Vulnerabilities published in 2022
43,624 vulnerabilities were published in 2022: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 237 of 437.
- CVE-2022-42119 Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module
- CVE-2022-42118 Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module
- CVE-2022-42117 Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module
- CVE-2022-42116 Liferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module
- CVE-2022-42115 Liferay Portal Vulnerable to XSS in the Object Module
- CVE-2022-42114 Liferay Portal and Liferay DXP Vulnerable to XSS via the Role Module
- CVE-2022-42113 Liferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module
- CVE-2022-42112 Liferay Portal and Liferay DXP Vulnerable to XSS via the Portal Search Module
- CVE-2022-42111 Liferay Portal and Liferay DXP Vulnerable to XSS via the Sharing Module
- CVE-2022-42110 Liferay Portal and Liferay DXP Vulnerable to XSS via the Announcements Module
- CVE-2022-4211 Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via emailf
- CVE-2022-42109 SQL injection in online-shopping-system-advanced project:online-shopping-system-advanced
- CVE-2022-42100 Cross-site scripting in klik project:klik
- CVE-2022-4210 Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via dnf
- CVE-2022-42099 Cross-site scripting in klik project:klik
- CVE-2022-42098 SQL injection in klik-socialmediawebsite project:klik-socialmediawebsite
- CVE-2022-42097 Cross-site Scripting in Backdrop CMS
- CVE-2022-42096 Cross-site Scripting in Backdrop CMS
- CVE-2022-42095 Cross-site Scripting in Backdrop CMS
- CVE-2022-42094 Cross-site Scripting in Backdrop CMS
- CVE-2022-42092 Backdrop CMS Unrestricted File Upload vulnerability
- CVE-2022-4209 Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via pointsf
- CVE-2022-42087 Cross-site request forgery in tenda:ax1803 firmware
- CVE-2022-42086 Cross-site request forgery in tenda:ax1803 firmware
- CVE-2022-42081 Memory corruption in tenda:ac1206 firmware
- CVE-2022-42080 Memory corruption in tenda:ac1206 firmware
- CVE-2022-4208 Chained Quiz <= 1.3.2 - Reflected Cross-Site Scripting via datef
- CVE-2022-42079 Memory corruption in tenda:ac1206 firmware
- CVE-2022-42078 Cross-site request forgery in tenda:ac1206 firmware
- CVE-2022-42077 Cross-site request forgery in tenda:ac1206 firmware
- CVE-2022-42075 Code injection in wedding planner project:wedding planner
- CVE-2022-42074 SQL injection in online diagnostic lab management system project:online diagnostic lab management system
- CVE-2022-42073 SQL injection in online diagnostic lab management system project:online diagnostic lab management system
- CVE-2022-42071 Cross-site scripting in oretnom23:online birth certificate management system
- CVE-2022-42070 Cross-site request forgery in oretnom23:online birth certificate management system
- CVE-2022-4207 Cross-site scripting in Image Hover Effects Ultimate (Image Gallery, Effects, Lightbox, Comparison or Magnifier)
- CVE-2022-42069 Cross-site scripting in oretnom23:online birth certificate management system
- CVE-2022-42067 Missing authorization in oretnom23:online birth certificate management system
- CVE-2022-42066 Cross-site scripting in projectworlds:online examination system
- CVE-2022-42064 SQL injection in online diagnostic lab management system project:online diagnostic lab management system
- CVE-2022-42060 Memory corruption in tenda:w15e firmware
- CVE-2022-4206 Information disclosure in DAST API scanner
- CVE-2022-42058 Memory corruption in tenda:w15e firmware
- CVE-2022-42055 Command injection in gl-inet:goodcloud
- CVE-2022-42054 Cross-site scripting in gl-inet:goodcloud
- CVE-2022-42053 Command injection in tenda:w15e firmware
- CVE-2022-4205 Business logic in GitLab
- CVE-2022-42046 Privilege escalation in wfs:heaven burns red
- CVE-2022-42045 Code injection in watchdog:anti-virus
- CVE-2022-42044 Supply chain in democritus:d8s-asns
- CVE-2022-42043 Supply chain in democritus:d8s-xml
- CVE-2022-42042 Supply chain in democritus:d8s-networking
- CVE-2022-42041 Supply chain in democritus:d8s-file-system
- CVE-2022-42040 Supply chain in democritus:d8s-algorithms
- CVE-2022-42039 Supply chain in democritus:d8s-lists
- CVE-2022-42038 Supply chain in democritus:d8s-ip-addresses
- CVE-2022-42037 Supply chain in democritus:d8s-asns
- CVE-2022-42036 Supply chain in democritus:d8s-urls
- CVE-2022-42034 File upload in wedding planner project:wedding planner
- CVE-2022-4203 X.509 Name Constraints Read Buffer Overflow
- CVE-2022-42029 Path traversal in chamilo:chamilo
- CVE-2022-42021 SQL injection in best student result management system project:best student result management system
- CVE-2022-4202 GPAC lsr_dec.c lsr_translate_coords integer overflow
- CVE-2022-42012 Denial of service in fedoraproject:fedora
- CVE-2022-42011 Denial of service in fedoraproject:fedora
- CVE-2022-42010 Denial of service in fedoraproject:fedora
- CVE-2022-4201 Server-side request forgery in GitLab
- CVE-2022-42009 Apache Ambari: A malicious authenticated user can remotely execute arbitrary code in the context of the application.
- CVE-2022-42004 Uncontrolled Resource Consumption in FasterXML jackson-databind
- CVE-2022-42003 Uncontrolled Resource Consumption in Jackson-databind
- CVE-2022-42002 Missing authorization in sonicjs:sonicjs
- CVE-2022-42001 Potential XSS in book navigation
- CVE-2022-42000 Potential XSS in comment section
- CVE-2022-4200 Login with Cognito <= 1.4.8 - Admin+ Stored XSS
- CVE-2022-41999 Null dereference in OpenImageIO
- CVE-2022-41998 Privilege escalation in Intel(R) DCM software
- CVE-2022-41996 WordPress Avada premium theme <= 7.8.1 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2022-41995 WordPress Photo Gallery – Image Gallery by Ape Plugin <= 2.2.8 is vulnerable to Broken Access Control
- CVE-2022-41994 baserCMS vulnerable to stored Cross-site Scripting
- CVE-2022-41993 Cross-site scripting in DENSHI NYUSATSU CORE SYSTEM
- CVE-2022-41992 Memory corruption in PowerISO
- CVE-2022-41991 Memory corruption in QUARTZ-GOLD
- CVE-2022-41990 WordPress 3D Tag Cloud Plugin <= 3.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-4199 Link Library < 7.4.1 - Admin+ Stored XSS
- CVE-2022-41989 CVE-2022-41989
- CVE-2022-41988 Information disclosure in OpenImageIO
- CVE-2022-41987 WordPress BadgeOS Plugin <= 3.7.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2022-41986 Information disclosure in IIJ SmartKey
- CVE-2022-41985 Auth bypass in uC-FTPs
- CVE-2022-41984 Security feature bypass in Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition
- CVE-2022-41983 BIG-IP TMM Vulnerability CVE-2022-41983
- CVE-2022-41982 Privilege escalation in Intel(R) VTune(TM) Profiler software
- CVE-2022-41981 Memory corruption in OpenImageIO
- CVE-2022-41980 WordPress Mantenimiento web plugin <= 0.13 - Auth. Cross-Site Scripting (XSS) vulnerability
- CVE-2022-4198 WP Social Sharing <= 2.2 - Admin+ Stored XSS
- CVE-2022-41979 Security feature bypass in Intel(R) DCM software
- CVE-2022-41978 WordPress Zoho CRM Lead Magnet plugin <= 1.7.5.8 - Auth. Arbitrary Options Update vulnerability
- CVE-2022-41977 Memory corruption in OpenImageIO
- CVE-2022-41976 Privilege escalation in scada-lts:scada-lts
- CVE-2022-41975 Privilege escalation in realvnc:vnc server