PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 57

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 57 / 73

  1. CVE-2022-26485Mozilla: Use-after-free in XSLT parameter processing
  2. CVE-2022-26387Mozilla: Time-of-check time-of-use bug when verifying add-on signatures
  3. CVE-2022-26386Mozilla: Temporary files downloaded to /tmp and accessible by other local users
  4. CVE-2022-26384Mozilla: iframe allow-scripts sandbox bypass
  5. CVE-2022-26383Mozilla: Browser window spoof using fullscreen mode
  6. CVE-2022-26381Mozilla: Use-after-free in text reflows
  7. CVE-2022-26377httpd: mod_proxy_ajp: Possible request smuggling
  8. CVE-2022-26373hw: cpu: Intel: Post-barrier Return Stack Buffer Predictions
  9. CVE-2022-26354QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak
  10. CVE-2022-26353QEMU: virtio-net: map leaking on error during receive
  11. CVE-2022-26343hw: Intel: Improper access control in the BIOS firmware causes escalation of privilege
  12. CVE-2022-26307libreoffice: Weak Master Keys
  13. CVE-2022-26306libreoffice: Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password
  14. CVE-2022-26305libreoffice: Execution of Untrusted Macros Due to Improper Certificate Validation
  15. CVE-2022-26280libarchive: an out-of-bounds read via the component zipx_lzma_alone_init
  16. CVE-2022-26148grafana: An information leak issue was discovered in Grafana through 7.3.4, when integrated with Zabbix
  17. CVE-2022-26129frrouting: Buffer overflow in functions parse_hello_subtlv, parse_ihu_subtlv, and parse_update_subtlv in babeld/message.c
  18. CVE-2022-26128frrouting: Heap buffer overflow in function babel_packet_examin in babeld/message.c
  19. CVE-2022-26127frrouting: Heap buffer overflow in frr/babeld/message.c
  20. CVE-2022-26126frrouting: Misusing strdup leads to stack overflow in isis_nb_notifications.c
  21. CVE-2022-26125frrouting: overflow bugs in unpack_tlv_router_cap
  22. CVE-2022-25927ua-parser-js: ReDoS vulnerability via the trim() function
  23. CVE-2022-25901cookiejar: Regular Expression Denial of Service (ReDoS)
  24. CVE-2022-25883nodejs-semver: Regular expression denial of service
  25. CVE-2022-25881http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability
  26. CVE-2022-25878protobufjs: Prototype Pollution via util.setProperty or ReflectionObject.setParsedOption methods
  27. CVE-2022-25869angularjs: Angular Cross-site Scripting (XSS)
  28. CVE-2022-25858terser: insecure use of regular expressions leads to ReDoS
  29. CVE-2022-25857snakeyaml: Denial of Service due to missing nested depth limitation for collections
  30. CVE-2022-25844angular: Regular Expression Denial of Service (ReDoS) in angular
  31. CVE-2022-25762tomcat: request mixup
  32. CVE-2022-25758scss-tokenizer: Regular expression denial of service in scss-tokenizer
  33. CVE-2022-25636kernel: heap out of bounds write in nf_dup_netdev.c
  34. CVE-2022-25634qt: allows loading of system library files from an unintended working directory.
  35. CVE-2022-25375kernel: information disclosure in drivers/usb/gadget/function/rndis.c
  36. CVE-2022-25315expat: Integer overflow in storeRawNames()
  37. CVE-2022-25314expat: Integer overflow in copyString()
  38. CVE-2022-25313expat: Stack exhaustion in doctype parsing
  39. CVE-2022-25310fribidi: SEGV in fribidi_remove_bidi_marks
  40. CVE-2022-25309fribidi: Heap-buffer-overflow in fribidi_cap_rtl_to_unicode
  41. CVE-2022-25308fribidi: Stack based buffer overflow
  42. CVE-2022-25265kernel: Executable Space Protection Bypass
  43. CVE-2022-25258kernel: security issues in the OS descriptor handling section of composite_setup function (composite.c)
  44. CVE-2022-25255qt: QProcess could execute a binary from the current working directory when not found in the PATH
  45. CVE-2022-25236expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  46. CVE-2022-25235expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  47. CVE-2022-25147apr-util: out-of-bounds writes in the apr_base64
  48. CVE-2022-24999express: "qs" prototype poisoning causes the hang of the node process
  49. CVE-2022-24975git: The --mirror option for git leaks secret for deleted content, aka the "GitBleed"
  50. CVE-2022-24963apr: integer overflow/wraparound in apr_encode
CVE 2022 document archive — Page 57 | PulseLinux