Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 217 of 437.
- CVE-2022-45040 Cross-site scripting in wbce:wbce cms
- CVE-2022-4504 Improper Input Validation in openemr/openemr
- CVE-2022-45039 File upload in wbce:wbce cms
- CVE-2022-45038 Cross-site scripting in wbce:wbce cms
- CVE-2022-45037 Cross-site scripting in wbce:wbce cms
- CVE-2022-45036 Cross-site scripting in wbce:wbce cms
- CVE-2022-45033 Cross-site scripting in oretnom23:expense tracker
- CVE-2022-45030 SQL injection in rconfig:rconfig
- CVE-2022-4503 Cross-site Scripting (XSS) - Generic in openemr/openemr
- CVE-2022-45028 Cross-site scripting in arris:nvg443b firmware
- CVE-2022-45027 Server-side request forgery in perfsonar:perfsonar
- CVE-2022-45026 Command injection in markdown preview enhanced project:markdown preview enhanced
- CVE-2022-45025 Command injection in markdown preview enhanced project:markdown preview enhanced
- CVE-2022-45020 Cross-site scripting in rukovoditel:rukovoditel
- CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr
- CVE-2022-45019 SQL injection in slims:senayan library management system
- CVE-2022-45017 Cross-site scripting in wbce:wbce cms
- CVE-2022-45016 Cross-site scripting in wbce:wbce cms
- CVE-2022-45015 Cross-site scripting in wbce:wbce cms
- CVE-2022-45014 Cross-site scripting in wbce:wbce cms
- CVE-2022-45013 Cross-site scripting in wbce:wbce cms
- CVE-2022-45012 Cross-site scripting in wbce:wbce cms
- CVE-2022-45010 SQL injection in simple phone book\/directory web app project:simple phone book\/directory web app
- CVE-2022-4501 Mega Addons For WPBakery Page Builder <= 4.3.0 - Authenticated (Subscriber+) Settings Update
- CVE-2022-45009 File upload in online leave management system project:online leave management system
- CVE-2022-45008 Cross-site scripting in online leave management system project:online leave management system
- CVE-2022-45005 Command injection in ip-com:ew9 firmware
- CVE-2022-45004 Gophish vulnerable to Cross-site Scripting via crafted landing page
- CVE-2022-45003 Gophish vulnerable to Denial of Service via crafted payload involving autofocus
- CVE-2022-4499 Information disclosure in Archer C5
- CVE-2022-4498 Memory corruption in Archer C5
- CVE-2022-4497 Jetpack CRM < 5.5 - Contributor+ Stored XSS
- CVE-2022-44962 Cross-site scripting in webtareas project:webtareas
- CVE-2022-44961 Cross-site scripting in webtareas project:webtareas
- CVE-2022-44960 Cross-site scripting in webtareas project:webtareas
- CVE-2022-4496 miniOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login
- CVE-2022-44959 Cross-site scripting in webtareas project:webtareas
- CVE-2022-44957 Cross-site scripting in webtareas project:webtareas
- CVE-2022-44956 Cross-site scripting in webtareas project:webtareas
- CVE-2022-44955 Cross-site scripting in webtareas project:webtareas
- CVE-2022-44954 Cross-site scripting in webtareas project:webtareas
- CVE-2022-44953 Cross-site scripting in webtareas project:webtareas
- CVE-2022-44952 Cross-site scripting in rukovoditel:rukovoditel
- CVE-2022-44951 Cross-site scripting in rukovoditel:rukovoditel
- CVE-2022-44950 Cross-site scripting in rukovoditel:rukovoditel
- CVE-2022-4495 collective.dms.basecontent column.py renderCell cross site scripting
- CVE-2022-44949 Cross-site scripting in rukovoditel:rukovoditel
- CVE-2022-44948 Cross-site scripting in rukovoditel:rukovoditel
- CVE-2022-44947 Cross-site scripting in rukovoditel:rukovoditel
- CVE-2022-44946 Cross-site scripting in rukovoditel:rukovoditel
- CVE-2022-44945 SQL injection in rukovoditel:rukovoditel
- CVE-2022-44944 Cross-site scripting in rukovoditel:rukovoditel
- CVE-2022-44942 Casdoor arbitrary file deletion vulnerability via uploadFile function
- CVE-2022-44940 Patchelf out-of-bounds read
- CVE-2022-4494 bspkrs MCPMappingViewer ZIP File RemoteZipHandler.java extractZip path traversal
- CVE-2022-44939 Other in echatserver:easy chat server
- CVE-2022-44938 Weak cryptography in seeddms:seeddms
- CVE-2022-44937 Cross-site request forgery in bosscms:bosscms
- CVE-2022-44932 Missing authorization in tenda:a18 firmware
- CVE-2022-44931 Memory corruption in tenda:a18 firmware
- CVE-2022-44930 Command injection in dlink:dhp-w310av firmware
- CVE-2022-4493 scifio ZIP File DefaultSampleFilesService.java downloadAndUnpackResource path traversal
- CVE-2022-44929 Missing authorization in d-link:dvg-g5402sp firmware
- CVE-2022-44928 Command injection in d-link:dvg-g5402sp firmware
- CVE-2022-4492 Undertow client not checking server identity presented by server certificate in https connections
- CVE-2022-44910 Memory corruption in quarkslab:binbloom
- CVE-2022-4491 WP Table Reloaded <= 1.9.4 - Contributor+ Stored XSS
- CVE-2022-44900 py7zr directory traversal vulnerability
- CVE-2022-44898 Memory corruption in asus:aura sync
- CVE-2022-44897 Cross-site scripting in apollotheme:ap pagebuilder
- CVE-2022-4489 WOOF - Products Filter for WooCommerce < 1.3.2 - Admin+ PHP Object Injection
- CVE-2022-4488 Widgets on Pages < 1.8.0 - Contributor+ Stored XSS
- CVE-2022-44877 CWP Control Web Panel OS Command Injection
- CVE-2022-44875 Privilege escalation in kioware:kioware
- CVE-2022-44874 Memory corruption in wasm3 project:wasm3
- CVE-2022-44870 Cross-site scripting in maccms:maccms
- CVE-2022-4487 Easy Accordion < 2.2.0 - Contributor+ Stored XSS
- CVE-2022-44860 SQL injection in automotive shop management system project:automotive shop management system
- CVE-2022-4486 Meteor Slides < 1.5.7 - Contributor+ Stored XSS
- CVE-2022-44859 SQL injection in automotive shop management system project:automotive shop management system
- CVE-2022-44858 SQL injection in automotive shop management system project:automotive shop management system
- CVE-2022-4485 Page-list < 5.3 - Contributor+ Stored XSS
- CVE-2022-44849 Cross-site request forgery in metinfo:metinfo
- CVE-2022-44844 Command injection in totolink:a7100ru firmware
- CVE-2022-44843 Command injection in totolink:a7100ru firmware
- CVE-2022-44840 Memory corruption in gnu:binutils
- CVE-2022-4484 Super Socializer < 7.13.44 - Contributor+ Stored XSS
- CVE-2022-44838 SQL injection in automotive shop management system project:automotive shop management system
- CVE-2022-44832 Command injection in dlink:dir-3040 firmware
- CVE-2022-44830 Code injection in event registration application project:event registration application
- CVE-2022-4483 Insert Pages < 3.7.5 - Contributor+ Stored XSS
- CVE-2022-44820 SQL injection in automotive shop management system project:automotive shop management system
- CVE-2022-4482 Carousel, Slider, Gallery by WP Carousel < 2.5.3 - Contributor+ Stored XSS
- CVE-2022-4481 Mesmerize Companion < 1.6.135 - Contributor+ Stored XSS
- CVE-2022-44808 Command injection in dlink:dir-823g firmware
- CVE-2022-44807 Memory corruption in dlink:dir-882 firmware
- CVE-2022-44806 Memory corruption in dlink:dir-882 firmware
- CVE-2022-44804 Memory corruption in dlink:dir-882 firmware
- CVE-2022-44801 Missing authorization in dlink:dir-878 firmware
- CVE-2022-4480 Click to Chat < 3.18.1 - Contributor+ Stored XSS