Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 223 of 437.
- CVE-2022-44002 Cross-site scripting in backclick:backclick
- CVE-2022-44001 Auth bypass in backclick:backclick
- CVE-2022-44000 Command injection in backclick:backclick
- CVE-2022-4400 zbl1996 FS-Blog Title cross site scripting
- CVE-2022-43999 Missing authorization in backclick:backclick
- CVE-2022-43997 Privilege escalation in aternity:aternity
- CVE-2022-43996 csaf-poc/csaf_distribution Cross-site Scripting vulnerability
- CVE-2022-43995 Memory corruption in sudo project:sudo
- CVE-2022-43990 Auth bypass in SICK SIM1012
- CVE-2022-4399 TicklishHoneyBee nodau db.c sql injection
- CVE-2022-43989 Auth bypass in SICK SIM2x00 (ARM)
- CVE-2022-43985 Apache Airflow prior to 2.4.2 has an open redirect
- CVE-2022-43984 Browsershot 3.57.3 - Server Side XSS to LFR via HTML
- CVE-2022-43983 Browsershot 3.57.2 - Server Side XSS to LFR via HTML
- CVE-2022-43982 Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL
- CVE-2022-43980 Cross-site scripting vulnerability in the network maps edit functionality
- CVE-2022-4398 Integer Overflow or Wraparound in radareorg/radare2
- CVE-2022-43979 Path Traversal leading to Local File Inclusion
- CVE-2022-43978 Limited Authentication bypass due to hardcoded secret
- CVE-2022-43977 Missing authorization in ge:ms 3000 firmware
- CVE-2022-43976 Missing authorization in ge:ms 3000 firmware
- CVE-2022-43975 Path traversal in ge:ms 3000 firmware
- CVE-2022-43974 Integer overflow in matrixssl:matrixssl
- CVE-2022-43973 Arbitrary code execution in Linksys WRT54GL
- CVE-2022-43972 Null pointer dereference in Linksys WRT54GL
- CVE-2022-43971 Arbitrary code execution in Linksys WUMC710
- CVE-2022-43970 Buffer overflow in Linksys WRT54GL
- CVE-2022-4397 morontt zend-blog-number-2 Comment Comment.php cross-site request forgery
- CVE-2022-43969 Information disclosure in ricoh:im 2500 firmware
- CVE-2022-43968 Concrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard icons
- CVE-2022-43967 Concrete CMS vulnerable to Cross-site Scripting via multilingual report
- CVE-2022-4396 RDFlib pyrdfa3 __init__.py _get_option cross site scripting
- CVE-2022-43959 Information disclosure in bitrix24:bitrix24
- CVE-2022-43958 Weak cryptography in QMS Automotive
- CVE-2022-43955 Cross-site scripting in FortiWeb
- CVE-2022-43954 Information disclosure in FortiPortal
- CVE-2022-43953 Memory corruption in FortiOS
- CVE-2022-43952 Cross-site scripting in FortiADC
- CVE-2022-43951 Information disclosure in FortiNAC
- CVE-2022-43950 Open redirect in FortiNAC
- CVE-2022-4395 Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
- CVE-2022-43949 Weak cryptography in FortiSIEM
- CVE-2022-43948 Command injection in FortiADC
- CVE-2022-43947 Auth bypass in FortiOS
- CVE-2022-43946 Race condition in FortiClientWindows
- CVE-2022-43945 Memory corruption in linux kernel
- CVE-2022-43941 Hitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference
- CVE-2022-43940 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
- CVE-2022-4394 iPages Flipbook For WordPress <= 1.4.6 - Contributor+ Stored XSS
- CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass
- CVE-2022-43938 Code injection in Pentaho Business Analytics Server
- CVE-2022-43937 Brocade SANnav Information Disclosure Vulnerability
- CVE-2022-43936 Brocade Fabric OS switch passwords when debugging is enabled
- CVE-2022-43935 Switch passwords and authorization IDs are printed in the embedded MLS DB file
- CVE-2022-43934 Weak Key-exchange algorithms
- CVE-2022-43933 configuration secrets are logged in support-save
- CVE-2022-43932 Path traversal in Synology Router Manager (SRM)
- CVE-2022-43931 Memory corruption in VPN Plus Server
- CVE-2022-43930 IBM Db2 for Linux, UNIX and Windows information disclosure
- CVE-2022-4393 ImageLinks Interactive Image Builder for WordPress <= 1.5.3 - Contributor+ Stored XSS
- CVE-2022-43929 IBM Db2 for Linux, UNIX and Windows denial of service
- CVE-2022-43928 IBM Db2 Mirror for i information disclosure
- CVE-2022-43927 IBM Db2 for Linux, UNIX and Windows information disclosure
- CVE-2022-43923 Information disclosure in Maximo Application Suite
- CVE-2022-43922 IBM App Connect Enterprise Certified Container information disclosure
- CVE-2022-43920 IBM Sterling B2B Integrator Standard Edition privilege escalation
- CVE-2022-4392 iPanorama 360 WordPress Virtual Tour Builder <= 1.6.29 - Contributor+ Stored XSS
- CVE-2022-43919 IBM MQ denial of service
- CVE-2022-43917 IBM WebSphere Application Server information disclosure
- CVE-2022-43916 IBM App Connect Enterprise Certified Container improper communications restriction
- CVE-2022-43915 IBM App Connect Enterprise Certified Container
- CVE-2022-43914 IBM TRIRIGA Application Platform cross-site scripting
- CVE-2022-43910 IBM Security Guardium privilege escalation
- CVE-2022-4391 Vision Interactive For WordPress <= 1.5.3 - Contributor+ Stored XSS
- CVE-2022-43909 IBM Security Guardium cross-site scripting
- CVE-2022-43908 IBM Security Guardium denial of service
- CVE-2022-43907 IBM Security Guardium command execution
- CVE-2022-43906 IBM Security Guardium information disclosure
- CVE-2022-43904 IBM Security Guardium information disclosure
- CVE-2022-43903 IBM Security Guardium denial of service
- CVE-2022-43902 IBM MQ denial of service
- CVE-2022-43901 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps information disclosure
- CVE-2022-43900 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps security bypass
- CVE-2022-4390 Misconfiguration in NETGEAR Nighthawk RAX30
- CVE-2022-43893 IBM Security Verify Privilege denial of service
- CVE-2022-43892 IBM Security Verify Privilege information disclosure
- CVE-2022-43891 IBM Security Verify Privilege information disclosure
- CVE-2022-43890 IBM Security Verify Privilege On-Premises information disclosure
- CVE-2022-43889 IBM Security Verify Privilege information disclosure
- CVE-2022-43887 IBM Cognos Analytics information disclosure
- CVE-2022-43883 IBM Cognos Analytics data manipulation
- CVE-2022-43880 IBM QRadar WinCollect Agent
- CVE-2022-43877 IBM UrbanCode Deploy (UCD) information disclosure
- CVE-2022-43875 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms denial of service
- CVE-2022-43874 IBM App Connect Enterprise Certified Container
- CVE-2022-43873 IBM Spectrum Virtualize privilege escalation
- CVE-2022-43872 IBM Financial Transaction Manager information disclosure
- CVE-2022-43871 IBM Financial Transaction Manager for SWIFT Services cross-site scripting
- CVE-2022-43870 IBM Spectrum Virtualize information disclosure
- CVE-2022-43869 IBM Spectrum Scale denial of service