Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 170 of 437.
- CVE-2022-50919 Tdarr 2.00.15 - Command Injection
- CVE-2022-50918 VIVE Runtime Service - 'ViveAgentService' Unquoted Service Path
- CVE-2022-50917 ProtonVPN 1.26.0 - Unquoted Service Path
- CVE-2022-50916 e107 CMS v3.2.1 - Upload restriction bypass (Authenticated [Admin])+ Server file override
- CVE-2022-50915 PTPublisher 2.3.4 - Unquoted Service Path
- CVE-2022-50914 EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path
- CVE-2022-50913 TCQ - 'ITeCProteccioAppServer.exe' Unquoted Service Path
- CVE-2022-50912 ImpressCMS 1.4.4 - Unrestricted File Upload
- CVE-2022-50910 Beehive Forum - Account Takeover
- CVE-2022-50909 Algo 8028 Control Panel - Remote Code Execution (RCE) (Authenticated)
- CVE-2022-50908 Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
- CVE-2022-50907 e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCE
- CVE-2022-50906 e107 CMS v3.2.1 - Admin Upload Restriction Bypass + Stored XSS
- CVE-2022-50905 e107 CMS v3.2.1 - Reflected XSS via Comment Flow
- CVE-2022-50904 Wondershare UBackit 2.0.5 - 'wsbackup' Unquoted Service Path
- CVE-2022-50903 Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path
- CVE-2022-50902 Wondershare FamiSafe 1.0 - 'FSService' Unquoted Service Path
- CVE-2022-50901 Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path
- CVE-2022-50900 Wondershare Dr.Fone 12.0.18 - 'Wondershare InstallAssist' Unquoted Service Path
- CVE-2022-50899 Geonetwork 4.2.0 - XML External Entity (XXE)
- CVE-2022-50898 NanoCMS 0.4 - Remote Code Execution (RCE) (Authenticated)
- CVE-2022-50897 mPDF 7.0 - Local File Inclusion
- CVE-2022-50896 Testa 3.5.1 Online Test Management System - Reflected Cross-Site Scripting (XSS)
- CVE-2022-50895 Aero CMS 0.0.1 - SQL Injection
- CVE-2022-50894 VIAVIWEB Wallpaper Admin 1.0 SQL Injection via edit_gallery_image.php
- CVE-2022-50893 VIAVIWEB Wallpaper Admin 1.0 - Code Execution via Image Upload
- CVE-2022-50892 VIAVIWEB Wallpaper Admin 1.0 - SQL Injection via Login Page
- CVE-2022-50891 Owlfiles File Manager 12.0.1 Cross-Site Scripting via HTTP Server
- CVE-2022-50890 Owlfiles File Manager 12.0.1 - Path Traversal
- CVE-2022-50889 dm integrity: Fix UAF in dm_integrity_dtr()
- CVE-2022-50888 remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio()
- CVE-2022-50887 regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()
- CVE-2022-50886 mmc: toshsd: fix return value check of mmc_add_host()
- CVE-2022-50885 RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed
- CVE-2022-50884 drm: Prevent drm_copy_field() to attempt copying a NULL pointer
- CVE-2022-50883 bpf: Prevent decl_tag from being referenced in func_proto arg
- CVE-2022-50882 media: uvcvideo: Fix memory leak in uvc_gpio_parse
- CVE-2022-50881 wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()
- CVE-2022-50880 wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
- CVE-2022-50879 objtool: Fix SEGFAULT
- CVE-2022-50878 gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()
- CVE-2022-50877 net: broadcom: bcm4908_enet: update TX stats after actual transmission
- CVE-2022-50876 usb: musb: Fix musb_gadget.c rxstate overflow bug
- CVE-2022-50875 of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()
- CVE-2022-50874 RDMA/erdma: Fix refcount leak in erdma_mmap
- CVE-2022-50873 vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove
- CVE-2022-50872 ARM: OMAP2+: Fix memory leak in realtime_counter_init()
- CVE-2022-50871 wifi: ath11k: Fix qmi_msg_handler data structure initialization
- CVE-2022-50870 powerpc/rtas: avoid device tree lookups in rtas_os_term()
- CVE-2022-50869 fs/ntfs3: Fix slab-out-of-bounds in r_page
- CVE-2022-50868 hwrng: amd - Fix PCI device refcount leak
- CVE-2022-50867 drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage
- CVE-2022-50866 ASoC: pxa: fix null-pointer dereference in filter()
- CVE-2022-50865 tcp: fix a signed-integer-overflow bug in tcp_add_backlog()
- CVE-2022-50864 nilfs2: fix shift-out-of-bounds due to too large exponent of block size
- CVE-2022-50863 wifi: rtw89: free unused skb to prevent memory leak
- CVE-2022-50862 bpf: prevent decl_tag from being referenced in func_proto
- CVE-2022-50861 NFSD: Finish converting the NFSv2 GETACL result encoder
- CVE-2022-50860 apparmor: Fix memleak in alloc_ns()
- CVE-2022-50859 cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message
- CVE-2022-50858 mmc: alcor: fix return value check of mmc_add_host()
- CVE-2022-50857 rapidio: rio: fix possible name leak in rio_register_mport()
- CVE-2022-50856 cifs: Fix xid leak in cifs_ses_add_channel()
- CVE-2022-50855 bpf: prevent leak of lsm program after failed attach
- CVE-2022-50854 nfc: virtual_ncidev: Fix memory leak in virtual_nci_send()
- CVE-2022-50853 NFSv4: Fix a credential leak in _nfs4_discover_trunking()
- CVE-2022-50852 wifi: mt76: mt7921: fix use after free in mt7921_acpi_read()
- CVE-2022-50851 vhost_vdpa: fix the crash in unmap a large memory
- CVE-2022-50850 scsi: ipr: Fix WARNING in ipr_init()
- CVE-2022-50849 pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP
- CVE-2022-50848 drivers: dio: fix possible memory leak in dio_init()
- CVE-2022-50847 drm/bridge: it6505: Initialize AUX channel in it6505_i2c_probe
- CVE-2022-50846 mmc: via-sdmmc: fix return value check of mmc_add_host()
- CVE-2022-50845 ext4: fix inode leak in ext4_xattr_inode_create() on an error path
- CVE-2022-50844 drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback
- CVE-2022-50843 dm clone: Fix UAF in clone_dtr()
- CVE-2022-50842 drm/virtio: Check whether transferred 2D BO is shmem
- CVE-2022-50841 fs/ntfs3: Add overflow check for attribute size
- CVE-2022-50840 scsi: snic: Fix possible UAF in snic_tgt_create()
- CVE-2022-50839 jbd2: fix potential buffer head reference count leak
- CVE-2022-50838 net: stream: purge sk_error_queue in sk_stream_kill_queues()
- CVE-2022-50837 net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path
- CVE-2022-50836 remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev()
- CVE-2022-50835 jbd2: add miss release buffer head in fc_do_one_pass()
- CVE-2022-50834 nfc: Fix potential resource leaks
- CVE-2022-50833 Bluetooth: use hdev->workqueue when queuing hdev->{cmd,ncmd}_timer works
- CVE-2022-50832 wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()
- CVE-2022-50830 auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()
- CVE-2022-50829 wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb()
- CVE-2022-50828 clk: zynqmp: Fix stack-out-of-bounds in strncpy`
- CVE-2022-50827 scsi: lpfc: Fix memory leak in lpfc_create_port()
- CVE-2022-50826 ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection()
- CVE-2022-50825 usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe()
- CVE-2022-50824 tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak
- CVE-2022-50823 clk: tegra: Fix refcount leak in tegra114_clock_init
- CVE-2022-50822 RDMA/restrack: Release MR restrack when delete
- CVE-2022-50821 SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails
- CVE-2022-50820 perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init()
- CVE-2022-50819 udmabuf: Set ubuf->sg = NULL if the creation of sg table fails
- CVE-2022-50818 scsi: pm8001: Fix running_req for internal abort commands