2022 CVEs (page 26)
Page 26 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48709 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: ice: switch: fix potential memleak in ice_add_adv_recipe() When ice_add_special_words() f… |
CVE-2022-48708 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference Added checking of pointer "function" in p… |
CVE-2022-48707 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix null pointer dereference for resetting decoder Not all decoders have a re… |
CVE-2022-48706 | Medium | 5.5 | 2024-05-21 | In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Do proper cleanup if IFCVF init fails ifcvf_mgmt_dev leaks memory if it is n… |
CVE-2022-45374 | High | 7.7 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in YARPP allows PHP Local File Inclusion.This issue affects YARPP… |
CVE-2022-45368 | High | 7.7 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Lenderd 1003 Mortgage Application allows Relative Path Traversa… |
CVE-2022-45070 | Medium | 5.3 | 2024-05-17 | Missing Authorization vulnerability in FmeAddons Conditional Checkout Fields for WooCommerce.This issue affects Conditional Checkout Fields for WooCommerce: fr… |
CVE-2022-44581 | Medium | 5.0 | 2024-05-17 | Insecure Storage of Sensitive Information vulnerability in WPMU DEV Defender Security allows : Screen Temporary Files for Sensitive Information.This issue affe… |
CVE-2022-37410 | High | 7.0 | 2024-05-16 | Improper access control for some Intel(R) Thunderbolt driver software before version 89 may allow an authenticated user to potentially enable escalation of pri… |
CVE-2022-37341 | High | 7.2 | 2024-05-16 | Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentia… |
CVE-2022-28132 | High | 7.2 | 2024-05-14 | The T-Soft E-Commerce 4 web application is susceptible to SQL injection (SQLi) attacks when authenticated as an admin or privileged user. This vulnerability al… |
CVE-2022-4967 | High | 7.7 | 2024-05-14 | strongSwan versions 5.9.2 through 5.9.5 are affected by authorization bypass through improper validation of certificate with host mismatch (CWE-297). When cert… |
CVE-2022-32510 | High | 7.1 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. The HTTP API exposed by a Bridge used an unencrypted channel to provide an administrative inter… |
CVE-2022-32509 | High | 8.8 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. Lack of certificate validation on HTTP communications allows attackers to intercept and tamper… |
CVE-2022-32508 | High | 7.5 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. By sending a malformed HTTP verb, it is possible to force a reboot of the device. This affects… |
CVE-2022-32507 | High | 8.8 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. Some BLE commands, which should have been designed to be only called from privileged accounts… |
CVE-2022-32506 | Medium | 6.4 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access to the circuit board could use the SWD debug features to contr… |
CVE-2022-32505 | High | 7.1 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. It is possible to send multiple BLE malformed packets to block some of the functionality and re… |
CVE-2022-32504 | Critical | 9.8 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. The code used to parse the JSON objects received from the WebSocket service provided by the dev… |
CVE-2022-32503 | High | 7.6 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. An attacker with physical access to this JTAG port may be able to connect to the device and byp… |
CVE-2022-32502 | Medium | 6.3 | 2024-05-14 | An issue was discovered on certain Nuki Home Solutions devices. There is a buffer overflow over the encrypted token parsing logic in the HTTP service that allo… |
CVE-2022-40218 | Medium | 6.5 | 2024-05-08 | Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.1.4. |
CVE-2022-43656 | Medium | 5.5 | 2024-05-07 | Bentley View FBX File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informa… |
CVE-2022-43655 | High | 7.8 | 2024-05-07 | Bentley View FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c… |
CVE-2022-43654 | High | 8.8 | 2024-05-07 | NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on aff… |
CVE-2022-43653 | High | 7.8 | 2024-05-07 | Bentley View SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2022-43652 | Medium | 5.5 | 2024-05-07 | Bentley View SKP File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information… |
CVE-2022-43651 | High | 7.8 | 2024-05-07 | Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec… |
CVE-2022-0369 | High | 8.8 | 2024-05-07 | Triangle MicroWorks SCADA Data Gateway Restore Workspace Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to… |
CVE-2022-22364 | Medium | 5.3 | 2024-05-03 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to external service interaction attack, caused by improper validation of user-supplied input. A… |
CVE-2022-48705 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix crash in chip reset fail In case of drv own fail in reset, we ma… |
CVE-2022-48704 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: add a force flush to delay work when radeon Although radeon card fence and wa… |
CVE-2022-48695 | High | 7.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix use-after-free warning Fix the following use-after-free warning which… |
CVE-2022-48690 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix DMA mappings leak Fix leak, when user changes ring parameters. During reallocati… |
CVE-2022-48703 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR In some case… |
CVE-2022-48702 | High | 7.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() The voice allo… |
CVE-2022-48701 | High | 7.1 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() There may… |
CVE-2022-48699 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in update_sched_domain_debugfs Kuyo reports that the pattern… |
CVE-2022-48698 | Medium | 5.3 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix memory leak when using debugfs_lookup() When calling debugfs_lookup(… |
CVE-2022-48697 | Critical | 9.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggered by blkte… |
CVE-2022-48696 | High | 7.1 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: regmap: spi: Reserve space for register address/padding Currently the max_raw_read and ma… |
CVE-2022-48694 | High | 7.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix drain SQ hang with no completion SW generated completions for outstanding… |
CVE-2022-48693 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs In brcmstb_pm_probe(), ther… |
CVE-2022-48692 | High | 7.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: RDMA/srp: Set scmnd->result only when scmnd is not NULL This change fixes the following k… |
CVE-2022-48691 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: clean up hook list when offload flags check fails splice back the h… |
CVE-2022-48689 | High | 7.0 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: tcp: TX zerocopy should not sense pfmemalloc status We got a recent syzbot report [1] sho… |
CVE-2022-48688 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during module removal The driver incorrectly frees client instance… |
CVE-2022-48687 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layer allows defining H… |
CVE-2022-48686 | Critical | 9.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix UAF when detecting digest errors We should also bail from the io_work loop… |
CVE-2022-48675 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: IB/core: Fix a nested dead lock as part of ODP flow Fix a nested dead lock as part of ODP… |
CVE-2022-48674 | High | 7.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix pcluster use-after-free on UP platforms During stress testing with CONFIG_SMP… |
CVE-2022-48673 | Critical | 9.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible access to freed memory in link clear After modifying the QP to the… |
CVE-2022-48672 | High | 7.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: of: fdt: fix off-by-one error in unflatten_dt_nodes() Commit 78c44d910d3e ("drivers/of: F… |
CVE-2022-48671 | Medium | 5.5 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() syzbot is hitting percpu… |
CVE-2022-48670 | High | 7.8 | 2024-05-03 | In the Linux kernel, the following vulnerability has been resolved: peci: cpu: Fix use-after-free in adev_release() When auxiliary_device_add() returns an er… |
CVE-2022-48669 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix potential memleak in papr_get_attr() `buf` is allocated in papr_get_… |
CVE-2022-38386 | Medium | 5.9 | 2024-05-01 | IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite for Software 1.10.12.0 through 1.10.19.0 does not set the SameSite attribute… |
CVE-2022-48668 | Low | 3.3 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in collapse range collapse range doesn't discard the… |
CVE-2022-48667 | Low | 3.3 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in insert range insert range doesn't discard the affe… |
CVE-2022-48666 | Critical | 9.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free There are two .exit_cmd_priv implementations. Both imple… |
CVE-2022-48665 | High | 7.1 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix overflow for large capacity partition Using int type for sector index, there w… |
CVE-2022-48664 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix hang during unmount when stopping a space reclaim worker Often when running ge… |
CVE-2022-48663 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: fix NULL pointer dereference when removing debugfs We now remove the device… |
CVE-2022-48662 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Really move i915_gem_context.link under ref protection i915_perf assumes th… |
CVE-2022-48661 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: gpio: mockup: Fix potential resource leakage when register a chip If creation of software… |
CVE-2022-48660 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully When running gpio… |
CVE-2022-48659 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: mm/slub: fix to return errno if kmalloc() fails In create_unique_id(), kmalloc(, GFP_KERN… |
CVE-2022-48658 | High | 7.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. Commit 5a836bf6… |
CVE-2022-48657 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: arm64: topology: fix possible overflow in amu_fie_setup() cpufreq_get_hw_max_freq() retur… |
CVE-2022-48656 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() We should cal… |
CVE-2022-48655 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Harden accesses to the reset domains Accessing reset domains descript… |
CVE-2022-48654 | High | 7.1 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() nf_osf_find() incorre… |
CVE-2022-48653 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: ice: Don't double unplug aux on peer initiated reset In the IDC callback that is accessed… |
CVE-2022-48652 | High | 8.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: ice: Fix crash by keep old cfg when update TCs more than queues There are problems if all… |
CVE-2022-48651 | High | 7.7 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header If an AF_PACKET socket is u… |
CVE-2022-48650 | Medium | 4.7 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() Commit 8f394da36a36 ("scsi: ql… |
CVE-2022-48649 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: mm/slab_common: fix possible double free of kmem_cache When doing slub_debug test, kfence… |
CVE-2022-48648 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: sfc: fix null pointer dereference in efx_hard_start_xmit Trying to get the channel from t… |
CVE-2022-48647 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: sfc: fix TX channel offset when using legacy interrupts In legacy interrupt mode the tx_c… |
CVE-2022-48646 | Medium | 6.2 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: sfc/siena: fix null pointer dereference in efx_hard_start_xmit Like in previous patch for… |
CVE-2022-48645 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: net: enetc: deny offload of tc-based TSN features on VF interfaces TSN features on the EN… |
CVE-2022-48644 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: avoid disabling offload when it was never enabled In an incredibly str… |
CVE-2022-48643 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() syzbot i… |
CVE-2022-48642 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() It seems to me that… |
CVE-2022-48641 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix memory leak when blob is malformed The bug fix was incomplete, i… |
CVE-2022-48640 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix NULL deref in bond_rr_gen_slave_id Fix a NULL dereference of the struct bond… |
CVE-2022-48639 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: net: sched: fix possible refcount leak in tc_new_tfilter() tfilter_put need to be called… |
CVE-2022-48638 | Medium | 5.3 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: cgroup: cgroup_get_from_id() must check the looked-up kn is a directory cgroup has to be… |
CVE-2022-48637 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: bnxt: prevent skb UAF after handing over to PTP worker When reading the timestamp is requ… |
CVE-2022-48636 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup Fix Oops in dasd_… |
CVE-2022-48635 | Medium | 6.2 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: fsdax: Fix infinite loop in dax_iomap_rw() I got an infinite loop and a WARNING report wh… |
CVE-2022-48634 | Medium | 5.3 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix BUG: sleeping function called from invalid context errors gma_crtc_page_f… |
CVE-2022-48633 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix WARN_ON(lock->magic != lock) error psb_gem_unpin() calls dma_resv_lock()… |
CVE-2022-48632 | High | 7.8 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() memcpy() is cal… |
CVE-2022-48631 | Medium | 5.5 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 When walking throu… |
CVE-2022-48685 | High | 7.7 | 2024-04-27 | An issue was discovered in Logpoint 7.1 before 7.1.2. The daily executed cron file clean_secbi_old_logs is writable by all users and is executed as root, leadi… |
CVE-2022-48684 | High | 8.4 | 2024-04-27 | An issue was discovered in Logpoint before 7.1.1. Template injection was seen in the search template. The search template uses jinja templating for generating… |
CVE-2022-48611 | High | 7.8 | 2024-04-26 | A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges. |
CVE-2022-40975 | Medium | 5.4 | 2024-04-26 | Missing Authorization vulnerability in Aazztech Post Slider.This issue affects Post Slider: from n/a through 1.6.7. |
CVE-2022-48682 | Medium | 6.0 | 2024-04-26 | In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink. |