Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 216 of 437.
- CVE-2022-45154 supportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh
- CVE-2022-45153 saphanabootstrap-formula: Escalation to root for arbitrary users in hana/ha_cluster.sls
- CVE-2022-45152 Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library
- CVE-2022-45151 Moodle stored-XSS vulnerability in some "social" user profile fields
- CVE-2022-45150 Moodle reflected cross-site scripting vulnerability in policy tool
- CVE-2022-4515 Command injection in Exuberant Ctags
- CVE-2022-45149 Cross-Site Request Forgery in Moodle
- CVE-2022-45147 Deserialization in SIMATIC PCS neo V4.0
- CVE-2022-45146 Garbage collection issue in BC-FJA in Java 13 and later
- CVE-2022-45145 Command injection in call-cc:chicken
- CVE-2022-45144 Cross-site scripting in algoo:tracim
- CVE-2022-45143 Apache Tomcat: JsonErrorReportValve escaping
- CVE-2022-45142 Weak cryptography in Samba
- CVE-2022-45141 Weak cryptography in Samba
- CVE-2022-45140 WAGO: Missing Authentication for Critical Function
- CVE-2022-4514 Opencaching Deutschland oc-server3 varset.inc.php cross site scripting
- CVE-2022-45139 WAGO: Origin validation error through CORS misconfiguration
- CVE-2022-45138 WAGO: Missing Authentication for Critical Function
- CVE-2022-45137 WAGO: Reflective Cross-Site Scripting
- CVE-2022-45136 Apache Jena SDB allows arbitrary deserialisation via JDBC
- CVE-2022-45135 Apache Cocoon: SQL injection in DatabaseCookieAuthenticatorAction
- CVE-2022-45134 Deserialization in mahara:mahara
- CVE-2022-45133 File upload in mahara:mahara
- CVE-2022-45132 Code injection in linaro:lava
- CVE-2022-45130 Cross-site request forgery in plesk:obsidian
- CVE-2022-4513 European Environment Agency eionet.contreg cross site scripting
- CVE-2022-45129 Payara, when deployed to the root context, allows attackers to visit META-INF and WEB-INF
- CVE-2022-45128 Missing authorization in Intel(R) EMA software
- CVE-2022-45127 CVE-2022-45127
- CVE-2022-45126 Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime.
- CVE-2022-45124 Information disclosure in KingHistorian
- CVE-2022-45122 Cross-site scripting in Movable Type
- CVE-2022-45121 CVE-2022-45121
- CVE-2022-4512 Better Font Awesome < 2.0.4 - Contributor+ Stored XSS
- CVE-2022-45118 Telephony in communication subsystem sends public events with personal data, but the permission is not set.
- CVE-2022-45115 Memory corruption in Ichitaro
- CVE-2022-45113 Other in Movable Type
- CVE-2022-45112 Privilege escalation in Intel(R) VROC software
- CVE-2022-4511 RainyGao DocSys path traversal
- CVE-2022-45109 Information disclosure in Intel Unison software
- CVE-2022-45104 Command injection in Unisphere for PowerMax vApp
- CVE-2022-45103 Information disclosure in Unisphere for PowerMax vApp
- CVE-2022-45102 Other in Data Protection Central
- CVE-2022-45101 Privilege escalation in PowerScale OneFS
- CVE-2022-45100 Security feature bypass in PowerScale OneFS
- CVE-2022-4510 Path Traversal in binwalk
- CVE-2022-45099 Weak cryptography in PowerScale OneFS
- CVE-2022-45098 Information disclosure in PowerScale OneFS
- CVE-2022-45097 Privilege escalation in PowerScale OneFS
- CVE-2022-45096 Information disclosure in PowerScale OneFS
- CVE-2022-45095 Command injection in PowerScale OneFS
- CVE-2022-45094 Command injection in SINEC INS
- CVE-2022-45093 Path traversal in SINEC INS
- CVE-2022-45092 Path traversal in SINEC INS
- CVE-2022-45091 Cross-site Scripting in Smartpower Web
- CVE-2022-45090 SQL Injection in Smartpower Web
- CVE-2022-4509 Content Control < 1.1.10 - Contributor+ Stored XSS
- CVE-2022-45089 SQL Injection in Smartpower Web
- CVE-2022-45088 Local File Inclusion in Smartpower Web
- CVE-2022-45087 Cross-site Scripting in Smartpower Web
- CVE-2022-45086 Cross-site Scripting in Smartpower Web
- CVE-2022-45085 Server-Side Request Forgery in Smartpower Web
- CVE-2022-45084 WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-45083 WordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object Injection
- CVE-2022-45082 WordPress Accordions plugin <= 2.0.3 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
- CVE-2022-45080 WordPress Add Multiple Marker Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-4508 ConvertKit < 2.0.5 - Contributor+ Stored XSS
- CVE-2022-45079 WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45078 WordPress User Blocker Plugin <= 1.5.5 is vulnerable to CSV Injection
- CVE-2022-45077 WordPress Betheme theme <= 26.5.1.4 - Auth. PHP Object Injection vulnerability
- CVE-2022-45076 WordPress Flexible Elementor Panel Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45074 WordPress Activity Reactions For Buddypress Plugin <= 1.0.22 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45073 WordPress REST API Authentication plugin <= 2.4.0 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-45072 WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-45071 WordPress WPML Multilingual CMS premium plugin <= 4.5.13 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-45070 WordPress Conditional Checkout Fields for WooCommerce plugin <= 1.2.3 - Broken Authentication vulnerability
- CVE-2022-4507 Real Cookie Banner < 3.4.10 - Contributor+ Stored XSS
- CVE-2022-45069 WordPress Crowdsignal Dashboard plugin <= 3.0.9 - Privilege Escalation vulnerability
- CVE-2022-45068 WordPress Mercado Pago payments for WooCommerce Plugin <= 6.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45067 WordPress Exclusive Addons Elementor Plugin <= 2.6.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-45066 WordPress WooSwipe WooCommerce Gallery plugin <= 2.0.1 - Auth. Broken Access Control vulnerability
- CVE-2022-45065 WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-45064 Apache Sling Engine: Include-based XSS
- CVE-2022-45063 Command injection in fedoraproject:fedora
- CVE-2022-45062 Command injection in debian:debian linux
- CVE-2022-45061 Denial of service in fedoraproject:fedora
- CVE-2022-45060 Other in debian:debian linux
- CVE-2022-4506 Unrestricted Upload of File with Dangerous Type in openemr/openemr
- CVE-2022-45059 Other in fedoraproject:fedora
- CVE-2022-45052 Local File Inclusion in Axiell Iguana CMS
- CVE-2022-45051 Reflected POST XSS in Axiell Iguana CMS
- CVE-2022-45050 Reflected XSS in Axiell Iguana CMS
- CVE-2022-4505 Authorization Bypass Through User-Controlled Key in openemr/openemr
- CVE-2022-45049 Reflected XSS in Axiell Iguana CMS
- CVE-2022-45048 Apache Ranger: code execution vulnerability in policy expressions
- CVE-2022-45047 Apache MINA SSHD: Java unsafe deserialization vulnerability
- CVE-2022-45045 Command injection in xiongmaitech:mbd6304t
- CVE-2022-45044 Denial of service in SIPROTEC 5 6MD84 (CP300)
- CVE-2022-45043 Command injection in tenda:ax12 firmware
- CVE-2022-45041 SQL Injection exits in xinhu < 2.5.0