2022 CVEs (page 25)
Page 25 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25478 | High | 7.8 | 2024-07-02 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) bef… |
CVE-2022-25477 | Medium | 5.5 | 2024-07-02 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) bef… |
CVE-2022-38383 | Medium | 4.0 | 2024-06-28 | IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally wh… |
CVE-2022-27540 | High | 7.8 | 2024-06-28 | A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code… |
CVE-2022-48772 | Medium | 5.5 | 2024-06-25 | In the Linux kernel, the following vulnerability has been resolved: media: lgdt3306a: Add a check against null-pointer-def The driver should check whether th… |
CVE-2022-42974 | Medium | 4.8 | 2024-06-21 | In Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is vulnerable to a Stored Cross-Site Scripting (XSS) attack on /file.boot… |
CVE-2022-44593 | Low | 3.7 | 2024-06-21 | Use of Less Trusted Source vulnerability in SolidWP Solid Security allows HTTP DoS.This issue affects Solid Security: from n/a through 9.3.1. |
CVE-2022-44587 | Medium | 5.3 | 2024-06-21 | Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP… |
CVE-2022-38055 | Medium | 4.3 | 2024-06-21 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in gVectors Team wpForo Forum allows Content Spoofing.This issue af… |
CVE-2022-45803 | Medium | 6.5 | 2024-06-21 | Missing Authorization vulnerability in Nikolay Strikhar WordPress Form Builder Plugin – Gutenberg Forms.This issue affects WordPress Form Builder Plugin – Gute… |
CVE-2022-43453 | High | 8.8 | 2024-06-21 | Missing Authorization vulnerability in Bill Minozzi WP Tools.This issue affects WP Tools: from n/a through 3.41. |
CVE-2022-45929 | High | 8.8 | 2024-06-20 | Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and cou… |
CVE-2022-41324 | Medium | 6.5 | 2024-06-20 | Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensiti… |
CVE-2022-48771 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix stale file descriptors on failed usercopy A failing usercopy of the fence… |
CVE-2022-48770 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: bpf: Guard against accessing NULL pt_regs in bpf_get_task_stack() task_pt_regs() can retu… |
CVE-2022-48769 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines Aditya reports [0] that… |
CVE-2022-48768 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: tracing/histogram: Fix a potential memory leak for kstrdup() kfree() is missing on an err… |
CVE-2022-48767 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ceph: properly put ceph_string reference after async create attempt The reference acquire… |
CVE-2022-48766 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU. Mirrors the logic for dcn30. C… |
CVE-2022-48765 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: LAPIC: Also cancel preemption timer during SET_LAPIC The below warning is splatting… |
CVE-2022-48764 | Medium | 5.3 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2} Free the "struct… |
CVE-2022-48763 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Forcibly leave nested virt when SMM state is toggled Forcibly leave nested virt… |
CVE-2022-48762 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: extable: fix load_unaligned_zeropad() reg indices In ex_handler_load_unaligned_zer… |
CVE-2022-48761 | Medium | 5.3 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: usb: xhci-plat: fix crash when suspend if remote wake enable Crashed at i.mx8qm platform… |
CVE-2022-48760 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix hang in usb_kill_urb by adding memory barriers The syzbot fuzzer has ident… |
CVE-2022-48759 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Fix race between the release of rpmsg_ctrldev and cdev struct rpmsg_ctrldev… |
CVE-2022-48758 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() The bnx2fc_d… |
CVE-2022-48757 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: fix information leakage in /proc/net/ptype In one net namespace, after creating a pa… |
CVE-2022-48756 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable The function performs a check… |
CVE-2022-48755 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: powerpc64/bpf: Limit 'ldbrx' to processors compliant with ISA v2.06 Johan reported the be… |
CVE-2022-48754 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: phylib: fix potential use-after-free Commit bafbdd527d56 ("phylib: Add device reset GPIO… |
CVE-2022-48753 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in disk_register_independent_access_ranges kobject_init_and_add()… |
CVE-2022-48752 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending … |
CVE-2022-48751 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Transitional solution for clcsock race issue We encountered a crash in smc_setso… |
CVE-2022-48750 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix crash in clear_caseopen Paweł Marciniak reports the following crash… |
CVE-2022-48749 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc The function performs a check… |
CVE-2022-48748 | High | 7.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix memory leak in __allowed_ingress When using per-vlan state, if vla… |
CVE-2022-48747 | High | 7.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in bio_truncate() bio_truncate() clears the buffer outside of las… |
CVE-2022-48746 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix handling of wrong devices during bond netevent Current implementation of b… |
CVE-2022-48745 | Medium | 4.7 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Use del_timer_sync in fw reset flow of halting poll Substitute del_timer() with… |
CVE-2022-48744 | High | 7.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Avoid field-overflowing memcpy() In preparation for FORTIFY_SOURCE performing… |
CVE-2022-48743 | High | 8.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: amd-xgbe: Fix skb data length underflow There will be BUG_ON() triggered in include/… |
CVE-2022-48742 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() While looking at one… |
CVE-2022-48741 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ovl: fix NULL pointer dereference in copy up warning This patch is fixing a NULL pointer… |
CVE-2022-48740 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: selinux: fix double free of cond_list on error paths On error path from cond_read_list()… |
CVE-2022-48739 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: hdmi-codec: Fix OOB memory accesses Correct size of iec_status array by changing it… |
CVE-2022-48738 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currently validate… |
CVE-2022-48735 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix UAF of leds class devs at unbinding The LED class devices that are created… |
CVE-2022-48734 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between quota disable and qgroup rescan worker Quota disable ioctl st… |
CVE-2022-48733 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free after failure to create a snapshot At ioctl.c:create_snapshot()… |
CVE-2022-48732 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix off by one in BIOS boundary checking Bounds checking when parsing init s… |
CVE-2022-48731 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid scanning potential huge holes When using devm_request_free_mem_region(… |
CVE-2022-48730 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix potential spectre v1 gadget It appears like nr could be a Spectre v1… |
CVE-2022-48729 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix panic with larger ipoib send_queue_size When the ipoib send_queue_size is in… |
CVE-2022-48728 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix AIP early init panic An early failure in hfi1_ipoib_setup_rn() can lead to t… |
CVE-2022-48727 | High | 7.3 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Avoid consuming a stale esr value when SError occur When any exception other… |
CVE-2022-48726 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Protect mc during concurrent multicast leaves Partially revert the commit ment… |
CVE-2022-48725 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix refcounting leak in siw_create_qp() The atomic_inc() needs to be paired wit… |
CVE-2022-48724 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix potential memory leak in intel_setup_irq_remapping() After commit e3beca4… |
CVE-2022-48723 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: fix reference count leak in uniphier_spi_probe() The issue happens in seve… |
CVE-2022-48722 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: ca8210: Stop leaking skb's Upon error the ieee802154_xmit_complete() hel… |
CVE-2022-48721 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Forward wakeup to smc socket waitqueue after fallback When we replace TCP with S… |
CVE-2022-48720 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net: macsec: Fix offload support for NETDEV_UNREGISTER event Current macsec netdev notify… |
CVE-2022-48719 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work syzkall… |
CVE-2022-48718 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: drm: mxsfb: Fix NULL pointer dereference mxsfb should not ever dereference the NULL point… |
CVE-2022-48717 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speaker_gain_control_put() Check for negative values of "… |
CVE-2022-48716 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix incorrect used of portid Mixer controls have the channel id in… |
CVE-2022-48715 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe Running tests with a debug kernel shows th… |
CVE-2022-48714 | High | 7.1 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf After commit 2fd3fb0be1d1 ("kasan, vmallo… |
CVE-2022-48713 | Medium | 5.5 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix crash with stop filters in single-range mode Add a check for !buf-… |
CVE-2022-48712 | High | 7.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix error handling in ext4_fc_record_modified_inode() Current code does not fully t… |
CVE-2022-48711 | Critical | 9.8 | 2024-06-20 | In the Linux kernel, the following vulnerability has been resolved: tipc: improve size validations for received domain records The function tipc_mon_rcv() al… |
CVE-2022-45832 | Medium | 6.5 | 2024-06-19 | Missing Authorization vulnerability in Hennessey Digital Attorney.This issue affects Attorney: from n/a through 3. |
CVE-2022-23829 | High | 8.2 | 2024-06-18 | A potential weakness in AMD SPI protection features may allow a malicious attacker with Ring0 (kernel mode) access to bypass the native System Management Mode… |
CVE-2022-37020 | Medium | 6.8 | 2024-06-10 | Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP… |
CVE-2022-37019 | Medium | 6.8 | 2024-06-10 | Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP i… |
CVE-2022-48683 | High | 7.8 | 2024-06-10 | An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13. An app may be able to break out of its sandbox. |
CVE-2022-48578 | High | 7.1 | 2024-06-10 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5. Processing an AppleScript may result in unexpect… |
CVE-2022-32933 | Medium | 5.3 | 2024-06-10 | An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.5. A website may be able to track the w… |
CVE-2022-32897 | High | 7.8 | 2024-06-10 | A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted tiff file may le… |
CVE-2022-45176 | Medium | 5.4 | 2024-06-10 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. Stored Cross-site Scripting (XSS) can occur under the /api/v1/getbodyfile endpoint via the… |
CVE-2022-45168 | Medium | 6.5 | 2024-06-10 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /login/backup_code endpoint and… |
CVE-2022-4968 | Medium | 6.5 | 2024-06-07 | netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected. |
CVE-2022-28658 | Medium | 5.5 | 2024-06-04 | Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing |
CVE-2022-28657 | High | 7.8 | 2024-06-04 | Apport does not disable python crash handler before entering chroot |
CVE-2022-28656 | Medium | 5.5 | 2024-06-04 | is_closing_session() allows users to consume RAM in the Apport process |
CVE-2022-28655 | High | 7.1 | 2024-06-04 | is_closing_session() allows users to create arbitrary tcp dbus connections |
CVE-2022-28654 | Medium | 5.5 | 2024-06-04 | is_closing_session() allows users to fill up apport.log |
CVE-2022-28652 | Medium | 5.5 | 2024-06-04 | ~/.config/apport/settings parsing is vulnerable to "billion laughs" attack |
CVE-2022-1242 | High | 7.8 | 2024-06-03 | Apport can be tricked into connecting to arbitrary sockets as the root user |
CVE-2022-0555 | High | 8.4 | 2024-06-03 | Subiquity Shows Guided Storage Passphrase in Plaintext with Read-all Permissions |
CVE-2022-25038 | Medium | 6.1 | 2024-05-31 | wanEditor v4.7.11 was discovered to contain a cross-site scripting (XSS) vulnerability via the video upload function. |
CVE-2022-25037 | Medium | 5.4 | 2024-05-31 | An issue in wanEditor v4.7.11 and fixed in v.4.7.12 and v.5 was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function. |
CVE-2022-43841 | Medium | 4.0 | 2024-05-30 | IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 239078. |
CVE-2022-43575 | Medium | 5.4 | 2024-05-30 | IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… |
CVE-2022-43384 | Medium | 4.6 | 2024-05-30 | IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… |
CVE-2022-45171 | High | 8.8 | 2024-05-28 | An issue was discovered in LIVEBOX Collaboration vDesk through v018. An Unrestricted Upload of a File with a Dangerous Type can occur under the vShare web site… |
CVE-2022-48681 | High | 7.2 | 2024-05-28 | Some Huawei smart speakers have a memory overflow vulnerability. Successful exploitation of this vulnerability may cause certain functions to fail. |
CVE-2022-4969 | Medium | 5.3 | 2024-05-27 | A vulnerability, which was classified as critical, has been found in bwoodsend rockhopper up to 0.1.2. Affected by this issue is the function count_rows of the… |
CVE-2022-48710 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix a possible null pointer dereference In radeon_fp_native_mode(), the retur… |