# CVEs published 2022-04-11

186 CVEs were published on April 11, 2022: 3 critical, 30 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-24839](https://cve.now/CVE-2022-24839.md): Uncontrolled Resource Consumption in org.cyberneko.html (nokogiri fork) (CVSS 7.5, sparklemotion nekohtml · org.nokogiri:nekohtml)
- [CVE-2022-24838](https://cve.now/CVE-2022-24838.md): Command Injection in Appointment Emails for Nextcloud Calendar (CVSS 5.3, nextcloud security-advisories)
- [CVE-2022-24833](https://cve.now/CVE-2022-24833.md): Persistent Cross-site Scripting (XSS) vulnerability in PrivateBin (CVSS 8.2, PrivateBin · privatebin/privatebin)
- [CVE-2022-24837](https://cve.now/CVE-2022-24837.md): Enumerable upload file names in hedgedoc (CVSS 5.3, hedgedoc)
- [CVE-2022-24832](https://cve.now/CVE-2022-24832.md): Bundled ldap-authentication-plugin fails to neutralise LDAP special elements in usernames (CVSS 8.2, gocd)
- [CVE-2022-24827](https://cve.now/CVE-2022-24827.md): SQL Injection in elide-datastore-aggregation (CVSS 8.1, yahoo elide · com.yahoo.elide:elide-datastore-aggregation)
- [CVE-2022-1316](https://cve.now/CVE-2022-1316.md): Incorrect Permission Assignment for Critical Resource in zerotier/zerotierone (CVSS 8.8, zerotier/zerotierone)
- [CVE-2022-24829](https://cve.now/CVE-2022-24829.md): Missing authentication in Garden (CVSS 8.1, garden-io garden)
- [CVE-2022-25614](https://cve.now/CVE-2022-25614.md): WordPress eRoom plugin \<= 1.3.7 - Cross-Site Request Forgery (CSRF) leading to Sync with Zoom Meetings vulnerability (CVSS 4.3, StylemixThemes eRoom – Zoom Meetings & Webinar)
- [CVE-2022-25615](https://cve.now/CVE-2022-25615.md): WordPress eRoom plugin \<= 1.3.8 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cache Deletion (CVSS 4.3, StylemixThemes eRoom – Zoom Meetings & Webinar)
- [CVE-2022-0552](https://cve.now/CVE-2022-0552.md): A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-r (no CVSS, origin-aggregated-logging/elasticsearch)
- [CVE-2021-4047](https://cve.now/CVE-2021-4047.md): The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was missing. (no CVSS, OpenShift)
- [CVE-2022-0835](https://cve.now/CVE-2022-0835.md): AVEVA System Platform Cleartext Storage of Sensitive Information in Memory (CVSS 8.1, AVEVA System Platform)
- [CVE-2022-0999](https://cve.now/CVE-2022-0999.md): mySCADA myPRO Command Injection (CVSS 8.8, mySCADA myPRO)
- [CVE-2022-22964](https://cve.now/CVE-2022-22964.md): VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation that allows a user to escalate to root due to a vulnera (no CVSS, VMware Horizon Agent for Linux)
- [CVE-2022-22962](https://cve.now/CVE-2022-22962.md): VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the default shared folder l (no CVSS, VMware Horizon Agent for Linux)
- [CVE-2022-1157](https://cve.now/CVE-2022-1157.md): Missing sanitization of logged exception messages in all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 of GitLab (CVSS 2.6, GitLab)
- [CVE-2022-1193](https://cve.now/CVE-2022-1193.md): Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows a malicious act (CVSS 4.3, GitLab)
- [CVE-2021-40065](https://cve.now/CVE-2021-40065.md): The communication module has a service logic error vulnerability.Successful exploitation of this vulnerability may affect data confidentiali (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2021-46740](https://cve.now/CVE-2021-46740.md): The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnera (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2021-46742](https://cve.now/CVE-2021-46742.md): The multi-window module has a vulnerability of unauthorized insertion and tampering of Settings.Secure data.Successful exploitation of this (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-22253](https://cve.now/CVE-2022-22253.md): The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-22254](https://cve.now/CVE-2022-22254.md): A permission bypass vulnerability exists when the NFC CAs access the TEE.Successful exploitation of this vulnerability may affect data confi (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-22255](https://cve.now/CVE-2022-22255.md): The application framework has a common DoS vulnerability.Successful exploitation of this vulnerability may affect the availability. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-22256](https://cve.now/CVE-2022-22256.md): The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality. (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-22257](https://cve.now/CVE-2022-22257.md): The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data (no CVSS, Huawei HarmonyOS · Huawei EMUI +1)
- [CVE-2022-22258](https://cve.now/CVE-2022-22258.md): The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to (no CVSS, HarmonyOS;EMUI;Magic UI)
- [CVE-2022-27845](https://cve.now/CVE-2022-27845.md): WordPress Plausible Analytics plugin \<= 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, PlausibleHQ Plausible Analytics)
- [CVE-2022-27844](https://cve.now/CVE-2022-27844.md): WordPress WPvivid plugin \<= 0.9.70 - Arbitrary File Read vulnerability (CVSS 2.7, WPvivid Team Migration, Backup, Staging – WPvivid)
- [CVE-2022-1067](https://cve.now/CVE-2022-1067.md): ICSMA-22-095-01 LifePoint Informatics Patient Portal (CVSS 6.5, LifePoint Informatics Patient Portal)
- [CVE-2022-1161](https://cve.now/CVE-2022-1161.md): ICSA-22-090-05 Rockwell Automation Logix Controllers (CVSS 10.0, Rockwell Automation 1768 CompactLogix controllers · Roc… +15)
- [CVE-2022-1262](https://cve.now/CVE-2022-1262.md): A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbit (no CVSS, D-Link Routers)
- [CVE-2022-22572](https://cve.now/CVE-2022-22572.md): A non-admin user with user management permission can escalate his privilege to admin user via password reset functionality. (no CVSS, Ivanti Incapptic Connect)
- [CVE-2022-22571](https://cve.now/CVE-2022-22571.md): An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all (no CVSS, Ivanti Incapptic Connect)
- [CVE-2022-20080](https://cve.now/CVE-2022-20080.md): In SUB2AF, there is a possible memory corruption due to a race condition. (no CVSS, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6757, MT…)
- [CVE-2022-20079](https://cve.now/CVE-2022-20079.md): In vow, there is a possible read of uninitialized data due to a improper input validation. (no CVSS, MediaTek MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, M…)
- [CVE-2022-20078](https://cve.now/CVE-2022-20078.md): In vow, there is a possible memory corruption due to a race condition. (no CVSS, MediaTek MT6833, MT6853, MT6853T, MT6873, MT6877, MT6883, M…)
- [CVE-2022-20077](https://cve.now/CVE-2022-20077.md): In vow, there is a possible memory corruption due to a race condition. (no CVSS, MediaTek MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, M…)
- [CVE-2022-20075](https://cve.now/CVE-2022-20075.md): In ged, there is a possible out of bounds write due to an integer overflow. (no CVSS, MediaTek MT6580, MT6731, MT6735, MT6750S, MT6753, MT6755S,…)
- [CVE-2022-20076](https://cve.now/CVE-2022-20076.md): In ged, there is a possible memory corruption due to an incorrect error handling. (no CVSS, MediaTek MT6580, MT6731, MT6735, MT6750S, MT6753, MT6755S,…)
- [CVE-2022-20074](https://cve.now/CVE-2022-20074.md): In preloader (partition), there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT…)
- [CVE-2022-20073](https://cve.now/CVE-2022-20073.md): In preloader (usb), there is a possible out of bounds write due to a integer underflow. (no CVSS, MediaTek MT2601, MT6580, MT6735, MT6739, MT6761, MT6763, MT…)
- [CVE-2022-20072](https://cve.now/CVE-2022-20072.md): In search engine service, there is a possible way to change the default search engine due to an incorrect comparison. (no CVSS, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6755, MT…)
- [CVE-2022-20070](https://cve.now/CVE-2022-20070.md): In ssmr, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT…)
- [CVE-2022-20071](https://cve.now/CVE-2022-20071.md): In ccu, there is a possible escalation of privilege due to a missing certificate validation. (no CVSS, MediaTek MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT…)
- [CVE-2022-20069](https://cve.now/CVE-2022-20069.md): In preloader (usb), there is a possible out of bounds write due to an integer overflow. (no CVSS, MediaTek MT6580, MT6735, MT6739, MT6761, MT6762, MT6763, MT…)
- [CVE-2022-20068](https://cve.now/CVE-2022-20068.md): In mobile\_log\_d, there is a possible symbolic link following due to an improper link resolution. (no CVSS, MediaTek MT6731, MT6732, MT6735, MT6737, MT6739, MT6761, MT…)
- [CVE-2022-20052](https://cve.now/CVE-2022-20052.md): In mdp, there is a possible memory corruption due to a use after free. (no CVSS, MediaTek MT6580, MT6735, MT6737, MT6739, MT6750, MT6753, MT…)
- [CVE-2022-20067](https://cve.now/CVE-2022-20067.md): In mdp, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6731, MT6735, MT6739, MT6750, MT6755, MT6755S, M…)
- [CVE-2022-20066](https://cve.now/CVE-2022-20066.md): In atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling. (no CVSS, MediaTek MT6580, MT6739, MT6761, MT6765, MT6769, MT6771, MT…)
- [CVE-2022-20064](https://cve.now/CVE-2022-20064.md): In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. (no CVSS, MediaTek MT6580, MT6737, MT6739, MT6761, MT6762, MT6763, MT…)
- [CVE-2022-20065](https://cve.now/CVE-2022-20065.md): In ccci, there is a possible out of bounds read due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6737, MT6739, MT6761, MT6762, MT6765, MT…)
- [CVE-2022-20063](https://cve.now/CVE-2022-20063.md): In atf (spm), there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6765, MT8385, MT8666, MT8667, MT8766, MT8786, MT…)
- [CVE-2022-20062](https://cve.now/CVE-2022-20062.md): In mdp, there is a possible memory corruption due to a use after free. (no CVSS, MediaTek MT6765, MT6785, MT6833, MT6853, MT6853T, MT6873, M…)
- [CVE-2022-20081](https://cve.now/CVE-2022-20081.md): In A-GPS, there is a possible man in the middle attack due to improper certificate validation. (no CVSS, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…)
- [CVE-2022-27528](https://cve.now/CVE-2022-27528.md): A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. (no CVSS, Autodesk Navisworks)
- [CVE-2022-25796](https://cve.now/CVE-2022-25796.md): A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected (no CVSS, Autodesk Navisworks)
- [CVE-2022-25792](https://cve.now/CVE-2022-25792.md): A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the alloc (no CVSS, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…)
- [CVE-2022-25790](https://cve.now/CVE-2022-25790.md): A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the alloc (no CVSS, Autodesk Navisworks, Advanced Steel, Civil 3D, AutoCAD, Aut…)
- [CVE-2022-25791](https://cve.now/CVE-2022-25791.md): A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to (no CVSS, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…)
- [CVE-2022-25789](https://cve.now/CVE-2022-25789.md): A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability (no CVSS, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…)
- [CVE-2021-38125](https://cve.now/CVE-2021-38125.md): Unauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting versions 2021.05, 2021.08, and newer version (no CVSS, Operations Bridge containerized.)
- [CVE-2021-36893](https://cve.now/CVE-2021-36893.md): WordPress Responsive Tabs plugin \<= 4.0.5 - Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, WP Darko Responsive Tabs)
- [CVE-2022-27577](https://cve.now/CVE-2022-27577.md): The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. (no CVSS, SICK MSC800)
- [CVE-2022-27578](https://cve.now/CVE-2022-27578.md): An attacker can perform a privilege escalation through the SICK OEE if the application is installed in a directory where non authenticated o (no CVSS, SICK Overall Equipment Effectiveness)
- [CVE-2022-28778](https://cve.now/CVE-2022-28778.md): Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as (CVSS 4.4, Samsung Mobile Samsung Security Supporter)
- [CVE-2022-28779](https://cve.now/CVE-2022-28779.md): Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attack (CVSS 5.3, Samsung Mobile Samsung Android USB Driver windows installer)
- [CVE-2022-28777](https://cve.now/CVE-2022-28777.md): Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without C (CVSS 4.3, Samsung Mobile Samsung Members)
- [CVE-2022-28776](https://cve.now/CVE-2022-28776.md): Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store wi (CVSS 5.9, Samsung Mobile Galaxy Store)
- [CVE-2022-28775](https://cve.now/CVE-2022-28775.md): Improper access control vulnerability in Samsung Flow prior to version 4.8.06.5 allows attacker to write the file without Samsung Flow permi (CVSS 5.1, Samsung Mobile Samsung Flow)
- [CVE-2021-36846](https://cve.now/CVE-2021-36846.md): WordPress Chaty plugin \<= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, Premio Chaty)
- [CVE-2021-43177](https://cve.now/CVE-2021-43177.md): As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Passw (no CVSS, Tinfoil devise-two-factor · devise-two-factor)
- [CVE-2022-22954](https://cve.now/CVE-2022-22954.md): VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. (CVSS 9.8, KEV, VMware Workspace ONE Access and Identity Manager)
- [CVE-2021-22055](https://cve.now/CVE-2021-22055.md): The SchedulerServer in Vmware photon allows remote attackers to inject logs through \\r in the package parameter. (no CVSS, Photon OS)
- [CVE-2022-28544](https://cve.now/CVE-2022-28544.md): Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access (CVSS 6.2, Samsung Mobile Galaxy Store)
- [CVE-2022-28542](https://cve.now/CVE-2022-28542.md): Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local attackers to access privileged content provi (CVSS 6.8, Samsung Mobile Galaxy Store)
- [CVE-2022-28543](https://cve.now/CVE-2022-28543.md): Path traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to read arbitrary files as Samsung Flow permis (CVSS 4.0, Samsung Mobile Samsung Flow)
- [CVE-2022-28541](https://cve.now/CVE-2022-28541.md): Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Sam (CVSS 5.9, Samsung Mobile Samsung Update)
- [CVE-2022-27843](https://cve.now/CVE-2022-27843.md): DLL hijacking vulnerability in Kies prior to version 2.6.4.22014\_2 allows attacker to execute abitrary code. (CVSS 6.2, Samsung Mobile Kies)
- [CVE-2022-27841](https://cve.now/CVE-2022-27841.md): Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running (CVSS 4.3, Samsung Mobile Samsung Pass)
- [CVE-2022-27842](https://cve.now/CVE-2022-27842.md): DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.22022\_4 allows attacker to execute abitrary code. (CVSS 6.2, Samsung Mobile Smart Switch PC)
- [CVE-2022-27840](https://cve.now/CVE-2022-27840.md): Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbitrary files as Samsun (CVSS 4.4, Samsung Mobile Samsung Recovery)
- [CVE-2022-27839](https://cve.now/CVE-2022-27839.md): Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab with (CVSS 3.3, Samsung Mobile Samsung Internet)
- [CVE-2022-27838](https://cve.now/CVE-2022-27838.md): Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege. (CVSS 7.7, Samsung Mobile FactoryCamera)
- [CVE-2022-27836](https://cve.now/CVE-2022-27836.md): Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allo (CVSS 8.4, Samsung Mobile Devices)
- [CVE-2022-27837](https://cve.now/CVE-2022-27837.md): A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows att (CVSS 4.4, Samsung Mobile Accessibility)
- [CVE-2022-27835](https://cve.now/CVE-2022-27835.md): Improper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory write. (CVSS 7.6, Samsung Mobile Devices)
- [CVE-2022-27834](https://cve.now/CVE-2022-27834.md): Use after free vulnerability in dsp\_context\_unload\_graph function of DSP driver prior to SMR Apr-2022 Release 1 allows attackers to perform (CVSS 2.9, Samsung Mobile Devices)
- [CVE-2022-27832](https://cve.now/CVE-2022-27832.md): Improper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via a crafted (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-27833](https://cve.now/CVE-2022-27833.md): Improper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds write by integer overflow. (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2022-27831](https://cve.now/CVE-2022-27831.md): Improper boundary check in sflvd\_rdbuf\_bits of libsflvextractor prior to SMR Apr-2022 Release 1 allows attackers to read out of bounds memor (CVSS 2.9, Samsung Mobile Devices)
- [CVE-2022-27830](https://cve.now/CVE-2022-27830.md): Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. (CVSS 8.5, Samsung Mobile Devices)
- [CVE-2022-27829](https://cve.now/CVE-2022-27829.md): Improper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. (CVSS 8.5, Samsung Mobile Devices)
- [CVE-2022-27828](https://cve.now/CVE-2022-27828.md): Improper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. (CVSS 8.5, Samsung Mobile Devices)
- [CVE-2022-27826](https://cve.now/CVE-2022-27826.md): Improper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. (CVSS 8.5, Samsung Mobile Devices)
- [CVE-2022-27827](https://cve.now/CVE-2022-27827.md): Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities. (CVSS 8.5, Samsung Mobile Devices)
- [CVE-2022-27825](https://cve.now/CVE-2022-27825.md): Improper size check in sapefd\_parse\_meta\_HEADER function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds re (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-27824](https://cve.now/CVE-2022-27824.md): Improper size check of in sapefd\_parse\_meta\_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of b (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-27822](https://cve.now/CVE-2022-27822.md): Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EF\_RUIMID value without permis (CVSS 6.6, Samsung Mobile Devices)
- [CVE-2022-27823](https://cve.now/CVE-2022-27823.md): Improper size check in sapefd\_parse\_meta\_HEADER\_old function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bound (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-27821](https://cve.now/CVE-2022-27821.md): Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to cause denial of service via crafted image (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2022-27576](https://cve.now/CVE-2022-27576.md): Information exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app (CVSS 3.3, Samsung Mobile Devices)
- [CVE-2022-27575](https://cve.now/CVE-2022-27575.md): Information exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to access currently launched foreground app infor (CVSS 3.3, Samsung Mobile Devices)
- [CVE-2022-27573](https://cve.now/CVE-2022-27573.md): Improper input validation vulnerability in parser\_infe and sheifd\_find\_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Releas (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2022-27574](https://cve.now/CVE-2022-27574.md): Improper input validation vulnerability in parser\_iloc and sheifd\_find\_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Releas (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2022-27572](https://cve.now/CVE-2022-27572.md): Heap-based buffer overflow vulnerability in parser\_ipma function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution b (CVSS 8.1, Samsung Mobile Devices)
- [CVE-2022-27571](https://cve.now/CVE-2022-27571.md): Heap-based buffer overflow vulnerability in sheifd\_get\_info\_image function in libsimba library prior to SMR Apr-2022 Release 1 allows code e (CVSS 8.1, Samsung Mobile Devices)
- [CVE-2022-27570](https://cve.now/CVE-2022-27570.md): Heap-based buffer overflow vulnerability in parser\_single\_iref function in libsimba library prior to SMR Apr-2022 Release 1 allows code exec (CVSS 8.1, Samsung Mobile Devices)
- [CVE-2022-27568](https://cve.now/CVE-2022-27568.md): Heap-based buffer overflow vulnerability in parser\_iloc function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution b (CVSS 8.1, Samsung Mobile Devices)
- [CVE-2022-27569](https://cve.now/CVE-2022-27569.md): Heap-based buffer overflow vulnerability in parser\_infe function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution b (CVSS 8.1, Samsung Mobile Devices)
- [CVE-2022-27567](https://cve.now/CVE-2022-27567.md): Null pointer dereference vulnerability in parser\_hvcC function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds writ (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2022-26099](https://cve.now/CVE-2022-26099.md): Null pointer dereference vulnerability in parser\_infe function of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds read (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2022-26097](https://cve.now/CVE-2022-26097.md): Null pointer dereference vulnerability in parser\_unknown\_property function in libsimba library prior to SMR Apr-2022 Release 1 allows out of (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2022-26098](https://cve.now/CVE-2022-26098.md): Heap-based buffer overflow vulnerability in sheifd\_create function of libsimba library prior to SMR Apr-2022 Release 1 allows code execution (CVSS 8.1, Samsung Mobile Devices)
- [CVE-2022-26096](https://cve.now/CVE-2022-26096.md): Null pointer dereference vulnerability in parser\_ispe function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds writ (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2022-26095](https://cve.now/CVE-2022-26095.md): Null pointer dereference vulnerability in parser\_colr function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds writ (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2022-26094](https://cve.now/CVE-2022-26094.md): Null pointer dereference vulnerability in parser\_auxC function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds writ (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2022-26093](https://cve.now/CVE-2022-26093.md): Null pointer dereference vulnerability in parser\_irot function in libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds writ (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2022-26092](https://cve.now/CVE-2022-26092.md): Improper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary code execution. (CVSS 7.4, Samsung Mobile Devices)
- [CVE-2022-26091](https://cve.now/CVE-2022-26091.md): Improper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that physical attackers can bypass Knox Manage u (CVSS 5.7, Samsung Mobile Devices)
- [CVE-2022-26090](https://cve.now/CVE-2022-26090.md): Improper access control vulnerability in SamsungContacts prior to SMR Apr-2022 Release 1 allows that attackers can access contact informatio (CVSS 5.3, Samsung Mobile SamsungContacts)
- [CVE-2022-25833](https://cve.now/CVE-2022-25833.md): Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READ\_PRIVILEGED\_PHONE\_STATE permi (CVSS 3.3, Samsung Mobile Devices)
- [CVE-2022-25832](https://cve.now/CVE-2022-25832.md): Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locked Myfiles app withou (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2021-36896](https://cve.now/CVE-2021-36896.md): WordPress Pricing Table plugin \<= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, W3 Eden Pricing Table)
- [CVE-2022-25831](https://cve.now/CVE-2022-25831.md): Improper access control vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to access secured data in certai (CVSS 2.0, Samsung Mobile Devices)
- [CVE-2021-36848](https://cve.now/CVE-2021-36848.md): WordPress Social Media Feather plugin \<= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 3.4, Socialmediafeather Social Media Feather)
- [CVE-2021-36910](https://cve.now/CVE-2021-36910.md): WordPress WP-Appbox plugin \<= 4.3.20 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 3.4, Marcel Schmilgeit WP-Appbox)
- [CVE-2022-24815](https://cve.now/CVE-2022-24815.md): SQL Injection when creating an application with Reactive SQL backend (CVSS 8.1, generator-jhipster)
- [CVE-2022-24804](https://cve.now/CVE-2022-24804.md): Private group name exposure in discourse (CVSS 5.3, discourse)
- [CVE-2021-43442](https://cve.now/CVE-2021-43442.md): A Logic Flaw vulnerability exists in i3 International Inc Annexxus Camera V5.2.0 build 150317 (Ax46), V5.0.9 build 151106 (Ax68), and V5.0.9 (no CVSS)
- [CVE-2021-39068](https://cve.now/CVE-2021-39068.md): IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Curam Social Program Management)
- [CVE-2021-38930](https://cve.now/CVE-2021-38930.md): IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtai (CVSS 5.3, IBM Hardware Management Console)
- [CVE-2021-38929](https://cve.now/CVE-2021-38929.md): IBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtai (CVSS 5.3, IBM Hardware Management Console)
- [CVE-2021-37292](https://cve.now/CVE-2021-37292.md): An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocumented backdoor acco (no CVSS)
- [CVE-2022-29035](https://cve.now/CVE-2022-29035.md): In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations (CVSS 3.3, JetBrains Ktor)
- [CVE-2021-37293](https://cve.now/CVE-2021-37293.md): A Directory Traversal vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 via the page GET parameter in in (no CVSS)
- [CVE-2021-37291](https://cve.now/CVE-2021-37291.md): An SQL Injection vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 ivia the input\_id POST parameter in i (no CVSS)
- [CVE-2021-40219](https://cve.now/CVE-2021-40219.md): Bolt CMS \<= 4.2 is vulnerable to Remote Code Execution. (no CVSS, bolt/core)
- [CVE-2022-27111](https://cve.now/CVE-2022-27111.md): Jfinal\_CMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it. (no CVSS)
- [CVE-2022-1023](https://cve.now/CVE-2022-1023.md): Podcast Importer SecondLine \< 1.3.8 - Admin+ SQLi (no CVSS, Podcast Importer SecondLine)
- [CVE-2022-1008](https://cve.now/CVE-2022-1008.md): One Click Demo Import \< 3.1.0 - Admin+ Arbitrary File Upload (no CVSS, One Click Demo Import)
- [CVE-2022-1007](https://cve.now/CVE-2022-1007.md): Advanced Booking Calendar \< 1.7.1 - Reflected Cross-Site Scripting (no CVSS, Advanced Booking Calendar)
- [CVE-2022-1006](https://cve.now/CVE-2022-1006.md): Advanced Booking Calendar \< 1.7.1 - Admin+ SQLi (no CVSS, Advanced Booking Calendar)
- [CVE-2022-0989](https://cve.now/CVE-2022-0989.md): NS WooCommerce Watermark \<= 2.11.3 - Abuse of Functionality (no CVSS, NS WooCommerce Watermark)
- [CVE-2022-0969](https://cve.now/CVE-2022-0969.md): Image optimization & Lazy Load \< 3.3.2 - Admin+ Stored Cross-Site Scripting (no CVSS, Image optimization & Lazy Load by Optimole)
- [CVE-2022-0949](https://cve.now/CVE-2022-0949.md): WP Block and Stop Bad Bots \< 6.930 - Unauthenticated SQLi (no CVSS, Block Bad Bots and Stop Bad Bots Crawlers and Spiders and A…)
- [CVE-2022-0920](https://cve.now/CVE-2022-0920.md): Salon booking system \< 7.6.3 - Customer+ Bookings/Customers Data Disclosure (no CVSS, Salon booking system)
- [CVE-2022-0919](https://cve.now/CVE-2022-0919.md): Salon booking system \< 7.6.3 - Unauthenticated Sensitive Data Disclosure (no CVSS, Salon booking system)
- [CVE-2022-0914](https://cve.now/CVE-2022-0914.md): Export All URLs \< 4.3 - Private/Draft Post/Page Title Disclosure via CSRF (no CVSS, Export All URLs)
- [CVE-2022-0892](https://cve.now/CVE-2022-0892.md): Export All URLs \< 4.2 - Reflected Cross-Site Scripting (no CVSS, Export All URLs)
- [CVE-2022-0840](https://cve.now/CVE-2022-0840.md): Easy Social Icons \< 3.2.1 - Admin+ Stored Cross-Site Scripting in add icon (no CVSS, Easy Social Icons)
- [CVE-2022-0828](https://cve.now/CVE-2022-0828.md): Download Manager \< 3.2.39 - Unauthenticated brute force of files master key (no CVSS, Download Manager)
- [CVE-2022-0728](https://cve.now/CVE-2022-0728.md): Easy Smooth Scroll Links \< 2.23.1 - Admin+ Stored Cross-Site Scripting (no CVSS, Easy Smooth Scroll Links)
- [CVE-2022-0531](https://cve.now/CVE-2022-0531.md): WPvivid Backup and Migration Plugin \< 0.9.70 - Reflected Cross-Site Scripting (no CVSS, Migration, Backup, Staging – WPvivid)
- [CVE-2022-0471](https://cve.now/CVE-2022-0471.md): Favicon by RealFaviconGenerator \< 1.3.23 - Reflected Cross-Site Scripting (no CVSS, Favicon by RealFaviconGenerator)
- [CVE-2022-0447](https://cve.now/CVE-2022-0447.md): Post Grid \< 2.1.16 - Reflected Cross-Site Scripting via post\_types (no CVSS, Post Grid)
- [CVE-2022-0314](https://cve.now/CVE-2022-0314.md): Nimble Page Builder \< 3.2.2 - Reflected Cross-Site Scripting (no CVSS, Nimble Page Builder)
- [CVE-2022-0271](https://cve.now/CVE-2022-0271.md): LearnPress \< 4.1.6 - Reflected Cross-Site Scripting (no CVSS, LearnPress – WordPress LMS Plugin)
- [CVE-2022-0246](https://cve.now/CVE-2022-0246.md): iQ Block Country \< 1.2.13 - Admin+ Arbitrary File Deletion via Zip Slip (no CVSS, iQ Block Country)
- [CVE-2021-25090](https://cve.now/CVE-2021-25090.md): GridKit Portfolio \< 2.1.0 - Subscriber+ Stored Cross-Site Scripting (no CVSS, Portfolio Gallery, Product Catalog – Grid KIT Portfolio)
- [CVE-2021-24987](https://cve.now/CVE-2021-24987.md): Super Socializer \< 7.13.30 - Reflected Cross-Site Scripting (no CVSS, Social Share, Social Login and Social Comments Plugin – Sup…)
- [CVE-2021-24986](https://cve.now/CVE-2021-24986.md): Post Grid \< 2.1.16 - Reflected Cross-Site Scripting via keyword (no CVSS, Post Grid)
- [CVE-2022-27156](https://cve.now/CVE-2022-27156.md): Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection. (no CVSS)
- [CVE-2022-27115](https://cve.now/CVE-2022-27115.md): In Studio-42 elFinder 2.1.60, there is a vulnerability that causes remote code execution through file name bypass for file upload. (no CVSS, studio-42/elfinder)
- [CVE-2022-27088](https://cve.now/CVE-2022-27088.md): Ivanti DSM Remote \<= 6.3.1.1862 is vulnerable to an unquoted service path allowing local users to launch processes with elevated privileges. (no CVSS)
- [CVE-2022-27089](https://cve.now/CVE-2022-27089.md): In Fujitsu PlugFree Network \<= 7.3.0.3, an Unquoted service path in PFNService.exe software allows a local attacker to potentially escalate (no CVSS)
- [CVE-2022-27041](https://cve.now/CVE-2022-27041.md): Due to lack of protection, parameter student\_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to (no CVSS)
- [CVE-2022-26414](https://cve.now/CVE-2022-26414.md): A potential buffer overflow vulnerability was identified in some internal functions of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0, w (CVSS 6.0, Zyxel VMG3312-T20A firmware)
- [CVE-2022-26413](https://cve.now/CVE-2022-26413.md): A command injection vulnerability in the CGI program of Zyxel VMG3312-T20A firmware version 5.30(ABFX.5)C0 could allow a local authenticated (CVSS 8.0, Zyxel VMG3312-T20A firmware)
- [CVE-2022-0556](https://cve.now/CVE-2022-0556.md): A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel AP Configurator (ZAC) (CVSS 7.3, Zyxel AP Configurator)
- [CVE-2022-1297](https://cve.now/CVE-2022-1297.md): Out-of-bounds Read in r\_bin\_ne\_get\_entrypoints function in radareorg/radare2 (CVSS 6.6, radareorg/radare2)
- [CVE-2022-1296](https://cve.now/CVE-2022-1296.md): Out-of-bounds read in \`r\_bin\_ne\_get\_relocs\` function in radareorg/radare2 (CVSS 6.6, radareorg/radare2)
- [CVE-2022-1295](https://cve.now/CVE-2022-1295.md): Prototype Pollution in alvarotrigo/fullpage.js (CVSS 7.3, alvarotrigo/fullpage.js · fullpage.js)
- [CVE-2022-1252](https://cve.now/CVE-2022-1252.md): Use of a Broken or Risky Cryptographic Algorithm in gnuboard/gnuboard5 (CVSS 8.2, gnuboard/gnuboard5)
- [CVE-2022-1045](https://cve.now/CVE-2022-1045.md): Stored XSS viva .svg file upload in polonel/trudesk (CVSS 9.0, polonel/trudesk)
- [CVE-2022-0936](https://cve.now/CVE-2022-0936.md): Cross-site Scripting (XSS) - Stored in autolab/autolab (CVSS 7.6, autolab/autolab)
- [CVE-2021-32162](https://cve.now/CVE-2021-32162.md): A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through the File Manager feature. (no CVSS)
- [CVE-2021-32161](https://cve.now/CVE-2021-32161.md): A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the File Manager feature. (no CVSS)
- [CVE-2021-32160](https://cve.now/CVE-2021-32160.md): A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Add Users feature. (no CVSS)
- [CVE-2021-32159](https://cve.now/CVE-2021-32159.md): A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Upload and Download feature. (no CVSS)
- [CVE-2021-32158](https://cve.now/CVE-2021-32158.md): A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload and Download feature. (no CVSS)
- [CVE-2021-32157](https://cve.now/CVE-2021-32157.md): A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature. (no CVSS)
- [CVE-2021-32156](https://cve.now/CVE-2021-32156.md): A cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature. (no CVSS)
- [CVE-2022-28893](https://cve.now/CVE-2022-28893.md): The SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs\_xprt\_free before ensuring that sockets are in the intended state. (no CVSS)
- [CVE-2022-24836](https://cve.now/CVE-2022-24836.md): Inefficient Regular Expression Complexity in Nokogiri (CVSS 7.5, sparklemotion nokogiri · nokogiri)
- [CVE-2022-25794](https://cve.now/CVE-2022-25794.md): An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted Ac (no CVSS, Autodesk FBX Review)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-04-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.