# CVEs published 2022-03-15

96 CVEs were published on March 15, 2022: 6 critical, 15 high. Days are UTC.

- [CVE-2022-27223](https://cve.now/CVE-2022-27223.md): In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by t (no CVSS)
- [CVE-2020-36519](https://cve.now/CVE-2020-36519.md): Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. (no CVSS)
- [CVE-2022-27004](https://cve.now/CVE-2022-27004.md): Totolink routers s X5000R V9.1.0u.6118\_B20201102 and A7000R V9.1.0u.6115\_B20201022 were discovered to contain a command injection vulnerabil (CVSS 8.8)
- [CVE-2022-27005](https://cve.now/CVE-2022-27005.md): Totolink routers s X5000R V9.1.0u.6118\_B20201102 and A7000R V9.1.0u.6115\_B20201022 were discovered to contain a command injection vulnerabil (CVSS 8.8)
- [CVE-2022-27002](https://cve.now/CVE-2022-27002.md): Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns\_name, ddns\_pwd, h\_ddns、d (no CVSS)
- [CVE-2022-27003](https://cve.now/CVE-2022-27003.md): Totolink routers s X5000R V9.1.0u.6118\_B20201102 and A7000R V9.1.0u.6115\_B20201022 were discovered to contain a command injection vulnerabil (CVSS 8.8)
- [CVE-2022-27001](https://cve.now/CVE-2022-27001.md): Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname parameter. (no CVSS)
- [CVE-2022-26999](https://cve.now/CVE-2022-26999.md): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wan\_ip\_stat, wan (no CVSS)
- [CVE-2022-27000](https://cve.now/CVE-2022-27000.md): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the h\_primary\_ntp\_se (no CVSS)
- [CVE-2022-26998](https://cve.now/CVE-2022-26998.md): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps\_enrolee\_pin paramet (no CVSS)
- [CVE-2022-26996](https://cve.now/CVE-2022-26996.md): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe\_username, pppoe\_passwd, (no CVSS)
- [CVE-2022-26997](https://cve.now/CVE-2022-26997.md): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp\_ttl parameter. (no CVSS)
- [CVE-2022-26995](https://cve.now/CVE-2022-26995.md): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan\_pptp.html) function via the pptp\_fix\_ip, p (no CVSS)
- [CVE-2022-26993](https://cve.now/CVE-2022-26993.md): Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab (no CVSS)
- [CVE-2022-26994](https://cve.now/CVE-2022-26994.md): Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab (no CVSS)
- [CVE-2022-26992](https://cve.now/CVE-2022-26992.md): Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab (no CVSS)
- [CVE-2022-26990](https://cve.now/CVE-2022-26990.md): Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab (no CVSS)
- [CVE-2022-26991](https://cve.now/CVE-2022-26991.md): Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab (no CVSS)
- [CVE-2022-26213](https://cve.now/CVE-2022-26213.md): Totolink X5000R\_Firmware v9.1.0u.6118\_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via t (no CVSS)
- [CVE-2022-26214](https://cve.now/CVE-2022-26214.md): Totolink A830R V5.9c.4729\_B20191112, A3100R V4.1.2cu.5050\_B20200504, A950RG V4.1.2cu.5161\_B20200903, A800R V4.1.2cu.5137\_B20200730, A3000RU (no CVSS)
- [CVE-2022-26211](https://cve.now/CVE-2022-26211.md): Totolink A830R V5.9c.4729\_B20191112, A3100R V4.1.2cu.5050\_B20200504, A950RG V4.1.2cu.5161\_B20200903, A800R V4.1.2cu.5137\_B20200730, A3000RU (no CVSS)
- [CVE-2022-26212](https://cve.now/CVE-2022-26212.md): Totolink A830R V5.9c.4729\_B20191112, A3100R V4.1.2cu.5050\_B20200504, A950RG V4.1.2cu.5161\_B20200903, A800R V4.1.2cu.5137\_B20200730, A3000RU (no CVSS)
- [CVE-2022-26209](https://cve.now/CVE-2022-26209.md): Totolink A830R V5.9c.4729\_B20191112, A3100R V4.1.2cu.5050\_B20200504, A950RG V4.1.2cu.5161\_B20200903, A800R V4.1.2cu.5137\_B20200730, A3000RU (no CVSS)
- [CVE-2022-26210](https://cve.now/CVE-2022-26210.md): Totolink A830R V5.9c.4729\_B20191112, A3100R V4.1.2cu.5050\_B20200504, A950RG V4.1.2cu.5161\_B20200903, A800R V4.1.2cu.5137\_B20200730, A3000RU (no CVSS)
- [CVE-2022-26207](https://cve.now/CVE-2022-26207.md): Totolink A830R V5.9c.4729\_B20191112, A3100R V4.1.2cu.5050\_B20200504, A950RG V4.1.2cu.5161\_B20200903, A800R V4.1.2cu.5137\_B20200730, A3000RU (no CVSS)
- [CVE-2022-26208](https://cve.now/CVE-2022-26208.md): Totolink A830R V5.9c.4729\_B20191112, A3100R V4.1.2cu.5050\_B20200504, A950RG V4.1.2cu.5161\_B20200903, A800R V4.1.2cu.5137\_B20200730, A3000RU (no CVSS)
- [CVE-2022-26206](https://cve.now/CVE-2022-26206.md): Totolink A830R V5.9c.4729\_B20191112, A3100R V4.1.2cu.5050\_B20200504, A950RG V4.1.2cu.5161\_B20200903, A800R V4.1.2cu.5137\_B20200730, A3000RU (no CVSS)
- [CVE-2021-29134](https://cve.now/CVE-2021-29134.md): The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL. (no CVSS, code.gitea.io/gitea)
- [CVE-2022-23989](https://cve.now/CVE-2022-23989.md): In Stormshield Network Security (SNS) before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood (no CVSS)
- [CVE-2022-25485](https://cve.now/CVE-2022-25485.md): CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php. (no CVSS)
- [CVE-2022-25486](https://cve.now/CVE-2022-25486.md): CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php. (no CVSS)
- [CVE-2022-25487](https://cve.now/CVE-2022-25487.md): Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php. (no CVSS)
- [CVE-2022-25488](https://cve.now/CVE-2022-25488.md): Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php. (no CVSS)
- [CVE-2022-25489](https://cve.now/CVE-2022-25489.md): Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php. (no CVSS)
- [CVE-2022-25490](https://cve.now/CVE-2022-25490.md): HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php. (no CVSS)
- [CVE-2022-25491](https://cve.now/CVE-2022-25491.md): HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php. (no CVSS)
- [CVE-2022-25492](https://cve.now/CVE-2022-25492.md): HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php. (no CVSS)
- [CVE-2022-25493](https://cve.now/CVE-2022-25493.md): HMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via treatmentrecord.php. (no CVSS)
- [CVE-2022-25494](https://cve.now/CVE-2022-25494.md): Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via staff\_login.php. (no CVSS)
- [CVE-2022-25495](https://cve.now/CVE-2022-25495.md): The component /jquery\_file\_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary cod (no CVSS)
- [CVE-2022-25497](https://cve.now/CVE-2022-25497.md): CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function. (no CVSS)
- [CVE-2022-25498](https://cve.now/CVE-2022-25498.md): CuppaCMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the saveConfigData function in /classes/ajax/Functio (no CVSS)
- [CVE-2022-0778](https://cve.now/CVE-2022-0778.md): Infinite loop in BN\_mod\_sqrt() reachable when parsing certificates (CVSS 7.5, OpenSSL · mariadb +5)
- [CVE-2022-22771](https://cve.now/CVE-2022-22771.md): TIBCO JasperReports Library Directory Traversal Vulnerability (CVSS 9.9, TIBCO Software TIBCO JasperReports Library · TIBCO Software…)
- [CVE-2020-4989](https://cve.now/CVE-2020-4989.md): IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow an authenticated user (CVSS 4.3, IBM Engineering Workflow Management · IBM Rational Team Con…)
- [CVE-2022-27218](https://cve.now/CVE-2022-27218.md): Jenkins incapptic connect uploader Plugin 1.15 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where (no CVSS, Jenkins project Jenkins incapptic connect uploader Plugin ·…)
- [CVE-2022-27217](https://cve.now/CVE-2022-27217.md): Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller whe (no CVSS, Jenkins project Jenkins Vmware vRealize CodeStream Plugin ·…)
- [CVE-2022-27216](https://cve.now/CVE-2022-27216.md): Jenkins dbCharts Plugin 0.5.2 and earlier stores JDBC connection passwords unencrypted in its global configuration file on the Jenkins contr (no CVSS, Jenkins project Jenkins dbCharts Plugin · org.jenkins-ci.pl…)
- [CVE-2022-27215](https://cve.now/CVE-2022-27215.md): A missing permission check in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers with Overall/Read permission to connect to an (no CVSS, Jenkins project Jenkins Release Helper Plugin · org.jenkins…)
- [CVE-2022-27214](https://cve.now/CVE-2022-27214.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers to connect to an attac (no CVSS, Jenkins project Jenkins Release Helper Plugin · org.jenkins…)
- [CVE-2022-27213](https://cve.now/CVE-2022-27213.md): Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order configuration values i (no CVSS, Jenkins project Jenkins Environment Dashboard Plugin · io.j…)
- [CVE-2022-27212](https://cve.now/CVE-2022-27212.md): Jenkins List Git Branches Parameter Plugin 0.0.9 and earlier does not escape the name of the 'List Git branches (and more)' parameter, resul (no CVSS, Jenkins project Jenkins List Git Branches Parameter Plugin…)
- [CVE-2022-27211](https://cve.now/CVE-2022-27211.md): A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to (no CVSS, Jenkins project Jenkins Kubernetes Continuous Deploy Plugin…)
- [CVE-2022-27210](https://cve.now/CVE-2022-27210.md): A cross-site request forgery (CSRF) vulnerability in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers to conne (no CVSS, Jenkins project Jenkins Kubernetes Continuous Deploy Plugin…)
- [CVE-2022-27209](https://cve.now/CVE-2022-27209.md): A missing permission check in Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows attackers with Overall/Read permission to (no CVSS, Jenkins project Jenkins Kubernetes Continuous Deploy Plugin…)
- [CVE-2022-27208](https://cve.now/CVE-2022-27208.md): Jenkins Kubernetes Continuous Deploy Plugin 2.3.1 and earlier allows users with Credentials/Create permission to read arbitrary files on the (no CVSS, Jenkins project Jenkins Kubernetes Continuous Deploy Plugin…)
- [CVE-2022-27207](https://cve.now/CVE-2022-27207.md): Jenkins global-build-stats Plugin 1.5 and earlier does not escape multiple fields in the chart configuration on the 'Global Build Stats' pag (no CVSS, Jenkins project Jenkins global-build-stats Plugin · org.jen…)
- [CVE-2022-27206](https://cve.now/CVE-2022-27206.md): Jenkins GitLab Authentication Plugin 1.13 and earlier stores the GitLab client secret unencrypted in the global config.xml file on the Jenki (no CVSS, Jenkins project Jenkins GitLab Authentication Plugin · org.…)
- [CVE-2022-27205](https://cve.now/CVE-2022-27205.md): A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a\_86c and earlier allows attackers with Overall/Read per (no CVSS, Jenkins project Jenkins Extended Choice Parameter Plugin ·…)
- [CVE-2022-27204](https://cve.now/CVE-2022-27204.md): A cross-site request forgery vulnerability in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a\_86c and earlier allows attackers to co (no CVSS, Jenkins project Jenkins Extended Choice Parameter Plugin ·…)
- [CVE-2022-27203](https://cve.now/CVE-2022-27203.md): Jenkins Extended Choice Parameter Plugin 346.vd87693c5a\_86c and earlier allows attackers with Item/Configure permission to read values from (no CVSS, Jenkins project Jenkins Extended Choice Parameter Plugin ·…)
- [CVE-2022-27202](https://cve.now/CVE-2022-27202.md): Jenkins Extended Choice Parameter Plugin 346.vd87693c5a\_86c and earlier does not escape the value and description of extended choice paramet (no CVSS, Jenkins project Jenkins Extended Choice Parameter Plugin ·…)
- [CVE-2022-27201](https://cve.now/CVE-2022-27201.md): Jenkins Semantic Versioning Plugin 1.13 and earlier does not restrict execution of an controller/agent message to agents, and implements no (no CVSS, Jenkins project Jenkins Semantic Versioning Plugin · org.je…)
- [CVE-2022-27200](https://cve.now/CVE-2022-27200.md): Jenkins Folder-based Authorization Strategy Plugin 1.3 and earlier does not escape the names of roles shown on the configuration form, resul (no CVSS, Jenkins project Jenkins Folder-based Authorization Strategy…)
- [CVE-2022-27199](https://cve.now/CVE-2022-27199.md): A missing permission check in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers with Overall/Read perm (no CVSS, Jenkins project Jenkins CloudBees AWS Credentials Plugin ·…)
- [CVE-2022-27198](https://cve.now/CVE-2022-27198.md): A cross-site request forgery (CSRF) vulnerability in Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995 and earlier allows attackers (no CVSS, Jenkins project Jenkins CloudBees AWS Credentials Plugin ·…)
- [CVE-2022-27197](https://cve.now/CVE-2022-27197.md): Jenkins Dashboard View Plugin 2.18 and earlier does not perform URL validation for the Iframe Portlet's Iframe source URL, resulting in a st (no CVSS, Jenkins project Jenkins Dashboard View Plugin · org.jenkins…)
- [CVE-2022-27196](https://cve.now/CVE-2022-27196.md): Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripti (no CVSS, Jenkins project Jenkins Favorite Plugin · org.jvnet.hudson.…)
- [CVE-2022-27195](https://cve.now/CVE-2022-27195.md): Jenkins Parameterized Trigger Plugin 2.43 and earlier captures environment variables passed to builds triggered using Jenkins Parameterized (no CVSS, Jenkins project Jenkins Parameterized Trigger Plugin · org.…)
- [CVE-2022-0970](https://cve.now/CVE-2022-0970.md): Cross-site Scripting (XSS) - Stored in getgrav/grav (CVSS 7.1, getgrav/grav)
- [CVE-2022-0968](https://cve.now/CVE-2022-0968.md): The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in microweber/microweber (CVSS 7.2, microweber/microweber)
- [CVE-2022-26779](https://cve.now/CVE-2022-26779.md): Apache Cloudstack insecure random number generation affects project email invitation (no CVSS, Apache Software Foundation Apache CloudStack)
- [CVE-2022-0964](https://cve.now/CVE-2022-0964.md): Stored XSS viva .webmv file upload in star7th/showdoc (CVSS 8.0, star7th/showdoc · showdoc/showdoc)
- [CVE-2022-0965](https://cve.now/CVE-2022-0965.md): Stored XSS viva .ofd file upload in star7th/showdoc (CVSS 9.0, star7th/showdoc · showdoc/showdoc)
- [CVE-2022-0966](https://cve.now/CVE-2022-0966.md): Stored XSS via File Upload in star7th/showdoc in star7th/showdoc (CVSS 6.4, star7th/showdoc · showdoc/showdoc)
- [CVE-2022-0967](https://cve.now/CVE-2022-0967.md): Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc (CVSS 6.9, star7th/showdoc · showdoc/showdoc)
- [CVE-2022-0963](https://cve.now/CVE-2022-0963.md): Unrestricted XML Files Leads to Stored XSS in microweber/microweber (CVSS 5.7, microweber/microweber)
- [CVE-2022-0961](https://cve.now/CVE-2022-0961.md): The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber (CVSS 7.1, microweber/microweber)
- [CVE-2022-24756](https://cve.now/CVE-2022-24756.md): Missing Release of Memory after Effective Lifetime in Bareos Director (CVSS 7.5, bareos)
- [CVE-2022-24752](https://cve.now/CVE-2022-24752.md): SQL Injection through sorting parameters in SyliusGridBundle (CVSS 9.8, SyliusGridBundle · sylius/grid-bundle)
- [CVE-2022-24755](https://cve.now/CVE-2022-24755.md): Incorrect Authorization in Bareos Director (CVSS 8.1, bareos)
- [CVE-2022-0430](https://cve.now/CVE-2022-0430.md): Exposure of Sensitive Information to an Unauthorized Actor in httpie/httpie (CVSS 2.4, httpie/httpie · httpie)
- [CVE-2022-24721](https://cve.now/CVE-2022-24721.md): Incorrect Authorization in org.cometd.oort (CVSS 8.1, cometd · org.cometd.java:cometd-java-oort)
- [CVE-2022-0942](https://cve.now/CVE-2022-0942.md): Stored XSS due to Unrestricted File Upload in star7th/showdoc (CVSS 9.4, star7th/showdoc · showdoc/showdoc)
- [CVE-2022-0957](https://cve.now/CVE-2022-0957.md): Stored XSS via File Upload in star7th/showdoc (CVSS 7.6, star7th/showdoc · showdoc/showdoc)
- [CVE-2022-0956](https://cve.now/CVE-2022-0956.md): Stored XSS via File Upload in star7th/showdoc (CVSS 7.1, star7th/showdoc · showdoc/showdoc)
- [CVE-2022-0954](https://cve.now/CVE-2022-0954.md): Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in microweber/microweber (CVSS 6.8, microweber/microweber)
- [CVE-2021-45010](https://cve.now/CVE-2021-45010.md): A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attac (no CVSS)
- [CVE-2022-0893](https://cve.now/CVE-2022-0893.md): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (CVSS 6.8, pimcore/pimcore)
- [CVE-2022-0894](https://cve.now/CVE-2022-0894.md): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (CVSS 8.2, pimcore/pimcore)
- [CVE-2022-0951](https://cve.now/CVE-2022-0951.md): File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc (CVSS 8.2, star7th/showdoc · showdoc/showdoc)
- [CVE-2022-0950](https://cve.now/CVE-2022-0950.md): Unrestricted Upload of File with Dangerous Type in star7th/showdoc (CVSS 6.5, star7th/showdoc · showdoc/showdoc)
- [CVE-2022-27193](https://cve.now/CVE-2022-27193.md): CVRF-CSAF-Converter before 1.0.0-rc2 resolves XML External Entities (XXE). (CVSS 6.1, cvrf2csaf)
- [CVE-2022-0945](https://cve.now/CVE-2022-0945.md): Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc (CVSS 9.0, star7th/showdoc · showdoc/showdoc)
- [CVE-2022-0944](https://cve.now/CVE-2022-0944.md): Template injection in connection test endpoint leads to RCE in sqlpad/sqlpad (CVSS 9.1, sqlpad/sqlpad)
- [CVE-2021-45848](https://cve.now/CVE-2021-45848.md): Denial of service (DoS) vulnerability in Nicotine+ 3.0.3 and later allows a user with a modified Soulseek client to crash Nicotine+ by sendi (no CVSS, nicotine-plus)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-03-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.