04/11/2022 07:32 AM EDT
Original release date: April 11, 2022
High Vulnerabilities
| Primary Vendor — Product |
Description | Published | CVSS Score | Source & Patch Info |
|---|---|---|---|---|
| escanav — escan_anti-virus | An local privilege escalation vulnerability due to a “runasroot” command in eScan Anti-Virus. This vulnerability is due to invalid arguments and insufficient execution conditions related to “runasroot” command. This vulnerability can induce remote attackers to exploit root privileges by manipulating parameter values. | 2022-04-01 | 10 | CVE-2021-26624 MISC |
| pagekit — pagekit | pagekit all versions, as of 15-10-2021, is vulnerable to SQL Injection via Comment listing. | 2022-04-01 | 10 | CVE-2021-44135 MISC |
| allmediaserver — allmediaserver | Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long string to TCP port 888, a related issue to CVE-2017-17932. | 2022-04-03 | 10 | CVE-2022-28381 MISC MISC |
| qualcomm — apq8096au_firmware | An Out of Bounds read may potentially occur while processing an IBSS beacon, in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music | 2022-04-01 | 9.4 | CVE-2021-35117 CONFIRM |
| dell — wyse_management_suite | Dell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload vulnerability. A malicious user with admin privileges can exploit this vulnerability in order to execute arbitrary code on the system. | 2022-04-01 | 9 | CVE-2022-23155 CONFIRM |
| hitrontech — chita_firmware | Hitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS ddnsUsername field. | 2022-04-01 | 9 | CVE-2022-25017 MISC |
| idearespa — reftree | An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by using UploadDwg to upload a crafted aspx file to the web root, and then visiting the URL for this aspx resource. | 2022-04-03 | 9 | CVE-2022-27249 MISC MISC |
| qualcomm — ar8035_firmware | Possible assertion due to improper validation of invalid NR CSI-IM resource configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile | 2022-04-01 | 7.8 | CVE-2021-30328 CONFIRM |
| qualcomm — ar8035_firmware | Possible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile | 2022-04-01 | 7.8 | CVE-2021-30329 CONFIRM |
| oppo — quick_app | A command injection vulerability found in quick game engine allows arbitrary remote code in quick app. Allows remote attacke0rs to gain arbitrary code execution in quick game engine | 2022-04-01 | 7.5 | CVE-2021-23247 MISC |
| bandisoft — bandizip | A remote code execution vulnerability due to incomplete check for ‘xheader_decode_path_record’ function’s parameter length value in the ark library. Remote attackers can induce exploit malicious code using this function. | 2022-04-01 | 7.5 | CVE-2021-26623 MISC |
| philips — myvue | Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product. | 2022-04-01 | 7.5 | CVE-2021-27497 CONFIRM CONFIRM |
| philips — myvue | Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities. | 2022-04-01 | 7.5 | CVE-2021-27501 CONFIRM CONFIRM |
| auvesy-mdt — autosave | An attacker could leverage an API to pass along a malicious file that could then manipulate the process creation command line in MDT AutoSave versions prior to v6.02.06 and run a command line argument. This could then be leveraged to run a malicious process. | 2022-04-01 | 7.5 | CVE-2021-32933 CONFIRM |
| cocoapods — cocoapods-downloader | The package cocoapods-downloader before 1.6.2 are vulnerable to Command Injection via hg argument injection. When calling the download function (when using hg), the url (and/or revision, tag, branch) is passed to the hg clone command in a way that additional flags can be set. The additional flags can be used to perform a command injection. | 2022-04-01 | 7.5 | CVE-2022-21223 MISC MISC |
| ui — ua_lite_firmware | A buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware (Version 3.8.28.24 and earlier) allows a malicious actor who has gained access to a network to control all connected UA devices. This vulnerability is fixed in Version 3.8.31.13 and later. | 2022-04-01 | 7.5 | CVE-2022-22570 MISC |
| vmware — spring_cloud_function | In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources. | 2022-04-01 | 7.5 | CVE-2022-22963 MISC CISCO CONFIRM |
| vmware — spring_framework | A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it. | 2022-04-01 | 7.5 | CVE-2022-22965 MISC CISCO CONFIRM |
| simple-git_project — simple-git | The package simple-git before 3.5.0 are vulnerable to Command Injection due to an incomplete fix of [CVE-2022-24433](https:// |
2022-04-01 | 7.5 | CVE-2022-24066 CONFIRM CONFIRM CONFIRM CONFIRM |
| cocoapods — cocoapods-downloader | The package cocoapods-downloader before 1.6.0, from 1.6.2 and before 1.6.3 are vulnerable to Command Injection via git argument injection. When calling the Pod::Downloader.preprocess_ |
2022-04-01 | 7.5 | CVE-2022-24440 MISC MISC MISC |
| kopano — groupware_core | An issue in provider/libserver/ECKrbAuth. |
2022-04-01 | 7.5 | CVE-2022-26562 MISC MISC |
| kaspersky — anti-virus | Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in a data parsing module that potentially allowed an attacker to execute arbitrary code. The fix was delivered automatically. Credits: Georgy Zaytsev (Positive Technologies). | 2022-04-01 | 7.5 | CVE-2022-27534 MISC |
| qualcomm — aqt1000_firmware | Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking | 2022-04-01 | 7.2 | CVE-2021-1942 CONFIRM |
| qualcomm — ar8035_firmware | Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking | 2022-04-01 | 7.2 | CVE-2021-1950 CONFIRM |
| belden — tofino_xenon_security_ |
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, physically proximate attackers can execute code via a crafted file on a USB stick. | 2022-04-03 | 7.2 | CVE-2021-30061 MISC CONFIRM |
| belden — tofino_xenon_security_ |
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an arbitrary firmware image can be loaded because firmware signature verification (for a USB stick) can be bypassed. NOTE: this issue exists because of an incomplete fix of CVE-2017-11400. | 2022-04-03 | 7.2 | CVE-2021-30066 MISC CONFIRM |
| qualcomm — qca6696_firmware | Possible buffer overflow due to lack of input IB amount validation while processing the user command in Snapdragon Auto | 2022-04-01 | 7.2 | CVE-2021-35089 CONFIRM |
| qualcomm — ar8035_firmware | Possible out of bound write due to improper validation of number of timer values received from firmware while syncing timers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking | 2022-04-01 | 7.2 | CVE-2021-35103 CONFIRM |
| qualcomm — apq8009w_firmware | Possible out of bounds access due to improper input validation during graphics profiling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 2022-04-01 | 7.2 | CVE-2021-35105 CONFIRM |
| qualcomm — aqt1000_firmware | Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables | 2022-04-01 | 7.2 | CVE-2021-35106 CONFIRM |
| qualcomm — sd_8_gen1_5g_firmware | Possible buffer overflow to improper validation of hash segment of file while allocating memory in Snapdragon Connectivity, Snapdragon Mobile | 2022-04-01 | 7.2 | CVE-2021-35110 CONFIRM |
| dell — alienware_update | Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.5 contain a Local Privilege Escalation Vulnerability in the Advanced Driver Restore component. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation. | 2022-04-01 | 7.2 | CVE-2022-24426 CONFIRM |
Medium Vulnerabilities
| Primary Vendor — Product |
Description | Published | CVSS Score | Source & Patch Info |
|---|---|---|---|---|
| belden — tofino_xenon_security_ |
On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance, an SSH login can succeed with hardcoded default credentials (if the device is in the uncommissioned state). | 2022-04-03 | 6.8 | CVE-2021-30064 MISC CONFIRM |
| google — chrome | Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0452 MISC MISC |
| google — chrome | Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0453 MISC MISC |
| google — chrome | Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0454 MISC MISC |
| google — chrome | Use after free in Web Search in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via profile destruction. | 2022-04-05 | 6.8 | CVE-2022-0456 MISC MISC |
| google — chrome | Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0457 MISC MISC |
| google — chrome | Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0458 MISC MISC |
| google — chrome | Use after free in Screen Capture in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process and convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0459 MISC MISC |
| google — chrome | Use after free in Window Dialogue in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0460 MISC MISC |
| google — chrome | Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. | 2022-04-05 | 6.8 | CVE-2022-0463 MISC MISC |
| google — chrome | Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. | 2022-04-05 | 6.8 | CVE-2022-0464 MISC MISC |
| google — chrome | Use after free in Extensions in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via user interaction. | 2022-04-05 | 6.8 | CVE-2022-0465 MISC MISC |
| google — chrome | Use after free in Payments in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0468 MISC MISC |
| google — chrome | Use after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific interactions to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0469 MISC MISC |
| google — chrome | Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0470 MISC MISC |
| google — chrome | Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0604 MISC MISC |
| google — chrome | Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0605 MISC MISC |
| google — chrome | Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0606 MISC MISC |
| google — chrome | Use after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0607 MISC MISC |
| google — chrome | Integer overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0608 MISC MISC |
| google — chrome | Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0609 MISC MISC |
| google — chrome | Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0610 MISC MISC |
| google — chrome | Heap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0789 MISC MISC |
| google — chrome | Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page. | 2022-04-05 | 6.8 | CVE-2022-0790 MISC MISC |
| google — chrome | Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via user interactions. | 2022-04-05 | 6.8 | CVE-2022-0791 MISC MISC |
| google — chrome | Use after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. | 2022-04-05 |
Share this:
Discover more from #News247WorldPress
Subscribe to get the latest posts sent to your email.