Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 230 of 437.
- CVE-2022-43062 SQL injection in online diagnostic lab management system project:online diagnostic lab management system
- CVE-2022-43061 File upload in online tours \& travels management system project:online tours \& travels management system
- CVE-2022-4306 Panda Pods Repeater Field < 1.5.4 - Reflected XSS
- CVE-2022-43058 SQL injection in online diagnostic lab management system project:online diagnostic lab management system
- CVE-2022-43052 SQL injection in online diagnostic lab management system project:online diagnostic lab management system
- CVE-2022-43051 SQL injection in online diagnostic lab management system project:online diagnostic lab management system
- CVE-2022-43050 File upload in online tours and travels management system project:online tours and travels management system
- CVE-2022-4305 Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin
- CVE-2022-43049 SQL injection in canteen management system project:canteen management system
- CVE-2022-43046 Cross-site scripting in oretnom23:food ordering management system
- CVE-2022-43045 Memory corruption in gpac:gpac
- CVE-2022-43044 Memory corruption in gpac:gpac
- CVE-2022-43043 Memory corruption in gpac:gpac
- CVE-2022-43042 Memory corruption in gpac:gpac
- CVE-2022-43040 Memory corruption in gpac:gpac
- CVE-2022-4304 Timing Oracle in RSA Decryption
- CVE-2022-43039 Memory corruption in gpac:gpac
- CVE-2022-43038 Memory corruption in axiosys:bento4
- CVE-2022-43037 Denial of service in axiosys:bento4
- CVE-2022-43035 Memory corruption in axiosys:bento4
- CVE-2022-43034 Memory corruption in axiosys:bento4
- CVE-2022-43033 Memory corruption in axiosys:bento4
- CVE-2022-43032 Denial of service in axiosys:bento4
- CVE-2022-43031 Cross-site request forgery in dedecms:dedecms
- CVE-2022-43030 Command injection in siyucms:siyucms
- CVE-2022-4303 WP Limit Login Attempts <= 2.6.4 - IP Spoofing
- CVE-2022-43029 Memory corruption in tenda:tx3 firmware
- CVE-2022-43028 Memory corruption in tenda:tx3 firmware
- CVE-2022-43027 Memory corruption in tenda:tx3 firmware
- CVE-2022-43026 Memory corruption in tenda:tx3 firmware
- CVE-2022-43025 Memory corruption in tenda:tx3 firmware
- CVE-2022-43024 Memory corruption in tenda:tx3 firmware
- CVE-2022-43023 SQL injection in opencats:opencats
- CVE-2022-43022 SQL injection in opencats:opencats
- CVE-2022-43021 SQL injection in opencats:opencats
- CVE-2022-43020 SQL injection in opencats:opencats
- CVE-2022-4302 White Label CMS < 2.5 - Admin+ PHP Object Injection
- CVE-2022-43019 Deserialization in opencats:opencats
- CVE-2022-43018 Cross-site scripting in opencats:opencats
- CVE-2022-43017 Cross-site scripting in opencats:opencats
- CVE-2022-43016 Cross-site scripting in opencats:opencats
- CVE-2022-43015 Cross-site scripting in opencats:opencats
- CVE-2022-43014 Cross-site scripting in opencats:opencats
- CVE-2022-4301 Sunshine Photo Cart < 2.9.15 - Reflected XSS
- CVE-2022-43003 Memory corruption in dlink:dir-816 firmware
- CVE-2022-43002 Memory corruption in dlink:dir-816 firmware
- CVE-2022-43001 Memory corruption in dlink:dir-816 firmware
- CVE-2022-43000 Memory corruption in dlink:dir-816 firmware
- CVE-2022-4300 FastCMS Template edit injection
- CVE-2022-42999 Command injection in dlink:dir-816 firmware
- CVE-2022-42998 Memory corruption in dlink:dir-816 firmware
- CVE-2022-42993 Cross-site scripting in password storage application project:password storage application
- CVE-2022-42992 Cross-site scripting in train scheduler app project:train scheduler app
- CVE-2022-42991 Cross-site scripting in simple online public access catalog project:simple online public access catalog
- CVE-2022-42990 SQL injection in oretnom23:food ordering management system
- CVE-2022-4299 Metricool < 1.18 - Admin+ Stored XSS
- CVE-2022-42989 Cross-site scripting in sankhya:sankhya om
- CVE-2022-42985 Cross-site scripting in scratch-wiki:scratch login
- CVE-2022-42984 SQL injection in wowonder:wowonder
- CVE-2022-42983 Auth bypass in anji-plus:aj-report
- CVE-2022-42982 Information disclosure in bund:bkg professional ntripcaster
- CVE-2022-42980 Hardcoded credentials in go-admin:go-admin
- CVE-2022-4298 Wholesale Market < 2.2.1 - Unauthenticated Arbitrary File Download
- CVE-2022-42979 Security feature bypass in rydesharing:ryde
- CVE-2022-42978 Missing authorization in atlassian:confluence data center
- CVE-2022-42977 Path traversal in atlassian:confluence data center
- CVE-2022-42975 Phoenix before 1.6.14 mishandles check_origin wildcarding
- CVE-2022-42974 In Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is vulnerable to a Stored Cross-Site Scripting (XSS) a
- CVE-2022-42973 Hardcoded credentials in APC Easy UPS Online Monitoring Software
- CVE-2022-42972 Misconfiguration in APC Easy UPS Online Monitoring Software
- CVE-2022-42971 File upload in APC Easy UPS Online Monitoring Software
- CVE-2022-42970 Auth bypass in APC Easy UPS Online Monitoring Software
- CVE-2022-4297 WP AutoComplete Search <= 1.0.4 - Unauthenticated SQLi
- CVE-2022-42969 Denial of service in pytest:py
- CVE-2022-42968 Gitea vulnerable to Argument Injection
- CVE-2022-42967 XSS in Caret markdown editor leads to remote code execution when viewing crafted Markdown files
- CVE-2022-42966 Exponential ReDoS in cleo leads to denial of service
- CVE-2022-42965 Exponential ReDoS in snowflake-connector-python leads to denial of service
- CVE-2022-42964 Exponential ReDoS in pymatgen leads to denial of service
- CVE-2022-42961 Information disclosure in wolfssl:wolfssl
- CVE-2022-42960 Cross-site scripting in equalweb:equalweb accessibility widget
- CVE-2022-4296 TP-Link TL-WR740N ARP resource consumption
- CVE-2022-42956 Information disclosure in passwork:passwork
- CVE-2022-42955 Information disclosure in passwork:passwork
- CVE-2022-42954 Cross-site scripting in keyfactor:kefactor ejbca
- CVE-2022-42953 Information disclosure in zkteco:zem500 firmware
- CVE-2022-42951 Auth bypass in couchbase:couchbase server
- CVE-2022-42950 Denial of service in couchbase:couchbase server
- CVE-2022-4295 Show All Comments < 7.0.1 - Reflected XSS
- CVE-2022-42949 SilverStripe Subsite weakens file permissions
- CVE-2022-42948 Fortra Cobalt Strike User Interface Remote Code Execution
- CVE-2022-42947 Memory corruption in Autodesk Maya
- CVE-2022-42946 Memory corruption in Autodesk Maya
- CVE-2022-42945 Other in DWG TrueView
- CVE-2022-42944 Memory corruption in Autodesk Design Review
- CVE-2022-42943 Memory corruption in Autodesk Design Review
- CVE-2022-42942 Memory corruption in Autodesk Design Review
- CVE-2022-42941 Memory corruption in Autodesk Design Review
- CVE-2022-42940 Memory corruption in Autodesk Design Review
- CVE-2022-4294 Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation