# CVEs published 2022-03-23

110 CVEs were published on March 23, 2022: 13 critical, 10 high. Days are UTC.

- [CVE-2022-27083](https://cve.now/CVE-2022-27083.md): Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic. (no CVSS)
- [CVE-2022-27081](https://cve.now/CVE-2022-27081.md): Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo. (no CVSS)
- [CVE-2022-27082](https://cve.now/CVE-2022-27082.md): Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetInternetLanInfo. (no CVSS)
- [CVE-2022-27080](https://cve.now/CVE-2022-27080.md): Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setWorkmode. (no CVSS)
- [CVE-2022-27079](https://cve.now/CVE-2022-27079.md): Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setPicListItem. (no CVSS)
- [CVE-2022-27078](https://cve.now/CVE-2022-27078.md): Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setAdInfoDetail. (no CVSS)
- [CVE-2022-27076](https://cve.now/CVE-2022-27076.md): Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd. (no CVSS)
- [CVE-2022-27077](https://cve.now/CVE-2022-27077.md): Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic. (no CVSS)
- [CVE-2022-26536](https://cve.now/CVE-2022-26536.md): Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools. (no CVSS)
- [CVE-2022-26290](https://cve.now/CVE-2022-26290.md): Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac. (no CVSS)
- [CVE-2021-31326](https://cve.now/CVE-2021-31326.md): D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2 (no CVSS)
- [CVE-2022-26289](https://cve.now/CVE-2022-26289.md): Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/exeCommand. (no CVSS)
- [CVE-2022-25266](https://cve.now/CVE-2022-25266.md): Passwork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal (to read files). (no CVSS)
- [CVE-2022-25269](https://cve.now/CVE-2022-25269.md): Passwork On-Premise Edition before 4.6.13 has multiple XSS issues. (no CVSS)
- [CVE-2022-25268](https://cve.now/CVE-2022-25268.md): Passwork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history subsystems. (no CVSS)
- [CVE-2022-25267](https://cve.now/CVE-2022-25267.md): Passwork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal (to upload files). (no CVSS)
- [CVE-2020-20096](https://cve.now/CVE-2020-20096.md): Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which res (no CVSS)
- [CVE-2020-20095](https://cve.now/CVE-2020-20095.md): iMessage (Messages app) iOS 12.4 and prior user interface does not properly represent URI messages to the user, which results in URI spoofin (no CVSS)
- [CVE-2020-20094](https://cve.now/CVE-2020-20094.md): Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which re (no CVSS)
- [CVE-2020-20093](https://cve.now/CVE-2020-20093.md): The Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user interface does not properly represent URI messa (no CVSS)
- [CVE-2022-25041](https://cve.now/CVE-2022-25041.md): OpenEMR v6.0.0 was discovered to contain an incorrect access control issue. (no CVSS)
- [CVE-2022-27192](https://cve.now/CVE-2022-27192.md): The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. (no CVSS)
- [CVE-2022-24768](https://cve.now/CVE-2022-24768.md): Improper access control allows admin privilege escalation in Argo CD (CVSS 9.9, argoproj argo-cd · github.com/argoproj/argo-cd +1)
- [CVE-2022-24934](https://cve.now/CVE-2022-24934.md): wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEY\_CURRENT\_USER in the registry. (no CVSS)
- [CVE-2022-22819](https://cve.now/CVE-2022-22819.md): NXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and LPC55S69JEV98 microcontrollers (ROM version 1B) have a (no CVSS)
- [CVE-2022-27254](https://cve.now/CVE-2022-27254.md): The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack (no CVSS)
- [CVE-2022-24731](https://cve.now/CVE-2022-24731.md): Path traversal allows leaking out-of-bound files from Argo CD repo-server (CVSS 6.8, argoproj argo-cd · github.com/argoproj/argo-cd +1)
- [CVE-2022-24730](https://cve.now/CVE-2022-24730.md): Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server (CVSS 7.7, argoproj argo-cd · github.com/argoproj/argo-cd +1)
- [CVE-2022-24757](https://cve.now/CVE-2022-24757.md): Sensitive Auth & Cookie data stored in Jupyter server logs (CVSS 7.5, jupyter-server jupyter\_server · jupyter-server)
- [CVE-2022-23881](https://cve.now/CVE-2022-23881.md): ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE) vulnerability via danger\_key() at zzz\_template.php. (no CVSS)
- [CVE-2022-23880](https://cve.now/CVE-2022-23880.md): An arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2 allows attackers to execute arbitrary code vi (no CVSS)
- [CVE-2022-0888](https://cve.now/CVE-2022-0888.md): Ninja Forms - File Uploads Extension \<= 3.3.0 - Arbitrary File Upload (CVSS 9.8, SaturdayDrive Ninja Forms - File Uploads)
- [CVE-2022-0750](https://cve.now/CVE-2022-0750.md): Photoswipe Masonry Gallery \<= 1.2.14 Stored Cross-Site Scripting (CVSS 6.4, deanoakley Photoswipe Masonry Gallery)
- [CVE-2022-0834](https://cve.now/CVE-2022-0834.md): Amelia \<= 1.0.46 - Stored Cross Site Scripting via lastName (CVSS 7.2, ameliabooking Booking for Appointments and Events Calendar…)
- [CVE-2022-0889](https://cve.now/CVE-2022-0889.md): Ninja Forms - File Uploads Extension \<= 3.3.12 - Reflected Cross-Site Scripting (CVSS 7.2, SaturdayDrive Ninja Forms - File Uploads)
- [CVE-2022-22952](https://cve.now/CVE-2022-22952.md): VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains a file (no CVSS, VMware Carbon Black App Control)
- [CVE-2021-4150](https://cve.now/CVE-2021-4150.md): A use-after-free flaw was found in the add\_partition in block/partitions/core.c in the Linux kernel. (no CVSS, kernel)
- [CVE-2022-22951](https://cve.now/CVE-2022-22951.md): VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains an OS (no CVSS, VMware Carbon Black App Control)
- [CVE-2021-4148](https://cve.now/CVE-2021-4148.md): A vulnerability was found in the Linux kernel's block\_invalidatepage in fs/buffer.c in the filesystem. (no CVSS, kernel)
- [CVE-2021-4149](https://cve.now/CVE-2021-4149.md): A vulnerability was found in btrfs\_alloc\_tree\_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. (no CVSS, kernel)
- [CVE-2021-4197](https://cve.now/CVE-2021-4197.md): An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have (no CVSS, kernel)
- [CVE-2022-0981](https://cve.now/CVE-2022-0981.md): A flaw was found in Quarkus. (no CVSS, quarkus)
- [CVE-2021-3748](https://cve.now/CVE-2021-3748.md): A use-after-free vulnerability was found in the virtio-net device of QEMU. (no CVSS, QEMU)
- [CVE-2021-27475](https://cve.now/CVE-2021-27475.md): Rockwell Automation Connected Components Workbench Deserialization of Untrusted Data (CVSS 8.6, Rockwell Automation Connected Components Workbench)
- [CVE-2021-27471](https://cve.now/CVE-2021-27471.md): Rockwell Automation Connected Components Workbench Path Traversal (CVSS 7.7, Rockwell Automation Connected Components Workbench)
- [CVE-2021-27473](https://cve.now/CVE-2021-27473.md): Rockwell Automation Connected Components Workbench Improper Input Validation (CVSS 6.1, Rockwell Automation Connected Components Workbench)
- [CVE-2021-27476](https://cve.now/CVE-2021-27476.md): Rockwell Automation FactoryTalk AssetCentre OS Command Injection (CVSS 10.0, Rockwell Automation FactoryTalk AssetCentre)
- [CVE-2021-27470](https://cve.now/CVE-2021-27470.md): Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data (CVSS 10.0, Rockwell Automation FactoryTalk AssetCentre)
- [CVE-2021-27466](https://cve.now/CVE-2021-27466.md): Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data (CVSS 10.0, Rockwell Automation FactoryTalk AssetCentre)
- [CVE-2021-27474](https://cve.now/CVE-2021-27474.md): Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous Function (CVSS 10.0, Rockwell Automation FactoryTalk AssetCentre)
- [CVE-2021-27468](https://cve.now/CVE-2021-27468.md): Rockwell Automation FactoryTalk AssetCentre SQL Injection (CVSS 10.0, Rockwell Automation FactoryTalk AssetCentre)
- [CVE-2021-27472](https://cve.now/CVE-2021-27472.md): Rockwell Automation FactoryTalk AssetCentre SQL Injection (CVSS 10.0, Rockwell Automation FactoryTalk AssetCentre)
- [CVE-2021-27462](https://cve.now/CVE-2021-27462.md): Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data (CVSS 10.0, Rockwell Automation FactoryTalk AssetCentre)
- [CVE-2021-27464](https://cve.now/CVE-2021-27464.md): Rockwell Automation FactoryTalk AssetCentre SQL Injection (CVSS 10.0, Rockwell Automation FactoryTalk AssetCentre)
- [CVE-2021-27460](https://cve.now/CVE-2021-27460.md): Rockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data (CVSS 10.0, Rockwell Automation FactoryTalk AssetCentre)
- [CVE-2021-27422](https://cve.now/CVE-2021-27422.md): GE UR family exposure of sensitive information to an unauthorized actor (CVSS 7.5, GE UR family)
- [CVE-2021-27426](https://cve.now/CVE-2021-27426.md): GE UR family insecure default variable initialization (CVSS 9.8, GE UR family)
- [CVE-2021-27430](https://cve.now/CVE-2021-27430.md): GE UR family hardcoded credentials (CVSS 8.4, GE UR bootloader binary)
- [CVE-2021-27424](https://cve.now/CVE-2021-27424.md): GE UR family exposure of sensitive information to an unauthorized actor (CVSS 5.3, GE UR family)
- [CVE-2021-27428](https://cve.now/CVE-2021-27428.md): GE UR family Unrestricted Upload of File with Dangerous Type (CVSS 9.8, GE UR family)
- [CVE-2021-27420](https://cve.now/CVE-2021-27420.md): GE UR family input validation (CVSS 5.3, GE UR family)
- [CVE-2021-27418](https://cve.now/CVE-2021-27418.md): GE UR family input validation (CVSS 5.3, GE UR family)
- [CVE-2022-25609](https://cve.now/CVE-2022-25609.md): WordPress Yoo Slider plugin \<= 2.0.0 - Stored Cross-Site Scripting (XSS) vulnerability (CVSS 5.4, Yooslider Yoo Slider – Image Slider & Video Slider)
- [CVE-2022-25608](https://cve.now/CVE-2022-25608.md): WordPress Yoo Slider – Image Slider & Video Slider plugin \<= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to slider Duplicate/Delete (CVSS 5.4, Yooslider Yoo Slider – Image Slider & Video Slider)
- [CVE-2021-27456](https://cve.now/CVE-2021-27456.md): Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control (CVSS 2.4, Philips Gemini 16 Slice · Philips Gemini Dual +9)
- [CVE-2021-4180](https://cve.now/CVE-2021-4180.md): An information exposure flaw in openstack-tripleo-heat-templates allows an external user to discover the internal IP or hostname. (no CVSS, openstack-tripleo-heat-templates · tripleo-heat-templates)
- [CVE-2022-24293](https://cve.now/CVE-2022-24293.md): Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. (no CVSS, HP LaserJet Pro Printers; HP Pagewide Pro Printers; HP Offi…)
- [CVE-2022-24291](https://cve.now/CVE-2022-24291.md): Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. (no CVSS, HP LaserJet Pro Printers; HP Pagewide Pro Printers; HP Offi…)
- [CVE-2021-4219](https://cve.now/CVE-2021-4219.md): A flaw was found in ImageMagick. (no CVSS, imagemagick)
- [CVE-2022-24292](https://cve.now/CVE-2022-24292.md): Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. (no CVSS, HP LaserJet Pro Printers; HP Pagewide Pro Printers; HP Offi…)
- [CVE-2022-0996](https://cve.now/CVE-2022-0996.md): A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication. (no CVSS, 389-ds-base)
- [CVE-2022-0854](https://cve.now/CVE-2022-0854.md): A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA\_FROM\_DEVICE. (no CVSS, Kernel)
- [CVE-2022-1030](https://cve.now/CVE-2022-1030.md): Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a special (no CVSS, Okta Advanced Server Access Client)
- [CVE-2022-25223](https://cve.now/CVE-2022-25223.md): Money Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries in 'mtms/admin/?page=transaction/view\_detail (no CVSS, Money Transfer Management System)
- [CVE-2022-25222](https://cve.now/CVE-2022-25222.md): Money Transfer Management System Version 1.0 allows an unauthenticated user to inject SQL queries in 'admin/maintenance/manage\_branch.php' a (no CVSS, Money Transfer Management System)
- [CVE-2022-25221](https://cve.now/CVE-2022-25221.md): Money Transfer Management System Version 1.0 allows an attacker to inject JavaScript code in the URL and then trick a user into visit the li (no CVSS, Money Transfer Management System)
- [CVE-2021-3589](https://cve.now/CVE-2021-3589.md): An authorization flaw was found in Foreman Ansible. (no CVSS, Foreman Ansible · foreman\_ansible)
- [CVE-2022-26243](https://cve.now/CVE-2022-26243.md): Tenda AC10-1200 v15.03.06.23\_EN was discovered to contain a buffer overflow in the setSmartPowerManagement function. (no CVSS)
- [CVE-2021-38772](https://cve.now/CVE-2021-38772.md): Tenda AC10-1200 v15.03.06.23\_EN was discovered to contain a buffer overflow via the list parameter in the fromSetIpMacBind function. (no CVSS)
- [CVE-2021-38278](https://cve.now/CVE-2021-38278.md): Tenda AC10-1200 v15.03.06.23\_EN was discovered to contain a buffer overflow via the urls parameter in the saveParentControlInfo function. (no CVSS)
- [CVE-2021-46064](https://cve.now/CVE-2021-46064.md): IrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit version of the binary). (no CVSS)
- [CVE-2021-44139](https://cve.now/CVE-2021-44139.md): Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF). (no CVSS)
- [CVE-2022-22316](https://cve.now/CVE-2022-22316.md): IBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a denial of service due to incorrectly configu (CVSS 5.3, IBM MQ Appliance)
- [CVE-2021-43737](https://cve.now/CVE-2021-43737.md): An issus was discovered in xiaohuanxiong CMS 5.0.17. (no CVSS)
- [CVE-2021-43738](https://cve.now/CVE-2021-43738.md): An issue was discovered in xiaohuanxiong CMS 5.0.17. (no CVSS)
- [CVE-2021-43736](https://cve.now/CVE-2021-43736.md): CmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE) vulnerability via parameter: log rule (no CVSS)
- [CVE-2022-23242](https://cve.now/CVE-2022-23242.md): TeamViewer Linux - Deletion command not properly executed after process crash (CVSS 6.3, TeamViewer for Linux)
- [CVE-2021-43735](https://cve.now/CVE-2021-43735.md): CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule. (no CVSS)
- [CVE-2022-0861](https://cve.now/CVE-2022-0861.md): ePO XML extended entity vulnerability (CVSS 3.5, McAfee ePolicy Orchestrator)
- [CVE-2022-0862](https://cve.now/CVE-2022-0862.md): ePO password change vulnerability (CVSS 3.1, McAfee ePolicy Orchestrator)
- [CVE-2022-0858](https://cve.now/CVE-2022-0858.md): Cross-site scripting vulnerability in ePO (CVSS 4.3, McAfee ePolicy Orchestrator)
- [CVE-2022-0859](https://cve.now/CVE-2022-0859.md): ePO database restoration vulnerability (CVSS 6.5, McAfee ePolicy Orchestrator)
- [CVE-2022-0857](https://cve.now/CVE-2022-0857.md): ePO Reflected Cross-site scripting vulnerability (CVSS 5.4, McAfee ePolicy Orchestrator)
- [CVE-2022-0842](https://cve.now/CVE-2022-0842.md): ePO blind SQL Injection vulnerability (CVSS 5.4, McAfee ePolicy Orchestrator)
- [CVE-2021-44759](https://cve.now/CVE-2021-44759.md): Improper authentication vulnerability in TLS origin verification (no CVSS, Apache Software Foundation Apache Traffic Server)
- [CVE-2021-44040](https://cve.now/CVE-2021-44040.md): HTTP request line fuzzing attacks (no CVSS, Apache Software Foundation Apache Traffic Server)
- [CVE-2021-25220](https://cve.now/CVE-2021-25220.md): DNS forwarders - cache poisoning vulnerability (CVSS 6.8, ISC BIND)
- [CVE-2022-0635](https://cve.now/CVE-2022-0635.md): Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually t (CVSS 7.5, ISC BIND)
- [CVE-2021-45757](https://cve.now/CVE-2021-45757.md): ASUS AC68U \<=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause a denial of service (DoS). (no CVSS)
- [CVE-2021-45756](https://cve.now/CVE-2021-45756.md): Asus RT-AC68U \<3.0.0.4.385.20633 and RT-AC5300 \<3.0.0.4.384.82072 are affected by a buffer overflow in blocking\_request.cgi. (no CVSS)
- [CVE-2022-0396](https://cve.now/CVE-2022-0396.md): DoS from specifically crafted TCP packets (CVSS 5.3, ISC BIND)
- [CVE-2022-1033](https://cve.now/CVE-2022-1033.md): Unrestricted Upload of File with Dangerous Type in crater-invoice/crater (CVSS 7.2, crater-invoice/crater)
- [CVE-2022-27666](https://cve.now/CVE-2022-27666.md): A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. (no CVSS)
- [CVE-2021-28275](https://cve.now/CVE-2021-28275.md): A Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the Get16u function in exif.c in will cause se (no CVSS)
- [CVE-2021-28276](https://cve.now/CVE-2021-28276.md): A Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the ProcessCanonMakerNoteDir function in makernot (no CVSS)
- [CVE-2021-28277](https://cve.now/CVE-2021-28277.md): A Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer Overflow via the RemoveUnknownSections functi (no CVSS)
- [CVE-2021-28278](https://cve.now/CVE-2021-28278.md): A Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the RemoveSectionType function in jpgfile.c. (no CVSS)
- [CVE-2021-3618](https://cve.now/CVE-2021-3618.md): ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatib (no CVSS, ALPACA)
- [CVE-2021-4156](https://cve.now/CVE-2021-4156.md): An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. (no CVSS, libsndfile)
- [CVE-2021-44226](https://cve.now/CVE-2021-44226.md): Razer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on %PROGRAMDATA%\\Razer\\Synapse3\\Service\\bin even if %PROG (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-03-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.