Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 198 of 437.
- CVE-2022-47965 Memory corruption in macOS
- CVE-2022-4796 Incorrect Use of Privileged APIs in usememos/memos
- CVE-2022-47952 Information disclosure in linuxcontainers:lxc
- CVE-2022-47951 OpenStack Cinder, glance, and Nova vulnerable to Path Traversal
- CVE-2022-47950 OpenStack Swift XML external entities (XXE) Injection
- CVE-2022-4795 Galleries by Angie Makes <= 1.67 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47949 Memory corruption in nintendo:animal crossing\
- CVE-2022-47946 Use after free in linux:linux kernel
- CVE-2022-47945 ThinkPHP Framework vulnerable to remote code execution
- CVE-2022-47943 Memory corruption in linux:linux kernel
- CVE-2022-47942 Memory corruption in linux:linux kernel
- CVE-2022-47941 Denial of service in linux:linux kernel
- CVE-2022-47940 Memory corruption in linux:linux kernel
- CVE-2022-4794 AAWP < 3.12.3 - Unsafe URL Handling
- CVE-2022-47939 Use after free in linux:linux kernel
- CVE-2022-47938 Memory corruption in linux:linux kernel
- CVE-2022-47937 Multiple parsing problems in the Apache Sling Commons JSON module
- CVE-2022-47936 Memory corruption in JT Open
- CVE-2022-47935 Memory corruption in JT Open
- CVE-2022-47934 Denial of service in brave:brave
- CVE-2022-47933 Denial of service in brave:brave
- CVE-2022-47932 Denial of service in brave:brave
- CVE-2022-47931 Collision of hash values in github.com/bnb-chain/tss-lib
- CVE-2022-47930 IO FinNet tss-lib vulnerable to replay attacks involving proofs
- CVE-2022-4793 Blog Designer – Post and Widget < 2.4.1 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47929 Null dereference in debian:debian linux
- CVE-2022-47928 Cross-site scripting in misp-project:misp
- CVE-2022-47927 Information disclosure in fedoraproject:fedora
- CVE-2022-47926 Path traversal in ayacms project:ayacms
- CVE-2022-47925 Insufficient Input Validation in the Endpoint of the csaf-validator-service
- CVE-2022-47924 Arbitrary Code Execution using the validate function of csaf-validator-lib
- CVE-2022-4792 News & Blog Designer Pack < 3.3 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47917 CVE-2022-47917
- CVE-2022-47915 Memory corruption in macOS
- CVE-2022-47911 CVE-2022-47911
- CVE-2022-4791 Product Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47909 LQL Injection in Livestatus HTTP headers
- CVE-2022-47908 Memory corruption in V-Server
- CVE-2022-4790 WP Google My Business Auto Publish < 3.4 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47896 Code injection in IntelliJ IDEA
- CVE-2022-47895 Weak cryptography in IntelliJ IDEA
- CVE-2022-47894 Apache Zeppelin SAP: connecting to a malicious SAP server allowed it to perform XXE
- CVE-2022-47893 NetMan 204 Remote Code Execution
- CVE-2022-47892 Information disclosure in NetMan 204
- CVE-2022-47891 Admin password reset in NetMan 204
- CVE-2022-4789 WPZOOM Portfolio < 1.2.2 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47881 Memory corruption in foxit:pdf editor
- CVE-2022-47880 Information disclosure in jedox:jedox
- CVE-2022-4788 Embed PDF <= 1.0.6 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47879 Code injection in jedox:jedox
- CVE-2022-47878 File upload in jedox:jedox
- CVE-2022-47877 Cross-site scripting in jedox:jedox
- CVE-2022-47876 Code injection in jedox:jedox
- CVE-2022-47875 Path traversal in jedox:cloud
- CVE-2022-47874 Missing authorization in jedox:cloud
- CVE-2022-47873 XML external entity in netcad:keos
- CVE-2022-47872 Server-side request forgery in maccms:maccms
- CVE-2022-47870 Cross-site scripting in red-gate:sql monitor
- CVE-2022-4787 Themify Shortcodes < 2.0.8 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47866 SQL injection in lead management system project:lead management system
- CVE-2022-47865 SQL injection in lead management system project:lead management system
- CVE-2022-47864 SQL injection in lead management system project:lead management system
- CVE-2022-47862 SQL injection in lead management system project:lead management system
- CVE-2022-47861 SQL injection in lead management system project:lead management system
- CVE-2022-47860 SQL injection in lead management system project:lead management system
- CVE-2022-4786 Video.js - HTML5 Video Player for WordPress <= 4.5.0 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47859 SQL injection in lead management system project:lead management system
- CVE-2022-47854 File upload in i-librarian:i-librarian
- CVE-2022-47853 Command injection in totolink:a7100ru firmware
- CVE-2022-4785 Download Video Sidebar Widgets <= 6.1 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47848 Information disclosure in bezeq:vtech iad604-il firmware
- CVE-2022-4784 Hueman Addons <= 2.3.3 - Contributor+ Stored XSS via Shortcode
- CVE-2022-4783 Youtube Channel Gallery <= 2.4 - Contributor+ Stored XSS via Shortcode
- CVE-2022-4782 ClickFunnels <= 3.1.1 - Contributor+ Stored XSS via Shortcode
- CVE-2022-4781 Accordion Shortcodes <= 2.4.2 - Contributor+ Stored XSS via Shortcode
- CVE-2022-4780 hard coded credentials in elvexys ISOS firmwares
- CVE-2022-47790 SQL injection in dynamic transaction queuing system project:dynamic transaction queuing system
- CVE-2022-4779 authentication bypass in elvexys StreamX using StreamView HTML component with public web server feature
- CVE-2022-47780 SQL injection in bangresto project:bangresto
- CVE-2022-4778 path traversal in elvexys StreamX using StreamView HTML component with public web server feature
- CVE-2022-47770 SQL injection in serinf:fast checkin
- CVE-2022-4777 Bootstrap Shortcodes <= 3.4.0 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47769 File upload in serinf:fast checkin
- CVE-2022-47768 Path traversal in serinf:fast checkin
- CVE-2022-47767 Hardcoded credentials in solar-log:solar-log 1000 firmware
- CVE-2022-47766 File upload in popojicms:popojicms
- CVE-2022-47762 Path Traversal in gin-vue-admin
- CVE-2022-4776 CC Child Pages < 1.43 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47758 Security feature bypass in nanoleaf:nanoleaf firmware
- CVE-2022-47757 Path traversal in imo:imo
- CVE-2022-4775 GeoDirectory < 2.2.22 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47747 Kraken has arbitrary file read vulnerability via component testfs
- CVE-2022-47745 SQL injection in easycorp:zentao
- CVE-2022-47740 SQL injection in seltmann-webdesign:content management system
- CVE-2022-4774 Bit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload
- CVE-2022-47732 Auth bypass in yeastar:n412 firmware
- CVE-2022-4773 cloudsync LocalFilesystemConnector.java getItem path traversal
- CVE-2022-4772 Widoco WidocoUtils.java unZipIt path traversal
- CVE-2022-47717 Misconfiguration in lastyard:last yard
- CVE-2022-47715 Information disclosure in lastyard:last yard