04/04/2022 11:19 AM EDT
Original release date: April 4, 2022
High Vulnerabilities
| Primary Vendor — Product |
Description | Published | CVSS Score | Source & Patch Info |
|---|---|---|---|---|
| genians — genian_nac | An remote code execution vulnerability due to SSTI vulnerability and insufficient file name parameter validation was discovered in Genian NAC. Remote attackers are able to execute arbitrary malicious code with SYSTEM privileges on all connected nodes in NAC through this vulnerability. | 2022-03-25 | 10 | CVE-2021-26622 MISC |
| dlink — dap-1360f1_firmware | In DLink DAP-1360 F1 firmware version <=v6.10 in the “webupg” binary, an attacker can use the “file” parameter to execute arbitrary system commands when the parameter is “name=deleteFile” after being authorized. | 2022-03-27 | 10 | CVE-2021-44127 MISC MISC |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_hierarchyHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-25880 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-25980 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_dmdsetHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-26013 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-26059 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetLatestDemandNode and GetDemandAnalysisData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-26065 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerPage_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-26069 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_hierarchyHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-26338 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_eccoefficientHandler. |
2022-03-29 | 10 | CVE-2022-26349 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-26514 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialogECC.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-26666 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetDemandAnalysisData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-26667 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-26836 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_HandlerTag_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-26887 CONFIRM |
| deltaww — diaenergie | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. | 2022-03-29 | 10 | CVE-2022-27175 CONFIRM |
| netgear — r8500_firmware | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to password.cgi. | 2022-03-26 | 9 | CVE-2022-27945 MISC |
| netgear — r8500_firmware | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to admin_account.cgi. | 2022-03-26 | 9 | CVE-2022-27946 MISC |
| netgear — r8500_firmware | NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the ipv6_fix.cgi ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, or ipv6_lan_length parameter. | 2022-03-26 | 9 | CVE-2022-27947 MISC |
| cef — fortessa_ftbtld_firmware | Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attacker to disable the lock via an unauthenticated edit to the lock name. | 2022-03-25 | 8.5 | CVE-2021-44905 MISC MISC |
| impresscms — impresscms | ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection. | 2022-03-28 | 7.5 | CVE-2021-26599 MISC MISC MISC MISC |
| impresscms — impresscms | ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==). | 2022-03-28 | 7.5 | CVE-2021-26600 MISC MISC MISC MISC |
| netu — mex01_firmware | An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy() function. | 2022-03-25 | 7.5 | CVE-2021-26621 MISC |
| predic8 — soa_model | An XML External Entity (XXE) vulnerability exists in all versions of soa-model (as of 11.01/2021) in the WSDLParser function. | 2022-03-25 | 7.5 | CVE-2021-43090 MISC |
| totolink — t10_v2_firmware | Two Buffer Overflow vulnerabilities exists in T10 V2_Firmware V4.1.8cu.5207_B20210320 in the http_request_parse function when processing host data in the HTTP request process. | 2022-03-25 | 7.5 | CVE-2021-43636 MISC |
| glpi-project — glpi | A SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in plugins/ramo/ramoapirest.php/ |
2022-03-28 | 7.5 | CVE-2021-44617 MISC |
| sophos — sfos | An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older. | 2022-03-25 | 7.5 | CVE-2022-1040 CONFIRM |
| sonicwall — sonicos | A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in code execution in the firewall. | 2022-03-25 | 7.5 | CVE-2022-22274 CONFIRM |
| synology — diskstation_manager | Buffer copy without checking size of input (‘Classic Buffer Overflow’) vulnerability in Authentication functionality in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors. | 2022-03-25 | 7.5 | CVE-2022-22687 CONFIRM |
| westerndigital — my_cloud_pr2100_firmware | The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code. | 2022-03-25 | 7.5 | CVE-2022-22995 MISC |
| tuzicms — tuzicms | TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\ |
2022-03-28 | 7.5 | CVE-2022-23882 MISC |
| deno — deno | Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 (inclusive) are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permission checks and execute arbitrary shell code. This vulnerability does not affect users of Deno Deploy. The vulnerability has been patched in Deno 1.20.3. There is no workaround. All users are recommended to upgrade to 1.20.3 immediately. | 2022-03-25 | 7.5 | CVE-2022-24783 CONFIRM |
| notable — notable | Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injected into the Title text field. | 2022-03-27 | 7.5 | CVE-2022-26198 MISC |
| marky_project — marky | Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE) vulnerability via the Display text fields. This vulnerability allows attackers to execute arbitrary code via injection of a crafted payload. | 2022-03-27 | 7.5 | CVE-2022-26205 MISC |
| dlink — dir-820l_firmware | D-Link DIR-820L 1.05B03 was discovered to contain a remote command execution (RCE) vulnerability via the Device Name parameter in /lan.asp. | 2022-03-28 | 7.5 | CVE-2022-26258 MISC MISC MISC MISC |
| xiaohuanxiong_project — xiaohuanxiong | Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php. | 2022-03-28 | 7.5 | CVE-2022-26268 MISC |
| eyoucms — eyoucms | EyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading to payment logic vulnerabilities. | 2022-03-28 | 7.5 | CVE-2022-26273 MISC |
| gradle — enterprise | Gradle Enterprise before 2022.1 allows remote code execution if the installation process did not specify an initial configuration file. The configuration allows certain anonymous access to administration and an API. | 2022-03-25 | 7.5 | CVE-2022-27919 MISC |
Medium Vulnerabilities
| Primary Vendor — Product |
Description | Published | CVSS Score | Source & Patch Info |
|---|---|---|---|---|
| mruby — mruby | User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2. | 2022-03-26 | 6.8 | CVE-2022-1071 CONFIRM MISC |
| typesettercms — typesetter | TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is exploited via a crafted POST request. | 2022-03-25 | 6.8 | CVE-2022-25523 MISC MISC MISC |
| broadcom — tcpreplay | tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c. | 2022-03-26 | 6.8 | CVE-2022-27940 MISC |
| broadcom — tcpreplay | tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c. | 2022-03-26 | 6.8 | CVE-2022-27941 MISC |
| broadcom — tcpreplay | tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c. | 2022-03-26 | 6.8 | CVE-2022-27942 MISC |
| linux — linux_kernel | An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system. | 2022-03-25 | 6.6 | CVE-2022-0995 MISC MISC |
| solarwinds — webhelpdesk | SolarWinds received a report of a vulnerability related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent the misuse of this input in the future. | 2022-03-25 | 6.5 | CVE-2021-35254 MISC MISC |
| diyhi — bbs | A Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction.javawhich could let a malicoius user execute arbitrary code. | 2022-03-28 | 6.5 | CVE-2021-43097 MISC |
| diyhi — bbs | A File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function. | 2022-03-28 | 6.5 | CVE-2021-43098 MISC |
| diyhi — bbs | A File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction. |
2022-03-28 | 6.5 | CVE-2021-43101 MISC |
| diyhi — bbs | A File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. | 2022-03-28 | 6.5 | CVE-2021-43102 MISC |
| diyhi — bbs | A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code. | 2022-03-28 | 6.5 | CVE-2021-43103 MISC |
| moodle — moodle | An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default. | 2022-03-25 | 6.5 | CVE-2022-0983 MISC FEDORA |
| clusterlabs — pcs | A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login. | 2022-03-25 | 6.5 | CVE-2022-1049 MISC |
| fork-cms — fork_cms | SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1. | 2022-03-25 | 6.5 | CVE-2022-1064 MISC CONFIRM |
| synology — diskstation_manager | Improper neutralization of special elements used in a command (‘Command Injection’) vulnerability in File service functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors. | 2022-03-25 | 6.5 | CVE-2022-22688 CONFIRM |
| mruby — mruby | use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2. | 2022-03-27 | 6.4 | CVE-2022-1106 MISC CONFIRM |
| python — pillow | Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled. | 2022-03-28 | 6.4 | CVE-2022-24303 CONFIRM MISC |
| alf-banco — alf-banco | ALF-BanCO v8.2.5 and below was discovered to use a hardcoded password to encrypt the SQLite database containing the user’s data. Attackers who are able to gain remote or local access to the system are able to read and modify the data. | 2022-03-25 | 6.4 | CVE-2022-25577 MISC |
| duckduckgo — duckduckgo | The DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the JavaScript window.open function (used to open a secondary browser window). This could be exploited by tricking users into supplying sensitive information such as credentials, because the address bar would display a legitimate URL, but content would be hosted on the attacker’s web site. | 2022-03-25 | 5.8 | CVE-2021-44683 MISC |
| tinyrise — tinyshop | A File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers\admin.php, which could let a malicious user delete any file such as install.lock to reinstall cms. | 2022-03-25 | 5.5 | CVE-2020-21554 MISC MISC MISC MISC |
| impresscms — impresscms | ImpressCMS before 1.4.3 allows libraries/image-editor/image- |
2022-03-28 | 5.5 | CVE-2021-26601 MISC MISC MISC MISC |
| zlib — zlib | zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. | 2022-03-25 | 5 | CVE-2018-25032 MISC MISC MLIST MLIST MISC CONFIRM MISC |
Share this:
Discover more from #News247WorldPress
Subscribe to get the latest posts sent to your email.