now/CVE-2021-44749.md): Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser Protection for Android (CVSS 5.5, F-Secure SAFE Browser for Android)
- [CVE-2021-44748](https://cve.now/CVE-2021-44748.md): Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser for Android (CVSS 5.5, F-Secure SAFE Browser for Android)
- [CVE-2022-0868](https://cve.now/CVE-2022-0868.md): Open Redirect in medialize/uri.js (CVSS 8.0, medialize/uri.js · urijs)
- [CVE-2022-0869](https://cve.now/CVE-2022-0869.md): Multiple Open Redirect in nitely/spirit (CVSS 4.3, nitely/spirit · django-spirit)
- [CVE-2021-46704](https://cve.now/CVE-2021-46704.md): In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/u (no CVSS, genieacs)
- [CVE-2021-46703](https://cve.now/CVE-2021-46703.md): In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandbox (no CVSS, RazorEngine)
- [CVE-2022-26490](https://cve.now/CVE-2022-26490.md): st21nfca\_connectivity\_event\_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT\_TRANSACTION buffer overflows b (no CVSS)
- [CVE-2022-26495](https://cve.now/CVE-2022-26495.md): In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. (no CVSS)
- [CVE-2022-26496](https://cve.now/CVE-2022-26496.md): In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. (no CVSS)
- [CVE-2022-26505](https://cve.now/CVE-2022-26505.md): A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-03-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.