# CVEs published 2022-04-27

63 CVEs were published on April 27, 2022: 1 critical, 7 high. Days are UTC.

- [CVE-2022-29859](https://cve.now/CVE-2022-29859.md): component/common/network/dhcp/dhcps.c in ambiot amb1\_sdk (aka SDK for Ameba1) before 2022-03-11 mishandles data structures for DHCP packet d (no CVSS)
- [CVE-2021-3523](https://cve.now/CVE-2021-3523.md): A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. (no CVSS, apicast)
- [CVE-2022-24736](https://cve.now/CVE-2022-24736.md): A Malformed Lua script can crash Redis (CVSS 3.3, redis)
- [CVE-2022-24735](https://cve.now/CVE-2022-24735.md): Lua scripts can be manipulated to overcome ACL rules in Redis (CVSS 3.9, redis)
- [CVE-2022-28197](https://cve.now/CVE-2022-28197.md): NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4\_mount function, where Insufficient validation of untrusted dat (CVSS 5.0, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX)
- [CVE-2022-28196](https://cve.now/CVE-2022-28196.md): NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob\_decompress function, where insufficient validation of untruste (CVSS 4.6, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson T…)
- [CVE-2022-28195](https://cve.now/CVE-2022-28195.md): NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4\_read\_file function, where insufficient validation of untrusted (CVSS 5.7, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX)
- [CVE-2022-28194](https://cve.now/CVE-2022-28194.md): NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl\_cbo.c, where, if TFTP is enabled, a local attacker w (CVSS 7.3, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX)
- [CVE-2022-28193](https://cve.now/CVE-2022-28193.md): NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl\_cbo.c, where insufficient validation of untrusted da (CVSS 5.6, NVIDIA Jetson AGX Xavier series, Jetson Xavier NX)
- [CVE-2022-22315](https://cve.now/CVE-2022-22315.md): IBM UrbanCode Deploy (UCD) 7.2.2.1 could allow an authenticated user with special permissions to obtain elevated privileges due to improper (CVSS 5.0, IBM UrbanCode Deploy)
- [CVE-2022-24372](https://cve.now/CVE-2022-24372.md): Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share. (no CVSS)
- [CVE-2022-1507](https://cve.now/CVE-2022-1507.md): chafa: NULL Pointer Dereference in function gif\_internal\_decode\_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in hpjansson/chafa (CVSS 5.5, hpjansson/chafa)
- [CVE-2021-25266](https://cve.now/CVE-2021-25266.md): An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in (CVSS 3.9, Sophos Intercept X for Mobile · Sophos Authenticator)
- [CVE-2022-22278](https://cve.now/CVE-2022-22278.md): A vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP response message to the source address when us (no CVSS, SonicWall SonicOS)
- [CVE-2022-22277](https://cve.now/CVE-2022-22277.md): A vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive information in cleartext. (no CVSS, SonicWall SonicOS)
- [CVE-2022-22276](https://cve.now/CVE-2022-22276.md): A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user. (no CVSS, SonicWall SonicOS)
- [CVE-2022-22275](https://cve.now/CVE-2022-22275.md): Improper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ bypassing security policy until TCP handshake po (no CVSS, SonicWall SonicOS)
- [CVE-2022-23822](https://cve.now/CVE-2022-23822.md): In this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot Loader (FSBL) by bypassing authentication an (no CVSS, AMD-Xilinx Zynq-7000 SoC FSBL)
- [CVE-2022-22345](https://cve.now/CVE-2022-22345.md): IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. (CVSS 4.8, IBM QRadar SIEM)
- [CVE-2022-22323](https://cve.now/CVE-2022-22323.md): IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of servic (CVSS 5.7, IBM Security Verify Password Synchronization Plug-in for Wi…)
- [CVE-2022-22312](https://cve.now/CVE-2022-22312.md): IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of servic (CVSS 5.7, IBM Security Verify Password Synchronization Plug-in for Wi…)
- [CVE-2021-38939](https://cve.now/CVE-2021-38939.md): IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creatin (CVSS 3.7, IBM QRadar SIEM)
- [CVE-2021-38919](https://cve.now/CVE-2021-38919.md): IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. (CVSS 5.9, IBM QRadar SIEM)
- [CVE-2021-38878](https://cve.now/CVE-2021-38878.md): IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. (CVSS 5.9, IBM QRadar SIEM)
- [CVE-2021-38874](https://cve.now/CVE-2021-38874.md): IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some situations. (CVSS 4.3, IBM QRadar SIEM)
- [CVE-2021-38869](https://cve.now/CVE-2021-38869.md): IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout. (CVSS 4.3, IBM QRadar SIEM)
- [CVE-2021-29776](https://cve.now/CVE-2021-29776.md): IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing (CVSS 3.1, IBM QRadar SIEM)
- [CVE-2022-27336](https://cve.now/CVE-2022-27336.md): Seacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/weixin.php. (no CVSS)
- [CVE-2022-22521](https://cve.now/CVE-2022-22521.md): Privilege Escalation in Miele Benchmark Programming Tool (CVSS 7.3, Miele Benchmark Programming Tool)
- [CVE-2021-34602](https://cve.now/CVE-2021-34602.md): Bender Charge Controller: Long URL could lead to webserver crash (CVSS 8.8, Bender / ebee CC612 · Bender / ebee CC613 +2)
- [CVE-2021-34601](https://cve.now/CVE-2021-34601.md): Bender Charge Controller: Hardcoded Credentials in Charge Controller (CVSS 9.8, Bender / ebee CC612 · Bender / ebee CC613 +2)
- [CVE-2021-34592](https://cve.now/CVE-2021-34592.md): Bender Charge Controller: Command injection via Web interface (CVSS 8.8, Bender / ebee CC612 · Bender / ebee CC613 +2)
- [CVE-2021-34591](https://cve.now/CVE-2021-34591.md): Bender Charge Controller: Local privilege Escalation (CVSS 7.8, Bender / ebee CC612 · Bender / ebee CC613 +2)
- [CVE-2021-34590](https://cve.now/CVE-2021-34590.md): Bender Charge Controller: Cross-site Scripting (CVSS 5.4, Bender / ebee CC612 · Bender / ebee CC613 +2)
- [CVE-2021-34589](https://cve.now/CVE-2021-34589.md): Bender Charge Controller: RFID leak (CVSS 7.5, Bender / ebee CC612 · Bender / ebee CC613 +2)
- [CVE-2021-34588](https://cve.now/CVE-2021-34588.md): Bender Charge Controller: Unprotected data export (CVSS 8.6, Bender / ebee CC612 · Bender / ebee CC613 +2)
- [CVE-2021-34587](https://cve.now/CVE-2021-34587.md): Bender Charge Controller: Long URL could lead to webserver crash (CVSS 5.3, Bender / ebee CC612 · Bender / ebee CC613 +2)
- [CVE-2022-24889](https://cve.now/CVE-2022-24889.md): Insufficient Verification of Data Authenticity in Nextcloud Server (CVSS 2.4, nextcloud security-advisories)
- [CVE-2022-29505](https://cve.now/CVE-2022-29505.md): Due to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to DLL injection that could lead to privilege (no CVSS, LINE for Windows)
- [CVE-2022-24888](https://cve.now/CVE-2022-24888.md): Possible Injection in Nextcloud Server (CVSS 4.3, nextcloud security-advisories)
- [CVE-2022-27905](https://cve.now/CVE-2022-27905.md): In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. (no CVSS)
- [CVE-2022-24887](https://cve.now/CVE-2022-24887.md): Open Redirect in Nextcloud Talk (CVSS 4.3, nextcloud security-advisories)
- [CVE-2022-24886](https://cve.now/CVE-2022-24886.md): Exposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.client (CVSS 2.2, nextcloud security-advisories)
- [CVE-2022-24885](https://cve.now/CVE-2022-24885.md): Improper Authentication in Nextcloud Android Files (CVSS 2.0, nextcloud security-advisories)
- [CVE-2022-28464](https://cve.now/CVE-2022-28464.md): Apifox through 2.1.6 is vulnerable to Cross Site Scripting (XSS) which can lead to remote code execution. (no CVSS)
- [CVE-2021-46424](https://cve.now/CVE-2021-46424.md): Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even (no CVSS)
- [CVE-2021-46423](https://cve.now/CVE-2021-46423.md): Telesquare TLR-2005KSH 1.0.0 is affected by an unauthenticated file download vulnerability that allows a remote attacker to download a full (no CVSS)
- [CVE-2021-46422](https://cve.now/CVE-2021-46422.md): Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without (no CVSS)
- [CVE-2021-46421](https://cve.now/CVE-2021-46421.md): Franklin Fueling Systems FFS T5 Series 1.8.7.7299 is affected by an unauthenticated directory traversal vulnerability, which allows an attac (no CVSS)
- [CVE-2021-46420](https://cve.now/CVE-2021-46420.md): Franklin Fueling Systems FFS TS-550 evo 2.23.4.8936 is affected by an unauthenticated directory traversal vulnerability, which allows an att (no CVSS)
- [CVE-2022-1504](https://cve.now/CVE-2022-1504.md): XSS in /demo/module/?module=HERE in microweber/microweber (CVSS 6.3, microweber/microweber)
- [CVE-2021-46441](https://cve.now/CVE-2021-46441.md): In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute ar (no CVSS)
- [CVE-2021-46442](https://cve.now/CVE-2021-46442.md): In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions (no CVSS)
- [CVE-2022-1503](https://cve.now/CVE-2022-1503.md): GetSimple CMS Content Module edit.php cross site scripting (CVSS 3.5, GetSimple CMS)
- [CVE-2022-29810](https://cve.now/CVE-2022-29810.md): The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter. (no CVSS, github.com/hashicorp/go-getter)
- [CVE-2022-29700](https://cve.now/CVE-2022-29700.md): A lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long passwords which can cause a Denial of Servi (no CVSS)
- [CVE-2022-29701](https://cve.now/CVE-2022-29701.md): A lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to send an excessive amount of reset requests for (no CVSS)
- [CVE-2022-27332](https://cve.now/CVE-2022-27332.md): An access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log without authentication. (no CVSS)
- [CVE-2022-27331](https://cve.now/CVE-2022-27331.md): An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instanc (no CVSS)
- [CVE-2022-28085](https://cve.now/CVE-2022-28085.md): A flaw was found in htmldoc commit 31f7804. (no CVSS)
- [CVE-2021-41041](https://cve.now/CVE-2021-41041.md): In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is (no CVSS, The Eclipse Foundation Eclipse OpenJ9)
- [CVE-2022-24891](https://cve.now/CVE-2022-24891.md): Cross-site Scripting in org.owasp.esapi:esapi -- antisamy-esapi.xml configuration file (CVSS 5.4, esapi-java-legacy · org.owasp.esapi:esapi)
- [CVE-2022-27239](https://cve.now/CVE-2022-27239.md): In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attacker (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-04-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.