Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 215 of 437.
- CVE-2022-45349 WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability
- CVE-2022-45348 WordPress amr users Plugin <= 4.59.4 is vulnerable to CSV Injection
- CVE-2022-45347 Apache ShardingSphere-Proxy: MySQL authentication bypass
- CVE-2022-45343 Use after free in gpac:gpac
- CVE-2022-4534 Limit Login Attempts (Spam Protection) <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass
- CVE-2022-45338 File upload in exactsoftware:exact synergy
- CVE-2022-45337 Memory corruption in tenda:tx9 pro firmware
- CVE-2022-45332 Memory corruption in gnu:libredwg
- CVE-2022-45331 SQL injection in aerocms project:aerocms
- CVE-2022-45330 SQL injection in aerocms project:aerocms
- CVE-2022-4533 Limit Login Attempts Plus <= 1.1.0 - IP Address Spoofing to Protection Mechanism Bypass
- CVE-2022-45329 SQL injection in aerocms project:aerocms
- CVE-2022-45328 SQL injection in church management system project:church management system
- CVE-2022-45326 XML external entity in kwoksys:information server
- CVE-2022-45320 Privilege escalation in Liferay Portal
- CVE-2022-4532 LOGIN AND REGISTRATION ATTEMPTS LIMIT<= 2.1 - IP Address Spoofing to Protection Mechanism Bypass
- CVE-2022-45315 Memory corruption in RouterOS
- CVE-2022-45313 Memory corruption in mikrotik:routeros
- CVE-2022-45307 Misconfiguration in chocolatey:chocolatey php
- CVE-2022-45306 Misconfiguration in chocolatey:chocolatey azure-pipelines-agent
- CVE-2022-45305 Misconfiguration in chocolatey:chocolatey python3
- CVE-2022-45304 Misconfiguration in chocolatey:chocolatey cmder
- CVE-2022-45301 Misconfiguration in chocolatey:chocolatey ruby
- CVE-2022-45299 webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL
- CVE-2022-45297 SQL injection in eq project:eq
- CVE-2022-45292 Business logic in funkwhale:funkwhale
- CVE-2022-45291 Hardcoded credentials in pwsdashboard:personal weather station dashboard
- CVE-2022-45290 Path traversal in kbase doc project:kbase doc
- CVE-2022-4529 Security, Antivirus, Firewall – S.A.F <= 2.3.5 - IP Address Spoofing to Protection Mechanism Bypass
- CVE-2022-45287 Privilege escalation in temenos:cwx
- CVE-2022-45285 Cross-site scripting in vsourz:advanced cf7 db
- CVE-2022-45283 Memory corruption in gpac:gpac
- CVE-2022-45280 Cross-site scripting in eyoucms:eyoucms
- CVE-2022-45278 SQL injection in jizhicms:jizhicms
- CVE-2022-45276 Auth bypass in eyunjing:yjcms
- CVE-2022-45275 File upload in dynamic transaction queuing system project:dynamic transaction queuing system
- CVE-2022-4527 collective.task table.py AssignedGroupColumn cross site scripting
- CVE-2022-45269 Path traversal in gmaolinx:linx sphere
- CVE-2022-4526 django-photologue Default Template photo_detail.html cross site scripting
- CVE-2022-4525 National Sleep Research Resource sleepdata.org cross site scripting
- CVE-2022-4524 Roots soil Plugin CleanUpModule.php language_attributes cross site scripting
- CVE-2022-4523 vexim2 cross site scripting
- CVE-2022-45228 Cross-site request forgery in dragino:lg01 lora firmware
- CVE-2022-45227 Information disclosure in dragino:lg01 lora firmware
- CVE-2022-45225 Cross-site scripting in book store management system project:book store management system
- CVE-2022-45224 Cross-site scripting in web-based student clearance system project:web-based student clearance system
- CVE-2022-45223 Cross-site scripting in web-based student clearance system project:web-based student clearance system
- CVE-2022-45221 Cross-site scripting in web-based student clearance system project:web-based student clearance system
- CVE-2022-4522 CalendarXP cross site scripting
- CVE-2022-45218 Cross-site scripting in oretnom23:human resource management system
- CVE-2022-45217 Cross-site scripting in book store management system project:book store management system
- CVE-2022-45215 Cross-site scripting in book store management system project:book store management system
- CVE-2022-45214 Cross-site scripting in sanitization management system project:sanitization management system
- CVE-2022-45213 Other in perfsonar:perfsonar
- CVE-2022-45210 Jeecg-boot vulnerable to SQL Injection
- CVE-2022-4521 WSO2 carbon-registry Request Parameter cross site scripting
- CVE-2022-45208 Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin
- CVE-2022-45207 Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString
- CVE-2022-45206 Jeecg-boot vulnerable to SQL Injection
- CVE-2022-45205 SQL injection in jeecg:jeecg boot
- CVE-2022-45204 Denial of service in gpac:gpac
- CVE-2022-45202 Memory corruption in gpac:gpac
- CVE-2022-4520 WSO2 carbon-registry Advanced Search advancedSearchForm-ajaxprocessor.jsp cross site scripting
- CVE-2022-45199 Pillow subject to DoS via SAMPLESPERPIXEL tag
- CVE-2022-45198 Pillow vulnerable to Data Amplification attack.
- CVE-2022-45197 Slixmpp lacks SSL Certificate hostname validation in XMLStream
- CVE-2022-45196 Denial of service in hyperledger:fabric
- CVE-2022-45195 Weak cryptography in simplex:simplex chat
- CVE-2022-45194 XML external entity in bruhn-newtech:cbrn-analysis
- CVE-2022-45193 Misconfiguration in bruhn-newtech:cbrn-analysis
- CVE-2022-45192 Denial of service in microchip:rn4870 firmware
- CVE-2022-45191 Denial of service in microchip:rn4870 firmware
- CVE-2022-45190 Auth bypass in microchip:rn4870 firmware
- CVE-2022-4519 WP User <= 7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2022-45188 Memory corruption in debian:debian linux
- CVE-2022-45186 Information disclosure in salesagility:suitecrm
- CVE-2022-45185 Deserialization in salesagility:suitecrm
- CVE-2022-45184 Path traversal in ironmansoftware:powershell universal
- CVE-2022-45183 Privilege escalation in ironmansoftware:powershell universal
- CVE-2022-45182 Other in pistar:pi-star digital voice dashboard
- CVE-2022-45180 Missing authorization in liveboxcloud:vdesk
- CVE-2022-45179 Cross-site scripting in liveboxcloud:vdesk
- CVE-2022-45178 Privilege escalation in liveboxcloud:vdesk
- CVE-2022-45177 Information disclosure in liveboxcloud:vdesk
- CVE-2022-45176 Cross-site scripting in liveboxcloud:vdesk
- CVE-2022-45175 Missing authorization in liveboxcloud:vdesk
- CVE-2022-45174 Auth bypass in liveboxcloud:vdesk
- CVE-2022-45173 Auth bypass in liveboxcloud:vdesk
- CVE-2022-45172 Privilege escalation in liveboxcloud:vdesk
- CVE-2022-45171 File upload in liveboxcloud:vdesk
- CVE-2022-45170 Weak cryptography in liveboxcloud:vdesk
- CVE-2022-45169 Open redirect in liveboxcloud:vdesk
- CVE-2022-45168 Auth bypass in liveboxcloud:vdesk
- CVE-2022-45167 Missing authorization in archibus:archibus web central
- CVE-2022-45166 Missing authorization in archibus:archibus web central
- CVE-2022-45165 SQL injection in archibus:web central
- CVE-2022-45164 Missing authorization in archibus:archibus web central
- CVE-2022-45163 Information disclosure in nxp:i.mx 6 firmware
- CVE-2022-45157 Exposure of vSphere's CPI and CSI credentials in Rancher
- CVE-2022-45155 obs-service-go_modules: arbitrary directory delete