Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 214 of 437.
- CVE-2022-45442 Sinatra vulnerable to Reflected File Download attack
- CVE-2022-45441 Cross-site scripting in NBG-418N v2 firmware
- CVE-2022-45440 Path traversal in AX7501-B0 firmware
- CVE-2022-4544 MashShare < 3.8.7 - Contributor+ Stored XSS
- CVE-2022-45439 Information disclosure in AX7501-B0 firmware
- CVE-2022-45438 Apache Superset: Dashboard metadata information leak
- CVE-2022-45437 Stored cross-site scripting vulnerability in the reporting dashboard module
- CVE-2022-45436 Stored cross-site scripting vulnerability in network maps editor feature
- CVE-2022-45435 SailPoint IdentityIQ Access Control Bypass
- CVE-2022-45434 Denial of service in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45433 Missing authorization in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45432 Auth bypass in DSS Professional、DSS Express、DHI-DSS7016D-S2/DHI-DSS7016DR-S2、DHI-DSS4004-S2
- CVE-2022-45431 Missing authorization in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45430 Missing authorization in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-4543 Information disclosure in Linux kernel
- CVE-2022-45429 Server-side request forgery in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45428 Information disclosure in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45427 File upload in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45426 Path traversal in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45425 Hardcoded credentials in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45424 Missing authorization in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45423 Information disclosure in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45422 Privilege escalation in LG PC
- CVE-2022-45421 Memory corruption in Firefox
- CVE-2022-45420 Other in Firefox
- CVE-2022-4542 Compact WP Audio Player < 1.9.8 - Contributor+ Stored XSS
- CVE-2022-45419 Security feature bypass in Firefox
- CVE-2022-45418 Other in Firefox
- CVE-2022-45417 Information disclosure in Firefox
- CVE-2022-45416 Information disclosure in Firefox
- CVE-2022-45415 File upload in Firefox
- CVE-2022-45414 Security feature bypass in Thunderbird
- CVE-2022-45413 Open redirect in Firefox
- CVE-2022-45412 Information disclosure in Firefox
- CVE-2022-45411 Cross-site scripting in Firefox
- CVE-2022-45410 Security feature bypass in Firefox
- CVE-2022-4541 WordPress Visitors <= 1.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Header
- CVE-2022-45409 Use after free in Firefox
- CVE-2022-45408 Security feature bypass in Firefox
- CVE-2022-45407 Use after free in Firefox
- CVE-2022-45406 Use after free in Firefox
- CVE-2022-45405 Use after free in Firefox
- CVE-2022-45404 Security feature bypass in Firefox
- CVE-2022-45403 Information disclosure in Firefox
- CVE-2022-45402 Apache Airflow: Open redirect during login
- CVE-2022-45401 Jenkins Associated Files Plugin vulnerable to cross-site scripting (XSS)
- CVE-2022-45400 XXE vulnerability in Jenkins JAPEX Plugin
- CVE-2022-45399 Jenkins Cluster Statistics Plugin Missing Authorization vulnerability
- CVE-2022-45398 Cross-Site Request Forgery in Jenkins Cluster Statistics Plugin
- CVE-2022-45397 XXE vulnerability on agents in Jenkins OSF Builder Suite : : XML Linter Plugin
- CVE-2022-45396 XXE vulnerability on agents in Jenkins SourceMonitor Plugin
- CVE-2022-45395 XML External Entity Reference in Jenkins CCCC Plugin
- CVE-2022-45394 Missing permission check in Jenkins Delete log Plugin
- CVE-2022-45393 Cross-Site Request Forgery in Jenkins Delete log Plugin
- CVE-2022-45392 Plaintext Storage of a Password in Jenkins NS-ND Integration Performance Publisher Plugin
- CVE-2022-45391 Jenkins NS-ND Integration Performance Publisher Plugin disables SSL/TLS certificate validation globally and unconditionally
- CVE-2022-45390 Missing permission check in Jenkins loader.io Plugin allows enumerating credentials IDs
- CVE-2022-4539 Web Application Firewall <= 2.1.2 - IP Address Spoofing to Protection Mechanism Bypass
- CVE-2022-45389 Missing Authorization in Jenkins XP-Dev Plugin
- CVE-2022-45388 Jenkins Config Rotator Plugin vulnerable to path traversal
- CVE-2022-45387 Jenkins BART Plugin vulnerable to cross-site scripting (XSS)
- CVE-2022-45386 XML External Entity Reference in Jenkins Violations Plugin
- CVE-2022-45385 Lack of authentication mechanism for webhook in CloudBees Docker Hub/Registry Notification Plugin
- CVE-2022-45384 Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords
- CVE-2022-45383 Incorrect permission checks in Jenkins Support Core Plugin
- CVE-2022-45382 Cross-site Scripting in Jenkins Naginator Plugin
- CVE-2022-45381 Arbitrary file read vulnerability in Jenkins Pipeline Utility Steps Plugin
- CVE-2022-45380 Jenkins JUnit Plugin subject to Cross-site Scripting via URL conversion
- CVE-2022-45379 Whole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions
- CVE-2022-45378 Apache SOAP allows unauthenticated users to potentially invoke arbitrary code
- CVE-2022-45377 WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities
- CVE-2022-45376 WordPress Side Cart Woocommerce (Ajax) Plugin < 2.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45375 WordPress iFeature Slider plugin <= 1.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-45374 WordPress Yet Another Related Posts Plugin (YARPP) plugin <= 5.30.4 - Local File Inclusion
- CVE-2022-45373 WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection
- CVE-2022-45372 WordPress Product Gallery Slider for WooCommerce Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45371 WordPress ShopEngine Plugin <= 4.1.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45370 WordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV Injection
- CVE-2022-4537 Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypass
- CVE-2022-45369 WordPress Plugin for Google Reviews plugin <= 2.2.2 - Auth. Broken Access Control vulnerability
- CVE-2022-45368 WordPress 1003 Mortgage Application plugin <= 1.75 - Local File Inclusion
- CVE-2022-45367 WordPress Custom Order Numbers for WooCommerce Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45366 WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-45365 WordPress Stock Ticker Plugin <= 3.23.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-45364 Cross-site request forgery in Drag and Drop Multiple File Upload – Contact Form 7
- CVE-2022-45363 WordPress Betheme premium theme <= 26.6.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-45362 WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)
- CVE-2022-45361 WordPress 0mk Shortener Plugin <= 0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-45360 WordPress Commenter Emails Plugin <= 2.6.1 is vulnerable to CSV Injection
- CVE-2022-4536 IP Vault – WP Firewall <= 1.1 - IP Address Spoofing to Protection Mechanism Bypass
- CVE-2022-45359 WordPress YITH WooCommerce Gift Cards Premium Plugin <= 3.19.0 is vulnerable to Arbitrary File Upload
- CVE-2022-45358 WordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-45357 WordPress 1003 Mortgage Application Plugin <= 1.75 is vulnerable to CSV Injection
- CVE-2022-45356 WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability
- CVE-2022-45355 WordPress WP Pipes Plugin <= 1.33 is vulnerable to SQL Injection (SQLi)
- CVE-2022-45354 WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure
- CVE-2022-45353 WordPress Betheme theme <= 26.6.1 is vulnerable to Broken Access Control
- CVE-2022-45352 WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability
- CVE-2022-45351 WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability
- CVE-2022-45350 WordPress Simple History Plugin <= 3.3.1 is vulnerable to CSV Injection