2022 CVEs (page 23)
Page 23 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4529 | Medium | 5.3 | 2024-09-05 | The Security, Antivirus, Firewall – S.A.F plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.3.5. This is due to ins… |
CVE-2022-3556 | Medium | 4.4 | 2024-09-05 | The Cab fare calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vehicle title setting in versions up to, and including, 1.1.6… |
CVE-2022-4539 | Medium | 5.3 | 2024-08-31 | The Web Application Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1.2. This is due to insufficient res… |
CVE-2022-4536 | Medium | 5.3 | 2024-08-31 | The IP Vault – WP Firewall plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 1.1. This is due to insufficient restric… |
CVE-2022-4100 | Medium | 5.3 | 2024-08-31 | The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking fo… |
CVE-2022-48944 | Medium | 5.5 | 2024-08-30 | In the Linux kernel, the following vulnerability has been resolved: sched: Fix yet more sched_fork() races Where commit 4ef0c5c6b5ba ("kernel/sched: Fix sche… |
CVE-2022-2440 | High | 7.2 | 2024-08-29 | The Theme Editor plugin for WordPress is vulnerable to deserialization of untrusted input via the 'images_array' parameter in versions up to, and including 2.8… |
CVE-2022-39997 | High | 8.0 | 2024-08-27 | A weak password requirement issue was discovered in Teldats Router RS123, RS123w allows a remote attacker to escalate privileges |
CVE-2022-39996 | Medium | 4.8 | 2024-08-27 | Cross Site Scripting vulnerability in Teldats Router RS123, RS123w allows attacker to execute arbitrary code via the cmdcookie parameter to the upgrade/query.p… |
CVE-2022-43915 | Medium | 6.8 | 2024-08-24 | IBM App Connect Enterprise Certified Container 5.0, 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, and 12… |
CVE-2022-48943 | High | 7.1 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: make apf token non-zero to fix bug In current async pagefault logic, when a… |
CVE-2022-48942 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: hwmon: Handle failure to register sensor with thermal zone correctly If an attempt is mad… |
CVE-2022-48941 | High | 8.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: ice: fix concurrent reset and removal of VFs Commit c503e63200c6 ("ice: Stop processing V… |
CVE-2022-48940 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to incorrect copy_map_value When both bpf_spin_lock and bpf_timer are… |
CVE-2022-48939 | Low | 3.3 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf… |
CVE-2022-48938 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme offset lik… |
CVE-2022-48937 | Low | 3.3 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: io_uring: add a schedule point in io_add_buffers() Looping ~65535 times doing kmalloc() c… |
CVE-2022-48935 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unregister flowtable hooks on netns exit Unregister flowtable hooks… |
CVE-2022-48934 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: nfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac() ida_simple_get() returns… |
CVE-2022-48933 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix memory leak during stateful obj update stateful objects can be… |
CVE-2022-48932 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte When adding a rule with 32… |
CVE-2022-48931 | Medium | 4.7 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: configfs: fix a race in configfs_{,un}register_subsystem() When configfs_register_subsyst… |
CVE-2022-48930 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ib_srp: Fix a deadlock Remove the flush_workqueue(system_long_wq) call since flushin… |
CVE-2022-48929 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix crash due to out of bounds access into reg2btf_ids. When commit e6ac2450d6de ("b… |
CVE-2022-48928 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: men_z188_adc: Fix a resource leak in an error handling path If iio_device_regis… |
CVE-2022-48927 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: tsc2046: fix memory corruption by preventing array overflow On one side we have… |
CVE-2022-48926 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: add spinlock for rndis response list There's no lock for rndis respon… |
CVE-2022-48925 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Do not change route.addr.src_addr outside state checks If the state is not idle… |
CVE-2022-48924 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: fix memory leak in int3400_notify() It is easy to hit the below memory… |
CVE-2022-48923 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segment Compressed length can be corrupted… |
CVE-2022-48922 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: riscv: fix oops caused by irqsoff latency tracer The trace_hardirqs_{on,off}() require th… |
CVE-2022-48921 | Medium | 4.7 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweight_entity Syzbot found a GPF in reweight_entity. This has… |
CVE-2022-48920 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: get rid of warning on transaction commit when using flushoncommit When using the f… |
CVE-2022-48919 | High | 8.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix double free race when mount fails in cifs_get_root() When cifs_get_root() fails… |
CVE-2022-48918 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iwlwifi: mvm: check debugfs_dir ptr before use When "debugfs=off" is used on the kernel c… |
CVE-2022-48916 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix double list_add when enabling VMD in scalable mode When enabling VMD and… |
CVE-2022-48915 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZ_GET_TRIP NULL pointer dereference Do not call get_trip_hyst() from… |
CVE-2022-48914 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: xen/netfront: destroy queues before real_num_tx_queues is zeroed xennet_destroy_queues()… |
CVE-2022-48913 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: blktrace: fix use after free for struct blk_trace When tracing the whole disk, 'dropped'… |
CVE-2022-48912 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: fix use-after-free in __nf_register_net_hook() We must not dereference @new_ho… |
CVE-2022-48911 | High | 7.8 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_hold() sid… |
CVE-2022-48910 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ensure we call ipv6_mc_down() at most once There are two reasons for addrconf_… |
CVE-2022-48909 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix connection leak There's a potential leak issue under following execution seq… |
CVE-2022-48908 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe() During driver initializa… |
CVE-2022-48907 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: auxdisplay: lcd2s: Fix memory leak in ->remove() Once allocated the struct lcd2s_data is… |
CVE-2022-48906 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: mptcp: Correctly set DATA_FIN timeout when number of retransmits is large Syzkaller with… |
CVE-2022-48905 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: free reset-work-item when flushing Fix a tiny memory leak when flushing the rese… |
CVE-2022-48904 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix I/O page table memory leak The current logic updates the I/O page table mo… |
CVE-2022-48903 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix relocation crash due to premature return from btrfs_commit_transaction() We ar… |
CVE-2022-48902 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not WARN_ON() if we have PageError set Whenever we do any extent buffer operati… |
CVE-2022-48901 | Medium | 5.5 | 2024-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: do not start relocation until in progress drops are done We hit a bug with a recov… |
CVE-2022-26328 | | 2024-08-21 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText Performance Center on Windows allows Cros… | |
CVE-2022-26327 | | 2024-08-21 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in OpenText Performance Center on Windows allows Retrieve Embedded Sensitive Data.This… | |
CVE-2022-48899 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix GEM handle creation UAF Userspace can guess the handle value and try to r… |
CVE-2022-48898 | Medium | 4.7 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer There are… |
CVE-2022-48897 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: arm64/mm: fix incorrect file_map_count for invalid pmd The page table check trigger BUG_O… |
CVE-2022-48896 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix pci device refcount leak As the comment of pci_get_domain_bus_and_slot() says… |
CVE-2022-48895 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu: Don't unregister on shutdown Michael Walle says he noticed the following… |
CVE-2022-48894 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-v3: Don't unregister on shutdown Similar to SMMUv2, this driver calls iomm… |
CVE-2022-48893 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Cleanup partial engine discovery failures If we abort driver initialisation… |
CVE-2022-48892 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Fix use-after-free bug in dup_user_cpus_ptr() Since commit 07ec77a1d4e8 ("sch… |
CVE-2022-48891 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: regulator: da9211: Use irq handler when ready If the system does not come from reset (lik… |
CVE-2022-48890 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM storvsc_queuecommand() m… |
CVE-2022-48889 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof-nau8825: fix module alias overflow The maximum name length for a platfor… |
CVE-2022-48888 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix memory leak in msm_mdss_parse_data_bus_icc_path of_icc_get() alloc resou… |
CVE-2022-48887 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Remove rcu locks from user resources User resource lookups used rcu to avoid… |
CVE-2022-48886 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ice: Add check for kzalloc Add the check for the return value of kzalloc in order to avoi… |
CVE-2022-48885 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix potential memory leak in ice_gnss_tty_write() The ice_gnss_tty_write() return di… |
CVE-2022-48884 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix command stats access after free Command may fail while driver is reloading… |
CVE-2022-48883 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to… |
CVE-2022-48882 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) … |
CVE-2022-48881 | High | 7.1 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix refcount leak in amd_pmc_probe pci_get_domain_bus_and_slot() takes… |
CVE-2022-48880 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: platform/surface: aggregator: Add missing call to ssam_request_sync_free() Although rare… |
CVE-2022-48879 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported… |
CVE-2022-48878 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Fix driver shutdown on closed serdev The driver shutdown callback (wh… |
CVE-2022-48876 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix initialization of rx->link and rx->link_sta There are some codepaths… |
CVE-2022-48875 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: sdata can be NULL during AMPDU start ieee80211_tx_ba_session_handle_start… |
CVE-2022-48874 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free and race in fastrpc_map_find Currently, there is a race… |
CVE-2022-48873 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Don't remove map on creater_process and device_release Do not remove the m… |
CVE-2022-48872 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix use-after-free race condition for maps It is possible that in between… |
CVE-2022-48871 | High | 8.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe al… |
CVE-2022-48870 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: tty: fix possible null-ptr-defer in spk_ttyio_release Run the following tests on the qemu… |
CVE-2022-48869 | Medium | 4.7 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: USB: gadgetfs: Fix race between mounting and unmounting The syzbot fuzzer and Gerald Lee… |
CVE-2022-48868 | Medium | 5.5 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Let probe fail when workqueue cannot be enabled The workqueue is enabled… |
CVE-2022-48867 | High | 7.8 | 2024-08-21 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Prevent use after free on completion memory On driver unload any pending… |
CVE-2022-1206 | High | 7.2 | 2024-08-20 | The AdRotate Banner Manager – The only ad manager you'll need plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension saniti… |
CVE-2022-4532 | Medium | 6.5 | 2024-08-17 | The LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.1. This is due to insuf… |
CVE-2022-1751 | High | 7.2 | 2024-08-17 | The Skitter Slideshow plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.2 via the /image.php file. Th… |
CVE-2022-33162 | High | 7.3 | 2024-08-16 | IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a p… |
CVE-2022-3399 | Medium | 4.4 | 2024-08-16 | The Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cookie_notice_options[refuse_code_hea… |
CVE-2022-23817 | High | 7.0 | 2024-08-13 | Insufficient checking of memory buffer in AMD Secure Processor (ASP) Secure OS may allow an attacker with a malicious trusted application to read/write to the… |
CVE-2022-23815 | High | 7.5 | 2024-08-13 | Improper bounds checking in APCB firmware may allow an attacker to perform an out of bounds write, corrupting the APCB entry, potentially leading to arbitrary… |
CVE-2022-45862 | Low | 3.7 | 2024-08-13 | An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 all versions; FortiProxy 7.2 all ver… |
CVE-2022-27486 | Medium | 6.6 | 2024-08-13 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS version 5.5.0 through 5.5.1, 5.4.2 through 5… |
CVE-2022-38382 | Medium | 4.7 | 2024-08-13 | IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.23.0 does not invalidate session after logout… |
CVE-2022-4003 | Low | 2.7 | 2024-07-31 | A denial-of-service vulnerability could allow an authenticated user to trigger an internal service restart via a specially crafted API request. |
CVE-2022-4002 | High | 7.2 | 2024-07-31 | A command injection vulnerability could allow an authenticated user to execute operating system commands as root via a specially crafted API request. |
CVE-2022-4001 | High | 7.3 | 2024-07-31 | An authentication bypass vulnerability could allow an attacker to access API functions without authentication. |
CVE-2022-33167 | Low | 3.7 | 2024-07-30 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote attacker to obtain sensitive information, caus… |
CVE-2022-32759 | Medium | 5.3 | 2024-07-25 | IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthori… |