Browse CVEs

MEDIUM 5.5 CVE-2022-3114 An issue was discovered in the Linux kernel through 5.16-rc6. imx_register_uart_clocks in drivers/clk/imx/clk.c lacks check of the return value of kc… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3115 An issue was discovered in the Linux kernel through 5.16-rc6. malidp_crtc_reset in drivers/gpu/drm/arm/malidp_crtc.c lacks check of the return value … Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3104 An issue was discovered in the Linux kernel through 5.16-rc6. lkdtm_ARRAY_BOUNDS in drivers/misc/lkdtm/bugs.c lacks check of the return value of kmal… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3105 An issue was discovered in the Linux kernel through 5.16-rc6. uapi_finalize in drivers/infiniband/core/uverbs_uapi.c lacks check of kmalloc_array(). Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3106 An issue was discovered in the Linux kernel through 5.16-rc6. ef100_update_stats in drivers/net/ethernet/sfc/ef100_nic.c lacks check of the return va… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 MEDIUM 5.5 CVE-2022-3107 An issue was discovered in the Linux kernel through 5.16-rc6. netvsc_get_ethtool_stats in drivers/net/hyperv/netvsc_drv.c lacks check of the return v… Linux Kernel 5.16.0+ Fix from $1,6002022-12-14 HIGH 7.5 CVE-2022-23476 Nokogiri is an open source XML and HTML library for the Ruby programming language. Nokogiri `1.13.8` and `1.13.9` fail to check the return value from… Nokogiri Patch available Fix from $1,9502022-12-08 MEDIUM 5.5 CVE-2022-4127 A NULL pointer dereference issue was discovered in the Linux kernel in io_files_update_with_index_alloc. A local user could use this flaw to potentia… Linux Kernel Patch available Fix from $1,6002022-11-28 MEDIUM 5.5 CVE-2022-4128 A NULL pointer dereference issue was discovered in the Linux kernel in the MPTCP protocol when traversing the subflow list at disconnect time. A loca… Linux Kernel after 5.18 Fix from $1,6002022-11-28 MEDIUM 5.5 CVE-2022-43588 A null pointer dereference vulnerability exists in the handle_ioctl_83150 functionality of Callback technologies CBFS Filter 20.0.8317. A specially c… Cbfs Filter No fix yet Fix from $1,6002022-11-28 MEDIUM 5.5 CVE-2022-43589 A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317. A specially c… Cbfs Filter No fix yet Fix from $1,6002022-11-28 MEDIUM 5.5 CVE-2022-43590 A null pointer dereference vulnerability exists in the handle_ioctl_0x830a0_systembuffer functionality of Callback technologies CBFS Filter 20.0.8317… Cbfs Filter No fix yet Fix from $1,6002022-11-28 CRITICAL 9.8 CVE-2022-36227 In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the functio… Debian Linux 3.6.2 / 8.2.12+ Fix from $2,3002022-11-22 MEDIUM 6.5 CVE-2022-34665 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cau… Gpu Display Driver 11.8 / 13.3+ Fix from $1,6002022-11-19 MEDIUM 6.5 CVE-2022-31613 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where any local user can cause a null-pointer dereference, w… Gpu Display Driver 11.8 / 13.3+ Fix from $1,6002022-11-19 MEDIUM 5.5 CVE-2022-31615 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-po… Gpu Display Driver 390.154 / 450.203.03+ Fix from $1,6002022-11-19 HIGH 7.5 CVE-2022-41909 TensorFlow is an open source platform for machine learning. An input `encoded` that is not a valid `CompositeTensorVariant` tensor will trigger a seg… Tensorflow 2.8.4 / 2.9.3+ Fix from $1,9502022-11-18 HIGH 7.5 CVE-2022-41889 TensorFlow is an open source platform for machine learning. If a list of quantized tensors is assigned to an attribute, the pywrap code fails to pars… Tensorflow 2.8.4 / 2.9.3+ Fix from $1,9502022-11-18 HIGH 7.5 CVE-2022-25741 Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapd… Aqt1000 Firmware Patch available Fix from $1,9502022-11-15 HIGH 7.5 CVE-2022-25710 Denial of service due to null pointer dereference when GATT is disconnected in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S… Apq8009 Firmware Mitigation only Fix from $1,9502022-11-15 MEDIUM 5.5 CVE-2022-37290 GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive. Fedora Patch available Fix from $1,6002022-11-14 HIGH 7.5 CVE-2022-27497 Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an una… Active Management Technology Firmware 11.8.93 / 11.12.93+ Fix from $1,9502022-11-11 MEDIUM 5.5 CVE-2022-34666 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cau… Virtual Gpu 11.9 / 13.4+ Fix from $1,6002022-11-10 MEDIUM 6.5 CVE-2022-44792EPSS 52% handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote… Debian Linux after 5.9.3 Fix from $1,6002022-11-07 MEDIUM 6.5 CVE-2022-44793EPSS 53% handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a … Debian Linux after 5.9.3 Fix from $1,6002022-11-07 HIGH 7.5 CVE-2022-43495 OpenHarmony-v3.1.2 and prior versions had a DOS vulnerability in distributedhardware_device_manager when joining a network. Network attakcers can sen… Openharmony after 3.1.2 Fix from $1,9502022-11-03 MEDIUM 5.5 CVE-2022-39381 Muhammara is a node module with c/cpp bindings to modify PDF with js for node or electron (based/replacement on/of galkhana/hummusjs). The package mu… Muhammarajs 1.0.111+ Fix from $1,6002022-11-02 MEDIUM 5.5 CVE-2022-3663 A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4_StsdAtom of the file Ap4StsdAtom… Bento4 No fix yet Fix from $1,6002022-10-26 MEDIUM 5.5 CVE-2022-39837 An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file… Diagnostic Log And Trace after 2.18.8 Fix from $1,6002022-10-25 MEDIUM 6.5 CVE-2022-3621 A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file fs/… Linux Kernel Patch available Fix from $1,6002022-10-20