Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 204 of 437.
- CVE-2022-46959 Path Traversal in github.com/go-sonic/sonic
- CVE-2022-46957 Cross-site scripting in online graduate tracer system project:online graduate tracer system
- CVE-2022-46956 SQL injection in dynamic transaction queuing system project:dynamic transaction queuing system
- CVE-2022-46955 SQL injection in dynamic transaction queuing system project:dynamic transaction queuing system
- CVE-2022-46954 SQL injection in dynamic transaction queuing system project:dynamic transaction queuing system
- CVE-2022-46953 SQL injection in dynamic transaction queuing system project:dynamic transaction queuing system
- CVE-2022-46952 SQL injection in dynamic transaction queuing system project:dynamic transaction queuing system
- CVE-2022-46951 SQL injection in dynamic transaction queuing system project:dynamic transaction queuing system
- CVE-2022-46950 SQL injection in dynamic transaction queuing system project:dynamic transaction queuing system
- CVE-2022-4695 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2022-46949 SQL injection in helmet store showroom site project:helmet store showroom site
- CVE-2022-46947 SQL injection in helmet store showroom site project:helmet store showroom site
- CVE-2022-46946 SQL injection in helmet store showroom site project:helmet store showroom site
- CVE-2022-46945 Path traversal in nagvis:nagvis
- CVE-2022-4694 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2022-46934 Cross-site scripting in keking:kkfileview
- CVE-2022-4693 User Verification < 1.0.94 - Authentication Bypass
- CVE-2022-4692 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2022-46914 File upload in tp-link:tl-wa801n firmware
- CVE-2022-46912 File upload in tp-link:tl-wr841n firmware
- CVE-2022-46910 File upload in tp-link:tl-wa901n firmware
- CVE-2022-4691 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2022-46908 Security feature bypass in sqlite:sqlite
- CVE-2022-46907 Apache JSPWiki: XSS Injection points in several plugins
- CVE-2022-46906 Cross-site scripting in websoft:websoft hcm
- CVE-2022-46905 Cross-site scripting in websoft:websoft hcm
- CVE-2022-46904 Cross-site scripting in websoft:websoft hcm
- CVE-2022-46903 Cross-site scripting in websoft:websoft hcm
- CVE-2022-46902 Path traversal in vocera:report server
- CVE-2022-46901 Missing authorization in vocera:report server
- CVE-2022-46900 Path traversal in vocera:report server
- CVE-2022-4690 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2022-46899 File upload in vocera:report server
- CVE-2022-46898 Path traversal in vocera:report server
- CVE-2022-46897 Other in insyde:kernel
- CVE-2022-46892 Missing authorization in amperecomputing:ampere altra firmware
- CVE-2022-46891 Use after free in arm:bifrost gpu kernel driver
- CVE-2022-46890 Missing authorization in nexusphp:nexusphp
- CVE-2022-4689 Improper Access Control in usememos/memos
- CVE-2022-46889 Cross-site scripting in nexusphp:nexusphp
- CVE-2022-46888 Cross-site scripting in nexusphp:nexusphp
- CVE-2022-46887 SQL injection in nexusphp:nexusphp
- CVE-2022-46886 Open redirect in ServiceNow
- CVE-2022-46885 Memory corruption in Firefox
- CVE-2022-46884 Use after free in Firefox
- CVE-2022-46883 Memory corruption in Firefox
- CVE-2022-46882 Use after free in Firefox
- CVE-2022-46881 Memory corruption in Firefox
- CVE-2022-46880 Use after free in Firefox
- CVE-2022-4688 Improper Authorization in usememos/memos
- CVE-2022-46879 Memory corruption in Firefox
- CVE-2022-46878 Memory corruption in Firefox
- CVE-2022-46877 Other in Firefox
- CVE-2022-46875 Security feature bypass in Firefox
- CVE-2022-46874 Code injection in Firefox
- CVE-2022-46873 Security feature bypass in Firefox
- CVE-2022-46872 Security feature bypass in Firefox
- CVE-2022-46871 Supply chain in Firefox
- CVE-2022-46870 Apache Zeppelin: Stored XSS in note permissions
- CVE-2022-4687 Incorrect Use of Privileged APIs in usememos/memos
- CVE-2022-46869 Privilege escalation in Acronis Cyber Protect Home Office
- CVE-2022-46868 Privilege escalation in Acronis Cyber Protect Home Office
- CVE-2022-46867 WordPress Universal Star Rating Plugin <= 2.1.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46866 WordPress Import External Images Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46865 WordPress Bulk Resize Media Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46864 Cross-site scripting in Woocommerce Custom Checkout Fields Editor With Drag & Drop
- CVE-2022-46863 WordPress Quick Event Manager Plugin <= 9.6.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-46862 WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46861 WordPress Login Page Styler Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-46860 WordPress Short URL Plugin <= 1.6.4 is vulnerable to SQL Injection
- CVE-2022-4686 Authorization Bypass Through User-Controlled Key in usememos/memos
- CVE-2022-46859 WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection
- CVE-2022-46858 WordPress Product Specifications for Woocommerce Plugin <= 0.6.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-46857 WordPress SiteAlert (Formerly WP Health) Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46856 WordPress Woocommerce Product Designer Plugin <= 4.3.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46855 WordPress Responsive Pricing Table Plugin <= 5.1.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-46854 Cross-site request forgery in Launchpad – Coming Soon & Maintenance Mode Plugin
- CVE-2022-46853 WordPress The Post Grid Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46852 WordPress WP Table Builder – WordPress Table Plugin Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-46851 WordPress Starter Templates Plugin <= 3.1.20 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46850 WordPress Easy Media Replace Plugin <= 0.1.3 is vulnerable to Arbitrary File Deletion
- CVE-2022-46849 WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection
- CVE-2022-46848 WordPress Visualizer Plugin <= 3.9.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-46846 WordPress Trending/Popular Post Slider and Widget plugin <= 1.5.7 - Broken Access Control vulnerability
- CVE-2022-46845 WordPress Slider a SlidersPack plugin <= 2.0.2 - Broken Access Control vulnerability
- CVE-2022-46844 WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-46843 WordPress Woocommerce Vietnam Checkout Plugin <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-46842 WordPress JS Help Desk plugin <= 2.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46841 WordPress Oxygen Builder Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-46840 WordPress JS Help Desk plugin <= 2.7.1 - Broken Access Control
- CVE-2022-4684 Improper Access Control in usememos/memos
- CVE-2022-46839 WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload
- CVE-2022-46838 WordPress JS Help Desk plugin <= 2.7.1 - Unauthenticated Settings Change Vulnerability
- CVE-2022-46836 PHP code injection in watolib
- CVE-2022-46835 SailPoint IdentityIQ JavaServer File Path Traversal Vulnerability
- CVE-2022-46834 Weak cryptography in SICK RFU65x Firmware
- CVE-2022-46833 Weak cryptography in SICK RFU63x Firmware
- CVE-2022-46832 Weak cryptography in SICK RFU62x Firmware
- CVE-2022-46831 Privilege escalation in TeamCity
- CVE-2022-46830 Server-side request forgery in TeamCity