2022 CVEs (page 23)
Page 23 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-49039 | Medium | 6.7 | 2024-09-26 | Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator pri… |
CVE-2022-49038 | High | 7.8 | 2024-09-26 | Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users… |
CVE-2022-49037 | Medium | 6.5 | 2024-09-26 | Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client before 3.3.0-15082 allows remote authentica… |
CVE-2022-43845 | Low | 3.7 | 2024-09-25 | IBM Aspera Console 3.4.0 through 3.4.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote… |
CVE-2022-2439 | High | 7.2 | 2024-09-24 | The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted input via the 'uploa… |
CVE-2022-48945 | High | 7.8 | 2024-09-23 | In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to ha… |
CVE-2022-4533 | Medium | 5.3 | 2024-09-19 | The Limit Login Attempts Plus plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1.0. This is due to insufficient re… |
CVE-2022-25770 | High | 7.8 | 2024-09-18 | Mautic allows you to update the application via an upgrade script. The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation. Th… |
CVE-2022-25768 | High | 7.0 | 2024-09-18 | The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to t… |
CVE-2022-25777 | Medium | 6.5 | 2024-09-18 | Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side… |
CVE-2022-25776 | High | 8.3 | 2024-09-18 | Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be prevented from accessing. Users could… |
CVE-2022-25775 | Medium | 6.6 | 2024-09-18 | Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and al… |
CVE-2022-25774 | Medium | 4.8 | 2024-09-18 | Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject mali… |
CVE-2022-25769 | High | 7.2 | 2024-09-18 | ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the applicatio… |
CVE-2022-39068 | Medium | 4.5 | 2024-09-18 | There is a buffer overflow vulnerability in ZTE MF296R. Due to insufficient validation of the SMS parameter length, an authenticated attacker could use the vul… |
CVE-2022-3459 | Medium | 5.3 | 2024-09-14 | The WooCommerce Multiple Free Gift plugin for WordPress is vulnerable to gift manipulation in all versions up to, and including, 1.2.3. This is due to plugin n… |
CVE-2022-2446 | High | 7.2 | 2024-09-13 | The WP Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'current_theme_root' parameter in versions up to, and including… |
CVE-2022-26322 | Medium | 4.9 | 2024-09-12 | Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in OpenText™ Identity Manager REST Driver. Th… |
CVE-2022-45856 | Medium | 4.8 | 2024-09-10 | An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 al… |
CVE-2022-27592 | Medium | 6.7 | 2024-09-06 | An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated… |
CVE-2022-4529 | Medium | 5.3 | 2024-09-05 | The Security, Antivirus, Firewall – S.A.F plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.3.5. This is due to ins… |
CVE-2022-3556 | Medium | 4.4 | 2024-09-05 | The Cab fare calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vehicle title setting in versions up to, and including, 1.1.6… |
CVE-2022-4539 | Medium | 5.3 | 2024-08-31 | The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1.2. This is due to insufficient res… |
CVE-2022-4536 | Medium | 5.3 | 2024-08-31 | The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restric… |
CVE-2022-4100 | Medium | 5.3 | 2024-08-31 | The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking fo… |
CVE-2022-48944 | Medium | 5.5 | 2024-08-30 | In the Linux kernel, the following vulnerability has been resolved: sched: Fix yet more sched_fork() races Where commit 4ef0c5c6b5ba ("kernel/sched: Fix sche… |
CVE-2022-2440 | High | 7.2 | 2024-08-29 | The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array' parameter in versions up to, and including 2.8… |
CVE-2022-39997 | High | 8.0 | 2024-08-27 | A weak password requirement issue was discovered in Teldats Router RS123, RS123w allows a remote attacker to escalate privileges |
CVE-2022-39996 | Medium | 4.8 | 2024-08-27 | Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to the upgrade/query.p… |
CVE-2022-43915 | Medium | 6.8 | 2024-08-24 | IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12… |
CVE-2022-48943 | High | 7.1 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: make apf token non-zero to fix bug In current async pagefault logic, when a… |
CVE-2022-48942 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: hwmon: Handle failure to register sensor with thermal zone correctly If an attempt is mad… |
CVE-2022-48941 | High | 8.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: ice: fix concurrent reset and removal of VFs Commit c503e63200c6 ("ice: Stop processing V… |
CVE-2022-48940 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to incorrect copy_map_value When both bpf_spin_lock and bpf_timer are… |
CVE-2022-48939 | Low | 3.3 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf… |
CVE-2022-48938 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset lik… |
CVE-2022-48937 | Low | 3.3 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: io_uring: add a schedule point in io_add_buffers() Looping ~65535 times doing kmalloc() c… |
CVE-2022-48935 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unregister flowtable hooks on netns exit Unregister flowtable hooks… |
CVE-2022-48934 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() ida_simple_get() returns… |
CVE-2022-48933 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memory leak during stateful obj update stateful objects can be… |
CVE-2022-48932 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32… |
CVE-2022-48931 | Medium | 4.7 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs_{,un}register_subsystem() When configfs_register_subsyst… |
CVE-2022-48930 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ib_srp: Fix a deadlock Remove the flush_workqueue(system_long_wq) call since flushin… |
CVE-2022-48929 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to out of bounds access into reg2btf_ids. When commit e6ac2450d6de ("b… |
CVE-2022-48928 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: men_z188_adc: Fix a resource leak in an error handling path If iio_device_regis… |
CVE-2022-48927 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: tsc2046: fix memory corruption by preventing array overflow On one side we have… |
CVE-2022-48926 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: add spinlock for rndis response list There's no lock for rndis respon… |
CVE-2022-48925 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.src_addr outside state checks If the state is not idle… |
CVE-2022-48924 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400_notify() It is easy to hit the below memory… |
CVE-2022-48923 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segment Compressed length can be corrupted… |
CVE-2022-48922 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: riscv: fix oops caused by irqsoff latency tracer The trace_hardirqs_{on,off}() require th… |
CVE-2022-48921 | Medium | 4.7 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweight_entity Syzbot found a GPF in reweight_entity. This has… |
CVE-2022-48920 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: get rid of warning on transaction commit when using flushoncommit When using the f… |
CVE-2022-48919 | High | 8.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs_get_root() When cifs_get_root() fails… |
CVE-2022-48918 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: check debugfs_dir ptr before use When "debugfs=off" is used on the kernel c… |
CVE-2022-48916 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix double list_add when enabling VMD in scalable mode When enabling VMD and… |
CVE-2022-48915 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference Do not call get_trip_hyst() from… |
CVE-2022-48914 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: xen/netfront: destroy queues before real_num_tx_queues is zeroed xennet_destroy_queues()… |
CVE-2022-48913 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: blktrace: fix use after free for struct blk_trace When tracing the whole disk, 'dropped'… |
CVE-2022-48912 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: fix use-after-free in __nf_register_net_hook() We must not dereference @new_ho… |
CVE-2022-48911 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_hold() sid… |
CVE-2022-48910 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ensure we call ipv6_mc_down() at most once There are two reasons for addrconf_… |
CVE-2022-48909 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix connection leak There's a potential leak issue under following execution seq… |
CVE-2022-48908 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() During driver initializa… |
CVE-2022-48907 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: auxdisplay: lcd2s: Fix memory leak in ->remove() Once allocated the struct lcd2s_data is… |
CVE-2022-48906 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: mptcp: Correctly set DATA_FIN timeout when number of retransmits is large Syzkaller with… |
CVE-2022-48905 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: free reset-work-item when flushing Fix a tiny memory leak when flushing the rese… |
CVE-2022-48904 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix I/O page table memory leak The current logic updates the I/O page table mo… |
CVE-2022-48903 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() We ar… |
CVE-2022-48902 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not WARN_ON() if we have PageError set Whenever we do any extent buffer operati… |
CVE-2022-48901 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not start relocation until in progress drops are done We hit a bug with a recov… |
CVE-2022-26328 | | 2024-08-21 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText Performance Center on Windows allows Cros… | |
CVE-2022-26327 | | 2024-08-21 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allows Retrieve Embedded Sensitive Data.This… | |
CVE-2022-48899 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace can guess the handle value and try to r… |
CVE-2022-48898 | Medium | 4.7 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer There are… |
CVE-2022-48897 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: arm64/mm: fix incorrect file_map_count for invalid pmd The page table check trigger BUG_O… |
CVE-2022-48896 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix pci device refcount leak As the comment of pci_get_domain_bus_and_slot() says… |
CVE-2022-48895 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Don't unregister on shutdown Michael Walle says he noticed the following… |
CVE-2022-48894 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Don't unregister on shutdown Similar to SMMUv2, this driver calls iomm… |
CVE-2022-48893 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Cleanup partial engine discovery failures If we abort driver initialisation… |
CVE-2022-48892 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dup_user_cpus_ptr() Since commit 07ec77a1d4e8 ("sch… |
CVE-2022-48891 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: regulator: da9211: Use irq handler when ready If the system does not come from reset (lik… |
CVE-2022-48890 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM storvsc_queuecommand() m… |
CVE-2022-48889 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof-nau8825: fix module alias overflow The maximum name length for a platfor… |
CVE-2022-48888 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path of_icc_get() alloc resou… |
CVE-2022-48887 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Remove rcu locks from user resources User resource lookups used rcu to avoid… |
CVE-2022-48886 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ice: Add check for kzalloc Add the check for the return value of kzalloc in order to avoi… |
CVE-2022-48885 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix potential memory leak in ice_gnss_tty_write() The ice_gnss_tty_write() return di… |
CVE-2022-48884 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix command stats access after free Command may fail while driver is reloading… |
CVE-2022-48883 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to… |
CVE-2022-48882 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) … |
CVE-2022-48881 | High | 7.1 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix refcount leak in amd_pmc_probe pci_get_domain_bus_and_slot() takes… |
CVE-2022-48880 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: platform/surface: aggregator: Add missing call to ssam_request_sync_free() Although rare… |
CVE-2022-48879 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported… |
CVE-2022-48878 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Fix driver shutdown on closed serdev The driver shutdown callback (wh… |
CVE-2022-48876 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix initialization of rx->link and rx->link_sta There are some codepaths… |
CVE-2022-48875 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: sdata can be NULL during AMPDU start ieee80211_tx_ba_session_handle_start… |
CVE-2022-48874 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpc_map_find Currently, there is a race… |
CVE-2022-48873 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on creater_process and device_release Do not remove the m… |
CVE-2022-48872 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free race condition for maps It is possible that in between… |