Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 166 of 437.
- GSD-2022-1000093 moxart: fix potential use-after-free on remove path
- GSD-2022-1000092 scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe
- GSD-2022-1000091 drm/nouveau: fix off by one in BIOS boundary checking
- GSD-2022-1000090 ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
- GSD-2022-1000089 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
- GSD-2022-1000088 ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
- GSD-2022-1000087 af_packet: fix data-race in packet_setsockopt / packet_setsockopt
- GSD-2022-1000086 rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink()
- GSD-2022-1000085 net: amd-xgbe: Fix skb data length underflow
- GSD-2022-1000084 ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback
- GSD-2022-1000083 net: fix information leakage in /proc/net/ptype
- GSD-2022-1000082 scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put()
- GSD-2022-1000081 USB: core: Fix hang in usb_kill_urb by adding memory barriers
- GSD-2022-1000080 usb: gadget: f_sourcesink: Fix isoc transfer for USB_SPEED_SUPER_PLUS
- GSD-2022-1000079 udf: Fix NULL ptr deref when converting from inline format
- GSD-2022-1000078 Bluetooth: refactor malicious adv data check
- GSD-2022-1000065 Various phone carriers are blocking Apples Private Relay when users connect via cellular data.
- GSD-2022-1000064 tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
- GSD-2022-1000063 ALSA: hda: intel-sdw-acpi: harden detection of controller
- GSD-2022-1000062 parisc: Clear stale IIR value on instruction access rights trap
- GSD-2022-1000061 usb: mtu3: fix list_head check warning
- GSD-2022-1000060 fs/mount_setattr: always cleanup mount_kattr
- GSD-2022-1000059 nitro_enclaves: Use get_user_pages_unlocked() call to handle mmap assert
- GSD-2022-1000058 mm/damon/dbgfs: fix 'struct pid' leaks in 'dbgfs_target_ids_write()'
- GSD-2022-1000057 net/mlx5e: Wrap the tx reporter dump callback to extract the sq
- GSD-2022-1000056 binder: fix async_free_space accounting for empty parcels
- GSD-2022-1000055 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- GSD-2022-1000054 sctp: use call_rcu to free endpoint
- GSD-2022-1000053 net: fix use-after-free in tw_timer_handler
- GSD-2022-1000052 net/smc: fix kernel panic caused by race of smc_sock
- GSD-2022-1000051 i2c: validate user data in compat ioctl
- GSD-2022-1000050 NFC: st21nfca: Fix memory leak in device probe and remove
- GSD-2022-1000049 Input: appletouch - initialize work before device registration
- GSD-2022-1000048 tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
- GSD-2022-1000047 parisc: Clear stale IIR value on instruction access rights trap
- GSD-2022-1000046 usb: mtu3: fix list_head check warning
- GSD-2022-1000045 net/mlx5e: Wrap the tx reporter dump callback to extract the sq
- GSD-2022-1000044 net/smc: fix kernel panic caused by race of smc_sock
- GSD-2022-1000043 NFC: st21nfca: Fix memory leak in device probe and remove
- GSD-2022-1000042 i2c: validate user data in compat ioctl
- GSD-2022-1000041 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- GSD-2022-1000040 net: fix use-after-free in tw_timer_handler
- GSD-2022-1000039 sctp: use call_rcu to free endpoint
- GSD-2022-1000038 binder: fix async_free_space accounting for empty parcels
- GSD-2022-1000037 Input: appletouch - initialize work before device registration
- GSD-2022-1000036 tomoyo: Check exceeded quota early in tomoyo_domain_quota_is_ok().
- GSD-2022-1000035 usb: mtu3: fix list_head check warning
- GSD-2022-1000034 i2c: validate user data in compat ioctl
- GSD-2022-1000033 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- GSD-2022-1000032 binder: fix async_free_space accounting for empty parcels
- GSD-2022-1000031 sctp: use call_rcu to free endpoint
- GSD-2022-1000030 net: fix use-after-free in tw_timer_handler
- GSD-2022-1000029 NFC: st21nfca: Fix memory leak in device probe and remove
- GSD-2022-1000028 Input: appletouch - initialize work before device registration
- GSD-2022-1000027 sctp: use call_rcu to free endpoint
- GSD-2022-1000026 i2c: validate user data in compat ioctl
- GSD-2022-1000025 Input: appletouch - initialize work before device registration
- GSD-2022-1000024 binder: fix async_free_space accounting for empty parcels
- GSD-2022-1000023 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- GSD-2022-1000022 NFC: st21nfca: Fix memory leak in device probe and remove
- GSD-2022-1000021 net: fix use-after-free in tw_timer_handler
- GSD-2022-1000020 Input: appletouch - initialize work before device registration
- GSD-2022-1000019 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- GSD-2022-1000018 sctp: use call_rcu to free endpoint
- GSD-2022-1000017 NFC: st21nfca: Fix memory leak in device probe and remove
- GSD-2022-1000016 net: fix use-after-free in tw_timer_handler
- GSD-2022-1000015 binder: fix async_free_space accounting for empty parcels
- GSD-2022-1000014 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- GSD-2022-1000013 net: fix use-after-free in tw_timer_handler
- GSD-2022-1000012 Input: appletouch - initialize work before device registration
- GSD-2022-1000011 usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear.
- GSD-2022-1000010 Input: appletouch - initialize work before device registration
- GSD-2022-1000009 net: fix use-after-free in tw_timer_handler
- GSD-2022-1000008 faker.js 6.6.6 is broken and the developer has wiped the original GitHub repo
- GSD-2021-44142 Remote code execution as root in Samba prior to version 4.13.17
- GHSA-xxx9-3xcr-gjj3 XML Injection in Xerces Java affects Nokogiri
- GHSA-xpp3-xrff-w6rh rocksdb vulnerable to out-of-bounds read
- GHSA-xhr8-mpwq-2rr2 Automatic named constructor discovery in Valinor
- GHSA-xfqg-p48g-hh94 Login timing attack in ezsystems/ezpublish-kernel
- GHSA-xf83-q765-xm6m `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in eager mode
- GHSA-x9jp-4w8m-4f3c Cross Site Scripting vulnerability in django-jsonform's admin form.
- GHSA-x4mq-m75f-mx8m Delegate functions are missing `Send` bound
- GHSA-x279-68rr-jp4p Blst vulnerable to incorrect results for some inputs in blst_fp_eucl_inverse function
- GHSA-wxgw-qj99-44c2 Prototype Pollution in node-forge util.setPath API
- GHSA-wwh2-r387-g5rm tower-http's improper validation of Windows paths could lead to directory traversal attack
- GHSA-wrrw-crp8-979q Pageflow vulnerable to sensitive user data extraction via Ransack query injection
- GHSA-wpfr-6297-9v57 User object created with invalid provider data in GoTrue
- GHSA-wm2r-rp98-8pmh Exposure of SSH credentials in Rancher/Fleet
- GHSA-whpx-q3rq-w8jc Hardening of TypedArrays with non-canonical numeric property names in SES
- GHSA-wf98-vxv9-jqfv XSS Injection Vulnerability
- GHSA-wcv5-vrvr-3rx2 Integer Overflow or Wraparound in TensorFlow
- GHSA-wc5v-r48v-g4vh Cilium host policy bypass in endpoint-routes mode with dual-stack
- GHSA-wc36-xgcc-jwpr Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord`
- GHSA-w8qp-hmh5-4v9v Object state limitation has no effect
- GHSA-w4f8-fxq2-j35v Possible privilege escalation via bash completion script
- GHSA-w3vw-ccc5-qr8v Use After Free in Context::start_auth_session
- GHSA-w2j5-3rcx-vx7x Sysctls applied to containers with host IPC or host network namespaces can affect the host
- GHSA-vx2x-9cff-fhjw DSInternals Credential Roaming Elevation of Privilege Vulnerability
- GHSA-vp35-85q5-9f25 Container build can leak any path on the host into the container
- GHSA-v78c-4p63-2j6c Cleartext Transmission of Sensitive Information in moment-timezone