2022 CVEs (page 22)
Page 22 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30356 | Medium | 4.7 | 2024-10-25 | OvalEdge 5.2.8.0 and earlier is affected by a Privilege Escalation vulnerability via a POST request to /user/assignuserrole via the userid and role parameters… |
CVE-2022-30355 | Critical | 9.8 | 2024-10-25 | OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters… |
CVE-2022-30354 | High | 7.5 | 2024-10-25 | OvalEdge 5.2.8.0 and earlier is affected by a Sensitive Data Exposure vulnerability via a GET request to /user/getUserWithTeam. Authentication is required. The… |
CVE-2022-23862 | High | 7.8 | 2024-10-22 | A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Bec… |
CVE-2022-23861 | Medium | 5.4 | 2024-10-22 | Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the YSoft SafeQ web application can be used… |
CVE-2022-49033 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() Syzkaller rep… |
CVE-2022-49032 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw KASAN report out-of-bounds… |
CVE-2022-49031 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: iio: health: afe4403: Fix oob read in afe4403_read_raw KASAN report out-of-bounds read as… |
CVE-2022-49030 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: libbpf: Handle size overflow for ringbuf mmap The maximum size of ringbuf is 2GB on x86-6… |
CVE-2022-49029 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails Smatch report warning a… |
CVE-2022-49028 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ixgbevf: Fix resource leak in ixgbevf_init_module() ixgbevf_init_module() won't destroy t… |
CVE-2022-49027 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: iavf: Fix error handling in iavf_init_module() The iavf_init_module() won't destroy workq… |
CVE-2022-49026 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: e100: Fix possible use after free in e100_xmit_prepare In e100_xmit_prepare(), if we can'… |
CVE-2022-49025 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free when reverting termination table When having multiple dests… |
CVE-2022-49024 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods In m_can_pci_… |
CVE-2022-49023 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix buffer overflow in elem comparison For vendor elements, the code here… |
CVE-2022-49022 | High | 8.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration Fix possible out-of… |
CVE-2022-49021 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: phy: fix null-ptr-deref while probe() failed I got a null-ptr-deref report as follow… |
CVE-2022-49020 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net/9p: Fix a potential socket leak in p9_socket_open Both p9_fd_create_tcp() and p9_fd_c… |
CVE-2022-49019 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: nixge: fix NULL dereference In function nixge_hw_dma_bd_release() derefere… |
CVE-2022-49018 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix sleep in atomic at close time Matt reported a splat at msk close time: BU… |
CVE-2022-49017 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: tipc: re-fetch skb cb after tipc_msg_validate As the call trace shows, the original skb w… |
CVE-2022-49016 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: mdiobus: fix unbalanced node reference count I got the following report while doing… |
CVE-2022-49015 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: hsr: Fix potential use-after-free The skb is delivered to netif_rx() which may free… |
CVE-2022-49014 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix use-after-free in tun_detach() syzbot reported use-after-free in tun_detach… |
CVE-2022-49013 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: sctp: fix memory leak in sctp_stream_outq_migrate() When sctp_stream_outq_migrate() is ca… |
CVE-2022-49012 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix server->active leak in afs_put_server The atomic_read was accidentally replaced… |
CVE-2022-49011 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() As comment of pci_get_do… |
CVE-2022-49010 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Check for null before removing sysfs attrs If coretemp_add_core() gets… |
CVE-2022-49009 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus-ec-sensors) Add checks for devm_kcalloc As the devm_kcalloc may return NULL… |
CVE-2022-49008 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down In… |
CVE-2022-49007 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() Syzbot reported… |
CVE-2022-49006 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events hav… |
CVE-2022-49005 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Fix bounds check for _sx controls For _sx controls the semantics of the max fi… |
CVE-2022-49004 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: riscv: Sync efi page table's kernel mappings before switching The EFI page table is initi… |
CVE-2022-49003 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix SRCU protection of nvme_ns_head list Walking the nvme_ns_head siblings list is… |
CVE-2022-49002 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() for_each_pci_dev() is i… |
CVE-2022-49001 | High | 7.0 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: riscv: fix race when vmap stack overflow Currently, when detecting vmap stack overflow, r… |
CVE-2022-49000 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in has_external_pci() for_each_pci_dev() is impl… |
CVE-2022-48999 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference Gwa… |
CVE-2022-48998 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: powerpc/bpf/32: Fix Oops on tail call tests test_bpf tail call tests end up as: test_b… |
CVE-2022-48997 | Medium | 4.7 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: char: tpm: Protect tpm_pm_suspend with locks Currently tpm transactions are executed unco… |
CVE-2022-48996 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_… |
CVE-2022-48995 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send() There is a kmemleak when te… |
CVE-2022-48994 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event With clang's kerne… |
CVE-2022-48992 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-pcm: Add NULL check in BE reparenting Add NULL check in dpcm_be_reparent API, t… |
CVE-2022-48991 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths Any codepath that zaps p… |
CVE-2022-48990 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free during gpu recovery [Why] [ 754.862560] refcount_t: u… |
CVE-2022-48989 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: fscache: Fix oops due to race with cookie_lru and use_cookie If a cookie expires from the… |
CVE-2022-48988 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: memcg: fix possible use-after-free in memcg_write_event_control() memcg_write_event_contr… |
CVE-2022-48987 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: media: v4l2-dv-timings.c: fix too strict blanking sanity checks Sanity checks were added… |
CVE-2022-48986 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix gup_pud_range() for dax For dax pud, pud_huge() returns true on x86. So the f… |
CVE-2022-48985 | Critical | 9.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix race on per-CQ variable napi work_done After calling napi_complete_done()… |
CVE-2022-48984 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: can: slcan: fix freed work crash The LTP test pty03 is causing a crash in slcan: BUG: k… |
CVE-2022-48983 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: io_uring: Fix a null-ptr-deref in io_tctx_exit_cb() Syzkaller reports a NULL deref bug as… |
CVE-2022-48982 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix crash when replugging CSR fake controllers It seems fake CSR 5.0 clones ca… |
CVE-2022-48981 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Remove errant put in error path drm_gem_shmem_mmap() doesn't own this r… |
CVE-2022-48980 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing() The SJA1105 f… |
CVE-2022-48979 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix array index out of bound error in DCN32 DML [Why&How] LinkCapacitySu… |
CVE-2022-48978 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: HID: core: fix shift-out-of-bounds in hid_report_raw_event Syzbot reported shift-out-of-b… |
CVE-2022-48977 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: can: af_can: fix NULL pointer dereference in can_rcv_filter Analogue to commit 8aa59e3559… |
CVE-2022-48976 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable_offload: fix using __this_cpu_add in preemptible flow_offload_queue_… |
CVE-2022-48975 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix memory leak in gpiochip_setup_dev() Here is a backtrace report about memory… |
CVE-2022-48974 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: fix using __this_cpu_add in preemptible Currently in nf_conntrack_h… |
CVE-2022-48973 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: gpio: amd8111: Fix PCI device reference count leak for_each_pci_dev() is implemented by p… |
CVE-2022-48972 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() Kernel fault injection test… |
CVE-2022-48971 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix not cleanup led when bt_init fails bt_init() calls bt_leds_init() to regis… |
CVE-2022-48970 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Get user_ns from in_skb in unix_diag_get_exact(). Wei Chen reported a NULL deref… |
CVE-2022-48969 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: xen-netfront: Fix NULL sring after live migration A NAPI is setup for each network sring… |
CVE-2022-48968 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential memory leak in otx2_init_tc() In otx2_init_tc(), if rhashtabl… |
CVE-2022-48967 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Bounds check struct nfc_target arrays While running under CONFIG_FORTIFY_SOURCE… |
CVE-2022-48966 | High | 7.1 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: mvneta: Prevent out of bounds read in mvneta_config_rss() The pp->indir[0] value com… |
CVE-2022-48965 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: gpio/rockchip: fix refcount leak in rockchip_gpiolib_register() The node returned by of_g… |
CVE-2022-48964 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ravb: Fix potential use-after-free in ravb_rx_gbeth() The skb is delivered to napi_gro_re… |
CVE-2022-48963 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipc_mux_init() When failed to alloc ipc_mux->ul_adb.p… |
CVE-2022-48962 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hisi_femac_rx() The skb is delivered to n… |
CVE-2022-48961 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix unbalanced fwnode reference count in mdio_device_release() There is warnin… |
CVE-2022-48960 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: hisilicon: Fix potential use-after-free in hix5hd2_rx() The skb is delivered to napi… |
CVE-2022-48959 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions() When dsa_devlink_re… |
CVE-2022-48958 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ethernet: aeroflex: fix potential skb leak in greth_init_rings() The greth_init_rings() f… |
CVE-2022-48957 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_r… |
CVE-2022-48956 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid use-after-free in ip6_fragment() Blamed commit claimed rcu_read_lock() was he… |
CVE-2022-48955 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnet_open() When tb_ring_alloc_rx() failed in tbnet… |
CVE-2022-48954 | High | 8.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix use-after-free in hsci KASAN found that addr was dereferenced after br2dev… |
CVE-2022-48953 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: rtc: cmos: Fix event handler registration ordering issue Because acpi_install_fixed_event… |
CVE-2022-48952 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: PCI: mt7621: Add sentinel to quirks table Current driver is missing a sentinel in the str… |
CVE-2022-48951 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() The bounds checks in… |
CVE-2022-48950 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix perf_pending_task() UaF Per syzbot it is possible for perf_pending_task() to ru… |
CVE-2022-48949 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When a MAC address is not assigned to the VF… |
CVE-2022-48948 | High | 7.8 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Prevent buffer overflow in setup handler Setup function uvc_function_se… |
CVE-2022-48947 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending L2CAP_CONF_REQ packets, chan->num_conf_… |
CVE-2022-48946 | Medium | 5.5 | 2024-10-21 | In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent i… |
CVE-2022-4974 | Medium | 6.3 | 2024-10-16 | The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to… |
CVE-2022-4973 | Medium | 4.9 | 2024-10-16 | WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress… |
CVE-2022-4972 | High | 7.5 | 2024-10-16 | The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporti… |
CVE-2022-4971 | Medium | 6.1 | 2024-10-16 | The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter called via the 'heateor_sss_sharing_count'… |
CVE-2022-4534 | Medium | 5.3 | 2024-10-08 | The Limit Login Attempts (Spam Protection) plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.3. This is due to insu… |
CVE-2022-4541 | High | 7.2 | 2024-09-26 | The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP Header value in versions up to, and including, 1.0… |
CVE-2022-49041 | Medium | 4.4 | 2024-09-26 | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management functionality in Synology Drive Client before 3… |
CVE-2022-49040 | Medium | 4.4 | 2024-09-26 | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functionality in Synology Drive Client before 3.4… |