2022 CVEs (page 25)
Page 25 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48787 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: iwlwifi: fix use-after-free If no firmware was present at all (or, presumably, all of the… |
CVE-2022-48786 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsock_co… |
CVE-2022-48785 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() Some time ago 8965779d2c0e ("ipv6… |
CVE-2022-48784 | Medium | 4.7 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destruction My previous fix here to fix the… |
CVE-2022-48783 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: fix use after free in gswip_remove() of_node_put(priv->ds->slave_… |
CVE-2022-48782 | High | 8.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mctp: fix use after free Clang static analysis reports this problem route.c:425:4: warnin… |
CVE-2022-48781 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - get rid of alg_memory_allocated alg_memory_allocated does not seem to be… |
CVE-2022-48780 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions The callback function… |
CVE-2022-48779 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix use-after-free in ocelot_vlan_del() ocelot_vlan_member_del() will… |
CVE-2022-48778 | High | 7.8 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: don't leak PM reference in error path If gpmi_nfc_apply_timings() fai… |
CVE-2022-48777 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the event of a skipped parti… |
CVE-2022-48776 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix missing free for pparts in cleanup Mtdpart doesn't free pparts wh… |
CVE-2022-48775 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() take… |
CVE-2022-48774 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ptdma: Fix the error handling path in pt_core_init() In order to free resource… |
CVE-2022-48773 | Medium | 5.5 | 2024-07-16 | In the Linux kernel, the following vulnerability has been resolved: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create If there are failures th… |
CVE-2022-29946 | Medium | 6.3 | 2024-07-11 | NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security restrictions, caused by the failure to enf… |
CVE-2022-45147 | High | 7.8 | 2024-07-09 | A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC STEP 7 V17 (All versions), SIMATIC STEP… |
CVE-2022-30636 | High | 7.5 | 2024-07-02 | httpTokenCacheKey uses path.Base to extract the expected HTTP-01 token value to lookup in the DirCache implementation. On Windows, path.Base acts differently t… |
CVE-2022-25480 | High | 7.8 | 2024-07-02 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) bef… |
CVE-2022-25479 | Medium | 5.5 | 2024-07-02 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) bef… |
CVE-2022-25478 | High | 7.8 | 2024-07-02 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) bef… |
CVE-2022-25477 | Medium | 5.5 | 2024-07-02 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) bef… |
CVE-2022-38383 | Medium | 4.0 | 2024-06-28 | IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally wh… |
CVE-2022-27540 | High | 7.8 | 2024-06-28 | A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code… |
CVE-2022-48772 | Medium | 5.5 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: media: lgdt3306a: Add a check against null-pointer-def The driver should check whether th… |
CVE-2022-42974 | Medium | 4.8 | 2024-06-21 | In Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is vulnerable to a Stored Cross-Site Scripting (XSS) attack on /file.boot… |
CVE-2022-44593 | Low | 3.7 | 2024-06-21 | Use of Less Trusted Source vulnerability in SolidWP Solid Security allows HTTP DoS.This issue affects Solid Security: from n/a through 9.3.1. |
CVE-2022-44587 | Medium | 5.3 | 2024-06-21 | Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP… |
CVE-2022-38055 | Medium | 4.3 | 2024-06-21 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Content Spoofing.This issue af… |
CVE-2022-45803 | Medium | 6.5 | 2024-06-21 | Missing Authorization vulnerability in Nikolay Strikhar WordPress Form Builder Plugin – Gutenberg Forms.This issue affects WordPress Form Builder Plugin – Gute… |
CVE-2022-43453 | High | 8.8 | 2024-06-21 | Missing Authorization vulnerability in Bill Minozzi WP Tools.This issue affects WP Tools: from n/a through 3.41. |
CVE-2022-45929 | High | 8.8 | 2024-06-20 | Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and cou… |
CVE-2022-41324 | Medium | 6.5 | 2024-06-20 | Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensiti… |
CVE-2022-48771 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix stale file descriptors on failed usercopy A failing usercopy of the fence… |
CVE-2022-48770 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() task_pt_regs() can retu… |
CVE-2022-48769 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines Aditya reports [0] that… |
CVE-2022-48768 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup() kfree() is missing on an err… |
CVE-2022-48767 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ceph: properly put ceph_string reference after async create attempt The reference acquire… |
CVE-2022-48766 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU. Mirrors the logic for dcn30. C… |
CVE-2022-48765 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: LAPIC: Also cancel preemption timer during SET_LAPIC The below warning is splatting… |
CVE-2022-48764 | Medium | 5.3 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2} Free the "struct… |
CVE-2022-48763 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Forcibly leave nested virt when SMM state is toggled Forcibly leave nested virt… |
CVE-2022-48762 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: extable: fix load_unaligned_zeropad() reg indices In ex_handler_load_unaligned_zer… |
CVE-2022-48761 | Medium | 5.3 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci-plat: fix crash when suspend if remote wake enable Crashed at i.mx8qm platform… |
CVE-2022-48760 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix hang in usb_kill_urb by adding memory barriers The syzbot fuzzer has ident… |
CVE-2022-48759 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev struct rpmsg_ctrldev… |
CVE-2022-48758 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() The bnx2fc_d… |
CVE-2022-48757 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: fix information leakage in /proc/net/ptype In one net namespace, after creating a pa… |
CVE-2022-48756 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable The function performs a check… |
CVE-2022-48755 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 Johan reported the be… |
CVE-2022-48754 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: phylib: fix potential use-after-free Commit bafbdd527d56 ("phylib: Add device reset GPIO… |
CVE-2022-48753 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in disk_register_independent_access_ranges kobject_init_and_add()… |
CVE-2022-48752 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending … |
CVE-2022-48751 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Transitional solution for clcsock race issue We encountered a crash in smc_setso… |
CVE-2022-48750 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix crash in clear_caseopen Paweł Marciniak reports the following crash… |
CVE-2022-48749 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc The function performs a check… |
CVE-2022-48748 | High | 7.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix memory leak in __allowed_ingress When using per-vlan state, if vla… |
CVE-2022-48747 | High | 7.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in bio_truncate() bio_truncate() clears the buffer outside of las… |
CVE-2022-48746 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix handling of wrong devices during bond netevent Current implementation of b… |
CVE-2022-48745 | Medium | 4.7 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use del_timer_sync in fw reset flow of halting poll Substitute del_timer() with… |
CVE-2022-48744 | High | 7.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid field-overflowing memcpy() In preparation for FORTIFY_SOURCE performing… |
CVE-2022-48743 | High | 8.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUG_ON() triggered in include/… |
CVE-2022-48742 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() While looking at one… |
CVE-2022-48741 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ovl: fix NULL pointer dereference in copy up warning This patch is fixing a NULL pointer… |
CVE-2022-48740 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: selinux: fix double free of cond_list on error paths On error path from cond_read_list()… |
CVE-2022-48739 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: hdmi-codec: Fix OOB memory accesses Correct size of iec_status array by changing it… |
CVE-2022-48738 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate… |
CVE-2022-48735 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix UAF of leds class devs at unbinding The LED class devices that are created… |
CVE-2022-48734 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between quota disable and qgroup rescan worker Quota disable ioctl st… |
CVE-2022-48733 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free after failure to create a snapshot At ioctl.c:create_snapshot()… |
CVE-2022-48732 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix off by one in BIOS boundary checking Bounds checking when parsing init s… |
CVE-2022-48731 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid scanning potential huge holes When using devm_request_free_mem_region(… |
CVE-2022-48730 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix potential spectre v1 gadget It appears like nr could be a Spectre v1… |
CVE-2022-48729 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix panic with larger ipoib send_queue_size When the ipoib send_queue_size is in… |
CVE-2022-48728 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1_ipoib_setup_rn() can lead to t… |
CVE-2022-48727 | High | 7.3 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Avoid consuming a stale esr value when SError occur When any exception other… |
CVE-2022-48726 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Protect mc during concurrent multicast leaves Partially revert the commit ment… |
CVE-2022-48725 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix refcounting leak in siw_create_qp() The atomic_inc() needs to be paired wit… |
CVE-2022-48724 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() After commit e3beca4… |
CVE-2022-48723 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphier_spi_probe() The issue happens in seve… |
CVE-2022-48722 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking skb's Upon error the ieee802154_xmit_complete() hel… |
CVE-2022-48721 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Forward wakeup to smc socket waitqueue after fallback When we replace TCP with S… |
CVE-2022-48720 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEV_UNREGISTER event Current macsec netdev notify… |
CVE-2022-48719 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work syzkall… |
CVE-2022-48718 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb: Fix NULL pointer dereference mxsfb should not ever dereference the NULL point… |
CVE-2022-48717 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speaker_gain_control_put() Check for negative values of "… |
CVE-2022-48716 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix incorrect used of portid Mixer controls have the channel id in… |
CVE-2022-48715 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe Running tests with a debug kernel shows th… |
CVE-2022-48714 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf After commit 2fd3fb0be1d1 ("kasan, vmallo… |
CVE-2022-48713 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix crash with stop filters in single-range mode Add a check for !buf-… |
CVE-2022-48712 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix error handling in ext4_fc_record_modified_inode() Current code does not fully t… |
CVE-2022-48711 | Critical | 9.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The function tipc_mon_rcv() al… |
CVE-2022-45832 | Medium | 6.5 | 2024-06-19 | Missing Authorization vulnerability in Hennessey Digital Attorney.This issue affects Attorney: from n/a through 3. |
CVE-2022-23829 | High | 8.2 | 2024-06-18 | A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode… |
CVE-2022-37020 | Medium | 6.8 | 2024-06-10 | Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP… |
CVE-2022-37019 | Medium | 6.8 | 2024-06-10 | Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP i… |
CVE-2022-48683 | High | 7.8 | 2024-06-10 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may be able to break out of its sandbox. |
CVE-2022-48578 | High | 7.1 | 2024-06-10 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5. Processing an AppleScript may result in unexpect… |
CVE-2022-32933 | Medium | 5.3 | 2024-06-10 | An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.5. A website may be able to track the w… |
CVE-2022-32897 | High | 7.8 | 2024-06-10 | A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted tiff file may le… |