Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 193 of 437.
- CVE-2022-48665 exfat: fix overflow for large capacity partition
- CVE-2022-48664 btrfs: fix hang during unmount when stopping a space reclaim worker
- CVE-2022-48663 gpio: mockup: fix NULL pointer dereference when removing debugfs
- CVE-2022-48662 drm/i915/gem: Really move i915_gem_context.link under ref protection
- CVE-2022-48661 gpio: mockup: Fix potential resource leakage when register a chip
- CVE-2022-48660 gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully
- CVE-2022-4866 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2022-48659 mm/slub: fix to return errno if kmalloc() fails
- CVE-2022-48658 mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context.
- CVE-2022-48657 arm64: topology: fix possible overflow in amu_fie_setup()
- CVE-2022-48656 dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get()
- CVE-2022-48655 firmware: arm_scmi: Harden accesses to the reset domains
- CVE-2022-48654 netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find()
- CVE-2022-48653 ice: Don't double unplug aux on peer initiated reset
- CVE-2022-48652 ice: Fix crash by keep old cfg when update TCs more than queues
- CVE-2022-48651 ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
- CVE-2022-48650 scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts()
- CVE-2022-4865 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2022-48649 mm/slab_common: fix possible double free of kmem_cache
- CVE-2022-48648 sfc: fix null pointer dereference in efx_hard_start_xmit
- CVE-2022-48647 sfc: fix TX channel offset when using legacy interrupts
- CVE-2022-48646 sfc/siena: fix null pointer dereference in efx_hard_start_xmit
- CVE-2022-48645 net: enetc: deny offload of tc-based TSN features on VF interfaces
- CVE-2022-48644 net/sched: taprio: avoid disabling offload when it was never enabled
- CVE-2022-48643 netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain()
- CVE-2022-48642 netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain()
- CVE-2022-48641 netfilter: ebtables: fix memory leak when blob is malformed
- CVE-2022-48640 bonding: fix NULL deref in bond_rr_gen_slave_id
- CVE-2022-4864 Argument Injection in froxlor/froxlor
- CVE-2022-48639 net: sched: fix possible refcount leak in tc_new_tfilter()
- CVE-2022-48638 cgroup: cgroup_get_from_id() must check the looked-up kn is a directory
- CVE-2022-48637 bnxt: prevent skb UAF after handing over to PTP worker
- CVE-2022-48636 s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
- CVE-2022-48635 fsdax: Fix infinite loop in dax_iomap_rw()
- CVE-2022-48634 drm/gma500: Fix BUG: sleeping function called from invalid context errors
- CVE-2022-48633 drm/gma500: Fix WARN_ON(lock->magic != lock) error
- CVE-2022-48632 i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction()
- CVE-2022-48631 ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0
- CVE-2022-48630 crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ
- CVE-2022-4863 Improper Handling of Insufficient Permissions or Privileges in usememos/memos
- CVE-2022-48629 crypto: qcom-rng - ensure buffer for generate is completely filled
- CVE-2022-48628 ceph: drop messages from MDS when unmounting
- CVE-2022-48627 vt: fix memory overlapping when deleting chars in the buffer
- CVE-2022-48626 moxart: fix potential use-after-free on remove path
- CVE-2022-48625 Hardcoded credentials in yealink:configuration encryption tool
- CVE-2022-48624 Command injection in greenwoodsoftware:less
- CVE-2022-48623 Memory corruption in rurban:cpanel\
- CVE-2022-48622 Memory corruption in gnome:gdkpixbuf
- CVE-2022-48621 Auth bypass in EMUI
- CVE-2022-48620 Memory corruption in troglobit:libeuv
- CVE-2022-4862 XSS vulnerability in M-Files Web
- CVE-2022-48619 Denial of service in linux:linux kernel
- CVE-2022-48618 Apple Multiple Products Memory Corruption
- CVE-2022-48616 Command injection in AR6000
- CVE-2022-48615 Missing authorization in AR6000
- CVE-2022-48614 Cross-site Scripting in Semantic MediaWiki
- CVE-2022-48613 Race condition in EMUI
- CVE-2022-48612 Cross-site scripting in classlink:oneclick
- CVE-2022-48611 Privilege escalation in iTunes for Windows
- CVE-2022-48610 Information disclosure in iOS and iPadOS
- CVE-2022-4861 Incorrect Implementation of Authentication Algorithm
- CVE-2022-48606 Null dereference in EMUI
- CVE-2022-48605 Other in EMUI
- CVE-2022-48604 SQL injection in SL 1
- CVE-2022-48603 SQL injection in SL 1
- CVE-2022-48602 SQL injection in SL 1
- CVE-2022-48601 SQL injection in SL 1
- CVE-2022-48600 SQL injection in SL 1
- CVE-2022-4860 KBase Metrics methods_upload_user_stats.py upload_user_data sql injection
- CVE-2022-48599 SQL injection in SL 1
- CVE-2022-48598 SQL injection in SL 1
- CVE-2022-48597 SQL injection in SL 1
- CVE-2022-48596 SQL injection in SL 1
- CVE-2022-48595 SQL injection in SL 1
- CVE-2022-48594 SQL injection in SL 1
- CVE-2022-48593 SQL injection in SL 1
- CVE-2022-48592 SQL injection in SL 1
- CVE-2022-48591 SQL injection in SL 1
- CVE-2022-48590 SQL injection in SL 1
- CVE-2022-4859 Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting
- CVE-2022-48589 SQL injection in SL 1
- CVE-2022-48588 SQL injection in SL 1
- CVE-2022-48587 SQL injection in SL 1
- CVE-2022-48586 SQL injection in SL 1
- CVE-2022-48585 SQL injection in SL 1
- CVE-2022-48584 Command injection in SL 1
- CVE-2022-48583 Command injection in SL 1
- CVE-2022-48582 Command injection in SL 1
- CVE-2022-48581 Command injection in SL 1
- CVE-2022-48580 Command injection in SL 1
- CVE-2022-4858 Insertion of Sensitive Information into Log File
- CVE-2022-48579 Path traversal in rarlab:unrar
- CVE-2022-48578 Memory corruption in macOS
- CVE-2022-48577 Missing authorization in macOS
- CVE-2022-48575 Auth bypass in macOS Monterey
- CVE-2022-48571 Denial of service in memcached:memcached
- CVE-2022-48570 Weak cryptography in cryptopp:crypto\+\+
- CVE-2022-4857 Modbus Tools Modbus Poll mbp File mbpoll.exe buffer overflow
- CVE-2022-48566 Weak cryptography in debian:debian linux
- CVE-2022-48565 XML external entity in debian:debian linux