Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 202 of 437.
- CVE-2022-47338 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47337 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47336 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47335 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47334 Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47333 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47332 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47331 Race condition in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47330 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-4733 Cross-site Scripting (XSS) - Stored in openemr/openemr
- CVE-2022-47329 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47328 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47327 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47326 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47325 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47324 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47323 Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47322 Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2022-47320 CVE-2022-47320
- CVE-2022-4732 Unrestricted Upload of File with Dangerous Type in microweber/microweber
- CVE-2022-47318 Code injection in ruby git
- CVE-2022-47317 Memory corruption in V-Server
- CVE-2022-47311 CVE-2022-47311
- CVE-2022-4731 myapnea Title cross site scripting
- CVE-2022-4730 Graphite Web Absolute Time Range cross site scripting
- CVE-2022-4729 Graphite Web Template Name cross site scripting
- CVE-2022-4728 Graphite Web Cookie cross site scripting
- CVE-2022-4727 OpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross site scripting
- CVE-2022-4726 SourceCodester Sanitization Management System Admin Login sql injection
- CVE-2022-4725 AWS SDK XML Parser XpathUtils.java XpathUtils server-side request forgery
- CVE-2022-4724 Improper Access Control in ikus060/rdiffweb
- CVE-2022-4723 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
- CVE-2022-4722 Authentication Bypass by Primary Weakness in ikus060/rdiffweb
- CVE-2022-47213 Microsoft Office Graphics Remote Code Execution Vulnerability
- CVE-2022-47212 Microsoft Office Graphics Remote Code Execution Vulnerability
- CVE-2022-47211 Microsoft Office Graphics Remote Code Execution Vulnerability
- CVE-2022-47210 Command injection in NETGEAR Nighthawk WiFi6 Router
- CVE-2022-4721 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb
- CVE-2022-47209 Hardcoded credentials in NETGEAR Nighthawk WiFi6 Router
- CVE-2022-47208 Command injection in NETGEAR Nighthawk WiFi6 Router
- CVE-2022-4720 Open Redirect in ikus060/rdiffweb
- CVE-2022-47197 Cross-site scripting in Ghost
- CVE-2022-47196 Cross-site scripting in Ghost
- CVE-2022-47195 Cross-site scripting in Ghost
- CVE-2022-47194 Cross-site scripting in Ghost
- CVE-2022-47192 Admin password reset via file upload vulnerability in Generex CS141
- CVE-2022-47191 Privilege Escalation via file upload vulnerability at Generex CS141
- CVE-2022-47190 RCE via file upload vulnerability in Generex CS141
- CVE-2022-4719 Business Logic Errors in ikus060/rdiffweb
- CVE-2022-47189 DoS via file upload vulnerability at Generex CS141
- CVE-2022-47188 Improper Input Validation in Generex CS141
- CVE-2022-47187 File upload XSS vulnerability in Generex CS141
- CVE-2022-47186 Unrestricted Upload of File vulnerability in Generex CS141
- CVE-2022-47185 Apache Traffic Server: Invalid Range header causes a crash
- CVE-2022-47184 Apache Traffic Server: The TRACE method can be use to disclose network information
- CVE-2022-47183 Cross-site request forgery in Extra Block Design, Style, CSS for ANY Gutenberg Blocks
- CVE-2022-47182 WordPress APIExperts Square for WooCommerce plugin <= 4.4.1 - Broken Access Control
- CVE-2022-47181 WordPress Email Templates Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47180 WordPress Kopa Framework Plugin <= 1.3.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-4718 Landing Page Builder < 1.4.9.9 - Contributor+ Cross-Site Scripting via Shortcode
- CVE-2022-47179 WordPress OWM Weather Plugin <= 5.6.11 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47178 WordPress Simple Share Buttons Adder Plugin <= 8.4.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47177 WordPress WP EasyPay Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47176 WordPress Depicter Slider plugin <= 1.9.0 - Broken Access Control vulnerability
- CVE-2022-47175 WordPress Royal Elementor Addons Plugin <= 1.3.75 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47174 WordPress Performance Lab Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47173 Cross-site scripting in Connect Contact Form 7, WooCommerce To Google Sheets & Other Platforms – Advanced Form Integration
- CVE-2022-47172 WordPress WooLentor Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47171 WordPress IP Vault – WP Firewall Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-47170 Cross-site scripting in Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- CVE-2022-4717 Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode
- CVE-2022-47169 WordPress Visibility Logic for Elementor Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47168 WordPress Printful Integration for WooCommerce plugin <= 2.2.3 - Cross Site Request Forgery (CSRF)
- CVE-2022-47167 WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47166 Cross-site request forgery in Void Contact Form 7 Widget For Elementor Page Builder
- CVE-2022-47165 WordPress CoSchedule Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47164 WordPress Event Manager for WooCommerce Plugin <= 3.7.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47163 WordPress WP CSV to Database Plugin <= 2.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47162 WordPress DH – Anti AdBlocker Plugin <= 36 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47161 WordPress Health Check & Troubleshooting Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47160 WordPress Wp Social Plugin <= 1.9.0 is vulnerable to Sensitive Data Exposure
- CVE-2022-4716 WP Popups < 2.1.4.8 - Contributor+ Stored XSS
- CVE-2022-47159 WordPress Logaster Logo Generator Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47158 WordPress alfred24 Click & Collect Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-47157 WordPress WP Custom Fields Search Plugin <= 1.2.34 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-47155 WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47154 WordPress CSS JS Manager Plugin <= 2.4.49 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47153 WordPress Jobeleon theme <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2022-47152 WordPress clickfunnels Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47151 WordPress JS Help Desk plugin <= 2.7.1 - Unauth. SQL Injection Vulnerability
- CVE-2022-47150 WordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-4715 Structured Content < 1.5.1 - Contributor+ Stored XSS in Shortcode
- CVE-2022-47149 WordPress Shortlinks by Pretty Links Plugin <= 3.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47148 WordPress WooCommerce PDF Invoices & Packing Slips Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47147 WordPress ipBlockList Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47146 WordPress Real Estate 7 Theme <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-47145 WordPress Blockonomics Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-47144 WordPress Mediamatic – Media Library Folders Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47143 WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-47142 WordPress Mediamatic – Media Library Folders Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)