CVEs published in September 2022
3,650 vulnerabilities, 294 critical, 12 exploited.
KernelLinuxxen/grants: prevent integer overflow in gnttab_dma_alloc_pages()No scoreKernelLinuxRevert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()"No scoreKernelLinuxUSB: gadget: Fix obscure lockdep violation for udc_mutexNo scoreKernelLinuxwifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnectedNo scoreKernelLinuxtty: n_gsm: initialize more members at gsm_alloc_mux()No scoreKernelLinuxtty: n_gsm: avoid call of sleeping functions from atomic contextNo scoreKernelLinuxtty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()No scoreKernelLinuxbinder: fix UAF of ref->proc caused by race conditionNo scoreKernelLinuxcifs: fix small mempool leak in SMB2_negotiate()No scoreKernelLinuxmedia: mceusb: Use new usb_control_msg_*() routinesNo scoreKernelLinuxUSB: core: Prevent nested device-reset callsNo scoreKernelLinuxdma-buf/dma-resv: check if the new fence is really laterNo scoreKernelLinuxwifi: mac80211: Fix UAF in ieee80211_scan_rx()No scoreKernelLinuxALSA: seq: oss: Fix data-race for max_midi_devs accessNo scoreKernelLinuxALSA: seq: Fix data-race at module auto-loadingNo score- nextcloud talk, kiteworks security-advisories +1 moreLast video frame is still sent after video is disabled in a call in Nextcloud Talk4.3 Medium
- nextcloud, kiteworks security-advisories +1 moreAccess to internal files of the Nextcloud Android app3.2 Low
- nextcloud enterprise server, server, kiteworks security-advisories +2 moreServer-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Server3.0 Low
- zohocorp manageengine password manager pro, manageengine access manager plus, manageengine pam360 +2 moreZoho ManageEngine Password Manager Pro through 12120 before 12121, PAM360 through 5550 before...9.8 Critical
- google tensorflow`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `TensorListFromTensor` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `SetSize` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `CollectiveGather` in TensorFlow5.9 Medium
- google tensorflowFloating point exception in `Conv2D` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `EmptyTensorList` in TensorFlow5.9 Medium
- google tensorflowNull dereference on MLIR on empty function attributes in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `DrawBoundingBoxes` in TensorFlow5.9 Medium
- ghas-to-csv project ghas-to-csvImproper Neutralization of Formula Elements in a CSV File in ghas-to-csv5.8 Medium
- google tensorflow`CHECK` fail in `Unbatch` in TensorFlow5.9 Medium
- google tensorflowNull-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient` in TensorFlow5.9 Medium
- google tensorflowNull dereference on MLIR on empty function attributes in TensorFlow5.9 Medium
- google tensorflowSegfault in `Requantize` in TensorFlow5.9 Medium
- google tensorflowSegfault in `RaggedBincount` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `LRNGrad` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `ParameterizedTruncatedNormal` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `Save` and `SaveSlices` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `RandomPoissonV2` in TensorFlow5.9 Medium
- samsung mtowerA Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in...7.5 High
- samsung mtowerA Buffer Access with Incorrect Length Value vulnerablity in the TEE_CipherUpdate function in...7.5 High
- samsung mtowerA NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0...7.5 High
- samsung mtowerA Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung...7.5 High
- samsung mtowerThe function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger...7.5 High
- samsung mtowerA Memory Allocation with Excessive Size Value vulnerablity in the TEE_Realloc function in Samsung...7.5 High
- google tensorflow`CHECK` fail in `MaxPool` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `tf.linalg.matrix_rank` in TensorFlow5.9 Medium
- google tensorflowSegfault in `SparseBincount` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `FakeQuantWithMinMaxVarsGradient` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `AudioSummaryV2` in TensorFlow5.9 Medium
- google tensorflow`CHECK` fail in `tf.random.gamma` in TensorFlow5.9 Medium
- Show moreLoading…