PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 53

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 53 / 73

  1. CVE-2022-31813httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism
  2. CVE-2022-31783liblouis: invalid memory write in compileRule() in compileTranslationTable.c
  3. CVE-2022-31747Mozilla: Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10
  4. CVE-2022-31744Mozilla: CSP bypass enabling stylesheet injection
  5. CVE-2022-31742Mozilla: Querying a WebAuthn token with a large number of allowCredential entries may have leaked cross-origin information
  6. CVE-2022-31741Mozilla: Uninitialized variable leads to invalid memory read
  7. CVE-2022-31740Mozilla: Register allocation problem in WASM on arm64
  8. CVE-2022-31739Mozilla: Attacker-influenced path traversal when saving downloaded files
  9. CVE-2022-31738Mozilla: Browser window spoof using fullscreen mode
  10. CVE-2022-31737Mozilla: Heap buffer overflow in WebGL
  11. CVE-2022-31736Mozilla: Cross-Origin resource's length leaked
  12. CVE-2022-31692spring-security: Authorization rules can be bypassed via forward or include dispatcher types in Spring Security
  13. CVE-2022-31676open-vm-tools: local root privilege escalation in the virtual machine
  14. CVE-2022-31651sox: an assertion failure in rate_init in rate.c in libsox.a
  15. CVE-2022-31650sox: a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a
  16. CVE-2022-31631php: PDO:: quote() may return unquoted string due to an integer overflow
  17. CVE-2022-31630php: OOB read due to insufficient input validation in imageloadfont()
  18. CVE-2022-31629php: standard insecure cookie could be treated as a '__Host-' or '__Secure-' cookie by PHP applications
  19. CVE-2022-31628php: phar: infinite loop when decompressing quine gzip file
  20. CVE-2022-31627php: heap buffer overflow in finfo_buffer
  21. CVE-2022-31626php: password of excessive length triggers buffer overflow leading to RCE
  22. CVE-2022-31625php: Uninitialized array in pg_query_params() leading to RCE
  23. CVE-2022-31624mariadb: DoS due to improper locking due to unreleased lock in plugin/server_audit/server_audit.c
  24. CVE-2022-31623mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc
  25. CVE-2022-31622mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc
  26. CVE-2022-31621mariadb: improper locking due to unreleased lock in the ds_xbstream.cc
  27. CVE-2022-31213dbus-broker: null pointer reference when supplying a malformed XML config file
  28. CVE-2022-31212dbus-broker: a stack buffer over-read if a malicious Exec line is supplied
  29. CVE-2022-31197postgresql: SQL Injection in ResultSet.refreshRow() with malicious column names
  30. CVE-2022-31144redis: heap overflow via XAUTOCLAIM command
  31. CVE-2022-31130grafana: data source and plugin proxy endpoints leaking authentication tokens to some destination plugins
  32. CVE-2022-31129moment: inefficient parsing algorithm resulting in DoS
  33. CVE-2022-31123grafana: plugin signature bypass
  34. CVE-2022-31107grafana: OAuth account takeover
  35. CVE-2022-31097grafana: stored XSS vulnerability
  36. CVE-2022-31081perl-HTTP-Daemon: HTTP:: Daemon allows request smuggling
  37. CVE-2022-31051semantic-release: Masked secrets can be disclosed if they contain characters that are excluded from uri encoding
  38. CVE-2022-30789ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array
  39. CVE-2022-30788ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc
  40. CVE-2022-30787ntfs-3g: integer underflow in fuse_lib_readdir enables arbitrary memory read operations
  41. CVE-2022-30786ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate
  42. CVE-2022-30785ntfs-3g: a file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations
  43. CVE-2022-30784ntfs-3g: crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value
  44. CVE-2022-30783ntfs-3g: invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic
  45. CVE-2022-30704hw: Intel: Improper initialization in TXT SINIT ACM may cause escalation privilege.
  46. CVE-2022-30699unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names
  47. CVE-2022-30698unbound: novel ghost domain attack that allows attackers to trigger continued resolvability of malicious domain names
  48. CVE-2022-30635golang: encoding/gob: stack exhaustion in Decoder.Decode
  49. CVE-2022-30633golang: encoding/xml: stack exhaustion in Unmarshal
  50. CVE-2022-30632golang: path/filepath: stack exhaustion in Glob
CVE 2022 document archive — Page 53 | PulseLinux