Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 189 of 437.
- CVE-2022-49043 Use after free in libxml2
- CVE-2022-49042 Code injection in Synology Hyper Backup Explorer
- CVE-2022-49041 Memory corruption in Synology Drive Client
- CVE-2022-49040 Memory corruption in Synology Drive Client
- CVE-2022-4904 Memory corruption in c-ares
- CVE-2022-49039 Memory corruption in Synology Drive Client
- CVE-2022-49038 Code injection in Synology Drive Client
- CVE-2022-49037 Information disclosure in Synology Drive Client
- CVE-2022-49036 Code injection in Synology Active Backup for Business Recovery Media Creator
- CVE-2022-49035 media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
- CVE-2022-49034 sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- CVE-2022-49033 btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
- CVE-2022-49032 iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
- CVE-2022-49031 iio: health: afe4403: Fix oob read in afe4403_read_raw
- CVE-2022-49030 libbpf: Handle size overflow for ringbuf mmap
- CVE-2022-4903 CodenameOne implicit intent for sensitive communication
- CVE-2022-49029 hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
- CVE-2022-49028 ixgbevf: Fix resource leak in ixgbevf_init_module()
- CVE-2022-49027 iavf: Fix error handling in iavf_init_module()
- CVE-2022-49026 e100: Fix possible use after free in e100_xmit_prepare
- CVE-2022-49025 net/mlx5e: Fix use-after-free when reverting termination table
- CVE-2022-49024 can: m_can: pci: add missing m_can_class_free_dev() in probe/remove methods
- CVE-2022-49023 wifi: cfg80211: fix buffer overflow in elem comparison
- CVE-2022-49022 wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration
- CVE-2022-49021 net: phy: fix null-ptr-deref while probe() failed
- CVE-2022-49020 net/9p: Fix a potential socket leak in p9_socket_open
- CVE-2022-4902 eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting
- CVE-2022-49019 net: ethernet: nixge: fix NULL dereference
- CVE-2022-49018 mptcp: fix sleep in atomic at close time
- CVE-2022-49017 tipc: re-fetch skb cb after tipc_msg_validate
- CVE-2022-49016 net: mdiobus: fix unbalanced node reference count
- CVE-2022-49015 net: hsr: Fix potential use-after-free
- CVE-2022-49014 net: tun: Fix use-after-free in tun_detach()
- CVE-2022-49013 sctp: fix memory leak in sctp_stream_outq_migrate()
- CVE-2022-49012 afs: Fix server->active leak in afs_put_server
- CVE-2022-49011 hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
- CVE-2022-49010 hwmon: (coretemp) Check for null before removing sysfs attrs
- CVE-2022-4901 Cross-site scripting in Sophos Connect Client
- CVE-2022-49009 hwmon: (asus-ec-sensors) Add checks for devm_kcalloc
- CVE-2022-49008 can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down
- CVE-2022-49007 nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
- CVE-2022-49006 tracing: Free buffers when a used dynamic event is removed
- CVE-2022-49005 ASoC: ops: Fix bounds check for _sx controls
- CVE-2022-49004 riscv: Sync efi page table's kernel mappings before switching
- CVE-2022-49003 nvme: fix SRCU protection of nvme_ns_head list
- CVE-2022-49002 iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
- CVE-2022-49001 riscv: fix race when vmap stack overflow
- CVE-2022-49000 iommu/vt-d: Fix PCI device refcount leak in has_external_pci()
- CVE-2022-4900 Potential buffer overflow in php_cli_server_startup_workers
- CVE-2022-48999 ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference
- CVE-2022-48998 powerpc/bpf/32: Fix Oops on tail call tests
- CVE-2022-48997 char: tpm: Protect tpm_pm_suspend with locks
- CVE-2022-48996 mm/damon/sysfs: fix wrong empty schemes assumption under online tuning in damon_sysfs_set_schemes()
- CVE-2022-48995 Input: raydium_ts_i2c - fix memory leak in raydium_i2c_send()
- CVE-2022-48994 ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
- CVE-2022-48992 ASoC: soc-pcm: Add NULL check in BE reparenting
- CVE-2022-48991 mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths
- CVE-2022-48990 drm/amdgpu: fix use-after-free during gpu recovery
- CVE-2022-4899 zstd vulnerable to buffer overrun
- CVE-2022-48989 fscache: Fix oops due to race with cookie_lru and use_cookie
- CVE-2022-48988 memcg: fix possible use-after-free in memcg_write_event_control()
- CVE-2022-48987 media: v4l2-dv-timings.c: fix too strict blanking sanity checks
- CVE-2022-48986 mm/gup: fix gup_pud_range() for dax
- CVE-2022-48985 net: mana: Fix race on per-CQ variable napi work_done
- CVE-2022-48984 can: slcan: fix freed work crash
- CVE-2022-48983 io_uring: Fix a null-ptr-deref in io_tctx_exit_cb()
- CVE-2022-48982 Bluetooth: Fix crash when replugging CSR fake controllers
- CVE-2022-48981 drm/shmem-helper: Remove errant put in error path
- CVE-2022-48980 net: dsa: sja1105: avoid out of bounds access in sja1105_init_l2_policing()
- CVE-2022-4898 Cross-site scripting in Octopus Server
- CVE-2022-48979 drm/amd/display: fix array index out of bound error in DCN32 DML
- CVE-2022-48978 HID: core: fix shift-out-of-bounds in hid_report_raw_event
- CVE-2022-48977 can: af_can: fix NULL pointer dereference in can_rcv_filter
- CVE-2022-48976 netfilter: flowtable_offload: fix using __this_cpu_add in preemptible
- CVE-2022-48975 gpiolib: fix memory leak in gpiochip_setup_dev()
- CVE-2022-48974 netfilter: conntrack: fix using __this_cpu_add in preemptible
- CVE-2022-48973 gpio: amd8111: Fix PCI device reference count leak
- CVE-2022-48972 mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
- CVE-2022-48971 Bluetooth: Fix not cleanup led when bt_init fails
- CVE-2022-48970 af_unix: Get user_ns from in_skb in unix_diag_get_exact().
- CVE-2022-4897 BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting
- CVE-2022-48969 xen-netfront: Fix NULL sring after live migration
- CVE-2022-48968 octeontx2-pf: Fix potential memory leak in otx2_init_tc()
- CVE-2022-48967 NFC: nci: Bounds check struct nfc_target arrays
- CVE-2022-48966 net: mvneta: Prevent out of bounds read in mvneta_config_rss()
- CVE-2022-48965 gpio/rockchip: fix refcount leak in rockchip_gpiolib_register()
- CVE-2022-48964 ravb: Fix potential use-after-free in ravb_rx_gbeth()
- CVE-2022-48963 net: wwan: iosm: fix memory leak in ipc_mux_init()
- CVE-2022-48962 net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
- CVE-2022-48961 net: mdio: fix unbalanced fwnode reference count in mdio_device_release()
- CVE-2022-48960 net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
- CVE-2022-4896 Denial of service in Control de Ciber
- CVE-2022-48959 net: dsa: sja1105: fix memory leak in sja1105_setup_devlink_regions()
- CVE-2022-48958 ethernet: aeroflex: fix potential skb leak in greth_init_rings()
- CVE-2022-48957 dpaa2-switch: Fix memory leak in dpaa2_switch_acl_entry_add() and dpaa2_switch_acl_entry_remove()
- CVE-2022-48956 ipv6: avoid use-after-free in ip6_fragment()
- CVE-2022-48955 net: thunderbolt: fix memory leak in tbnet_open()
- CVE-2022-48954 s390/qeth: fix use-after-free in hsci
- CVE-2022-48953 rtc: cmos: Fix event handler registration ordering issue
- CVE-2022-48952 PCI: mt7621: Add sentinel to quirks table