Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 219 of 437.
- CVE-2022-44669 Windows Error Reporting Elevation of Privilege Vulnerability
- CVE-2022-44668 Windows Media Remote Code Execution Vulnerability
- CVE-2022-44667 Windows Media Remote Code Execution Vulnerability
- CVE-2022-44666 Windows Contacts Remote Code Execution Vulnerability
- CVE-2022-4466 WordPress Infinite Scroll - Ajax Load More < 5.6.0.3 - Contributor+ Stored XSS
- CVE-2022-44654 Memory corruption in Trend Micro Apex One
- CVE-2022-44653 Path traversal in Trend Micro Apex One
- CVE-2022-44652 Privilege escalation in Trend Micro Apex One
- CVE-2022-44651 Race condition in Trend Micro Apex One
- CVE-2022-44650 Memory corruption in Trend Micro Apex One
- CVE-2022-4465 WP Video Lightbox < 1.9.7 - Contributor+ Stored XSS
- CVE-2022-44649 Memory corruption in Trend Micro Apex One
- CVE-2022-44648 Memory corruption in Trend Micro Apex One
- CVE-2022-44647 Memory corruption in Trend Micro Apex One
- CVE-2022-44646 Other in TeamCity
- CVE-2022-44645 Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability
- CVE-2022-44644 Apache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability
- CVE-2022-44643 Access policy with access to all tenants and using label selectors has more access
- CVE-2022-44641 XML external entity in debian:debian linux
- CVE-2022-44640 Memory corruption in heimdal project:heimdal
- CVE-2022-4464 Themify Portfolio Post < 1.2.1 - Contributor+ Stored XSS
- CVE-2022-44638 Integer overflow in debian:debian linux
- CVE-2022-44637 Cross-site scripting in redmine:redmine
- CVE-2022-44636 Auth bypass in samsung:t-ksu2eakuc firmware
- CVE-2022-44635 Apache Fineract allowed an authenticated user to perform remote code execution due to path traversal
- CVE-2022-44634 WordPress S2W – Import Shopify to WooCommerce plugin <= 1.1.12 - Auth. Arbitrary File Read vulnerability
- CVE-2022-44633 Missing authorization in YITH WooCommerce Gift Cards Premium
- CVE-2022-44632 WordPress Content Repeater – Custom Posts Simplified Plugin <= 1.1.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-44631 WordPress 1app Business Forms Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-44630 WordPress YITH WooCommerce Product Slider Carousel plugin <= 1.16.0 - Cross-Site Request Forgery (CSRF)
- CVE-2022-44629 WordPress Catalyst Connect Zoho CRM Client Portal Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-44628 WordPress 4ECPS Web Forms plugin <= 0.2.17 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-44627 WordPress Simple SEO plugin <= 1.8.12 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-44626 WordPress Squirrly SEO (Peaks) plugin <= 12.1.20 - Broken Access Control vulnerability
- CVE-2022-44625 WordPress Cyklodev WP Notify Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-44624 Information disclosure in TeamCity
- CVE-2022-44623 Information disclosure in TeamCity
- CVE-2022-44622 Missing authorization in TeamCity
- CVE-2022-44621 Apache Kylin: Command injection by Diagnosis Controller
- CVE-2022-44620 Auth bypass in UDR-JA1604/UDR-JA1608/UDR-JA1616
- CVE-2022-4462 Information disclosure in GitLab
- CVE-2022-44619 Information disclosure in Intel(R) DCM software
- CVE-2022-44617 Denial of service in libXpm
- CVE-2022-44612 Hardcoded credentials in Intel(R) Unison(TM) software
- CVE-2022-44611 Privilege escalation in Intel(R) Processors
- CVE-2022-44610 Auth bypass in Intel(R) DCM software
- CVE-2022-44608 Denial of service in Cybozu Remote Service
- CVE-2022-44606 Command injection in UDR-JA1604/UDR-JA1608/UDR-JA1616
- CVE-2022-4460 Sidebar Widgets by CodeLights <= 1.4 - Contributor+ Stored XSS
- CVE-2022-44595 WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerability
- CVE-2022-44594 WordPress All in One Time Clock Lite Plugin <= 1.3.320 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-44593 WordPress Solid Security plugin <= 9.3.1 - IP Spoofing Leading to Denial of Service vulnerability
- CVE-2022-44591 WordPress Anthologize plugin <= 0.8.0 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-44590 WordPress Simple Video Embedder plugin <= 2.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-4459 WP Show Posts < 1.1.4 - Contributor+ Stored XSS
- CVE-2022-44589 WordPress miniOrange's Google Authenticator Plugin <= 5.6.1 is vulnerable to Sensitive Data Exposure
- CVE-2022-44588 WordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL Injection
- CVE-2022-44587 WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability
- CVE-2022-44586 WordPress AM-HiLi plugin <= 1.0 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-44585 WordPress Homepage Pop-up Plugin <= 1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-44584 WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Deletion vulnerability
- CVE-2022-44583 WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Download vulnerability
- CVE-2022-44582 WordPress Apptivo Business Site CRM Plugin <= 3.0.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-44581 WordPress Defender Security plugin <= 3.3.2 - Broken Authentication vulnerability
- CVE-2022-44580 WordPress Plugin for Google Reviews Plugin <= 2.2.3 is vulnerable to SQL Injection
- CVE-2022-4458 Amr Shortcode Any Widget <= 4.0 - Contributor+ Stored XSS
- CVE-2022-44578 WordPress Owl Carousel plugin <= 0.5.3 - Broken Access Control vulnerability
- CVE-2022-44576 WordPress AgentEasy Properties plugin <= 1.0.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2022-44575 Cross-site scripting in PLM Help Server V4.2
- CVE-2022-44574 Auth bypass in Ivanti Avalanche
- CVE-2022-44572 Denial of service via multipart parsing in Rack
- CVE-2022-44571 Denial of Service Vulnerability in Rack Content-Disposition parsing
- CVE-2022-44570 Denial of service via header parsing in Rack
- CVE-2022-4457 WARP client manifest misconfiguration leading to Task Hijacking
- CVE-2022-44569 Auth bypass in Automation
- CVE-2022-44567 Command injection in Rocket.chat - Electron Desktop
- CVE-2022-44566 Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
- CVE-2022-44565 Missing authorization in UISP Wireless
- CVE-2022-44564 Path traversal in Aslan-AL10
- CVE-2022-44563 Race condition in EMUI
- CVE-2022-44562 Deserialization in EMUI
- CVE-2022-44561 Missing authorization in EMUI
- CVE-2022-44560 Open redirect in EMUI
- CVE-2022-4456 falling-fruit cross site scripting
- CVE-2022-44559 Deserialization in EMUI
- CVE-2022-44558 Deserialization in EMUI
- CVE-2022-44557 Misconfiguration in EMUI
- CVE-2022-44556 Other in EMUI
- CVE-2022-44555 Other in EMUI
- CVE-2022-44554 Missing authorization in EMUI
- CVE-2022-44553 Other in EMUI
- CVE-2022-44552 Other in EMUI
- CVE-2022-44551 Race condition in EMUI
- CVE-2022-44550 Use after free in EMUI
- CVE-2022-4455 sproctor php-calendar index.php cross site scripting
- CVE-2022-44549 Missing authorization in EMUI
- CVE-2022-44548 Security feature bypass in EMUI
- CVE-2022-44547 Use after free in EMUI
- CVE-2022-44546 Other in EMUI
- CVE-2022-44544 Command injection in mahara:mahara