Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 233 of 437.
- CVE-2022-42711 Cross-site scripting in progress:whatsup gold
- CVE-2022-42710 Cross-site scripting in niceforyou:linear emerge e3 access control firmware
- CVE-2022-4271 Cross-site Scripting (XSS) - Reflected in osticket/osticket
- CVE-2022-42707 Missing authorization in mahara:mahara
- CVE-2022-42706 Path traversal in sangoma:asterisk
- CVE-2022-42705 Use after free in sangoma:asterisk
- CVE-2022-42704 Cross-site scripting in servicenow:servicenow
- CVE-2022-42703 Use after free in linux:linux kernel
- CVE-2022-4270 Incorrect privilege assignment in M-Files Web Server
- CVE-2022-42699 WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Remote Code Execution (RCE)
- CVE-2022-42698 WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary File Upload vulnerability
- CVE-2022-4269 Denial of service in Linux kernel (TC subsystem)
- CVE-2022-4268 Plugin Logic < 1.0.8 - Admin+ SQLi
- CVE-2022-4267 Bulk Delete Users by Email <= 1.2 - Reflected Cross-Site Scripting
- CVE-2022-4266 Bulk Delete Users by Email <= 1.2 - User Deletion via CSRF
- CVE-2022-4265 Replyable < 2.2.10 - Subscriber+ PHP Object Injection
- CVE-2022-4264 Incorrect privilege assignment in M-Files Web Server
- CVE-2022-4262 Google Chromium V8 Type Confusion
- CVE-2022-4261 Rapid7 Nexpose Update Validation Issue
- CVE-2022-4260 WP-Ban < 1.69.1 - Admin+ Stored XSS
- CVE-2022-4259 Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2
- CVE-2022-4258 Hima: Unquoted path vulnerabilities in HIMA PC based Software
- CVE-2022-4257 C-DATA Web Management System GET Parameter jumpto.php argument injection
- CVE-2022-4256 All-in-One Addons for Elementor - WidgetKit < 2.4.4 - Admin+ Stored XSS
- CVE-2022-4255 Information disclosure in GitLab
- CVE-2022-42544 Other in Android
- CVE-2022-42543 Memory corruption in Android
- CVE-2022-42542 Memory corruption in Android
- CVE-2022-42541 Remote code execution
- CVE-2022-42540 Elevation of privilege
- CVE-2022-4254 Other in SSSD
- CVE-2022-42539 Information disclosure
- CVE-2022-42538 Elevation of privilege
- CVE-2022-42537 Remote code execution
- CVE-2022-42536 Remote code execution
- CVE-2022-42535 SQL injection in Android
- CVE-2022-42534 Privilege escalation in Android
- CVE-2022-42533 Integer overflow in Android
- CVE-2022-42532 Memory corruption in Android
- CVE-2022-42531 Privilege escalation in Android
- CVE-2022-42530 Memory corruption in Android
- CVE-2022-4253 SourceCodester Canteen Management System customer.php builtin_echo cross site scripting
- CVE-2022-42529 Memory corruption in Android
- CVE-2022-42528 Information disclosure in Android
- CVE-2022-42527 Null dereference in Android
- CVE-2022-42526 Memory corruption in Android
- CVE-2022-42525 Memory corruption in Android
- CVE-2022-42524 Memory corruption in Android
- CVE-2022-42523 Memory corruption in Android
- CVE-2022-42522 Memory corruption in Android
- CVE-2022-42521 Memory corruption in Android
- CVE-2022-42520 Use after free in Android
- CVE-2022-4252 SourceCodester Canteen Management System categories.php builtin_echo cross site scripting
- CVE-2022-42519 Memory corruption in Android
- CVE-2022-42518 Memory corruption in Android
- CVE-2022-42517 Memory corruption in Android
- CVE-2022-42516 Memory corruption in Android
- CVE-2022-42515 Memory corruption in Android
- CVE-2022-42514 Memory corruption in Android
- CVE-2022-42513 Memory corruption in Android
- CVE-2022-42512 Memory corruption in Android
- CVE-2022-42511 Memory corruption in Android
- CVE-2022-42510 Memory corruption in Android
- CVE-2022-4251 Movie Ticket Booking System editBooking.php cross site scripting
- CVE-2022-42509 Memory corruption in Android
- CVE-2022-42508 Memory corruption in Android
- CVE-2022-42507 Memory corruption in Android
- CVE-2022-42506 Memory corruption in Android
- CVE-2022-42505 Memory corruption in Android
- CVE-2022-42504 Memory corruption in Android
- CVE-2022-42503 Memory corruption in Android
- CVE-2022-42502 Memory corruption in Android
- CVE-2022-42501 Memory corruption in Android
- CVE-2022-42500 Command injection in Android
- CVE-2022-4250 Movie Ticket Booking System booking.php cross site scripting
- CVE-2022-42499 Memory corruption in Android
- CVE-2022-42498 Memory corruption in Android
- CVE-2022-42497 WordPress Api2Cart Bridge Connector plugin <= 1.1.0 - Arbitrary Code Execution vulnerability
- CVE-2022-42496 nadesiko3 vulnerable to OS Command Injection
- CVE-2022-42494 WordPress All in One SEO Pro plugin <= 4.2.5.1 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2022-42493 Command injection in QUARTZ-GOLD
- CVE-2022-42492 Command injection in QUARTZ-GOLD
- CVE-2022-42491 Command injection in QUARTZ-GOLD
- CVE-2022-42490 Command injection in QUARTZ-GOLD
- CVE-2022-4249 Movie Ticket Booking System POST Request cross site scripting
- CVE-2022-42488 Missing authorization in OpenHarmony
- CVE-2022-42486 baserCMS vulnerable to stored Cross-site Scripting
- CVE-2022-42485 WordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2022-42484 Command injection in FreshTomato
- CVE-2022-4248 Movie Ticket Booking System editBooking.php sql injection
- CVE-2022-42479 WordPress Soledad premium theme <= 8.2.5 - Broken Access Control vulnerability
- CVE-2022-42478 Auth bypass in FortiSIEM
- CVE-2022-42477 Information disclosure in FortiAnalyzer
- CVE-2022-42476 Path traversal in FortiOS
- CVE-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow
- CVE-2022-42474 Path traversal in FortiOS
- CVE-2022-42473 Auth bypass in Fortinet FortiSOAR
- CVE-2022-42472 Other in FortiOS
- CVE-2022-42471 Other in FortiWeb
- CVE-2022-42470 Path traversal in FortiClientWindows