Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 224 of 437.
- CVE-2022-43868 IBM Security Verify Access information disclosure
- CVE-2022-43867 IBM Spectrum Scale command execution
- CVE-2022-43866 IBM Maximo Asset Management cross-site scripting
- CVE-2022-43864 IBM Business Automation Workflow information disclosure
- CVE-2022-43863 IBM QRadar SIEM privilege escalation
- CVE-2022-43860 IBM Navigator for i SQL injection
- CVE-2022-4386 Intuitive Custom Post Order < 3.1.4 - Arbitrary Menu Order Update via CSRF
- CVE-2022-43859 IBM Navigator for i SQL injection
- CVE-2022-43858 IBM Navigator for i information disclosure
- CVE-2022-43857 IBM Navigator for i information disclosure
- CVE-2022-43855 IBM SPSS Statistics denial of service
- CVE-2022-43852 IBM Aspera Console information disclosure
- CVE-2022-43851 IBM Aspera Console information disclosure
- CVE-2022-43850 IBM Aspera Console cross-site scripting
- CVE-2022-4385 Intuitive Custom Post Order < 3.1.4 - Subscriber+ Arbitrary Menu Order Update
- CVE-2022-43849 IBM AIX denial of service
- CVE-2022-43848 IBM AIX denial of service
- CVE-2022-43847 IBM Aspera Console HTTP header injection
- CVE-2022-43845 IBM Aspera Console information disclosure
- CVE-2022-43844 IBM Robotic Process Automation for Cloud Pak session fixation
- CVE-2022-43843 IBM Spectrum Scale information disclosure
- CVE-2022-43842 IBM Aspera Console SQL injection
- CVE-2022-43841 IBM Aspera Console information disclosure
- CVE-2022-43840 IBM Aspera Console XPath injection
- CVE-2022-4384 Stream < 3.9.2 - Subscriber+ Alert Creation
- CVE-2022-43831 IBM Spectrum Scale privilege escalation
- CVE-2022-4383 CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLi
- CVE-2022-4382 Use after free in Linux kernel
- CVE-2022-4381 Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription Form
- CVE-2022-4379 Use after free in Linux kernel
- CVE-2022-43782 Misconfiguration in Crowd Data Center
- CVE-2022-43781 Command injection in Bitbucket Data Center
- CVE-2022-43780 Denial of service in Certain HP ENVY, OfficeJet, and DeskJet printers
- CVE-2022-4378 Memory corruption in kernel
- CVE-2022-43779 Race condition in HP PC products using AMI UEFI Firmware
- CVE-2022-43778 Race condition in HP PC BIOS
- CVE-2022-43777 Race condition in HP PC BIOS
- CVE-2022-43776 Server-side request forgery in Metabase
- CVE-2022-43775 SQL injection in Delta Electronics DIAEnergie
- CVE-2022-43774 SQL injection in Delta Electronics DIAEnergie
- CVE-2022-43773 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource
- CVE-2022-43772 Hitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File
- CVE-2022-43771 Path traversal in Pentaho Business Analytics Server
- CVE-2022-43770 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
- CVE-2022-4377 S-CMS Contact Information Page cross site scripting
- CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection
- CVE-2022-43768 Denial of service in SIMATIC CP 1242-7 V2
- CVE-2022-43767 Denial of service in SIMATIC CP 1242-7 V2
- CVE-2022-43766 Apache IoTDB prior to 0.13.3 allows DoS
- CVE-2022-43765 DoS in APROLs Tbase server
- CVE-2022-43764 Buffer overflow when changing configuration on Tbase Server
- CVE-2022-43763 Lack of checking preconditions in APROL
- CVE-2022-43762 Memory leak when receiving messages in APROL Tbase server
- CVE-2022-43761 Lack of authentication when managing APROL database
- CVE-2022-43760 Rancher UI has multiple Cross-Site Scripting (XSS) issues
- CVE-2022-4376 Information disclosure in GitLab
- CVE-2022-43759 Rancher: Privilege escalation via promoted roles
- CVE-2022-43758 Rancher: Command injection in Git package
- CVE-2022-43757 Rancher: Exposure of sensitive fields
- CVE-2022-43756 Rancher/Wrangler: Denial of service when processing Git credentials
- CVE-2022-43755 Rancher: Non-random authentication token
- CVE-2022-43754 SUMA/UYUNI reflected cross site scripting in /rhn/audit/scap/Search.do
- CVE-2022-43753 SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload
- CVE-2022-43752 Privilege escalation in common desktop environment project: common desktop environment
- CVE-2022-43751 Privilege escalation in mcafee:total protection
- CVE-2022-43750 Memory corruption in debian:debian linux
- CVE-2022-4375 Mingsoft MCMS list sql injection
- CVE-2022-43749 Privilege escalation in Presto File Server
- CVE-2022-43748 Path traversal in Presto File Server
- CVE-2022-43747 Other in baramundi:management suite
- CVE-2022-43740 IBM Security Verify Access denial of service
- CVE-2022-4374 Bg Bible References <= 3.8.14 - Reflected XSS
- CVE-2022-4373 Quote-O-Matic <= 1.0.5 - Admin+ SQLi
- CVE-2022-43724 Information disclosure in SICAM PAS/PQS
- CVE-2022-43723 Denial of service in SICAM PAS/PQS
- CVE-2022-43722 Privilege escalation in SICAM PAS/PQS
- CVE-2022-43721 Apache Superset: Open Redirect Vulnerability
- CVE-2022-43720 Apache Superset: Improper rendering of user input
- CVE-2022-4372 Web Invoice <= 2.1.3 - Authenticated SQLi
- CVE-2022-43719 Apache Superset: Cross Site Request Forgery (CSRF) on accept, request access API
- CVE-2022-43718 Apache Superset: Cross-Site Scripting vulnerability on upload forms
- CVE-2022-43717 Apache Superset: Cross-Site Scripting on dashboards
- CVE-2022-43716 Use after free in SIMATIC CP 1242-7 V2
- CVE-2022-43713 Security feature bypass in gxsoftware:xperiencentral
- CVE-2022-43712 Missing authorization in gxsoftware:xperiencentral
- CVE-2022-43711 Cross-site scripting in gxsoftware:xperiencentral
- CVE-2022-43710 Cross-site request forgery in gxsoftware:xperiencentral
- CVE-2022-4371 Web Invoice <= 2.1.3 - Authenticated SQLi
- CVE-2022-43709 SQL injection in mybb:mybb
- CVE-2022-43708 Cross-site scripting in mybb:mybb
- CVE-2022-43707 Cross-site scripting in mybb:mybb
- CVE-2022-43706 Cross-site scripting in stackstorm:stackstorm
- CVE-2022-43705 Security feature bypass in botan project:botan
- CVE-2022-43704 Auth bypass in sinilink:xy-wft1 firmware
- CVE-2022-43703 Incomplete verification of installation file signature
- CVE-2022-43702 Incomplete verification of installation file signature
- CVE-2022-43701 Insecure directory permissions on installer files
- CVE-2022-4370 Multimedial Images <= 1.0b - Admin+ SQLi
- CVE-2022-43699 Server-side request forgery in open-xchange:ox app suite
- CVE-2022-43698 Server-side request forgery in open-xchange:ox app suite