# CVEs published 2022-04-06

59 CVEs were published on April 6, 2022: 5 critical, 17 high. Days are UTC.

- [CVE-2020-22253](https://cve.now/CVE-2020-22253.md): Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and (no CVSS)
- [CVE-2022-26613](https://cve.now/CVE-2022-26613.md): PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter in categorymenu.php. (no CVSS)
- [CVE-2022-26607](https://cve.now/CVE-2022-26607.md): A remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow attackers to execute arbitrary code via upload (no CVSS)
- [CVE-2022-26605](https://cve.now/CVE-2022-26605.md): eZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload functionality. (no CVSS)
- [CVE-2022-26591](https://cve.now/CVE-2022-26591.md): FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download arbitrary files via a crafted GET request. (no CVSS)
- [CVE-2022-20762](https://cve.now/CVE-2022-20762.md): Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability (CVSS 7.8, Cisco Ultra Cloud Core - Subscriber Microservices Infrastru…)
- [CVE-2022-20756](https://cve.now/CVE-2022-20756.md): Cisco Identity Services Engine RADIUS Service Denial of Service Vulnerability (CVSS 8.6, Cisco Identity Services Engine Software)
- [CVE-2022-20755](https://cve.now/CVE-2022-20755.md): Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (CVSS 9.0, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2022-20754](https://cve.now/CVE-2022-20754.md): Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities (CVSS 9.0, Cisco TelePresence Video Communication Server (VCS) Express…)
- [CVE-2022-20675](https://cve.now/CVE-2022-20675.md): Multiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability (CVSS 5.3, Cisco Web Security Appliance)
- [CVE-2022-20665](https://cve.now/CVE-2022-20665.md): Cisco StarOS Command Injection Vulnerability (CVSS 6.0, Cisco ASR 5000 Series Software)
- [CVE-2022-20741](https://cve.now/CVE-2022-20741.md): Cisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Secure Network Analytics)
- [CVE-2022-20763](https://cve.now/CVE-2022-20763.md): Cisco Webex Meetings Java Deserialization Vulnerability (CVSS 5.4, Cisco Webex Meetings)
- [CVE-2022-20774](https://cve.now/CVE-2022-20774.md): Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability (CVSS 6.8, Cisco IP Phone 7800 Series with Multiplatform Firmware)
- [CVE-2022-20781](https://cve.now/CVE-2022-20781.md): Cisco Web Security Appliance Stored Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Web Security Appliance)
- [CVE-2022-20782](https://cve.now/CVE-2022-20782.md): Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability (CVSS 6.5, Cisco Identity Services Engine Software)
- [CVE-2022-20784](https://cve.now/CVE-2022-20784.md): Cisco Web Security Appliance Filter Bypass Vulnerability (CVSS 5.8, Cisco Web Security Appliance)
- [CVE-2022-26850](https://cve.now/CVE-2022-26850.md): Insufficiently protected credentials (no CVSS, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…)
- [CVE-2022-24822](https://cve.now/CVE-2022-24822.md): Denial of Service in @podium/layout and @podium/proxy (CVSS 7.5, podium-lib proxy · @podium/layout +1)
- [CVE-2021-26113](https://cve.now/CVE-2021-26113.md): A use of a one-way hash with a predictable salt vulnerability \[CWE-760\] in FortiWAN before 4.5.9 may allow an attacker who has previously co (CVSS 6.2, Fortinet FortiWAN)
- [CVE-2021-26116](https://cve.now/CVE-2021-26116.md): An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator bef (CVSS 6.7, Fortinet FortiAuthenticator)
- [CVE-2021-32585](https://cve.now/CVE-2021-32585.md): An improper neutralization of input during web page generation vulnerability \[CWE-79\] in FortiWAN before 4.5.9 may allow an attacker to perf (CVSS 7.2, Fortinet FortiWAN)
- [CVE-2021-22127](https://cve.now/CVE-2021-22127.md): An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow a (CVSS 7.1, Fortinet FortiClientLinux)
- [CVE-2021-41026](https://cve.now/CVE-2021-41026.md): A relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow an authenticated attacker to retrieve arbitr (CVSS 6.5, Fortinet FortiWeb)
- [CVE-2021-26104](https://cve.now/CVE-2021-26104.md): Multiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and al (CVSS 7.8, Fortinet FortiManager, FortiAnalyzer, FortiPortal)
- [CVE-2022-22410](https://cve.now/CVE-2022-22410.md): IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow the (CVSS 3.9, IBM Watson Query)
- [CVE-2022-27110](https://cve.now/CVE-2022-27110.md): OrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint. (no CVSS)
- [CVE-2022-27109](https://cve.now/CVE-2022-27109.md): OrangeHRM 4.10 suffers from a Referer header injection redirect vulnerability. (no CVSS)
- [CVE-2022-27108](https://cve.now/CVE-2022-27108.md): OrangeHRM 4.10 is vulnerable to Insecure Direct Object Reference (IDOR) via the end point symfony/web/index.php/time/createTimesheet\`. (no CVSS)
- [CVE-2022-27107](https://cve.now/CVE-2022-27107.md): OrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via the GET/POST "createVideo\[linkAddress\]" param (no CVSS)
- [CVE-2022-1240](https://cve.now/CVE-2022-1240.md): Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare2 (CVSS 7.6, radareorg/radare2)
- [CVE-2022-1237](https://cve.now/CVE-2022-1237.md): Improper Validation of Array Index in radareorg/radare2 (CVSS 7.6, radareorg/radare2)
- [CVE-2021-44169](https://cve.now/CVE-2021-44169.md): A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, vers (CVSS 8.2, Fortinet FortiClientWindows)
- [CVE-2022-23440](https://cve.now/CVE-2022-23440.md): A use of hard-coded cryptographic key vulnerability \[CWE-321\] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5. (CVSS 7.8, Fortinet FortiEDR)
- [CVE-2021-43205](https://cve.now/CVE-2021-43205.md): An exposure of sensitive information to an unauthorized actor vulnerability \[CWE-200\] in FortiClient for Linux version 7.0.2 and below, 6.4. (CVSS 4.3, Fortinet FortiClientLinux)
- [CVE-2021-32593](https://cve.now/CVE-2021-32593.md): A use of a broken or risky cryptographic algorithm vulnerability \[CWE-327\] in the Dynamic Tunnel Protocol of FortiWAN before 4.5.9 may allow (CVSS 6.5, Fortinet FortiWAN)
- [CVE-2021-24009](https://cve.now/CVE-2021-24009.md): Multiple improper neutralization of special elements used in an OS command vulnerabilities (CWE-78) in the Web GUI of FortiWAN before 4.5.9 (CVSS 7.2, Fortinet FortiWAN)
- [CVE-2021-26114](https://cve.now/CVE-2021-26114.md): Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenti (CVSS 9.8, Fortinet FortiWAN)
- [CVE-2021-26112](https://cve.now/CVE-2021-26112.md): Multiple stack-based buffer overflow vulnerabilities \[CWE-121\] both in network daemons and in the command line interpreter of FortiWAN befor (CVSS 8.1, Fortinet FortiWAN)
- [CVE-2022-23441](https://cve.now/CVE-2022-23441.md): A use of hard-coded cryptographic key vulnerability \[CWE-321\] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated a (CVSS 9.1, Fortinet FortiEDR)
- [CVE-2020-29013](https://cve.now/CVE-2020-29013.md): An improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2 may allow an authenticated attacker to sile (CVSS 5.4, Fortinet FortiSandbox)
- [CVE-2022-23446](https://cve.now/CVE-2022-23446.md): A improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and earlier allows attacker to make the whole appli (CVSS 4.4, Fortinet FortiEDR)
- [CVE-2022-1234](https://cve.now/CVE-2022-1234.md): XSS in livehelperchat in livehelperchat/livehelperchat (CVSS 8.8, livehelperchat/livehelperchat)
- [CVE-2022-1248](https://cve.now/CVE-2022-1248.md): SAP Information System POST Request add\_admin.php improper authentication (CVSS 7.3, SAP Information System)
- [CVE-2021-40375](https://cve.now/CVE-2021-40375.md): Apperta Foundation OpenEyes 3.5.1 allows remote attackers to view the sensitive information of patients without having the intended level of (no CVSS)
- [CVE-2021-40374](https://cve.now/CVE-2021-40374.md): A stored cross-site scripting (XSS) vulnerability was identified in Apperta Foundation OpenEyes 3.5.1. (no CVSS)
- [CVE-2021-30497](https://cve.now/CVE-2021-30497.md): Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. (no CVSS)
- [CVE-2022-26110](https://cve.now/CVE-2022-26110.md): An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. (no CVSS)
- [CVE-2021-45104](https://cve.now/CVE-2021-45104.md): An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. (no CVSS)
- [CVE-2021-45103](https://cve.now/CVE-2021-45103.md): An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. (no CVSS)
- [CVE-2022-26952](https://cve.now/CVE-2022-26952.md): Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for building the Location header string when an unau (no CVSS)
- [CVE-2022-26953](https://cve.now/CVE-2022-26953.md): Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. (no CVSS)
- [CVE-2022-26250](https://cve.now/CVE-2022-26250.md): Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges. (no CVSS)
- [CVE-2022-26251](https://cve.now/CVE-2022-26251.md): The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileg (no CVSS)
- [CVE-2021-43138](https://cve.now/CVE-2021-43138.md): In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js (no CVSS, async)
- [CVE-2022-1238](https://cve.now/CVE-2022-1238.md): Out-of-bounds Write in libr/bin/format/ne/ne.c in radareorg/radare2 (CVSS 7.6, radareorg/radare2)
- [CVE-2022-1253](https://cve.now/CVE-2022-1253.md): Heap-based Buffer Overflow in strukturag/libde265 (CVSS 7.4, strukturag/libde265)
- [CVE-2022-24786](https://cve.now/CVE-2022-24786.md): Potential out-of-bound read/write in PJSIP (CVSS 9.8, pjsip pjproject)
- [CVE-2022-24793](https://cve.now/CVE-2022-24793.md): Potential heap buffer overflow when parsing DNS packets in PJSIP (CVSS 7.5, pjsip pjproject)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-04-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.