# CVEs published 2022-03-16

149 CVEs were published on March 16, 2022: 6 critical, 32 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-26534](https://cve.now/CVE-2022-26534.md): FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via a malicious viewchange packet, will cause normal (no CVSS)
- [CVE-2022-26300](https://cve.now/CVE-2022-26300.md): EOS v2.1.0 was discovered to contain a heap-buffer-overflow via the function txn\_test\_gen\_plugin. (no CVSS)
- [CVE-2021-42219](https://cve.now/CVE-2021-42219.md): Go-Ethereum v1.10.9 was discovered to contain an issue which allows attackers to cause a denial of service (DoS) via sending an excessive am (no CVSS, github.com/ethereum/go-ethereum)
- [CVE-2022-26295](https://cve.now/CVE-2022-26295.md): A stored cross-site scripting (XSS) vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allows attackers to exec (no CVSS)
- [CVE-2022-26293](https://cve.now/CVE-2022-26293.md): Online Project Time Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the function save (no CVSS)
- [CVE-2022-23610](https://cve.now/CVE-2022-23610.md): Improper Verification of Cryptographic Signature in wire-server (CVSS 9.1, wireapp wire-server)
- [CVE-2022-23812](https://cve.now/CVE-2022-23812.md): Malicious Package (CVSS 9.8, node-ipc)
- [CVE-2021-23648](https://cve.now/CVE-2021-23648.md): Cross-site Scripting (XSS) (CVSS 5.4, @braintree/sanitize-url)
- [CVE-2021-45822](https://cve.now/CVE-2021-45822.md): A cross-site scripting vulnerability is present in Xbtit 3.1. (no CVSS)
- [CVE-2022-21164](https://cve.now/CVE-2022-21164.md): Denial of Service (DoS) (CVSS 3.7, node-lmdb)
- [CVE-2021-45821](https://cve.now/CVE-2021-45821.md): A blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat/getHistoryChatData.php file that is accessible by (no CVSS)
- [CVE-2021-41987](https://cve.now/CVE-2021-41987.md): In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code (no CVSS)
- [CVE-2022-26660](https://cve.now/CVE-2022-26660.md): RunAsSpc 4.0 uses a universal and recoverable encryption key. (no CVSS)
- [CVE-2022-23234](https://cve.now/CVE-2022-23234.md): SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to discover plaintext H (no CVSS, SnapCenter)
- [CVE-2021-20180](https://cve.now/CVE-2021-20180.md): A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature w (no CVSS, Ansible)
- [CVE-2021-23165](https://cve.now/CVE-2021-23165.md): A flaw was found in htmldoc before v1.9.12. (no CVSS, htmldoc)
- [CVE-2021-23158](https://cve.now/CVE-2021-23158.md): A flaw was found in htmldoc in v1.9.12. (no CVSS, htmldoc)
- [CVE-2021-20257](https://cve.now/CVE-2021-20257.md): An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. (no CVSS, QEMU)
- [CVE-2022-0918](https://cve.now/CVE-2022-0918.md): A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to c (no CVSS, 389-ds-base)
- [CVE-2022-0982](https://cve.now/CVE-2022-0982.md): Buffer Overflow via crafted client request in Accel-PPP v1.12 (no CVSS, https://accel-ppp.org/ Accel-PPP)
- [CVE-2021-39709](https://cve.now/CVE-2021-39709.md): In sendSipAccountsRemovedNotification of SipAccountRegistry.java, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2021-39707](https://cve.now/CVE-2021-39707.md): In onReceive of AppRestrictionsFragment.java, there is a possible way to start a phone call without permissions due to a confused deputy. (no CVSS, Android)
- [CVE-2021-39708](https://cve.now/CVE-2021-39708.md): In gatt\_process\_notification of gatt\_cl.cc, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2021-39706](https://cve.now/CVE-2021-39706.md): In onResume of CredentialStorage.java, there is a possible way to cleanup content of credentials storage due to a missing permission check. (no CVSS, Android)
- [CVE-2021-39704](https://cve.now/CVE-2021-39704.md): In deleteNotificationChannelGroup of NotificationManagerService.java, there is a possible way to run foreground service without user notific (no CVSS, Android)
- [CVE-2021-39703](https://cve.now/CVE-2021-39703.md): In updateState of UsbDeviceManager.java, there is a possible unauthorized access of files due to a confused deputy. (no CVSS, Android)
- [CVE-2021-39701](https://cve.now/CVE-2021-39701.md): In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notificat (no CVSS, Android)
- [CVE-2021-39702](https://cve.now/CVE-2021-39702.md): In onCreate of RequestManageCredentials.java, there is a possible way for a third party app to install certificates without user approval du (no CVSS, Android)
- [CVE-2021-39698](https://cve.now/CVE-2021-39698.md): In aio\_poll\_complete\_work of aio.c, there is a possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2021-39697](https://cve.now/CVE-2021-39697.md): In checkFileUriDestination of DownloadProvider.java, there is a possible way to bypass external storage private directories protection due t (no CVSS, Android)
- [CVE-2021-39694](https://cve.now/CVE-2021-39694.md): In parse of RoleParser.java, there is a possible way for default apps to get permissions explicitly denied by the user due to a permissions (no CVSS, Android)
- [CVE-2021-39695](https://cve.now/CVE-2021-39695.md): In createOrUpdate of BasePermission.java, there is a possible permission bypass due to a logic error in the code. (no CVSS, Android)
- [CVE-2021-39693](https://cve.now/CVE-2021-39693.md): In onUidStateChanged of AppOpsService.java, there is a possible way to access location without a visible indicator due to a logic error in t (no CVSS, Android)
- [CVE-2021-39692](https://cve.now/CVE-2021-39692.md): In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay (no CVSS, Android)
- [CVE-2021-39689](https://cve.now/CVE-2021-39689.md): In multiple functions of odsign\_main.cpp, there is a possible way to persist system attack due to a logic error in the code. (no CVSS, Android)
- [CVE-2021-39690](https://cve.now/CVE-2021-39690.md): In setDisplayPadding of WallpaperManagerService.java, there is a possible way to cause a persistent DoS due to improper input validation. (no CVSS, Android)
- [CVE-2021-39686](https://cve.now/CVE-2021-39686.md): In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. (no CVSS, Android)
- [CVE-2021-39685](https://cve.now/CVE-2021-39685.md): In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. (no CVSS, Android)
- [CVE-2021-39667](https://cve.now/CVE-2021-39667.md): In ih264d\_parse\_decode\_slice of ih264d\_parse\_slice.c, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2021-0957](https://cve.now/CVE-2021-0957.md): In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset Protections. (no CVSS, Android)
- [CVE-2021-39624](https://cve.now/CVE-2021-39624.md): In PackageManager, there is a possible permanent denial of service due to resource exhaustion. (no CVSS, Android)
- [CVE-2021-39793](https://cve.now/CVE-2021-39793.md): In kbase\_jd\_user\_buf\_pin\_pages of mali\_kbase\_mem.c, there is a possible out of bounds write due to a logic error in the code. (CVSS 7.8, KEV, Android)
- [CVE-2021-39792](https://cve.now/CVE-2021-39792.md): In usb\_gadget\_giveback\_request of core.c, there is a possible use after free out of bounds read due to a race condition. (no CVSS, Android)
- [CVE-2021-39737](https://cve.now/CVE-2021-39737.md): Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A (no CVSS, Android)
- [CVE-2021-39736](https://cve.now/CVE-2021-39736.md): In prepare\_io\_entry and prepare\_response of lwis\_ioctl.c and lwis\_periodic\_io.c, there is a possible out of bounds write due to an integer o (no CVSS, Android)
- [CVE-2021-39735](https://cve.now/CVE-2021-39735.md): In gasket\_alloc\_coherent\_memory of gasket\_page\_table.c, there is a possible memory corruption due to a race condition. (no CVSS, Android)
- [CVE-2021-39734](https://cve.now/CVE-2021-39734.md): In sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message without permissions due to a missing permiss (no CVSS, Android)
- [CVE-2021-39733](https://cve.now/CVE-2021-39733.md): In amcs\_cdev\_unlocked\_ioctl of audiometrics.c, there is a possible out of bounds write due to improper input validation. (no CVSS, Android)
- [CVE-2021-39731](https://cve.now/CVE-2021-39731.md): In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds ch (no CVSS, Android)
- [CVE-2021-39732](https://cve.now/CVE-2021-39732.md): In copy\_io\_entries of lwis\_ioctl.c, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2021-39730](https://cve.now/CVE-2021-39730.md): In TBD of TBD, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-39729](https://cve.now/CVE-2021-39729.md): In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-39726](https://cve.now/CVE-2021-39726.md): In cd\_ParseMsg of cd\_codec.c, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2021-39727](https://cve.now/CVE-2021-39727.md): In eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is a possible information disclosure due to a (no CVSS, Android)
- [CVE-2021-39725](https://cve.now/CVE-2021-39725.md): In gasket\_free\_coherent\_memory\_all of gasket\_page\_table.c, there is a possible memory corruption due to a double free. (no CVSS, Android)
- [CVE-2021-39724](https://cve.now/CVE-2021-39724.md): In TuningProviderBase::GetTuningTreeSet of tuning\_provider\_base.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2021-39723](https://cve.now/CVE-2021-39723.md): Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A (no CVSS, Android)
- [CVE-2021-39721](https://cve.now/CVE-2021-39721.md): In TBD of TBD, there is a possible out of bounds write due to memory corruption. (no CVSS, Android)
- [CVE-2021-39722](https://cve.now/CVE-2021-39722.md): In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds read due to an incorrect bounds che (no CVSS, Android)
- [CVE-2021-39720](https://cve.now/CVE-2021-39720.md): Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A (no CVSS, Android)
- [CVE-2021-39719](https://cve.now/CVE-2021-39719.md): In lwis\_top\_register\_io of lwis\_device\_top.c, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2021-39717](https://cve.now/CVE-2021-39717.md): In iaxxx\_btp\_write\_words of iaxxx-btp.c, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2021-39718](https://cve.now/CVE-2021-39718.md): In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds ch (no CVSS, Android)
- [CVE-2021-39716](https://cve.now/CVE-2021-39716.md): Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A (no CVSS, Android)
- [CVE-2021-39715](https://cve.now/CVE-2021-39715.md): In \_\_show\_regs of process.c, there is a possible leak of kernel memory and addresses due to log information disclosure. (no CVSS, Android)
- [CVE-2021-39714](https://cve.now/CVE-2021-39714.md): In ion\_buffer\_kmap\_get of ion.c, there is a possible use-after-free due to an integer overflow. (no CVSS, Android)
- [CVE-2021-39713](https://cve.now/CVE-2021-39713.md): Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel (no CVSS, Android)
- [CVE-2021-39711](https://cve.now/CVE-2021-39711.md): In bpf\_prog\_test\_run\_skb of test\_run.c, there is a possible out of bounds read due to Incorrect Size Value. (no CVSS, Android)
- [CVE-2021-39712](https://cve.now/CVE-2021-39712.md): In TBD of TBD, there is a possible user after free vulnerability due to a race condition. (no CVSS, Android)
- [CVE-2021-39710](https://cve.now/CVE-2021-39710.md): Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A (no CVSS, Android)
- [CVE-2022-0811](https://cve.now/CVE-2022-0811.md): A flaw was found in CRI-O in the way it set kernel options for a pod. (no CVSS, CRI-O · github.com/cri-o/cri-o)
- [CVE-2022-0959](https://cve.now/CVE-2022-0959.md): A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and session cookie to manua (no CVSS, pgadmin · pgadmin4)
- [CVE-2021-33853](https://cve.now/CVE-2021-33853.md): A Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s browser while the browser is connected to a tru (no CVSS, X2CRM)
- [CVE-2022-25251](https://cve.now/CVE-2022-25251.md): PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function (CVSS 9.8, PTC Axeda agent · PTC Axeda Desktop Server for Windows)
- [CVE-2022-25252](https://cve.now/CVE-2022-25252.md): PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions (CVSS 7.5, PTC Axeda agent · PTC Axeda Desktop Server for Windows)
- [CVE-2022-25250](https://cve.now/CVE-2022-25250.md): PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function (CVSS 7.5, PTC Axeda agent · PTC Axeda Desktop Server for Windows)
- [CVE-2022-25249](https://cve.now/CVE-2022-25249.md): PTC Axeda agent and Axeda Desktop Server Path Traversal (CVSS 7.5, PTC Axeda agent · PTC Axeda Desktop Server for Windows)
- [CVE-2022-25248](https://cve.now/CVE-2022-25248.md): PTC Axeda agent and Axeda Desktop Server Information Exposure (CVSS 5.3, PTC Axeda agent · PTC Axeda Desktop Server for Windows)
- [CVE-2022-25246](https://cve.now/CVE-2022-25246.md): PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials (CVSS 9.8, PTC Axeda agent · PTC Axeda Desktop Server for Windows)
- [CVE-2022-25247](https://cve.now/CVE-2022-25247.md): PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function (CVSS 9.8, PTC Axeda agent · PTC Axeda Desktop Server for Windows)
- [CVE-2021-40735](https://cve.now/CVE-2021-40735.md): Adobe Audition Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Audition)
- [CVE-2021-40738](https://cve.now/CVE-2021-40738.md): Adobe Audition WAV file Memory corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Audition)
- [CVE-2021-40742](https://cve.now/CVE-2021-40742.md): Adobe Audition NULL Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Audition)
- [CVE-2021-40734](https://cve.now/CVE-2021-40734.md): Adobe Audition Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Audition)
- [CVE-2021-40737](https://cve.now/CVE-2021-40737.md): Adobe Audition NULL Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Audition)
- [CVE-2021-40740](https://cve.now/CVE-2021-40740.md): Adobe Audition Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Audition)
- [CVE-2021-40741](https://cve.now/CVE-2021-40741.md): Adobe Audition Memory Corruption could lead to Application denial-of-service (CVSS 5.5, Adobe Audition)
- [CVE-2021-40739](https://cve.now/CVE-2021-40739.md): Adobe Audition Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Audition)
- [CVE-2021-40736](https://cve.now/CVE-2021-40736.md): Adobe Audition Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Audition)
- [CVE-2021-42728](https://cve.now/CVE-2021-42728.md): Adobe Bridge Buffer Overflow Arbitrary code execution (CVSS 7.8, Adobe Bridge)
- [CVE-2021-42264](https://cve.now/CVE-2021-42264.md): Adobe Premiere Pro Null Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Premiere)
- [CVE-2021-40793](https://cve.now/CVE-2021-40793.md): Adobe Premiere Pro WAV file memory corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Premiere)
- [CVE-2021-40765](https://cve.now/CVE-2021-40765.md): Adobe Character Animator Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Character Animator)
- [CVE-2021-40794](https://cve.now/CVE-2021-40794.md): Adobe Premiere Pro MOV file memory corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Premiere)
- [CVE-2021-40792](https://cve.now/CVE-2021-40792.md): Adobe Premiere Pro WAV file memory corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Premiere)
- [CVE-2021-42263](https://cve.now/CVE-2021-42263.md): Adobe Premiere Pro Null Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Premiere)
- [CVE-2021-40796](https://cve.now/CVE-2021-40796.md): Adobe Premiere Pro Null Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Premiere)
- [CVE-2021-40789](https://cve.now/CVE-2021-40789.md): Adobe Premiere Elements Null Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Premiere Elements)
- [CVE-2021-42526](https://cve.now/CVE-2021-42526.md): Adobe Premiere Elements WAV file memory corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Premiere Elements)
- [CVE-2021-40788](https://cve.now/CVE-2021-40788.md): Adobe Premiere Elements Null Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Premiere Elements)
- [CVE-2021-40785](https://cve.now/CVE-2021-40785.md): Adobe Premiere Elements Null Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Premiere Elements)
- [CVE-2021-42527](https://cve.now/CVE-2021-42527.md): Adobe Premiere Elements PSD file memory corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Premiere Elements)
- [CVE-2021-40769](https://cve.now/CVE-2021-40769.md): Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Adobe Character Animator)
- [CVE-2021-40786](https://cve.now/CVE-2021-40786.md): Adobe Premiere Elements M4A file memory corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Premiere Elements)
- [CVE-2021-40787](https://cve.now/CVE-2021-40787.md): Adobe Premiere Elements M4A file memory corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Premiere Elements)
- [CVE-2021-42724](https://cve.now/CVE-2021-42724.md): Adobe Bridge Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Bridge)
- [CVE-2021-42722](https://cve.now/CVE-2021-42722.md): Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution (CVSS 7.8, Adobe Bridge)
- [CVE-2021-40762](https://cve.now/CVE-2021-40762.md): Adobe Character Animator NULL Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Character Animator)
- [CVE-2021-42729](https://cve.now/CVE-2021-42729.md): Adobe Bridge Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Bridge)
- [CVE-2021-42720](https://cve.now/CVE-2021-42720.md): Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution (CVSS 7.8, Adobe Bridge)
- [CVE-2021-40763](https://cve.now/CVE-2021-40763.md): Adobe Character Animator Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Character Animator)
- [CVE-2021-40764](https://cve.now/CVE-2021-40764.md): Adobe Character Animator Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Character Animator)
- [CVE-2021-40766](https://cve.now/CVE-2021-40766.md): Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, Adobe Character Animator)
- [CVE-2021-42730](https://cve.now/CVE-2021-42730.md): Adobe Bridge Memory Corruption could lead to Arbitrary code execution (CVSS 7.8, Adobe Bridge)
- [CVE-2021-40767](https://cve.now/CVE-2021-40767.md): Adobe Character Animator Memory Corruption could lead to Application denial-of-service (CVSS 5.5, Adobe Character Animator)
- [CVE-2021-40768](https://cve.now/CVE-2021-40768.md): Adobe Character Animator NULL Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Character Animator)
- [CVE-2021-42719](https://cve.now/CVE-2021-42719.md): Adobe Bridge Out-of-bounds read could lead to Arbitrary Code Execution (CVSS 7.1, Adobe Bridge)
- [CVE-2021-42533](https://cve.now/CVE-2021-42533.md): Adobe Bridge DCM File Parsing Double Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Bridge)
- [CVE-2021-40780](https://cve.now/CVE-2021-40780.md): Adobe Media Encoder MXF file memory corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Media Encoder)
- [CVE-2021-40781](https://cve.now/CVE-2021-40781.md): Adobe Media Encoder Null Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Media Encoder)
- [CVE-2021-40750](https://cve.now/CVE-2021-40750.md): Adobe Bridge NULL Pointer Dereference could lead to Application denial-of-service (CVSS 5.5, Adobe Bridge)
- [CVE-2021-40779](https://cve.now/CVE-2021-40779.md): Adobe Media Encoder WAV file memory corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Media Encoder)
- [CVE-2021-40782](https://cve.now/CVE-2021-40782.md): Adobe Media Encoder Null Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Media Encoder)
- [CVE-2021-40777](https://cve.now/CVE-2021-40777.md): Adobe Media Encoder WAV file memory corruption vulnerability could lead to arbitrary code execution (CVSS 7.8, Adobe Media Encoder)
- [CVE-2021-40778](https://cve.now/CVE-2021-40778.md): Adobe Media Encoder Null Pointer Dereference Application denial-of-service (CVSS 5.5, Adobe Media Encoder)
- [CVE-2022-26354](https://cve.now/CVE-2022-26354.md): A flaw was found in the vhost-vsock device of QEMU. (no CVSS, qemu-kvm)
- [CVE-2022-26353](https://cve.now/CVE-2022-26353.md): A flaw was found in the virtio-net device of QEMU. (no CVSS, qemu-kvm)
- [CVE-2022-24751](https://cve.now/CVE-2022-24751.md): Race condition in Zulip (CVSS 5.4, zulip)
- [CVE-2021-42552](https://cve.now/CVE-2021-42552.md): Reflected XSS in Archivista (CVSS 6.1, ArchivistaBox webclient)
- [CVE-2022-0986](https://cve.now/CVE-2022-0986.md): Reflected Cross-site Scripting (XSS) Vulnerability in hestiacp/hestiacp (CVSS 2.4, hestiacp/hestiacp)
- [CVE-2021-45787](https://cve.now/CVE-2021-45787.md): There is a stored Cross Site Scripting (XSS) vulnerability in maccms v10 through adding videos. (no CVSS)
- [CVE-2021-45786](https://cve.now/CVE-2021-45786.md): In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges. (no CVSS)
- [CVE-2022-0705](https://cve.now/CVE-2022-0705.md): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (CVSS 4.2, pimcore/pimcore)
- [CVE-2022-21946](https://cve.now/CVE-2022-21946.md): suddoers configuration for cscreen not restrictive enough (CVSS 5.3, openSUSE Factory)
- [CVE-2022-21945](https://cve.now/CVE-2022-21945.md): cscreen: usage of fixed path /tmp/cscreen.debug (CVSS 5.1, openSUSE Factory)
- [CVE-2021-45851](https://cve.now/CVE-2021-45851.md): A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the serv (no CVSS, @frangoteam/fuxa)
- [CVE-2021-46705](https://cve.now/CVE-2021-46705.md): grub2-once uses fixed file name in /var/tmp (CVSS 5.1, SUSE Linux Enterprise Server 15 SP4 · openSUSE Factory)
- [CVE-2021-45852](https://cve.now/CVE-2021-45852.md): An issue was discovered in Projectworlds Hospital Management System v1.0. (no CVSS)
- [CVE-2022-0704](https://cve.now/CVE-2022-0704.md): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (CVSS 4.0, pimcore/pimcore)
- [CVE-2022-0911](https://cve.now/CVE-2022-0911.md): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (CVSS 6.8, pimcore/pimcore)
- [CVE-2021-43958](https://cve.now/CVE-2021-43958.md): Various rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to brute force user login credentials as rest r (CVSS 9.8, Atlassian Fisheye · Atlassian Crucible)
- [CVE-2021-43957](https://cve.now/CVE-2021-43957.md): Affected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files via an Insecure Direct Object References (I (CVSS 7.5, Atlassian Fisheye · Atlassian Crucible)
- [CVE-2021-43956](https://cve.now/CVE-2021-43956.md): The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or Java (no CVSS, Atlassian Fisheye · Atlassian Crucible)
- [CVE-2021-43955](https://cve.now/CVE-2021-43955.md): The /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed authenticated remote attackers to obtain inf (no CVSS, Atlassian Fisheye · Atlassian Crucible)
- [CVE-2022-27225](https://cve.now/CVE-2022-27225.md): Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. (no CVSS)
- [CVE-2020-25721](https://cve.now/CVE-2020-25721.md): Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). (no CVSS, samba)
- [CVE-2021-20299](https://cve.now/CVE-2021-20299.md): A flaw was found in OpenEXR's Multipart input file functionality. (no CVSS, OpenEXR)
- [CVE-2022-24728](https://cve.now/CVE-2022-24728.md): Cross-site Scripting in CKEditor4 (CVSS 5.4, ckeditor4 · drupal/core)
- [CVE-2022-24729](https://cve.now/CVE-2022-24729.md): Regular expression Denial of Service in dialog plugin (CVSS 6.5, ckeditor4 · drupal/core)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-03-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.