2022 CVEs (page 20)
Page 20 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-49098 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix potential crash on module unload The vmbus driver relies on the p… |
CVE-2022-49097 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: NFS: Avoid writeback threads getting stuck in mempool_alloc() In a low memory situation… |
CVE-2022-49096 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: sfc: add missing xdp queue reinitialization After rx/tx ring buffer size is changed… |
CVE-2022-49095 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() The error handling path of t… |
CVE-2022-49094 | Critical | 9.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net/tls: fix slab-out-of-bounds bug in decrypt_internal The memory size of tls_ctx->rx.iv… |
CVE-2022-49093 | Critical | 9.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for page_pool fragment recycling Fix a use-after-free when using p… |
CVE-2022-49092 | High | 7.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix route with nexthop object delete warning FRR folks have hit a kernel warni… |
CVE-2022-49091 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/imx: Fix memory leak in imx_pd_connector_get_modes Avoid leaking the display mode var… |
CVE-2022-49090 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: arch/arm64: Fix topology initialization for core scheduling Arm64 systems rely on store_c… |
CVE-2022-49089 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition The documentation… |
CVE-2022-49088 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-ptp: Fix refcount leak in dpaa2_ptp_probe This node pointer is returned by of_find_… |
CVE-2022-49087 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix a race in rxrpc_exit_net() Current code can lead to the following race: CPU0… |
CVE-2022-49086 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix leak of nested actions While parsing user-provided actions, openvsw… |
CVE-2022-49085 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drbd: Fix five use after free bugs in get_initial_state In get_initial_state, it calls no… |
CVE-2022-49084 | High | 7.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: qede: confirm skb is allocated before using qede_build_skb() assumes build_skb() always w… |
CVE-2022-49083 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: iommu/omap: Fix regression in probe for NULL pointer dereference Commit 3f6634d997db ("io… |
CVE-2022-49082 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix use after free in _scsih_expander_node_remove() The function mpt3sas_t… |
CVE-2022-49081 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: highmem: fix checks in __kmap_local_sched_{in,out} When CONFIG_DEBUG_KMAP_LOCAL is enable… |
CVE-2022-49080 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix mpol_new leak in shared_policy_replace If mpol_new is allocated but not… |
CVE-2022-49079 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: traverse devices under chunk_mutex in btrfs_can_activate_zone btrfs_can_act… |
CVE-2022-49078 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: lz4: fix LZ4_decompress_safe_partial read out of bound When partialDecoding, it is EOF if… |
CVE-2022-49077 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) If an mremap… |
CVE-2022-49076 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Fix use-after-free bug for mm struct Under certain conditions, such as MPI_Abo… |
CVE-2022-49075 | High | 8.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extent_changeset->bytes_change… |
CVE-2022-49074 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3: Fix GICR_CTLR.RWP polling It turns out that our polling of RWP is totally… |
CVE-2022-49073 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: Fix crash due to OOB write the driver uses libata's "tag" values fro… |
CVE-2022-49072 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: gpio: Restrict usage of GPIO chip irq members before initialization GPIO chip irq members… |
CVE-2022-49071 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/panel: ili9341: fix optional regulator handling If the optional regulator lookup fail… |
CVE-2022-49070 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix unregistering of framebuffers without device OF framebuffers do not have an un… |
CVE-2022-49069 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw [Why] Below… |
CVE-2022-49068 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: btrfs: release correct delalloc amount in direct IO write path Running generic/406 causes… |
CVE-2022-49067 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit mpe: On 64-bit Book3E vmalloc s… |
CVE-2022-49066 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: veth: Ensure eth header is in skb's linear part After feeding a decapsulated packet to a… |
CVE-2022-49065 | High | 7.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix the svc_deferred_event trace class Fix a NULL deref crash that occurs when an… |
CVE-2022-49064 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: unmark inode in use in error path Unmark inode in use if error encountered. I… |
CVE-2022-49063 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ice: arfs: fix use-after-free when freeing @rx_cpu_rmap The CI testing bots triggered the… |
CVE-2022-49062 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix KASAN slab-out-of-bounds in cachefiles_set_volume_xattr Use the actual le… |
CVE-2022-49061 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link When using a fix… |
CVE-2022-49060 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix NULL pointer dereference in smc_pnet_find_ib() dev_name() was called with de… |
CVE-2022-49059 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: add flush_workqueue to prevent uaf Our detector found a concurrent use-after-fr… |
CVE-2022-49058 | Critical | 9.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/… |
CVE-2022-49057 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: block: null_blk: end timed out poll request When poll request is timed out, it is removed… |
CVE-2022-49055 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check for potential null return of kmalloc_array() As the kmalloc_array() may… |
CVE-2022-49054 | High | 7.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests hv_p… |
CVE-2022-49053 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmu_try_get_data_page() looks up pages under c… |
CVE-2022-49052 | High | 7.1 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mm: fix unexpected zeroed page mapping with zram swap Two processes under CLONE_VM clonin… |
CVE-2022-49051 | Medium | 6.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: Fix out-of-bounds accesses in RX fixup aqc111_rx_fixup() contains sever… |
CVE-2022-49050 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: memory: renesas-rpc-if: fix platform-device leak in error path Make sure to free the flas… |
CVE-2022-49049 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix panic when growing a memfd_secret When one tries to grow an existing me… |
CVE-2022-49048 | High | 7.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ipv6: fix panic when forwarding a pkt with no in6 dev kongweibin reported a kernel panic… |
CVE-2022-49047 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: ep93xx: clock: Fix UAF in ep93xx_clk_register_gate() arch/arm/mach-ep93xx/clock.c:154:2… |
CVE-2022-49046 | Medium | 5.5 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: i2c: dev: check return value when calling dev_set_name() If dev_set_name() fails, the dev… |
CVE-2022-49044 | High | 7.8 | 2025-02-26 | In the Linux kernel, the following vulnerability has been resolved: dm integrity: fix memory corruption when tag_size is less than digest size It is possible… |
CVE-2022-28339 | High | 7.3 | 2025-02-22 | Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker wit… |
CVE-2022-41545 | Medium | 6.4 | 2025-02-18 | The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 (and possibly others) authenticates users via basic authentication… |
CVE-2022-28693 | Medium | 4.7 | 2025-02-14 | Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to potentially enable information d… |
CVE-2022-26083 | High | 7.5 | 2025-02-14 | Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentiall… |
CVE-2022-31631 | Critical | 9.1 | 2025-02-12 | In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying… |
CVE-2022-37660 | Medium | 6.5 | 2025-02-11 | In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with… |
CVE-2022-3180 | Critical | 9.8 | 2025-02-11 | The WPGateway Plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.5. This allows unauthenticated attackers to create… |
CVE-2022-35202 | Medium | 5.1 | 2025-02-11 | A security issue in Sitevision version 10.3.1 and older allows a remote attacker, in certain (non-default) scenarios, to gain access to the private keys used f… |
CVE-2022-26389 | High | 7.7 | 2025-02-07 | An improper access control vulnerability may allow privilege escalation.This issue affects: * ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prio… |
CVE-2022-26388 | Medium | 6.4 | 2025-02-07 | A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; EL… |
CVE-2022-40916 | Critical | 9.8 | 2025-02-06 | Tiny File Manager v2.4.7 and below is vulnerable to session fixation. |
CVE-2022-40490 | Medium | 4.8 | 2025-02-06 | Tiny File Manager v2.4.7 and below was discovered to contain a Cross Site Scripting (XSS) vulnerability. This vulnerability allows attackers to execute arbitra… |
CVE-2022-31764 | High | 8.5 | 2025-02-06 | The Lite UI of Apache ShardingSphere ElasticJob-UI allows an attacker to perform RCE by constructing a special JDBC URL of H2 database. This issue affects Apac… |
CVE-2022-1736 | Critical | 9.8 | 2025-01-31 | Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default. |
CVE-2022-28653 | High | 7.5 | 2025-01-31 | Users can consume unlimited disk space in /var/crash |
CVE-2022-43916 | Medium | 6.8 | 2025-01-30 | IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2… |
CVE-2022-3365 | Critical | 9.8 | 2025-01-28 | Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a password, the Remote M… |
CVE-2022-31749 | Medium | 6.5 | 2025-01-28 | An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticate… |
CVE-2022-4975 | High | 8.9 | 2025-01-27 | A flaw was found in the Red Hat Advanced Cluster Security (RHACS) portal. When rendering a table view in the portal, for example, on any of the /main/configman… |
CVE-2022-49043 | High | 8.1 | 2025-01-26 | xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. |
CVE-2022-47090 | High | 7.8 | 2025-01-24 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b contains a buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c, check needed for num_exp_… |
CVE-2022-23439 | Medium | 4.7 | 2025-01-22 | A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, wh… |
CVE-2022-22491 | Medium | 5.5 | 2025-01-09 | IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2… |
CVE-2022-45186 | High | 8.1 | 2025-01-07 | An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of a database. |
CVE-2022-45185 | High | 8.8 | 2025-01-07 | An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve c… |
CVE-2022-41573 | Critical | 9.8 | 2025-01-07 | An issue was discovered in Ovidentia 8.3. The file upload feature does not prevent the uploading of executable files. A user can upload a .png file containing… |
CVE-2022-41572 | Critical | 9.8 | 2025-01-07 | An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be run as root. The atta… |
CVE-2022-22363 | Medium | 4.3 | 2025-01-07 | IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical e… |
CVE-2022-47601 | Medium | 5.3 | 2025-01-02 | Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects W… |
CVE-2022-45811 | Medium | 5.4 | 2025-01-02 | Missing Authorization vulnerability in WeyHan Ng Post Teaser.This issue affects Post Teaser: from n/a through 4.1.5. |
CVE-2022-49035 | Medium | 5.5 | 2025-01-02 | In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE I expect that the hardware will have li… |
CVE-2022-45830 | Medium | 6.5 | 2025-01-02 | Missing Authorization vulnerability in Analytify.This issue affects Analytify: from n/a through 4.2.3. |
CVE-2022-43476 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category allows Exploiting Incorrectly Configured Access Control S… |
CVE-2022-41995 | Medium | 4.3 | 2025-01-02 | Missing Authorization vulnerability in Galleryape Gallery Images Ape allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… |
CVE-2022-48470 | Medium | 4.0 | 2024-12-28 | Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access… |
CVE-2022-49034 | Medium | 5.5 | 2024-12-27 | In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK When CONFIG_CPUMASK_OFFSTACK and C… |
CVE-2022-21505 | Medium | 6.7 | 2024-12-24 | In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is di… |
CVE-2022-34159 | High | 7.5 | 2024-12-20 | Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device service exceptions. (Vulnerability ID… |
CVE-2022-32204 | High | 7.5 | 2024-12-20 | There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnerability may cause service abnormal. (Vul… |
CVE-2022-32203 | Critical | 9.8 | 2024-12-20 | There is a command injection vulnerability in Huawei terminal printer product. Successful exploitation could result in the highest privileges of the printer. (… |
CVE-2022-32144 | High | 8.6 | 2024-12-20 | There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to service abnormal. (Vulne… |
CVE-2022-27600 | Medium | 6.8 | 2024-12-19 | An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could al… |
CVE-2022-27595 | High | 7.8 | 2024-12-19 | An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers who have… |
CVE-2022-33954 | Medium | 4.6 | 2024-12-19 | IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 could allow a user with psychical access to the system to obtain sensitive information due to insuffi… |
CVE-2022-44520 | High | 7.8 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-44519 | Medium | 5.5 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |
CVE-2022-44518 | High | 7.8 | 2024-12-19 | Acrobat Reader DC version 22.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability… |