PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2022 document archive · 60

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

3,646 documents · Identifier year 2022 · 60 / 73

  1. CVE-2022-22747Mozilla: Crash when handling empty pkcs7 sequence
  2. CVE-2022-22746Mozilla: Calling into reportValidity could have lead to fullscreen window spoof
  3. CVE-2022-22745Mozilla: Leaking cross-origin URLs through securitypolicyviolation event
  4. CVE-2022-22744Mozilla: The 'Copy as curl' feature in DevTools did not fully escape website-controlled data, potentially leading to command injection
  5. CVE-2022-22743Mozilla: Browser window spoof using fullscreen mode
  6. CVE-2022-22742Mozilla: Out-of-bounds memory access when inserting text in edit mode
  7. CVE-2022-22741Mozilla: Browser window spoof using fullscreen mode
  8. CVE-2022-22740Mozilla: Use-after-free of ChannelEventQueue::mOwner
  9. CVE-2022-22739Mozilla: Missing throttling on external protocol launch dialog
  10. CVE-2022-22738Mozilla: Heap-buffer-overflow in blendGaussianBlur
  11. CVE-2022-22737Mozilla: Race condition when playing audio files
  12. CVE-2022-22721httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody
  13. CVE-2022-22720httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling
  14. CVE-2022-22719httpd: mod_lua: Use of uninitialized value of in r:parsebody
  15. CVE-2022-22677webkitgtk: the video in a webRTC call may be interrupted if the audio capture gets interrupted
  16. CVE-2022-22662webkitgtk: Cookie management issue leading to sensitive user information disclosure
  17. CVE-2022-22637webkitgtk: logic issue was addressed with improved state management
  18. CVE-2022-22629webkitgtk: Buffer overflow leading to arbitrary code execution
  19. CVE-2022-22628webkitgtk: Use-after-free leading to arbitrary code execution
  20. CVE-2022-22624webkitgtk: Use-after-free leading to arbitrary code execution
  21. CVE-2022-22620webkitgtk: maliciously crafted web content may lead to arbitrary code execution due to use after free
  22. CVE-2022-22594webkitgtk: A malicious website may exfiltrate data cross-origin
  23. CVE-2022-22592webkitgtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced
  24. CVE-2022-22590webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution
  25. CVE-2022-22589webkitgtk: Processing a maliciously crafted mail message may lead to running arbitrary javascript
  26. CVE-2022-22576curl: OAUTH2 bearer bypass in connection re-use
  27. CVE-2022-21986dotnet: ASP.NET Core Krestel HTTP headers pooling denial of service
  28. CVE-2022-21824nodejs: Prototype pollution via console.table properties
  29. CVE-2022-21724jdbc-postgresql: Unchecked Class Instantiation when providing Plugin Classes
  30. CVE-2022-21713grafana: IDOR vulnerability can lead to information disclosure
  31. CVE-2022-21703grafana: CSRF vulnerability can lead to privilege escalation
  32. CVE-2022-21702grafana: XSS vulnerability in data source handling
  33. CVE-2022-21698prometheus/client_golang: Denial of service using InstrumentHandlerCounter
  34. CVE-2022-21682flatpak: flatpak-builder --mirror-screenshots-url can access files outside the build directory
  35. CVE-2022-21681marked: regular expression inline.reflinkSearch may lead Denial of Service
  36. CVE-2022-21680marked: regular expression block.def may lead Denial of Service
  37. CVE-2022-21673grafana: Forward OAuth Identity Token can allow users to access some data sources
  38. CVE-2022-21658rust: Race condition in remove_dir_all leading to removal of files outside of the directory being removed
  39. CVE-2022-21641mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)
  40. CVE-2022-21640mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)
  41. CVE-2022-21638mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)
  42. CVE-2022-21637mysql: InnoDB unspecified vulnerability (CPU Oct 2022)
  43. CVE-2022-21635mysql: InnoDB unspecified vulnerability (CPU Oct 2022)
  44. CVE-2022-21633mysql: Server: Replication unspecified vulnerability (CPU Oct 2022)
  45. CVE-2022-21632mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2022)
  46. CVE-2022-21628OpenJDK: HttpServer no connection count limit (Lightweight HTTP Server, 8286918)
  47. CVE-2022-21626OpenJDK: excessive memory allocation in X.509 certificate parsing (Security, 8286533)
  48. CVE-2022-21625mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)
  49. CVE-2022-21624OpenJDK: insufficient randomization of JNDI DNS port numbers (JNDI, 8286910)
  50. CVE-2022-21619OpenJDK: improper handling of long NTLM client hostnames (Security, 8286526)
CVE 2022 document archive — Page 60 | PulseLinux