PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 45

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 45 / 73

  1. CVE-2022-46874Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions
  2. CVE-2022-46872Mozilla: Arbitrary file read from a compromised content process
  3. CVE-2022-46871Mozilla: libusrsctp library out of date
  4. CVE-2022-46751apache-ivy: XML External Entity vulnerability
  5. CVE-2022-46725webkitgtk: Visiting a malicious website may lead to address bar spoofing.
  6. CVE-2022-46705webkitgtk: Visiting a malicious website may lead to address bar spoofing
  7. CVE-2022-46700webkitgtk: memory corruption issue leading to arbitrary code execution
  8. CVE-2022-46699webkitgtk: memory corruption issue leading to arbitrary code execution
  9. CVE-2022-46698webkitgtk: logic issue leading to user information disclosure
  10. CVE-2022-46692webkitgtk: Same Origin Policy bypass issue
  11. CVE-2022-46691webkitgtk: memory corruption issue leading to arbitrary code execution
  12. CVE-2022-46663less: crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal
  13. CVE-2022-46457nasm: segmentation fault in ieee_write_file() in output/outieee.c
  14. CVE-2022-46456nasm: buffer overflow in dbgdbg_typevalue() in output/outdbg.c
  15. CVE-2022-46344xorg-x11-server: XIChangeProperty out-of-bounds access
  16. CVE-2022-46343xorg-x11-server: ScreenSaverSetAttributes use-after-free
  17. CVE-2022-46342xorg-x11-server: XvdiSelectVideoNotify use-after-free
  18. CVE-2022-46341xorg-x11-server: XIPassiveUngrab out-of-bounds access
  19. CVE-2022-46340xorg-x11-server: XTestSwapFakeInput stack overflow
  20. CVE-2022-46329hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
  21. CVE-2022-46285libXpm: Infinite loop on unclosed comments
  22. CVE-2022-46176rust-cargo: cargo lacking ssh host key checking
  23. CVE-2022-46175json5: Prototype Pollution in JSON5 via Parse Method
  24. CVE-2022-46146exporter-toolkit: authentication bypass via cache poisoning
  25. CVE-2022-45939emacs: ctags local command execution vulnerability
  26. CVE-2022-45934kernel: integer overflow in l2cap_config_req() in net/bluetooth/l2cap_core.c
  27. CVE-2022-45919kernel: use-after-free due to race condition occurring in dvb_ca_en50221.c
  28. CVE-2022-45888kernel: use-after-free due to race condition in drivers/char/xillybus/xillyusb.c
  29. CVE-2022-45887kernel: memory leak in ttusb_dec_exit_dvb() in media/usb/ttusb-dec/ttusb_dec.c
  30. CVE-2022-45886kernel: use-after-free due to race condition occurring in dvb_net.c
  31. CVE-2022-45885kernel: use-after-free due to race condition occurring in dvb_frontend.c
  32. CVE-2022-45884kernel: use-after-free due to race condition occurring in dvb_register_device()
  33. CVE-2022-45873systemd: deadlock in systemd-coredump via a crash with a long backtrace
  34. CVE-2022-45869kernel: KVM: x86/mmu: race condition in direct_page_fault()
  35. CVE-2022-45703binutils: heap-based buffer overflow in display_debug_section() in readelf.c
  36. CVE-2022-45693jettison: If the value in map is the map's self, the new new JSONObject(map) cause StackOverflowError which may lead to dos
  37. CVE-2022-45685jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data
  38. CVE-2022-45442sinatra: Reflected File Download attack
  39. CVE-2022-45421Mozilla: Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5
  40. CVE-2022-45420Mozilla: Iframe contents could be rendered outside the iframe
  41. CVE-2022-45418Mozilla: Custom mouse cursor could have been drawn over browser UI
  42. CVE-2022-45416Mozilla: Keystroke Side-Channel Leakage
  43. CVE-2022-45414Mozilla: Quoting from an HTML email with certain tags will trigger network requests and load remote content, regardless of a configuration to block remote content
  44. CVE-2022-45412Mozilla: Symlinks may resolve to partially uninitialized buffers
  45. CVE-2022-45411Mozilla: Cross-Site Tracing was possible via non-standard override headers
  46. CVE-2022-45410Mozilla: ServiceWorker-intercepted requests bypassed SameSite cookie policy
  47. CVE-2022-45409Mozilla: Use-after-free in Garbage Collection
  48. CVE-2022-45408Mozilla: Fullscreen notification bypass via windowName
  49. CVE-2022-45406Mozilla: Use-after-free of a JavaScript Realm
  50. CVE-2022-45405Mozilla: Use-after-free in InputStream implementation
CVE 2022 document archive — Page 45 | PulseLinux