# CVEs published 2022-04-29

50 CVEs were published on April 29, 2022: 3 critical, 6 high. Days are UTC.

- [CVE-2022-29967](https://cve.now/CVE-2022-29967.md): static\_compressed\_inmemory\_website\_callback.c in Glewlwyd through 2.6.2 allows directory traversal. (no CVSS)
- [CVE-2022-28198](https://cve.now/CVE-2022-28198.md): NVIDIA Omniverse Nucleus and Cache contain a vulnerability in its configuration of OpenSSL, where an attacker with physical access to the sy (CVSS 6.6, NVIDIA Omniverse Nucleus · NVIDIA Omniverse Cache)
- [CVE-2022-29947](https://cve.now/CVE-2022-29947.md): Woodpecker before 0.15.1 allows XSS via build logs because web/src/components/repo/build/BuildLog.vue lacks escaping. (no CVSS, github.com/woodpecker-ci/woodpecker)
- [CVE-2022-25854](https://cve.now/CVE-2022-25854.md): Cross-site Scripting (XSS) (CVSS 5.4, @yaireo/tagify)
- [CVE-2022-29945](https://cve.now/CVE-2022-29945.md): DJI drone devices sold in 2017 through 2022 broadcast unencrypted information about the drone operator's physical location via the AeroScope (CVSS 4.0)
- [CVE-2022-1543](https://cve.now/CVE-2022-1543.md): Improper handling of Length parameter in erudika/scoold (CVSS 9.3, erudika/scoold)
- [CVE-2022-29451](https://cve.now/CVE-2022-29451.md): WordPress Rara One Click Demo Import plugin \<= 1.2.9 - Cross-Site Request Forgery (CSRF) leads to Arbitrary File Upload vulnerability (CVSS 8.8, Raratheme Rara One Click Demo Import)
- [CVE-2022-29414](https://cve.now/CVE-2022-29414.md): WordPress Subscribe To Comments Reloaded plugin \<= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities (CVSS 5.4, WPKube Subscribe To Comments Reloaded)
- [CVE-2021-36207](https://cve.now/CVE-2021-36207.md): Metasys privilege management (CVSS 8.8, Johnson Controls Metasys ADS/ADX/OAS server)
- [CVE-2022-29934](https://cve.now/CVE-2022-29934.md): USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec. (no CVSS)
- [CVE-2022-29935](https://cve.now/CVE-2022-29935.md): USU Oracle Optimization before 5.17.5 allows attackers to discover the quantum credentials via an agent-installer download. (no CVSS)
- [CVE-2022-29936](https://cve.now/CVE-2022-29936.md): USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upl (no CVSS)
- [CVE-2022-29937](https://cve.now/CVE-2022-29937.md): USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands (no CVSS)
- [CVE-2021-4206](https://cve.now/CVE-2021-4206.md): A flaw was found in the QXL display device emulation in QEMU. (no CVSS, QEMU)
- [CVE-2022-28994](https://cve.now/CVE-2022-28994.md): Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request. (no CVSS)
- [CVE-2022-28480](https://cve.now/CVE-2022-28480.md): ALLMediaServer 1.6 is vulnerable to Buffer Overflow via MediaServer.exe. (no CVSS)
- [CVE-2022-1403](https://cve.now/CVE-2022-1403.md): Delta Electronics ASDA-Soft Out-of-bounds Write (CVSS 7.8, Delta Electronics ASDA-Soft)
- [CVE-2022-1402](https://cve.now/CVE-2022-1402.md): Delta Electronics ASDA-Soft Out-of-bounds Read (CVSS 7.8, Delta Electronics ASDA-Soft)
- [CVE-2021-4207](https://cve.now/CVE-2021-4207.md): A flaw was found in the QXL display device emulation in QEMU. (no CVSS, QEMU)
- [CVE-2022-0984](https://cve.now/CVE-2022-0984.md): Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile f (no CVSS, moodle · moodle/moodle)
- [CVE-2021-39082](https://cve.now/CVE-2021-39082.md): IBM UrbanCode Deploy (UCD) 7.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiti (CVSS 5.9, IBM UrbanCode Deploy)
- [CVE-2022-0985](https://cve.now/CVE-2022-0985.md): Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary m (no CVSS, moodle · moodle/moodle)
- [CVE-2022-1353](https://cve.now/CVE-2022-1353.md): A vulnerability was found in the pfkey\_register function in net/key/af\_key.c in the Linux kernel. (no CVSS, Linux kernel)
- [CVE-2022-1227](https://cve.now/CVE-2022-1227.md): A privilege escalation flaw was found in Podman. (no CVSS, psgo · github.com/containers/podman/v3 +1)
- [CVE-2022-1249](https://cve.now/CVE-2022-1249.md): A NULL pointer dereference flaw was found in pesign's cms\_set\_pw\_data() function of the cms\_common.c file. (no CVSS, pesign)
- [CVE-2022-1195](https://cve.now/CVE-2022-1195.md): A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. (no CVSS, kernel)
- [CVE-2022-1114](https://cve.now/CVE-2022-1114.md): A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. (no CVSS, ImageMagick)
- [CVE-2022-1048](https://cve.now/CVE-2022-1048.md): A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw\_params. (no CVSS, kernel)
- [CVE-2021-43938](https://cve.now/CVE-2021-43938.md): Elcomplus SmartPTT SCADA Server Information Exposure (CVSS 8.1, Elcomplus SmartPTT SCADA Server)
- [CVE-2021-43937](https://cve.now/CVE-2021-43937.md): Elcomplus SmartPTT SCADA Server Cross-site Request Forgery (CVSS 7.6, Elcomplus SmartPTT SCADA Server)
- [CVE-2022-29856](https://cve.now/CVE-2022-29856.md): A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages. (no CVSS)
- [CVE-2022-28452](https://cve.now/CVE-2022-28452.md): Red Planet Laundry Management System 1.0 is vulnerable to SQL Injection. (no CVSS)
- [CVE-2022-24900](https://cve.now/CVE-2022-24900.md): Absolute Path Traversal due to incorrect use of \`send\_file\` call in Piano LED Visualizer (CVSS 9.9, onlaj Piano-LED-Visualizer)
- [CVE-2021-41948](https://cve.now/CVE-2021-41948.md): A cross-site scripting (XSS) vulnerability exists in the "contact us" plugin for Subrion CMS \<= 4.2.1 version via "List of subjects". (no CVSS, intelliants/subrion)
- [CVE-2022-1536](https://cve.now/CVE-2022-1536.md): automad Dashboard cross site scripting (CVSS 3.5, automad)
- [CVE-2021-44596](https://cve.now/CVE-2021-44596.md): Wondershare LTD Dr. (no CVSS)
- [CVE-2021-44595](https://cve.now/CVE-2021-44595.md): Wondershare Dr. (no CVSS)
- [CVE-2021-41942](https://cve.now/CVE-2021-41942.md): The Magic CMS MSVOD v10 video system has a SQL injection vulnerability. (no CVSS)
- [CVE-2022-1533](https://cve.now/CVE-2022-1533.md): Buffer Over-read in bfabiszewski/libmobi (CVSS 6.6, bfabiszewski/libmobi)
- [CVE-2022-1534](https://cve.now/CVE-2022-1534.md): Buffer Over-read at parse\_rawml.c:1416 in bfabiszewski/libmobi (CVSS 6.6, bfabiszewski/libmobi)
- [CVE-2022-1531](https://cve.now/CVE-2022-1531.md): SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in rtxteam/rtx (CVSS 10.0, rtxteam/rtx)
- [CVE-2022-1530](https://cve.now/CVE-2022-1530.md): Cross-site Scripting (XSS) in livehelperchat/livehelperchat (CVSS 3.8, livehelperchat/livehelperchat · remdex/livehelperchat)
- [CVE-2022-1526](https://cve.now/CVE-2022-1526.md): Emlog Pro POST Parameter cross site scripting (CVSS 3.5, Emlog Pro)
- [CVE-2022-29903](https://cve.now/CVE-2022-29903.md): The Private Domains extension for MediaWiki through 1.37.2 (before 1ad65d4c1c199b375ea80988d99ab51ae068f766) allows CSRF for editing pages t (no CVSS)
- [CVE-2022-29904](https://cve.now/CVE-2022-29904.md): The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with cer (no CVSS)
- [CVE-2022-29905](https://cve.now/CVE-2022-29905.md): The FanBoxes extension for MediaWiki through 1.37.2 (before 027ffb0b9d6fe0d823810cf03f5b562a212162d4) allows Special:UserBoxes CSRF. (no CVSS)
- [CVE-2022-29906](https://cve.now/CVE-2022-29906.md): The admin API module in the QuizGame extension for MediaWiki through 1.37.2 (before 665e33a68f6fa1167df99c0aa18ed0157cdf9f66) omits a check (no CVSS)
- [CVE-2022-29907](https://cve.now/CVE-2022-29907.md): The Nimbus skin for MediaWiki through 1.37.2 (before 6f9c8fb868345701d9544a54d9752515aace39df) allows XSS in Advertise link messages. (no CVSS)
- [CVE-2021-3982](https://cve.now/CVE-2021-3982.md): Linux distributions using CAP\_SYS\_NICE for gnome-shell may be exposed to a privilege escalation issue. (no CVSS, gnome-shell)
- [CVE-2022-1015](https://cve.now/CVE-2022-1015.md): A flaw was found in the Linux kernel in linux/net/netfilter/nf\_tables\_api.c of the netfilter subsystem. (no CVSS, kernel)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.